Can I email leads under CASL?

Yes, you can email leads under CASL, but only with consent, and the rest of the law is unforgiving about the details. Consent must be express, or implied within CASL’s time limits; every message must identify you and include a working unsubscribe honoured within 10 business days; and the burden of proving consent sits with you, the sender. That last clause is the one that changes behaviour: if you cannot show how and when a contact opted in, you should assume you cannot email them. (This page is general information, not legal advice; primary sources are the CRTC and ISED CASL guidance, accessed 2026-07-26.)

The two kinds of consent, and their clocks

Express consent lasts until it is revoked; implied consent expires on a timer. That single sentence prevents most CASL mistakes. The clocks, per CRTC guidance:

A lead-form submission on your website is typically an inquiry: you get roughly six months of implied consent, not a permanent subscription. The practical fix is to capture express consent at the form itself, with an unchecked checkbox and plain language about what they will receive. Unchecked matters: pre-ticked boxes do not constitute express consent.

What every commercial email must include

Three mechanical requirements apply to every commercial electronic message regardless of consent type: identify who is sending (you and your brokerage), include current contact information, and provide an unsubscribe mechanism that works and is honoured within 10 business days. An unsubscribe that silently fails is its own violation, and it has featured in CRTC enforcement.

The record is the compliance

CASL compliance is less about intentions and more about what you can produce when challenged: for each contact, when consent was given, how (which form, which checkbox, which words), what kind of consent it is, and when it expires if implied. A spreadsheet technically works and practically fails, because implied-consent expiry dates roll forward with new activity and nobody maintains that by hand across hundreds of contacts.

This is a place where your CRM either does the law’s bookkeeping or quietly ruins you. Factually, what BrokerFold’s CRM does: it stores a consent history per contact and per channel, checks a send gate before any automated message goes out, treats an unsubscribe or suppression as permanent and senior to any consent, tracks implied-consent expiry, and asks for re-permission before an implied consent lapses. Whatever system you use, those are the behaviours to demand of it; see real estate CRM for Canada for the longer treatment.

What happens if you get it wrong

CASL carries administrative monetary penalties of up to $1 million per violation for individuals and up to $10 million for organizations, and the CRTC has issued real penalties, including for consent and unsubscribe failures specifically. Enforcement typically starts with complaints to the Spam Reporting Centre, which is worth internalizing: the people most likely to report you are the ones who never agreed to hear from you in the first place. Purchased lists, scraped addresses, and quietly re-subscribing unsubscribers are how realtors end up in that pile.

What this means for your lead machine

None of this makes email a bad channel; it makes untracked email a bad channel. A capture-and-nurture system that records consent at the moment of capture turns CASL from a threat into a moat, because the agents who cannot prove consent eventually stop mailing their databases, and yours keeps compounding. How you build that database in the first place is the real strategic question, covered in how do realtors get leads and buy leads or generate your own.