By Bernice Karn
As discussed in previous issues of The Cassels Brock Report, Canada has introduced Anti-Spam Legislation (“CASL”)1 to address and prohibit spam, spyware, malicious code, botnets and other related network threats. It is hoped that the prohibition of these threats will ensure public trust in the on-line marketplace and encourage the growth of electronic commerce in Canada. Archived articles regarding the progress of CASL in The Cassels Brock Report can be found here: Article #1, Article #2 and Article #3.
Although CASL was granted Royal Assent on December 15, 2010, the legislation has not yet been proclaimed in force. The government’s intent is that the Electronic Commerce Protection Regulations prepared by Industry Canada and the CRTC (the “Regulations”) must be finalized first. These Regulations are intended to provide clarity and legal certainty to key terms in CASL.
The first drafts of the Regulations faced criticism by industry stakeholders and, as a result, the CRTC and Industry Canada decided to implement certain changes. Although the CRTC registered the final version of its Regulations on March 12, 2012, Industry Canada just released the much anticipated second draft of its Regulations on January 4, 2013 (the “Current IC Draft”). Industry Canada’s previous draft of its Regulations was subject to public consultation between July 9, 2011 and September 7, 2011 (the “Consultation Period”), and based on the submissions received, Industry Canada introduced the following changes:
In the previous draft of the Regulations, the definition of “personal relationship” referred to a relationship between individuals who had communicated with each other within the previous two years, and who had met in person during that two-year period. However, during the Consultation Period, there were concerns that this two-year period was arbitrary and that the definition of “personal relationship” should also extend to “virtual relationships” where individuals had not met in person.
The Current IC Draft removes the arbitrary two-year requirement from the definition and now has extended the definition to include “virtual relationships”. However, in order to limit abuse of the “personal relationship” exemption, the Current IC Draft includes an option for an individual to expressly opt out of receiving commercial electronic messages (“CEMs”) from a sender even if the relationship with the sender meets the definition of “personal relationship”.
By broadening the definition of “personal relationship” and providing an opt out right, Industry Canada is relying on the individuals themselves to monitor CEMs sent from people with whom they have personal relationships.
During the Consultation Period, concerns were raised about the broad prohibition on the non-consensual distribution of CEMS, with stakeholders requesting many new exemptions to such CASL consent requirements. As a result, the Current IC Draft attempts to address some of these concerns by providing for the following exemptions to the requirement to obtain express or implied consent from the addressee:
In addition, the Current IC Draft provides a “third party referral” exemption. This exemption applies to the first CEM sent by an individual to an addressee following a referral by a third party who has an “existing business relationship”, an “existing non-business relationship”, a “personal relationship” or a “family relationship” with the sender and the addressee, provided such CEM discloses the full name of the third party whom made the referral and states that the CEM has been sent as a result of the referral. By limiting this proposed exemption to the first CEM, the sender will be required to receive consent pursuant to CASL in order to send a second CEM.
“Specified Computer Programs”
During the Consultation Period, telecommunication and other network service providers (“TSPs”) raised concerns regarding the consent requirements for the installation of software to prevent the unauthorised or fraudulent use of services or systems, or to update or upgrade systems on their networks.
The Current IC Draft addresses these concerns by allowing TSPs to install software without consent where such computer programs: (i) prevent illegal activities which pose an imminent risk to the security of the TSPs’ network; or (ii) are required for network-wide systems updates or upgrades. However, TSPs will still need consent to install any software which merely prevents suspicious legal activities, or updates or upgrades systems that are not network-wide.
The CRTC has released two interpretative guidelines to support its Regulations. To read about these guidelines please read the following Cassels Brock Report article here.
Industry Canada is also exploring the use of interpretational guidelines and other guidance material to address some of the other concerns expressed during the Consultation Period. Such interpretational guidelines have yet to be drafted by Industry Canada.
Industry Canada has also noted that some of the concerns raised by stakeholders were not addressed by the Current IC Draft. Although a full review of these concerns was undertaken by Industry Canada, and regulatory options were explored, the concerns were determined to be within the intended ambit of CASL itself. In particular:
The Current IC Draft will be open for a consultation period of 30 days, beginning January 5, 2013 and ending February 4, 2013.
CASL provides a complex regime, including administrative monetary penalties of up to CAD $10 million and the creation of a private right of action. Accordingly, Canadian businesses are anxiously awaiting the release of the final version of the Industry Canada portion of the Regulations, the last step before CASL may be brought into force. We will continue to monitor and report on all key CASL developments as they occur.
For further information regarding this matter, please contact the author or any member of our Business Law Group.
1 An Act to promote the efficiency and adaptability of the Canadian economy by regulating certain activities that discourage reliance on electronic means of carrying out commercial activities, and to amend the Canadian Radio-television and Telecommunications Commission Act, the Competition Act, the Personal Information Protection and Electronic Documents Act and the Telecommunications Act, SC 2010, c 23.
2 Personal Information Protection and Electronic Documents Act, S.C. 2000 c. 5.