Compliance Checkup
CASL Compliance Checkup
The below questions are designed to assist University offices in checking their compliance with CASL. Offices that do not reply affirmatively to all questions should contact the Data Privacy and Compliance Office for assistance in meeting CASL's requirements.
Commercial Messages
- Are commercial messages sent to only those recipients who have provided valid implied or express consent?
- Does every commercial message identify its sender, including the sender's name, mailing address and any one of telephone number, email address or website address?
- Does every commercial message contain an unsubscribe mechanism whereby the recipient may indicate not to receive further commercial messages?
- Are unsubscribe requests processed within 10 business days?
Recordkeeping
For all commercial messages sent since July 1, 2014, are records retained to demonstrate for each recipient:
- How the email address, phone number, or direct message account was obtained?
- The type of consent obtained?
- The business or non-business relationship that supports the consent?
- The date the consent was obtained?
Additional Documentation
Are records retained to demonstrate:
- All procedures for obtaining email addresses, phone numbers, and direct message accounts?
- All procedures for obtaining and managing consent?
- All procedures for actioning unsubscribe requests?
- All unsubscribe requests and subsequent actioning?