When is spam illegal

Becoming an Owner Online Business. Table of Contents Expand. Table of Contents. Fines for Violating Commercial Email Laws. Additional Regulations. She has more than 25 years of experience in small business development and ran her own digital marketing firm. Learn about our editorial policies. Legal scholars and practitioners tend to treat anti-spam law either 1 as part of a larger framework of privacy law, or 2 as part of a larger framework of telecommunications and computer-related law.

Canada's Anti-Spam Law of can be seen as drawing these two strands together in an effort to create a comprehensive legal framework for internet-based commerce. While the variety in U. In the event an unsolicited email fails to comply with the above, it is deemed illegal. Further penalties will apply to email spammers and hackers if it transpires they obtained email addresses using unscrupulous methods.

Down under, the Spam Act covers most types of email and telephone spam. Whether or not an electronic message is deemed to be unsolicited depends on whether the sender has express or inferred consent. No self-respecting business wishes to be regarded as an email spammer. So the best thing is to ensure you are up-to-date with email spam laws to avoid hefty fines and allow your business to continue to use one of the most effective digital marketing channels out there.

Is email spam illegal? By concession, the Information Commissioner has said the law will not apply to 'legacy lists'. This means email addresses:. The Information Commissioner will proceed against you first if the rules are breached, as the 'instigator' of the email communication. You must also have a contract in place with the contractor to cover the 'processing' of personal data under the GDPR. Not only that, but data processors also face stricter regulation. Under the GDPR, individuals as opposed to businesses can prevent you from processing 'personal data' which includes using it to send unsolicited marketing emails without consent.

Personal data is defined as any information relating to an identifiable person who can be directly or indirectly identified from that information. This is a wider definition than that under the previous Data Protection Act and includes less obvious identifiers such as IP addresses and even pseudonymised data if that data can be attributed to a person.

Consent is an important aspect of the GDPR. Not only must consent be freely given, specific, informed, and involve an indication signifying agreement as before , but that indication must also be unambiguous and involve a clear affirmative action.

It must, therefore, be clearly understood by a subscriber that what they are doing eg ticking a box or submitting a form is also signalling their agreement to receiving direct marketing emails. Clear, easily accessible privacy notes are therefore a must. Implied consent has never been a true work-around for obtaining express consent, but it must be treated more carefully.

The provision of a service must not be made conditional upon consent unless it is truly necessary for that service. You cannot, for example, require someone to consent to marketing emails in order to sign-up to your service if those marketing emails do not genuinely form a part of that service.

When relying on consent as a basis for processing personal data under the GDPR, it is important to keep a record of that consent including when it was obtained, how, and what the individual was told at the time.

Consent must also be easy to withdraw. Individuals should be told of the right to withdraw consent when giving it and must be given easy ways of doing so. The GDPR also gives individuals the right to object to the use of their personal data for direct marketing. Holding personal data for any purposes is tightly regulated by the GDPR, but this does not prohibit you from keeping individuals' personal data for the purposes of ensuring that they are not contacted for marketing purposes ie an opt-out or suppression list , provided that the personal data retained is just enough to serve that purpose.

To find out more, see our FAQs.