Short answer: A CASL-aware cold email process for Canadian prospects starts with a documented consent basis for every contact, not with a bigger list. Separate Canadian contacts from US contacts, record how you obtained each address and why the message is relevant to the person's role, identify your company clearly in every email, include a working unsubscribe and honor it promptly, and keep records. Use phone, LinkedIn, events and referrals where email consent is unclear. This is practical sales operations guidance in general terms, not legal advice; check the CRTC's guidance and talk to counsel before you scale.
Why Canada needs its own email process
Many US teams run one outbound playbook for all of North America. That is risky. Canada's Anti-Spam Legislation (CASL) governs commercial electronic messages sent to recipients in Canada, and it is built around consent. US rules such as CAN-SPAM focus mainly on how messages are sent and how opt-outs work. CASL also asks whether you had a basis to send the message in the first place.
In practice, that means a Canadian contact pulled into a generic US sequence can create problems even if the email itself has an unsubscribe link.
The core building blocks (in general terms)
CASL guidance generally centers on three requirements for commercial electronic messages:
- Consent: express consent, or a recognized form of implied consent
- Identification: who is sending the message and how to contact them
- Unsubscribe: a simple, working way to opt out, honored within the required time (CASL requires unsubscribe requests to be processed within 10 business days)
Implied consent can arise in limited situations, for example certain existing business relationships, which are time-limited, or when a person has conspicuously published their business email address without saying they do not want unsolicited messages and your message is relevant to their business role. These are specific concepts with conditions, so review the official guidance rather than relying on summaries.
Step 1: Separate Canadian contacts
Before anything else:
- Add a country and province field to every contact and account in your CRM
- Flag contacts located in Canada, including Canadian employees of US companies
- Route Canadian contacts into a separate list or sequence with its own rules
- Watch for remote workers; a contact at a US company may live in Toronto, Vancouver or Montreal
If you cannot tell where a contact is located, treat that as a data quality problem to fix before sending.
Step 2: Record a consent basis for each contact
Add CRM fields such as:
- Consent type: express, implied (with reason) or none
- Consent source: form fill, event badge scan with notice, existing customer, inquiry, published address
- Consent date: when it was obtained
- Evidence: a link, screenshot or note showing where the address was published or how consent was given
- Relevance note: why your message relates to the person's business role
Contacts with "none" should not receive commercial email until you have a basis. Use other channels for them.
Step 3: Source lists with consent in mind
When building Canadian prospect lists:
- Prefer contacts who engaged with you: webinar sign-ups, content downloads with clear notice, event conversations, inbound inquiries
- If you rely on a published business address, record where it was published and confirm there was no statement refusing unsolicited messages
- Keep messages tightly tied to the person's role, such as a finance tool for a controller, not a generic blast
- Do not assume a data vendor's list comes with consent; ask what the vendor provides and document your own basis
Contact data tools can help you find and verify work emails and phones. They do not decide whether you have consent to email someone.
Step 4: Build compliant email templates
Every commercial email to Canadian recipients should include:
- Your name and company name
- A mailing address and at least one other contact method, such as a phone number, email or website
- A clear unsubscribe link or reply-based opt-out
- An honest subject line and sender name
Keep the content relevant and specific. A short note tied to the prospect's role is easier to justify and more likely to get a reply.
Step 5: Handle unsubscribes properly
- Sync opt-outs across your CRM, sequencer and any other sending tool
- Process requests well within the required timeline
- Make sure an unsubscribe in one tool suppresses the contact everywhere
- Do not re-import suppressed contacts from a new list or vendor
Audit suppression lists monthly. Duplicate records are a common way opted-out contacts end up back in a sequence.
Step 6: Use other channels where email consent is unclear
When you do not have a clear consent basis:
- Phone: call business lines, following Canada's do-not-call rules and your company policy
- LinkedIn: engage with relevant content and send personalized connection requests
- Events: meet prospects at Canadian industry events in Toronto, Vancouver, Calgary or Montreal
- Referrals and partners: ask customers or partners for introductions
- Inbound content: offer useful resources that prospects can request, which creates a clear consent record
Step 7: Keep records and review
- Store consent evidence with the contact record
- Log which template and sequence each contact received
- Review the process with counsel at least once a year, and when you add new channels or vendors
- Train SDRs on the difference between US and Canadian rules
Common mistakes
- Running Canadian contacts through a US-only sequence
- Treating a purchased list as consent
- Missing mailing address or contact details in templates
- Opt-outs that do not sync between tools
- Assuming implied consent never expires
- Sending generic messages that are not relevant to the person's role
Where PeakAI fits
PeakAI is a contact finder with a Chrome extension that finds phone numbers, work emails and personal emails from professional profiles, drawing on global sources, with bulk export and integrations. In a CASL-aware process, use PeakAI or another tested finder to locate and verify contact details for Canadian prospects, then record your consent basis before any commercial email goes out. Phone numbers can also support multi-channel outreach where email consent is unclear. Treat PeakAI as one option in your shortlist, and check thepeakai.com for current features, coverage and pricing. Verify before you outreach at scale.
FAQ
Does CASL apply to US companies emailing Canadians?
CASL is generally understood to apply to commercial electronic messages sent to recipients in Canada, regardless of where the sender is based. If you email Canadian prospects, plan for it and confirm details with counsel.
Is B2B cold email allowed under CASL?
It can be, when you have a valid consent basis, such as express consent or a recognized form of implied consent, and your message meets the identification and unsubscribe requirements. Document the basis for each contact.
What is the difference between CASL and CAN-SPAM?
In general terms, CAN-SPAM focuses on how commercial emails are sent and how opt-outs are handled, while CASL also requires a consent basis before sending. Canadian contacts usually need stricter handling.
Does buying a contact list give me consent?
No. A list gives you contact details, not consent. You need your own documented basis for each person you email.
How quickly must I honor unsubscribe requests?
CASL requires unsubscribe requests to be processed within 10 business days. Many teams aim to suppress immediately across all tools.
Should I stop emailing Canadian prospects altogether?
Not necessarily. Many teams email Canadian contacts who have opted in or who meet an implied consent condition, and use phone, LinkedIn and events for the rest.
