How long does implied consent last under CASL?

Still have a question, spotted an error, or have a better explanation or a source we should cite?

You sold something to a Canadian customer 18 months ago. Under CASL, how much longer can you email them without asking permission? 6 more months. After that, your implied consent window closes.

Here's how the clock works. If someone made a purchase, signed a contract, or became a paying member, you get 24 months of implied consent from their last transaction. If someone only requested a quote or filled out an inquiry form but never bought anything, you get just 6 months. So a purchase window is much longer. An inquiry window is short.

When the clock runs out, you must stop emailing that contact unless you've converted them to express consent (explicit opt-in) in the meantime. And this is the important part: the clock doesn't pause. If you haven't gotten their documented agreement to keep receiving email by month 24 (or month 6), you can't send anything else. Not even a "please stay subscribed" message. Silence means stop.

Best practice is to start your conversion campaigns 3-4 months before expiration, when you still have time to engage them. Ask something straightforward like "Want to keep getting our emails?" Make it obvious they're choosing to stay. Log their response. That documented yes becomes express consent, which doesn't expire. For contacts who don't respond or say no, remove them from your list. It's less fun than a big list, but it's the legally compliant way to run Canadian email. Ready to tag your contacts with their consent type and expiration date so you don't miss these windows?

Contributors

Who worked on this answer

Every name links to their profile. Every company links to their site. Real people, real accountability.

Ask an AI · tailored to your setup

Get a consent expiration tracker template.

I read this on the Review My Emails Almanac about implied consent duration under CASL: "For existing business relationships, implied consent lasts 24 months from the last transaction. For inquiries, it lasts 6 months. When it expires, you must stop sending commercial email unless you've obtained express consent." Help me set up tracking for MY list: 1. How do I identify which contacts fall into which category? 2. When do my oldest contacts lose consent? 3. How do I set up a conversion campaign 3-4 months before expiration? 4. What data should I track going forward? --- My details (fill in what applies): - Email platform/ESP: e.g. Mailchimp, SendGrid, Postmark - Canadian list size: number of contacts - Transaction data available: yes / partial / no - Oldest purchase date: date - Oldest inquiry date: date - Consent type currently tracked: yes / no - Conversion campaign in place: yes / in progress / not yet - Can you automate reminders: yes / manually / unsure

Edit the yellow boxes, then send to the AI of your choice.