Can You Cold Email Investors in Canada? CASL Consent Rules for Investor Outreach

Generally not without consent: Canada's Anti-Spam Legislation (CASL) prohibits sending a commercial electronic message to an electronic address unless the recipient has given express or implied consent and the message identifies the sender and carries a working unsubscribe mechanism. An unsolicited investment pitch emailed to a Canadian recipient is lawful only if it fits one of a small number of implied-consent categories or regulatory exclusions, and the sender carries the burden of proving which one applied.

This is the single largest operational difference between investor outreach in the United States and in Canada. US issuers and agencies are used to an opt-out email regime; CASL is opt-in. It applies to the issuer, to any agency sending on its behalf, and to senders outside Canada whose messages are opened there. What follows is informational only; whether a specific message or list is compliant is a question for Canadian counsel.

What CASL Covers

CASL (S.C. 2010, c. 23) regulates the "commercial electronic message" (CEM). Under section 1(2), a CEM is an electronic message that, having regard to its content, its hyperlinks or its contact information, it would be reasonable to conclude has as one of its purposes to encourage participation in a commercial activity. An email inviting someone to review an offering or book an investor call is squarely inside that definition. The full text is published on the Justice Laws website.

Four scope points shape a campaign:

• It is not limited to email. "Electronic address" covers an electronic mail account, an instant messaging account, a telephone account, or any similar account. SMS campaigns are covered, and direct messages on social platforms can be.
• A request for consent is itself a CEM. Section 1(3) treats an electronic message that asks for permission to send CEMs as a CEM. An issuer cannot email a cold contact to ask whether they would like to receive offering emails.
• It reaches foreign senders. Under section 12, section 6 is contravened where a computer system located in Canada is used to send or access the message. A US issuer emailing Canadian residents is inside the statute.
• It reaches whoever "causes or permits" the send. Section 6(1) prohibits sending, causing to be sent, or permitting to be sent. The issuer that approves a campaign and the agency that executes it both sit within that language.

CASL vs. the US CAN-SPAM Model

Our guide to cold email compliance for Reg-D 506(c) covers the US side. The contrast below is why a US sequence cannot simply be pointed at a Canadian list.

The Consent Categories an Investor Program Can Rely On

Section 6(1) requires consent, "whether express or implied." Section 10(9) then says consent is implied only in the listed circumstances. For investor outreach, five lanes matter.

Express Consent Is the Only Durable Asset

Express consent does not expire. Every implied category runs on a clock or hangs on a contestable judgment. Section 10(1) requires the request to set out, clearly and simply, the purpose for which consent is sought and prescribed information identifying the person seeking it. The CRTC's Electronic Commerce Protection Regulations (SOR/2012-36) add that the request must include the requester's name, mailing address and a telephone, email or web contact, and a statement that the person can withdraw consent. Issuers typically treat consent as a positive action by the recipient, such as a box they tick themselves, rather than something bundled into terms of use.

The Inquiry Window Is Six Months, Not Forever

This is the provision most investor funnels are built on without knowing it. A prospect who submits a form asking about an offering has made an inquiry within section 10(10)(e), and the issuer has implied consent to email them for six months from that date. On month seven, absent express consent or an investment, the basis is gone. A lead form that captures express consent at the point of inquiry converts a six-month asset into a standing one.

Existing Investors Carry a Two-Year Clock

Under section 10(10)(b), a recipient who accepted an investment opportunity offered by the sender within the previous two years is in an existing business relationship with it. That supports emailing a prior round's investors about a new raise, but the period is finite and the relationship belongs to the entity that offered the opportunity; counsel determines how it maps across affiliates or a new fund vehicle.

"Conspicuous Publication" Is Narrower Than Scraped-List Vendors Suggest

Section 10(9)(b) is the provision most often cited to justify cold outreach, and it has three conditions: the recipient conspicuously published the address, the publication carries no statement that unsolicited messages are unwelcome, and the message is relevant to the recipient's business, role, functions or duties in a business or official capacity. An investment pitch sent to a family office's published deal-intake address has an argument on relevance. The same pitch sent to a dentist's published clinic address does not obviously relate to that person's role. The address being public is not sufficient on its own, and section 13 places the onus on the sender.

The business-to-business exclusion in section 3(a) of the Governor in Council's Electronic Commerce Protection Regulations (SOR/2013-221) is narrower still: the two organizations must already have a relationship, and the message must concern the activities of the recipient organization.

What Every Message Must Contain

Consent is half the test. Under section 6(2), a CEM sent with valid consent still contravenes CASL if it lacks the prescribed content:

1. Sender identification. The name under which the sender carries on business and, where the message is sent on behalf of another person, that person's name and a statement of who is sending for whom.
2. Contact information. A mailing address plus a telephone number, email address or web address, which under section 6(3) must remain valid for at least 60 days after the message is sent.
3. An unsubscribe mechanism. Section 11 requires a no-cost way to opt out using the same electronic means or another practicable one. The regulations require it to be "readily performed." The request must be given effect without delay and no later than 10 business days after it is sent.

Penalties and Who Carries Them

Section 20(4) sets the maximum administrative monetary penalty at C$1,000,000 per violation for an individual and C$10,000,000 for any other person. Three provisions determine where that exposure lands:

• Directors and officers. Under section 31, an officer, director or agent of a corporation is liable for a violation if they directed, authorized, assented to, acquiesced in or participated in it.
• Vicarious liability. Under section 32, a person is liable for a violation committed by an employee acting within the scope of employment or an agent acting within the scope of their authority.
• Due diligence defence. Under section 33, a person is not liable if they establish that they exercised due diligence to prevent the violation. Consent records and suppression processes are what that defence is built from.

Securities Law Still Applies on Top

CASL governs whether a message may be sent. It says nothing about what the message may claim. A Canadian raise relies on a prospectus exemption under NI 45-106 or NI 45-110, and those carry their own consequences for email content. In an offering memorandum raise in Alberta, New Brunswick, Nova Scotia, Ontario, Québec and Saskatchewan, a written communication to prospective purchasers that contains material facts about the offering can be "OM marketing materials," incorporated by reference into the OM and filed. Activity that amounts to being in the business of trading can also raise registration questions under NI 31-103. The exemptions themselves are covered in our guide to Canadian equity crowdfunding rules.

How Issuers Typically Build a CASL-Ready Investor List

1. Capture express consent at the first form. A separate, unticked consent control on the inquiry form, with the issuer named and the purpose stated, so the six-month inquiry window is never the only basis.
2. Store the evidence, not just the flag. Timestamp, source URL and the exact consent wording shown.
3. Tag every contact with its consent basis and expiry. Express, investor (two years), inquiry (six months), published address, or referral. Sequences suppress automatically when an implied basis lapses.
4. Use paid media to generate inquiries rather than buying lists. Purchased and scraped lists rarely come with consent the buyer can prove.
5. Run one suppression list across every sender. An unsubscribe received by the agency's platform has to reach the issuer's CRM, and the reverse, inside 10 business days.

Consent solves the legal question, not the inbox one. A fully consented list still underperforms on a cold domain with weak authentication; that side of the problem is covered in email deliverability for investor outreach.

Frequently Asked Questions

Can you cold email investors in Canada?

Only where a CASL consent basis or exclusion applies. Canada's Anti-Spam Legislation prohibits sending a commercial electronic message without the recipient's express or implied consent, and implied consent exists only in the circumstances listed in section 10(9), such as an existing business relationship or a conspicuously published address where the message is relevant to the recipient's business role. The sender has the onus of proving consent.

Does CASL apply to a US company emailing Canadian investors?

Yes. Under section 12 of CASL, the prohibition on unsolicited commercial electronic messages applies where a computer system located in Canada is used to send or access the message. A US issuer or agency whose message is opened in Canada is within the statute wherever its sending platform is located.

How long does implied consent last after an investor inquiry?

Six months. Under section 10(10)(e) of CASL, an inquiry or application made by the recipient within the six-month period before the message is sent creates an existing business relationship that supports implied consent. Where the recipient actually accepted an investment opportunity offered by the sender, the period is two years under section 10(10)(b). Express consent has no expiry and lasts until it is withdrawn.

What must a CASL-compliant investor email include?

The message must identify the sender and any person on whose behalf it is sent, provide a mailing address plus a telephone number, email address or web address that stays valid for at least 60 days, and include an unsubscribe mechanism that can be readily performed at no cost. Unsubscribe requests must be given effect without delay and no later than 10 business days after they are sent.

What are the penalties for violating CASL?

The maximum administrative monetary penalty under section 20(4) is C$1,000,000 per violation for an individual and C$10,000,000 per violation for any other person. Directors and officers who directed, authorized or acquiesced in a violation can be personally liable, subject to a due diligence defence.

Does Growth Turbine provide legal advice on CASL or Canadian securities law?

No. Growth Turbine provides marketing and investor-acquisition services to issuers. It is not a law firm, and it is not a registered dealer, funding portal or adviser in any Canadian jurisdiction. Consent language, list eligibility and offering communications are reviewed by the issuer's own Canadian counsel.

Building a Canadian Investor Pipeline

In Canada the email list is a regulated asset: its value depends on the consent attached to each address and the records behind it. Growth Turbine has provided marketing support across more than $490M in aggregate issuer-reported totals, with 210+ fundraising campaigns managed supported across Reg-CF, Reg-D 506(c), Reg-A+ and tokenized securities offerings, spanning 23+ crowdfunding platforms and 25+ industries.

For how we structure inquiry-led acquisition, consent capture and nurture for Canadian issuers, see our Canada crowdfunding marketing page and our equity crowdfunding marketing services. To discuss a Canadian raise, contact our team.

Disclaimer: The information provided in this article is for educational and informational purposes only and does not constitute legal, financial, or investment advice. Always consult with qualified legal counsel and financial advisors before launching a capital raise.