Content Requirements
CASL requires that all CEMs contain the following information:
- the name of the Queen’s unit sending the message;
- the mailing address, telephone number, email or web address for the Queen’s unit sending the message; and
- information about how to unsubscribe from future CEMs.
The unsubscribe mechanism should be present at the bottom of all CEMs using language such as:
“You may unsubscribe from the Queen’s University [insert name of list] distribution list at any time by emailing [insert email address] or calling 613-533-6000 [insert extension].”
If a request to unsubscribe is received, the recipient must be removed from the distribution list within 10 business days of the request.
The following statement should be also be included in CEMs sent to internal recipients:
"You are receiving this message because you are a member of a subject specific internal email list generated by Queen’s University and/or you are in a pre-existing business relationship with Queen’s University. In either case, if you believe that you should not be a recipient, you may withdraw your consent to receive these messages at any time, in accordance with Canadian Anti-Spam Legislation (CASL) and subject to Queen’s University policy, by contacting the sender of this message.
Please be aware that messages to Queen’s University employees and students, sent for the purpose of conducting regular non-commercial University business, are not governed by CASL."
Consent Requirements
Prior to sending a CEM, a sender must have received the consent of the recipient. Consent may be express or implied.
Express Consent
Express consent occurs where the recipient has provided oral or written consent to receive electronic messages and remains in effect until the recipient unsubscribes from future messages.
Implied Consent
Implied consent occurs where the recipient has:
- an existing business relationship with Queen’s in the preceding two years;
- an existing non-business relationship (i.e., donors, alumni, volunteers) with Queen’s in the preceding two years; or
- conspicuously published their business contact information AND the recipient has not indicated a wish not to receive unsolicited CEMs; and your message is relevant to the recipient's business, role, functions or duties in a business or official capacity.
Tracking Consent and Unsubscriptions
Compliance with CASL includes implementing systems to track recipient consents and giving effect to requests to unsubscribe. Tracking systems can be as simple as a spreadsheet or as complex as an integrated database. Regardless of the system, the sender must be able to document addresses which have provided express consent and those which have unsubscribed.
Where a sender is relying on implied consent to send CEMs, the tracking system must be able to track the “expiry” dates of the implied consent categories. Implied consent normally lasts for two years so, to take advantage, Queen’s entities planning on relying on implied consent to send CEMs should seek express consent as soon as possible.
How to Obtain Express Consent
Electronic messages requesting express consent under CASL are also considered to be CEMs. Unless the proposed CEM fits into one of the exemptions discussed above, the CEM should not be sent or the information should be delivered in an alternate format (such as by direct mail or a telephone campaign). However, requests for express consent can be sent where the recipient has provided their implied consent (as outlined above). Through this process, implied consent is “converted” into express consent.
Requests for express consent must contain the following information:
- The specific purpose for which express consent is requested;
- The name of the Queen’s unit seeking consent;
- The mailing address and telephone number, email address or web address for the Queen’s unit seeking consent (or a link to a website containing this information); and
- A statement indicating that consent can be withdrawn at any time.
If you are collecting personal information (such as an individual’s name, address and telephone number), the request for consent must also include a privacy statement containing the following information:
- The reason that the information is being collected;
- The legal authority for collecting the information;
- The contact number for a Queen’s employee.
A sample privacy statement is provided below:
“Personal information is collected under the authority of the Queen’s University Royal Charter, 1841, as amended, and will be used for educational, administrative and statistical purposes. Questions regarding the collection or use of this personal information should be directed to [Title, Address, Telephone Number, (Email)].”