Canadas New Anti-Spam Legislation What you need to know to comply - - PowerPoint PPT Presentation

canada s new anti spam legislation
SMART_READER_LITE
LIVE PREVIEW

Canadas New Anti-Spam Legislation What you need to know to comply - - PowerPoint PPT Presentation

Canadas New Anti-Spam Legislation What you need to know to comply Gowlings at a glance Over 700 professionals across 10 offices worldwide Recognized expertise in business law, advocacy and intellectual property law Dedicated


slide-1
SLIDE 1

Canada’s New Anti-Spam Legislation

What you need to know to comply

slide-2
SLIDE 2

Gowlings at a glance

  • Over 700 professionals

across 10 offices worldwide

  • Recognized expertise in

business law, advocacy and intellectual property law

  • Dedicated privacy

practice group

2

slide-3
SLIDE 3

Gowlings at a glance

www.gowlings.com/casl

3

slide-4
SLIDE 4

4

Overview

  • CASL is federal legislation that comes into force on

July 1, 2014, which prohibits:

  • Sending of “commercial electronic messages” without consent,
  • Collection or use of electronic addresses without consent

(“harvesting addresses”),

  • Installation of computer programs without consent (coming into

force Jan 1, 2015).

  • Rules relating to the sending of CEMs center on (2)

pillars:

  • Unless the CEM is exempt, there must be express or implied

consent to receive a CEM,

  • The CEM must meet certain content requirements, including an

unsubscribe.

slide-5
SLIDE 5

What is not a CEM?

  • Interactive two-way voice communications
  • Messages sent via facsimile to telephone

accounts

  • Voice recordings sent to a telephone account

5

slide-6
SLIDE 6

What is a CEM?

  • A message sent by any means of

communication…

  • email, SMS
  • voice, sound
  • image
  • To an electronic address
  • email account
  • instant message account
  • telephone account
  • any similar account

6

slide-7
SLIDE 7

When is a message “commercial”?

  • When one of its purposes is the

encouragement of commercial activity.

  • It is irrelevant whether or not the CEM was

sent in an expectation of profit

  • Consider the message content, links in the

message and contact information in the message

7

slide-8
SLIDE 8

When is a message “commercial”?

  • Advertisements for goods or services are

commercial

  • Messages that promote a person as someone

who offers or intends to offer goods or services are commercial

  • Messages that seek consent to send further

messages are commercial

8

slide-9
SLIDE 9

9

Exceptions to the need for consent

CASL creates an exception to the need for consent for certain “transactional” messages. This exception will apply to messages that solely:

  • Provide a quote or estimate for the supply of a product or

service;

  • Facilitate, complete or confirm a previously agreed upon

commercial transaction between the sender of the message and the recipient

  • Provide warranty information, product recall information or

safety or security information about a product or service the recipient has purchased

  • Provide notification of factual information about the ongoing

use by the recipient of a product or service offered under a subscription, membership, account, loan or similar relationship

slide-10
SLIDE 10

10

Exceptions to the need for consent (cont.)

CASL creates an exception to the need for consent for certain “transactional” messages. This exception will apply to messages that solely:

  • Provide information directly related to an employment relationship
  • r related benefit plan in which the recipient is currently

involved/participating;

  • Deliver product/services, including updates/upgrades, pursuant to

a pre-existing agreement It is essential to note that these messages are only exempt from the consent requirements, they are not exempt from the in message disclosure, including the unsubscribe mechanism.

slide-11
SLIDE 11

11

In-message disclosure requirement exemptions

“Family” “Personal relationship”

 Marriage;  A common-law partnership;  A legal parent/child relationship;

where:

 Those persons have had a

direct voluntary two way communication.

 Must have had direct, voluntary

two way communications;

 Must be reasonable to conclude

the relationship is personal considering relevant factors such as shared interests, opinions, and experiences.

Which messages will be exempt?

Messages sent by or “on behalf” of a person with a “family” or “personal” relationship with the message recipient are exempt from the consent and message content requirements. “Family” or “Personal” relationship are defined terms:

slide-12
SLIDE 12

12

In-message disclosure requirement exemptions

The regulations provide exceptions for the following message classes:

  • Messages sent between employees of an organization

relating to the affairs of the organization

  • Messages sent between employees of two organizations with

a relationship, where the message relates to the activities of the recipient

  • Messages that respond to an inquiry, complaint, or other

solicitation from the recipient

  • Fundraising messages sent by or on behalf of a registered

charity

slide-13
SLIDE 13

13

In-message disclosure requirement exemptions

The regulations provide exceptions for the following message classes:

  • Messages where the person sending the message

reasonably expects it to be received in a foreign state listed in the Regulations, if the message complies with the law of that state

  • Messages sent to a secure account to which only the person

providing the account may send messages

  • Messages sent on a platform that includes compliant

disclosure and an unsubscribe mechanism in its interface are exempt from the message requirements, but not the consent requirements.

  • Messages sent to satisfy a legal obligation, to enforce a legal

right, to notify of a legal right

slide-14
SLIDE 14

14

Referrals

  • The regulations allow a single CEM to be sent once

to a person if:

  • The recipient was referred to the sender of the message
  • The person who gave the referral has an existing business

relationship, family relationship or personal relationship with both the person that they referred, as well as the sender of the message

  • The full name of the person who gave the referral is

disclosed in the message, and the message states that it is sent pursuant to the referral

NOTE: the sender of the CEM can ask for express consent to send CEMs within the single message, but if express consent is not given, the sender cannot send additional CEMs

slide-15
SLIDE 15

15

Implied consent

  • Implied consent to send CEMs arises when:
  • The message recipient has (1) conspicuously published

his/her electronic address, (2) without indicating that he/she does not wish to receive CEMs, and (3) the CEM is relevant to the recipient’s business, role, function or duty in a business or official capacity

  • The message recipient has (1) given his/her electronic

address to the sender, (2) without indicating that he/she does not want to receive CEMs, and (3) the CEM is relevant to the recipient’s business, role, function or duties in a business or official capacity

  • The sender and recipient of the CEM have either an

“existing business relationship” or an “existing non-business relationship, as defined in CASL

slide-16
SLIDE 16

16

“Existing Business Relationship”

  • CASL defines (3) circumstances in which an

“existing business relationship” arises:

  • Where the recipient of the CEM has purchased or leased a

product or service from the sender within the (2) years prior to sending the CEM

  • Where the sender and recipient are parties to a written

contract, which expired within the (2) years prior to sending the CEM

  • Where the recipient of the CEM made an inquiry or

application about a purchase or lease of a product or service within the previous 6 months before the CEM is sent Note: to rely on implied consent, you must have systems that allow you to track expiry dates.

slide-17
SLIDE 17

17

Transition period

  • CASL includes a transition period arising from “an

existing business relationship”

  • If the relationship existed before July 1, 2014, and had

involved the sending of CEMs as part of the relationship, CEMs can be sent to the recipient for a (3) year period after the July 1, 2014 coming-into-force date (i.e., June 30, 2017), unless the recipient indicates that they don’t want to receive the message Note: the message must comply with the prescribed message content requirements, including the unsubscribe, which must be honoured

slide-18
SLIDE 18

Restrictions on sending CEM

  • C.E.M. provisions come into force on July 1, 2014
  • Prohibits sending a CEM to an electronic address

unless:

  • Sender has the express consent of the recipient;
  • Sender has the implied consent of recipient or an

exclusion applies; and

  • The CEM contains required disclosure.

18

slide-19
SLIDE 19

Requirements for seeking express consent

A person who seeks express consent under CASL must, when requesting consent, set out “clearly and simply”:

  • The purpose for which the consent is sought;
  • The name under which the person seeking consent carries
  • n business, and if different, the name under which the

person on whose behalf consent is sought carries on business;

  • If applicable, identify which person is seeking consent, and
  • n whose behalf consent is sought;
  • Provide the mailing address, and one (or more) of a

telephone number, website, or email address of either the person seeking consent, or if different, the person on whose behalf consent is sought

  • State that consent may be withdrawn

19

slide-20
SLIDE 20

Requirements for seeking express consent

  • Do not use pre-checked boxes!
  • The CRTC takes the position that express consent

must be “positive or explicit”

  • Other means than a check box are also acceptable

provided they are “positive and explicit”. For example, entering an email address if you wish to receive emails, then hitting a “submit” button

  • “Assumed” consent through a pre-checked box or

an opt-out box or an opt-out system will not be accepted

20

slide-21
SLIDE 21

Unsubscribe mechanism

  • Set out a no cost, an easy mechanism where the

recipient may unsubscribe from all CEMs or a specified class of CEMs

  • Using the same means as the message was sent, or if not

practicable, other electronic means

  • Give an electronic address or a web link for unsubscribe
  • Set out clearly, must be able to be readily performed
  • Effective “without delay”, no later than 10 business days

The required contact information must remain current for a minimum of 60 days after the message is sent.

21

slide-22
SLIDE 22

22

Relying on PIPEDA for valid consent

The regulatory impact statement for the Regulations confirms Industry Canada’s position that valid express consent obtained before CASL comes into force “will be recognized as being compliant with CASL”. However, Industry Canada also expressly noted that in some cases email addresses that may be used under the current privacy legislation may no longer be used under CASL.

slide-23
SLIDE 23

23

Relying on PIPEDA for valid consent

Email addresses are most likely to be unusable following July 1, 2014 where an organization is relying on ‘implied’ consent under PIPEDA, and that consent does not fall into one of the defined categories of implied consent in

  • CASL. Implied consent under CASL is much more

narrow. Organizations should consider the manner in which their current email list had been established to assess the ability to continue to use it after CASL comes into force. Prior to July 1, 2014, there will be an opportunity to seek to express consent in cases where implied consent valid under the privacy law, but not valid under CASL, is relied

  • n.
slide-24
SLIDE 24

Further implications of CASL

Altering Transmission Data

  • Altering or causing to be altered the transmission data in

an electronic message so it’s delivered to a destination

  • ther than or in addition to that specified by sender

Exceptions:

  • Not in the course of commercial activity
  • Court order
  • Telecommunications service provider for network

management

  • Express consent

24

slide-25
SLIDE 25

Installation of computer programs

  • May not in the course of commercial activity,

install/cause to be installed a “computer program” on someone else’s “computer system”; or

  • Cause an electronic message to be sent from a

program on a third party’s computer system

  • Unless:
  • Express consent of owner/authorized user
  • when seeking consent, the requirements that

apply to seeking consent for C.E.M.s also apply

  • Acting pursuant to court order

25

slide-26
SLIDE 26

26

Does CASL apply to businesses outside Canada?

  • CASL applies both when sending CEMs from a

computer in Canada or where the CEMs are received

  • n a computer system in Canada
  • CASL applies to CEMs sent to recipients in Canada even if

the sender is located outside of Canada. This is also true for other CASL prohibitions, including those related to the installation of computer programs and related provisions

  • The Regulations to CASL have clarified that CASL will not

apply to CEMs sent to recipients outside of Canada, so long as: (1) it is reasonable to believe that the recipient is not on a computer system in Canada, (2) the CEM complies with the anti-spam laws of the country to which the CEM is sent; and (3) the country is among the countries that are listed within the Regulations

slide-27
SLIDE 27

Penalties

Administrative monetary penalties (fines) for violations:

  • A fine of up to $1,000,000 for a violation by an

individual

  • A fine of up to $10,000,000 for a violation by another

person

  • When determining the fine, the following will be

considered:

  • Nature/scope of the violation
  • Previous violations
  • Ability to pay
  • Financial benefit of the violation

27

slide-28
SLIDE 28

What happens when CASL is violated?

  • 30 days are provided to respond to a notice of

violation, failing which the violation is deemed

  • The accused bears the onus of proof on a

balance of probability

  • Employers are liable for their employees’

violations

  • A 3 year limitation period is provided
  • A person must not be found to have contravened

if they exercised due diligence to prevent it

  • For the private right of action, liability is joint

and several

28

slide-29
SLIDE 29

Enforcement Powers

  • Canadian Radio and Telecommunications

Commission (CRTC) has power to enforce CASL

  • Preservation orders and notices to produce
  • Warrants
  • Injunctions
  • Competition Bureau has additional powers

regarding false or misleading practices in CEMs

  • Office of the Privacy Commissioner of Canada

has new investigatory powers regarding the collection of electronic addresses

29

slide-30
SLIDE 30

The Private Right of Action

  • CASL creates a private right of action for persons

who allege they have been affected by a violation. If the action is successful in court, the court may

  • rder:
  • Compensation equal to the actual loss or damage suffered;

and

  • $200 for each contravention, not exceeding $1,000,000 for

each day on which a contravention occurred.

  • The private right of action has a delayed coming into

force date, and will not be in place until July 1, 2017.

  • Statutory damages are not permitted where the

defendant has entered into an undertaking or has been served with a Notice of Violation

30

slide-31
SLIDE 31

Preparing for CASL compliance

  • Determine if you are sending CEMs
  • Identify the channels through which you send

CEMs

  • Assess if you have implied or express consent

to send CEMs or if an exemption applies

  • If you conclude you have consent, assess your ability

to prove it in the face of a challenge

  • Develop a plan to obtain any required consents.

This plan should address both the treatment of current lists, as well as how the organization will continue to acquire consent after July 1

31

slide-32
SLIDE 32

Preparing for CASL compliance

  • Ensure your CEMs contain the content required

by CASL, except where an exception applies

  • Determine how CASL may affect your policies,

processes, customer relationship management (CRM) and other IT systems, and staff training and awareness programs

  • Revise your policies, processes and systems as

required

  • Keep an audit trail, since CASL contains a “due

diligence” defense

32

slide-33
SLIDE 33

33

Brian Fraser

Partner brian.fraser@gowlings.com 416-862-4293

Brian advises on all aspects of advertising and marketing law, including ad copy review for all media (print, broadcast and internet), promotional contests, packaging and labelling requirements, comparative advertising and claims support. His practice also includes representing clients in trade dispute proceedings administered by Advertising Standards Canada. The clients he advises include advertising and promotion agencies as well as some of Canada’s leading telecommunications, retail and packaged goods companies. With a background in corporate and commercial law, Brian also advises with respect to advertising agency agreements and other contracts relating to the provision of advertising, sponsorship, marketing and promotional services. Brian Fraser is a partner in Gowlings' Toronto office, co-leader of the Firm‘s Advertising, Marketing and Regulatory Affairs National Practice Group and co-leader of the Privacy/CASL Practice Group. He has been practising in the field of advertising and marketing law for more than 25 years.

slide-34
SLIDE 34

34

Wendy Wagner

Partner wendy.wagner@gowlings.com 613-786-0213

In her international trade law practice, Wendy represents the firms’ clients in matters involving NAFTA, WTO, anti-dumping and countervail, export & import controls and all aspects of customs (tariff classification, valuation, AMPS penalties). She advises pharmaceutical and biopharmaceutical clients on issues pertaining to the WTO TRIPS Agreement. In addition, she advises clients regarding customs compliance, AMPS and and other legal issues of significance to the transportation industry. She has appeared as counsel on trade related matters before the Canadian International Trade Tribunal and the Federal Court of Canada. In her media and defamation practice, Wendy defends clients against defamation law suits, acts as counsel for the media in Canadian Charter of Rights and Freedoms cases involving freedom of the press, and represents the media to oppose publication bans and other restraints on publication. Wendy also advises clients on matters pertaining to Access to Information legislation. Wendy Wagner is a partner in Gowlings' Ottawa office, leader of the firm‘s Transportation and Logistics Group and co-leader of the Privacy/CASL Group. Her practice focuses on international trade law and media law.

slide-35
SLIDE 35

35

Peter Murphy

Partner peter.murphy@gowlings.com 416-369-4674

Peter’s technology law expertise includes the negotiation and drafting of joint venture agreements, supply, development and distribution agreements, technology licences, maintenance and support agreements, outsourcing agreements and financing arrangements. Peter has acted for many technology industry clients, including AMD (Advanced Micro Devices, Inc.), on a wide variety of technology law matters. Peter’s privacy law expertise includes defending clients from privacy breach complaints and investigations by Canada’s Privacy Commissioner, advising clients on compliance with privacy laws including conducting privacy assessments, drafting privacy-compliant contracts for complex business and financial transactions, preparing corporate privacy policies, and helping clients prepare for CASL, Canada’s anticipated anti-spam legislation. Peter Murphy is a partner in the Business Law Group and co-leader of the Privacy/CASL Group. His practice has a special focus on technology, privacy, procurement and commercial law.

slide-36
SLIDE 36

36

Chris Oates

Associate chris.oates@gowlings.com 416-369-7333

Chris’s practice includes advising clients on privacy law, including drafting and reviewing privacy policies and advising on privacy in the context of social media, consumer marketing campaigns, electronic commerce and Canada's new anti-spam legislation. His practice also includes all matters pertaining to direct-to-consumer marketing, including advertising and packaging copy review; contest design and review; advertising in social media; drafting and reviewing talent, media, and sponsorship agreements; open credit advertising; and regulatory law pertaining to foods, alcoholic beverages, cosmetics and drug products. Chris Oates is an associate in Gowlings’ Toronto office, practising in the area of privacy, advertising, marketing and regulatory law, with significant experience in Canada’s new anti-spam law.

slide-37
SLIDE 37

Thank You

montréal  ottawa  toronto  hamilton  waterloo region  calgary vancouver  beijing  moscow  london

Visit: www.gowlings.com Email: brian.fraser@gowlings.com wendy.wagner@gowlings.com peter.murphy@gowlings.com chris.oates@gowlings.com