Is B2B Cold Email Legal in Canada? A Practical CASL Guide for 2026

Canada's Anti-Spam Legislation (CASL) is one of the strictest email laws in the world, and it is the first thing Canadian business owners ask us about. The short answer: B2B cold email can be legal in Canada, but only when it fits a specific consent exception and every message meets CASL's form requirements. This guide explains how that works in practice. It is general information, not legal advice; for your specific situation, speak with a lawyer.

What CASL actually regulates

CASL prohibits sending a commercial electronic message (CEM) to an electronic address unless the recipient has consented, expressly or impliedly, and the message contains prescribed identification and unsubscribe information (CASL, s. 6). A CEM is any electronic message whose purpose, or one of whose purposes, is to encourage participation in a commercial activity. A sales email offering a quote for snow removal is clearly a CEM.

Consent comes in two forms. Express consent is an opt-in the person actively gave you, such as a form with an unchecked box. Implied consent exists only in situations the Act lists, for example an existing business relationship or the "conspicuous publication" exception that matters most for B2B outreach.

The conspicuous publication exception

Under section 10(9)(b) of CASL, consent is implied when the person has conspicuously published their electronic address, the publication is not accompanied by a statement that they do not want to receive unsolicited CEMs, and the message is relevant to the person's business, role, functions or duties in a business or official capacity. The CRTC's guidance repeats the same three conditions (CRTC, n.d.-b).

In plain terms, all three must be true:

• Published by them or with their authority. The address appears on the company's own website, an official directory or a professional listing the person controls. An address scraped from a leaked list or guessed from a pattern does not qualify.
• No "no solicitation" statement. If the contact page says "no unsolicited sales emails," the exception does not apply to that address.
• Relevant to their role. Emailing a property manager about parking-lot sweeping is relevant. Emailing the same person about a personal vacation package is not.

The CRTC has enforced this exception narrowly. In its 2016 decision against Blackstone Learning Corp., the regulator found that publication alone was not enough; the sender had to show the messages were relevant to recipients' roles (Bennett Jones, 2016). The lesson: keep evidence.

What every message must contain

Whatever the consent basis, each CEM must (CASL, s. 6(2); CRTC, n.d.-a):

• identify the sender and anyone on whose behalf it is sent;
• include a mailing address and a phone number, email or web address that works for at least 60 days;
• contain an unsubscribe mechanism that is easy to use, at no cost, and is honoured within 10 business days.

Why buying a random list is dangerous

A list bought from an unknown vendor almost never comes with proof of where each address was published or whether it carried a no-solicitation notice. If the CRTC asks, the burden of proving consent sits with the sender. Administrative monetary penalties can reach $1 million per violation for individuals and $10 million for businesses (CASL, s. 20(4)). Even below regulatory action, random lists bounce, trigger spam complaints and damage your domain reputation.

How a CASL-aware B2B list is built

At Adskings, every contact in a database carries four pieces of evidence: the public URL where the address was found, the date it was collected, a role-relevance check against your offer, and a verification result showing the address is deliverable. That log turns "we think it's fine" into documentation you can hand to a lawyer or regulator.

A 10-point CASL checklist for B2B cold email

1. Target business roles, not consumers.
2. Collect addresses only from public, business-controlled sources.
3. Record source URL and date for every contact.
4. Check for "no unsolicited email" statements and exclude those addresses.
5. Match the offer to the recipient's job function.
6. Identify your company clearly in every email.
7. Include a valid mailing address.
8. Provide a one-click or reply-based unsubscribe.
9. Honour unsubscribes within 10 business days, and suppress them across all campaigns.
10. Keep records for at least three years after the last message.

Bottom line

CASL does not ban B2B prospecting; it bans careless prospecting. Teams that collect evidence, stay relevant and make unsubscribing easy can use cold email as a dependable revenue channel in Ontario and across Canada. If you want a second pair of eyes on your current process, book a free email audit.