Cold email and lead generation in Canada, done as a side hustle that stays inside the law, means helping a business contact people who have agreed to hear from it, or who fall inside a consent rule you can prove. It does not mean buying a list, scraping websites, or sending “just checking in” pitches to strangers. Innovation, Science and Economic Development Canada (ISED) says Canada’s anti-spam legislation (CASL) covers commercial electronic messages, which encourage participation in a commercial activity, whether or not there is an expectation of profit. The public site for that law and for reporting spam is fightspam.gc.ca. This is not legal advice. If a client’s plan depends on a grey area, send them to a lawyer and do not send the mail.
Consented campaign work for a brand that already has a list is email marketing freelancing. A waitlist for your own fully booked service is building a side hustle waitlist. A paper note on a door is a different channel, covered in door-to-door marketing.
| Fact | Detail for lead generation in Canada |
|---|---|
| What you may sell | Audits of an existing list, consent language, identification and unsubscribe setup, follow-up to people who enquired |
| What you should refuse | Purchased lists, scraped addresses, “B2B so CASL does not apply” as a slogan |
| Three CEM requirements | Consent, identification, unsubscribe. CRTC FAQ |
| Express consent | The person agreed, verbally or in writing. No time limit unless they withdraw it. ISED |
| Implied consent | Limited situations. ISED says it may last up to 2 years from a relationship, or 6 months after an inquiry or application |
| Unsubscribe | Actioned within 10 business days, at no cost. Contact details in the message valid for at least 60 days |
| Penalties | Up to $1 million per violation for an individual and $10 million for a corporation. CRTC FAQ |
What does CASL actually cover for a lead-generation side hustle in Canada?
CASL covers a commercial electronic message sent to an electronic address. The CRTC’s FAQ says the law sets requirements for those messages. It does not ban marketing. It also says an electronic address includes an email account, a telephone account, an instant-messaging account, and similar accounts. The FAQ says a typical website ad or a one-way social post is generally outside that definition, while a direct message on a closed system such as a platform’s private messaging can be inside it. Live voice calls are a different statute, the Unsolicited Telecommunications Rules, which this guide does not walk through.
ISED’s overview says the legal picture also includes false or misleading electronic representations and the harvesting of addresses: collecting or using electronic addresses without permission. A side hustle that “finds emails” by copying them out of websites, inboxes, or directories is the activity that page is describing. Do not sell it.
The CRTC’s regulations and guidelines page groups the message rules as prior consent, identification and contact information, and a working unsubscribe mechanism. The same page says you cannot alter transmission data so a message goes somewhere the sender did not choose, and that installing a computer program in the course of a commercial activity has its own express-consent rules. A “lead tool” that plants software is a separate problem. This is not legal advice.
Who does compliant lead generation in Canada suit?
Compliant lead generation in Canada suits someone who likes checklists, will read a consent record before they press send, and will turn down a client who wants volume from a file they bought. It is a poor fit if your offer is “500 emails a day” or “I have a list of Canadian businesses.” Those offers are how a weekend project becomes your name on a complaint.
You can be responsible for mail you send for someone else. The CRTC FAQ says that if a third party sends commercial messages for a business, both may be liable, and the sender still needs consent, identification, and an unsubscribe mechanism. “The client told me to send it” is not a plan.
What are the consent rules before anyone is emailed in Canada?
The consent rules before a commercial email in Canada start with two kinds of consent, described on ISED’s getting consent page.
Express consent means the person agreed, verbally or in writing, to receive a commercial electronic message from you. ISED says there is no time limit unless they withdraw it. The CRTC FAQ says express consent can be oral or in writing, and that a positive action such as checking a box is the safer record. A box that is already ticked is a bad record. Keep the proof. The FAQ says there is no set retention period in the legislation, and that you keep the record for as long as you rely on that consent.
Implied consent exists only in situations the legislation names. ISED’s page gives the practical clocks: an existing business relationship may support implied consent for up to two years, and an inquiry or application may support it for six months. The page also describes a narrow case: an address that was conspicuously published, without a statement that the person does not want unsolicited commercial messages, and a message that is relevant to that person’s business, role, functions, or duties. A business card handed to you is in the same “look closely” list. A directory you exported is not that case. “They are a business, so I can email them” is not a rule on that page.
If you are not sure the record matches one of those situations, do not send. Ask for express consent on a form, in person, or in a channel that is not itself a commercial electronic message you were not allowed to send. You cannot email someone to ask for permission to email them.
What must every commercial message include in Canada?
Every commercial electronic message in Canada that CASL covers needs the content ISED lists:
- The name of the business, and anyone on whose behalf you are sending
- A current mailing address, and a phone number, email, or website
- Contact information that stays valid for at least 60 days after you send
- An unsubscribe mechanism that is easy to use
Every unsubscribe request must be actioned within 10 business days, at no cost. A link that lands on a dead page fails that test. So does a request you “get to next month.”
The message also has to be truthful. ISED’s consent page says to be truthful in advertising, including whether taxes are included. A subject line that pretends you already know the person, when you do not, is a bad habit and can be a misleading representation. Do not write those.
Messages sent from a computer system in Canada generally have to comply even when the recipient is abroad, the CRTC FAQ says, with a narrow exemption you should not assume applies. Messages sent into Canada from another country also have to comply. A client who says “the tool is American, so CASL does not apply” is wrong on that FAQ.
Personal information in the list can also bring PIPEDA duties, and Alberta, British Columbia, and Quebec have their own private-sector privacy statutes. Complying with CASL does not finish the privacy question. This is not legal advice.
How do you offer lead generation in Canada without breaking CASL?
Offering lead generation in Canada without breaking CASL means selling the audit and the consented follow-up, and writing the refusal into the proposal.
Step 1: Learn the three requirements before you take a client
Read the CRTC FAQ, ISED’s consent page, and the fightspam.gc.ca site far enough that you can explain consent, identification, and unsubscribe in your own words. If you cannot, you are not ready to send anyone’s mail.
Step 2: Define the service as records, not blasts
A clean offer: review how the business collected each address, flag rows with no consent record, set up identification and unsubscribe, and write the follow-up for people who asked for a quote or joined a list. State, in the proposal, that you will not upload a purchased or scraped file.
Step 3: Ask where each address came from
A form with an unticked box, a contract, a recent inquiry, or a conspicuously published business address that meets ISED’s conditions are different facts. “We bought it” and “an intern copied it” are refusals. Delete those rows from the send. Tell the client why, in writing.
Step 4: Put identification and unsubscribe on every template
Business name, mailing address, a working contact method, and an unsubscribe path you have tested. Put the 10-business-day deadline on your own calendar. If you use a sending tool, confirm it actually suppresses unsubscribes. The tool’s brand does not replace the law. This guide does not endorse a sender. Compare newsletter tools in Substack vs beehiiv vs Kit when the job is a list people joined on purpose.
Step 5: Send only the rows you can explain
One segment, one purpose, a record of why each person is on it. Keep that record. The CRTC FAQ treats documented consent as what you would show if staff asked.
Step 6: Write the report the client can keep
How many addresses you refused, why, what the unsubscribe process is, and what you will not do next month. That report is the product. A screenshot of “emails sent” is not.
Step 7: Invoice the audit, not a promise of leads
You are selling a compliant process. You are not selling a number of customers. A guarantee of leads from a cold file is the pitch to walk away from. Invoice with a tool you understand. FreshBooks is one option once the scope is a fixed audit plus a defined send. The first job can be a single invoice.
What would a compliant lead-generation week look like in Canada?
The sketch uses assumed hours and an assumed fee. It is a teaching example, not a quote, a forecast, or a survey.
Illustrative example. Suppose a shop has a spreadsheet of 80 rows. Forty rows are people who filled a quote form in the last month and asked to be emailed. Forty rows are “contacts” with no note of where they came from. You refuse the second forty. You write one follow-up for the first forty, with the business name, mailing address, and a tested unsubscribe, and you log the consent note. Suppose the fee is an assumed $350 and the work takes seven hours. The sketch is $350 ÷ 7 = $50 an hour before tax set-aside. Suppose the client then asks you to “just send the other forty so the campaign is worth it.” That request is outside the fee and outside the service. The sketch does not include it, and the send should not happen. These totals are assumptions.
What lead-generation mistakes are common in Canada?
Common lead-generation mistakes in Canada are treating “business to business” as an exemption, buying a list because a tool advertised it, and hiding the sender’s identity to improve a reply rate.
- A scraped directory. ISED lists address harvesting in the problem CASL covers. Do not build a product on it.
- Emailing to ask for consent. If you do not already have consent or a listed implied-consent situation, that first email is the problem.
- A dead unsubscribe. The 10-business-day rule is on ISED’s page. Test the link before the send.
- Social “likes” as consent. The CRTC FAQ says liking, following, or accepting a connection is generally not a personal relationship, and direct messages can still be commercial electronic messages.
- Sending for a client you did not vet. The FAQ’s third-party section puts liability on the sender as well as the business.
- A course that sells “cold email systems” with a list included. Pay-to-play income offers are covered in side hustle scams in Canada.
Canadians report spam to the Spam Reporting Centre. ISED’s CASL page and fightspam.gc.ca both point there. Your side hustle should be the kind of mail people do not need to report.
Which tax rules apply to lead-generation freelancing in Canada?
Lead-generation income in Canada is self-employment income, reported on Form T2125. Self-employed people pay the whole Canada Pension Plan contribution on the net. GST/HST follows the $30,000 small-supplier test across your side hustles. Sending the mail does not change that. The side hustle tax FAQ is the short version.
This is not tax, legal, or insurance advice.
Which guides sit next to CASL-compliant lead generation in Canada?
Ongoing flows for people who already opted in are email marketing freelancing. Your own list, when you are fully booked, is a side hustle waitlist. A repeatable way to meet people who ask for a quote is the client acquisition system. Writing the words, once you are allowed to send them, overlaps freelance writing. A script that sends the message is Apps Script freelancing or Zapier automation, and the script does not create consent.
What are the common questions?
Is cold email legal in Canada?
A commercial email or text needs consent, identification, and an unsubscribe mechanism under CASL. Express consent is a clear yes. Implied consent is limited, including short windows after a relationship or an inquiry, and a narrow rule for some conspicuously published business addresses. A purchased list does not meet that test. This is not legal advice.
Does CASL apply if both businesses are in Canada?
Yes. The CRTC FAQ does not create a general business-to-business exemption. A published business address can support implied consent only in the situation ISED describes: no do-not-contact statement, and a message relevant to that person's role. Exporting a directory is not that situation.
What are the penalties for breaking CASL?
The CRTC FAQ says administrative monetary penalties are up to $1 million per violation for an individual and up to $10 million per violation for a corporation. Staff can also use warning letters, undertakings, and notices of violation. The amount in a real case depends on the factors in the legislation.
Can I send email for a client if they say they have consent?
Ask for the record. The CRTC FAQ says a business and a third party sending on its behalf may both be liable. If the client cannot show consent or a listed implied-consent situation, do not send. This is not legal advice.
How fast do I have to honour an unsubscribe?
ISED says every unsubscribe request must be actioned within 10 business days or less, at no cost to the recipient. The message also needs contact details that stay valid for at least 60 days.
Where do Canadians report spam?
ISED points people to the Spam Reporting Centre. The public site is fightspam.gc.ca. Contact local police if a message is a threat or another crime.
Which sources support this guide?
The rules, rates, and platform requirements in this guide are checked against these primary sources. Retail price ranges are labelled as ranges to verify locally, and they are not quotes.
- Canada's anti-spam legislation — Innovation, Science and Economic Development Canada
- Canada's anti-spam legislation (fightspam.gc.ca) — Government of Canada
- Getting consent to send email — Innovation, Science and Economic Development Canada
- Frequently Asked Questions about Canada's Anti-Spam Legislation — Canadian Radio-television and Telecommunications Commission
- The Act, regulations, and guidelines — Canadian Radio-television and Telecommunications Commission
- The Personal Information Protection and Electronic Documents Act (PIPEDA) — Office of the Privacy Commissioner of Canada
- When to register for and start charging the GST/HST — Canada Revenue Agency
- Form T2125, Statement of Business or Professional Activities — Canada Revenue Agency
- Contributions to the Canada Pension Plan — Government of Canada