CASL Unsubscribe Requirements: Build a Compliant Opt-Out Mechanism

Every commercial electronic message you send to a Canadian must include a working unsubscribe mechanism. This isn't optional guidance — it's a legal requirement under CASL (Canada's Anti-Spam Legislation), and failure to honour unsubscribes properly can lead to CRTC enforcement, with administrative monetary penalties of up to $10 million per violation for organizations.

Last updated: April 2026

The Core CASL Unsubscribe Requirements

Every commercial electronic message (CEM) sent to a Canadian must contain an unsubscribe mechanism that satisfies all of the following:

1. Must Be Present in Every CEM

The unsubscribe mechanism must appear in every commercial electronic message — not just your newsletters. This includes:

• Promotional emails
• Newsletters
• Sales outreach messages
• Messages containing promotional postscripts in what might otherwise be transactional content

There is no exemption for "just this one email" or for messages you consider low-risk.

2. Must Be Clearly Identified

The unsubscribe option must be easy to find and clearly described. Hiding it in tiny grey text at the bottom of a page or burying it under irrelevant legal text violates the requirement in the CRTC's Electronic Commerce Protection Regulations that it be "set out clearly and prominently."

Compliant examples:

• "Unsubscribe" link in the email footer
• "Click here to stop receiving emails from us"
• "Manage your email preferences | Unsubscribe"

Potentially non-compliant:

• Text so small it requires zooming in to read
• Link buried multiple paragraphs into dense legalese
• Link labelled "update preferences" when it's actually the only unsubscribe option and isn't clearly labelled as such

3. Must Work Without Log-In

The unsubscribe mechanism cannot require the recipient to log in to an account to exercise their right to unsubscribe. An unsubscribed person may have forgotten their password, no longer use the service, or simply not have an account.

One-click unsubscribe via a link in the email is the industry standard and is broadly compliant.

4. Must Be Processed Within 10 Business Days

This is the most commonly misunderstood requirement. CASL requires you to give effect to an unsubscribe request within 10 business days of receiving it.

This means you must stop sending CEMs within 10 business days — not acknowledge the unsubscribe within 10 days, but actually stop sending.

Business days means Canadian business days — excluding weekends and statutory holidays. A request received on Friday, December 23 would have its 10-day clock include only business days, making the deadline in early January after the holidays.

5. Must Be Free of Charge

You cannot charge a fee for unsubscribing. This seems obvious, but some businesses have tried to charge for "premium" preference management or have structured their mailing list so that unsubscribing requires a paid tier.

6. The Mechanism Must Remain Functional for 60 Days

The unsubscribe mechanism (typically the unsubscribe link) must remain functional for at least 60 days after the CEM is sent. If you re-use an unsubscribe token or link and it expires within 60 days, you are non-compliant.

This matters for email archiving — if a recipient unarchives an email from 45 days ago and clicks the unsubscribe link, it must still work.

Technical Implementation Guide

Option 1: List-Unsubscribe Header (Recommended)

Modern email clients support the List-Unsubscribe email header. When properly implemented, email clients like Gmail, Outlook, and Apple Mail will display a one-click unsubscribe button at the top of the message — before the user even opens it.

Implementation: List-Unsubscribe: mailto:unsubscribe@yourdomain.com List-Unsubscribe-Post: List-Unsubscribe=One-Click

Most major email platforms (Mailchimp, HubSpot, Klaviyo, Campaign Monitor) handle this automatically. Verify your platform's configuration.

Option 2: Footer Unsubscribe Link

The traditional approach — a clickable "Unsubscribe" link in the email footer pointing to:

1. An immediate one-click unsubscribe confirmation page (preferred)
2. A preference centre where unsubscribing is clearly the primary option

Avoid: Preference centres where unsubscribing is obscured and the primary action is reducing email frequency. You must give people a clear unsubscribe option, not just a "send me fewer emails" option.

Option 3: Reply-to Unsubscribe

Allowing recipients to reply to the email with "unsubscribe" in the subject line is CASL-compliant as long as:

• The mailbox is monitored within 10 business days
• The processing is reliable and documented

This method is harder to automate and audit. For any volume over a few hundred subscribers, a link-based system is more reliable.

Common CASL Unsubscribe Mistakes

Mistake 1: Processing unsubscribes in weekly batches If your system processes unsubscribes once a week, a request received on Monday might not be actioned until the following Monday — potentially 7 days. As long as this is within 10 business days, it's technically compliant, but it's poor practice. Move to daily or real-time processing.

Mistake 2: Unsubscribing from one list but not all If you have multiple email lists (newsletter, product updates, promotional), an unsubscribe request should be treated as applying to all commercial communications unless you offer a clear preference centre that allows granular opt-outs. Sending a promotional email to someone who unsubscribed from your newsletter is non-compliant.

Mistake 3: Re-adding unsubscribed contacts Unsubscribed email addresses should be stored in a suppression list and never re-added to commercial lists — even after a new purchase creates a new EBR. The unsubscribe signals a clear intent not to receive CEMs.

Mistake 4: Ignoring manual unsubscribe requests If a customer calls, emails directly, or contacts you through social media asking to be removed from your list, that constitutes a valid unsubscribe request. You have 10 business days from receiving it.

Mistake 5: Email links that return 404 errors Ensure your unsubscribe infrastructure is maintained. Broken unsubscribe links are a direct CASL violation. Monitor link functionality regularly.

Documenting Unsubscribe Processing

In an enforcement action, the CRTC will ask you to demonstrate that you processed unsubscribes within 10 business days. Your records should include:

• Date and time the unsubscribe request was received
• Date and time the request was processed
• Confirmation that the email address was added to your suppression list
• The method by which the request was received (link click, email reply, manual request)

Most email platforms log this automatically. Export and back up these logs regularly.

What Happens After an Unsubscribe?

After processing an unsubscribe, you may not send further CEMs to that address. However:

• You can send transactional messages (receipts, account notifications, security alerts) — but only if they contain no promotional content
• You can contact them by phone (CASL doesn't govern phone calls)
• You can show them ads (CASL doesn't govern display advertising)
• You cannot re-add them to marketing lists based on a new purchase, even if it creates an EBR

Frequently Asked Questions

Q: Does an unsubscribe from one email address apply to other addresses at the same company? A: The unsubscribe applies to the specific email address that unsubscribed. If john@company.com unsubscribes, you cannot send to that address. You may still send to other contacts at company.com (with their own consent).

Q: Can I ask someone why they're unsubscribing? A: You can include an optional feedback question on your unsubscribe confirmation page, but you cannot make completing it a condition of unsubscribing.

Q: What if someone wants to re-subscribe after unsubscribing? A: They can provide fresh express consent by explicitly opting back in. Document this re-consent with full details (date, method, IP address). The new consent supersedes the previous unsubscribe.

Q: Do I need separate unsubscribe links for different message types? A: You can have a preference centre allowing granular opt-outs, but you must always provide a complete unsubscribe option. You cannot force someone to remain on one list by only offering the option to opt out of another.

Q: Can I put the unsubscribe link in an image? A: No. If the image doesn't load (which is common in email clients with images disabled by default), the recipient cannot unsubscribe. The unsubscribe mechanism must work regardless of image loading.

---

Automate Your CASL Unsubscribe Management

Managing unsubscribes manually — especially across multiple email platforms, CRM systems, and marketing tools — is a compliance risk. Canada Compliance AI integrates with your email stack to synchronise unsubscribe records across platforms in real time, ensuring no commercial message is ever sent to an unsubscribed address.

Start your free trial today and eliminate your unsubscribe compliance risk.

Related reading: CASL Compliance Guide | What is CASL? | CRTC Enforcement