CASL Consent Tracking for Real Estate Agents
Canada's Anti-Spam Legislation carries penalties of up to $10 million per violation. Every marketing email, newsletter, and listing alert you send requires valid consent. This guide covers the two types of consent, how expiry works, what counts as a commercial electronic message, and how to build a consent tracking system that keeps you compliant as a BC realtor.
Written by the Magnate360 Team · Updated April 2026
What Is CASL?
Canada's Anti-Spam Legislation (CASL) came into force on July 1, 2014, and is considered one of the strictest anti-spam laws in the world. It is enforced by the Canadian Radio-television and Telecommunications Commission (CRTC), the Competition Bureau, and the Office of the Privacy Commissioner.
CASL regulates all "commercial electronic messages" (CEMs) sent from or to a Canadian computer system. It operates on an opt-in model -- meaning you need consent before you send, not just an option to opt out after. This is fundamentally different from the US CAN-SPAM Act, which allows you to send until someone unsubscribes.
For real estate agents, CASL applies to almost every marketing communication you send: newsletters, listing alerts, market updates, open house invitations, holiday greetings, and even text messages if they contain a commercial purpose. The only exception is purely transactional messages related to an active deal.
Two Types of Consent: Express vs Implied
CASL recognizes two forms of consent. Understanding the difference is critical because they have very different rules about duration and proof.
| Aspect | Express Consent | Implied Consent |
|---|---|---|
| How obtained | Person actively opts in (checkbox, signup form, written request) | Existing business relationship, inquiry, or referral |
| Duration | No expiry -- valid until unsubscribed | 24 months (business relationship) or 6 months (inquiry) |
| Proof required | Record of opt-in: date, method, what was consented to | Record of the business relationship or inquiry date |
| Strength | Strongest -- survives indefinitely | Temporary -- expires and cannot be renewed without action |
| Example for realtors | Client signs up for your newsletter on your website | Client bought a home through you 18 months ago |
Express Consent
Express consent means the person has clearly and explicitly agreed to receive commercial electronic messages from you. To obtain valid express consent, you must clearly describe the purpose (what types of messages you will send), identify yourself, and provide your contact information. The consent request itself cannot be a CEM -- you cannot send an email asking "can I send you emails?"
Valid ways to obtain express consent:
- Website signup form with a clear opt-in checkbox (not pre-checked)
- Written consent on a form signed by the client (at listing intake, at closing)
- Verbal consent documented with a record of the date, context, and what was agreed
- Open house sign-in sheet with a clear consent statement and checkbox
Best practice: Always seek express consent. It never expires and gives you the strongest legal footing. The best time to ask is when the client is engaged -- at listing intake, at closing, or at an open house. Most people will say yes if you explain what you are sending and why it is valuable.
Implied Consent
Implied consent exists when you have an existing business relationship with the person. For realtors, this typically means:
- Transaction-based (24 months): The person purchased, sold, or leased property through you within the last 24 months
- Inquiry-based (6 months): The person contacted you about your services, requested a market evaluation, or attended an open house within the last 6 months
- Referral-based (one message): Someone you know referred a person to you -- you can send one message, and in that message you must disclose who referred them
The clock starts from the last transaction date or inquiry date -- not from the first. If a client bought a home through you in January 2024 and then asked about a refinance referral in March 2025, the implied consent clock resets to March 2025, giving you until March 2027.
What Counts as a Commercial Electronic Message
A commercial electronic message (CEM) is any electronic message that has a commercial purpose. The CRTC takes a broad interpretation -- if one of the purposes of the message is to encourage commercial activity (buying, selling, promoting), it is a CEM.
Messages That ARE CEMs (Consent Required)
- Monthly market update newsletters
- New listing alerts
- Open house invitations to your contact list
- Holiday greetings with your branding and contact info
- Just-sold announcements
- Neighbourhood guides or community content with your branding
- Home anniversary emails
- SMS/text messages promoting your services
- Social media direct messages with commercial content
Messages That Are NOT CEMs (No Consent Required)
- Showing confirmation for a scheduled appointment
- Status update on an active offer or listing
- Document delivery (contracts, forms, disclosures)
- Response to a direct inquiry ("What is the price of 123 Main St?")
- Messages to family members
- Messages between agents about a specific transaction
Grey area: If a message has both transactional and commercial content (e.g., a showing confirmation that also promotes your other listings), the CRTC may consider the entire message a CEM. Keep transactional messages purely transactional to avoid this risk.
Requirements for Every Message You Send
Every CEM you send must include three things, regardless of whether you have express or implied consent:
- Identify yourself.
Your name, your brokerage name, and at least one of: mailing address, phone number, email address, or website URL. - Provide a functional unsubscribe mechanism.
Must be easy to use, free, and effective for at least 60 days after sending. An unsubscribe link that works immediately is the standard. You must process unsubscribe requests within 10 business days. - Include your physical mailing address.
Your brokerage office address satisfies this requirement. It must be valid for at least 60 days after sending.
Consent Expiry Rules
This is where most realtors run into trouble. Implied consent has a built-in expiry date, and if you do not track it, you will eventually be sending without consent.
| Consent Source | Expiry | Example |
|---|---|---|
| Express consent (opt-in) | Never (until unsubscribed) | Client signed newsletter opt-in form |
| Business relationship (purchase/sale) | 24 months from last transaction | Sold a home for them in March 2025 -- consent expires March 2027 |
| Business relationship (lease) | 24 months from last lease date | Helped them rent in June 2025 -- expires June 2027 |
| Inquiry (lead, open house, CMA request) | 6 months from inquiry date | Attended open house Sept 2025 -- expires March 2026 |
| Referral | One message only | Friend referred their colleague -- you can send one intro message |
The critical implication: if you have 500 contacts and 200 of them are on implied consent with different expiry dates, you need a system that tracks each contact's consent type, source, and expiry date individually. Spreadsheets break down at scale. This is one of the core reasons realtors need a CRM with consent tracking.
Penalties and Enforcement
CASL penalties are among the highest in the world for anti-spam legislation:
- Individuals: Up to $1,000,000 per violation
- Organizations: Up to $10,000,000 per violation
- Private right of action: $200 per message, up to $1,000,000 per day (currently suspended but may be reinstated)
Each email counts as a separate violation. If you send a newsletter to 300 people without consent, that is 300 separate violations. The CRTC has issued penalties to small businesses -- not just large corporations. In 2023, a Montreal company was fined $100,000 for sending marketing emails to people who had not consented.
Beyond fines, the reputational damage from a CASL complaint can affect your real estate career. BCFSA may view CASL violations as evidence of unprofessional conduct, and email service providers like Mailchimp, Brevo, and Resend will suspend your account if you generate spam complaints.
How to Track Consent in a CRM
Effective consent tracking requires storing four pieces of information for every contact:
- Consent type: Express or implied
- Consent source: How consent was obtained (e.g., website signup, open house sign-in, transaction closing, verbal agreement)
- Consent date: When consent was obtained or when the triggering event occurred
- Expiry date: When implied consent expires (calculated automatically: +24 months for transactions, +6 months for inquiries)
Your CRM should provide:
- Automatic expiry date calculation based on consent type
- Warnings before consent expires (e.g., 30-day and 7-day alerts)
- Automatic exclusion of expired contacts from email sends
- Consent upgrade path (convert implied to express before expiry)
- Audit trail showing when and how consent was obtained
- Unsubscribe processing within 10 business days
Re-Consent Strategies
When a contact's implied consent is about to expire, you have a limited window to convert them to express consent. Here are proven strategies for BC realtors:
- Home anniversary email: On the anniversary of their purchase, send a personalized market update with a clear opt-in for continued updates
- Annual check-in:A genuine value-add message (e.g., "your home's estimated value has increased 12% since purchase") with an opt-in for market alerts
- Content upgrade: Offer a valuable resource (BC market report, homeowner tax guide) in exchange for express consent
- Direct ask:Before expiry, send a straightforward message: "I have been sending you market updates. Would you like to continue receiving them?" with a clear yes/no choice
Timing matters: Send your re-consent request 60-90 days before expiry. If you wait until the last week, you have no time for follow-up. If the contact does not respond, you must stop sending when the consent expires. Silence is not consent.
Common Scenarios for Realtors
Scenario 1: Open House Sign-In
A visitor signs in at your open house and provides their email. You now have implied consent for 6 months (inquiry-based). If your sign-in sheet includes a clear opt-in statement and they check the box, you have express consent (no expiry). Always include an opt-in checkbox on your sign-in sheets.
Scenario 2: Past Client Newsletter
You closed a deal for a buyer in January 2025. You add them to your monthly newsletter. You have implied consent until January 2027. At month 20 (September 2026), your CRM should alert you that consent is approaching expiry and trigger a re-consent campaign. If they opt in expressly, you can continue indefinitely. If they do not respond, you must remove them from the list in January 2027.
Scenario 3: Sphere of Influence
You have a list of 200 contacts you have collected over your career -- friends, acquaintances, networking contacts. Unless each person has given you express consent to receive marketing messages, or you have an active business relationship with them within the last 24 months, you do not have consent to email them marketing content. Personal relationships are not a CASL exemption for commercial messages.
Scenario 4: Buyer's Agent Receiving Listing Emails
Can you send listing alerts to buyer's agents who have shown your properties? If the agent contacted you about a specific listing (inquiry), you have 6 months of implied consent. If they completed a transaction with you, you have 24 months. However, mass-emailing your new listings to every agent in the board without consent is a CASL violation, even though it is common practice. Use the board's own communication tools (which operate under their own consent framework) instead.
CASL Compliance Checklist
- Every contact has a consent type recorded (express or implied)
- Every contact has a consent source documented (how consent was obtained)
- Every contact has a consent date recorded
- Implied consent contacts have calculated expiry dates
- Expired consent contacts are automatically excluded from marketing sends
- Re-consent campaigns trigger 60-90 days before expiry
- Every CEM includes your name, brokerage, and mailing address
- Every CEM includes a working unsubscribe link
- Unsubscribe requests are processed within 10 business days
- Open house sign-in sheets include an express consent checkbox
- Website forms include a clear opt-in mechanism (not pre-checked)
- Listing intake forms include an email consent question
- You never send to purchased, rented, or harvested email lists
- Transactional messages do not include marketing content
- Consent records are retained for the life of the contact record
Frequently Asked Questions
Do showing confirmations and transaction emails need CASL consent?
No. CASL does not apply to messages that are directly related to an ongoing transaction or that respond to a specific request. Showing confirmation texts, appointment reminders for scheduled viewings, and status updates on an active deal are considered transactional messages, not commercial electronic messages. However, if you include marketing content in a transactional message (like promoting other listings in a showing confirmation), the entire message may be considered a CEM and require consent.
What about past clients — do I need their consent to email them?
You have implied consent to email past clients for 24 months after the last transaction closes. After that, you need express consent. This is one of the most common CASL traps for realtors -- you close a deal, add the client to your newsletter list, and two years later you are sending without valid consent. Best practice: request express consent at closing (while the relationship is strong), then you have unlimited consent going forward.
When does implied consent expire under CASL?
Implied consent based on an existing business relationship expires 24 months after the last purchase or transaction. Implied consent based on an inquiry or application expires 6 months after the inquiry. Implied consent based on a referral expires once you have sent one message. Express consent does not expire -- it remains valid until the person unsubscribes. Tracking these different expiry dates is critical and nearly impossible without a CRM that automates it.
What are the penalties for CASL violations?
The CRTC can impose penalties of up to $1 million per violation for individuals and up to $10 million per violation for organizations. Each email sent without consent is a separate violation. Additionally, CASL includes a private right of action that allows individuals to sue for $200 per message (up to $1 million per day). While massive penalties are typically reserved for egregious cases, the CRTC has issued penalties to small businesses and individuals, not just large corporations.
Can I buy an email list and send to it under CASL?
No. Purchasing, renting, or harvesting email lists does not give you consent under CASL. You need either express consent (the person actively opted in to receive messages from you specifically) or implied consent (an existing business or inquiry relationship with you). Sending to a purchased list is one of the highest-risk CASL violations because every single recipient is a separate violation, and you have no consent defence for any of them.
Related Resources
FINTRAC Compliance Checklist for BC Realtors
Identity verification, record retention, and penalties -- the other compliance pillar for BC agents.
AI Email Marketing Feature
Claude-powered newsletters with built-in CASL consent checking and automatic unsubscribe handling.
Best CRM for New BC Realtors (2026)
Honest comparison of CRM options with CASL tracking, FINTRAC compliance, and BCREA form support.
Automatic consent tracking built into every contact
Magnate360 tracks express and implied consent per contact, calculates expiry dates, triggers re-consent campaigns, and automatically excludes expired contacts from sends. CASL compliance on autopilot.
Start free