How to stay compliant calling Canadian leads from a US dialer

Last updated 2026-07-11

Which laws actually govern calls from the US to Canadian numbers?

Canadian law controls what happens to the Canadian recipient. US law controls what leaves your dialer. You're inside two frameworks at once, and neither gives you a pass for operating across the border.

On the Canadian side, two frameworks matter. Canada's Anti-Spam Legislation (CASL) and the CRTC's Unsolicited Telecommunications Rules, which created the National Do Not Call List (DNCL). CASL came into force July 1, 2014 and covers commercial electronic messages broadly, but for voice calls the CRTC's Telemarketing Rules under the Telecommunications Act are the main instrument ^[1]. The National DNCL is mandatory for most outbound telemarketing to Canadian consumers ^[2].

On the US side, the TCPA at 47 U.S.C. § 227 still applies when you use an autodialer or prerecorded voice, no matter where the called party sits, if the call originates from US infrastructure ^[3]. The FCC has never carved out an international exception that lets US companies ignore TCPA rules just because a recipient holds a Canadian number. Enforcement has mostly landed on cases with US recipients, so the practical risk skews toward Canadian law when you dial Canadian numbers. That skew is a comfort, not a shield.

There's a wrinkle with the numbers themselves. If the number is in the US number plan (a +1 area code assigned to a Canadian province, like 416, 604, or 647), the TCPA applies without argument, because the US and Canada share the North American Numbering Plan (NANP) ^[4]. A call to a Toronto 647 number from a US dialer is subject to CASL, CRTC rules, and the TCPA all at the same time. That's the scenario that creates real exposure.

Never treat a call leaving your US office as only a Canadian problem. Your compliance stack has to cover both sides or it covers neither.

What is CASL and does it apply to phone calls?

CASL is Canada's federal law aimed at unsolicited commercial electronic messages. It's administered jointly by the CRTC, the Competition Bureau, and the Office of the Privacy Commissioner of Canada ^[1]. Most people meet CASL through email, and the confusion is fair: CASL defines "commercial electronic messages" (CEMs) in a way that, on a plain reading, sweeps in SMS texts sent to Canadian numbers.

Voice calls are not CEMs under CASL. Plain telephone calls get regulated through the CRTC's Telemarketing Rules and the National DNCL regime instead. So if your Canadian outreach is voice only, CASL's consent and unsubscribe provisions don't govern the call itself.

Here's where CASL bites. Send a follow-up SMS or email after a voice call, or let your dialer fire a text-based voicemail notice, and that message likely counts as a CEM. Now CASL applies. You need express or implied consent before sending, a clear sender identification, and an easy unsubscribe path. The CRTC can issue administrative monetary penalties (AMPs) up to CAD $1 million per violation for individuals and CAD $10 million per violation for businesses ^[1].

CASL's SMS consent rules are strict. Implied consent lasts a limited window after a purchase or business inquiry (generally two years for a customer relationship, six months for an inquiry) ^[1]. Cold-prospecting Canadian leads by text almost always needs express prior consent. See our guide on text message marketing for how the US TCPA consent rules line up.

So the rule of thumb: voice-only with a live agent and no automated dialing keeps CASL mostly out of the picture. Add SMS, ringless voicemail, or automated messages, and CASL walks right in.

How does Canada's National Do Not Call List (DNCL) work?

The CRTC's National Do Not Call List is Canada's version of the US National DNC Registry. Consumers register their numbers for free, and telemarketers have to scrub their call lists against it before dialing ^[2]. The rules sit under the Telecommunications Act and the CRTC's Unsolicited Telecommunications Rules.

Here's the mistake US callers make most: registering with the US National DNC Registry does not satisfy Canada's DNCL requirement ^[11]. They're separate systems with separate databases. Calling Canadian numbers means subscribing to the Canadian DNCL and scrubbing against it, full stop ^[2].

A few specifics that matter day to day:

• Scrub your list against the Canadian DNCL no more than 31 days before a call. A list older than 31 days puts you in violation even if you subscribed properly.
• Keep your own internal Do Not Call list for Canadian leads who ask off, separate from the national list.
• Exemptions exist. Calls to existing customers with an active business relationship, calls to businesses (with limits), and calls to numbers where you hold express consent are generally exempt from DNCL requirements ^[2].
• The CRTC investigates complaints and issues AMPs. Telemarketing fines under the rules reach CAD $1,500 per violation for individuals and CAD $15,000 per violation for corporations ^[2].

The DNCL operator (Bell Canada under a CRTC contract) runs the subscription service through the DNCL portal at lnnte-dncl.gc.ca. Pricing is volume-based and varies by how many area codes you need. Unlike the US FTC system, Canadian telemarketers pay per area code accessed.

For how the US system compares, see our overview of the do not call list and how to get the do not call list through US channels.

Does the TCPA apply when you call a Canadian phone number?

Yes, potentially. The deciding factor is the number, not the person's nationality or where they're standing.

Canada and the US share the North American Numbering Plan (NANP), so Canadian area codes (416, 604, 514, 647, 780, and the rest) sit inside the same +1 country code as US numbers ^[4]. From the network's view, calling a Toronto 416 number looks identical to calling a Chicago 312 number. Your autodialer can't tell them apart.

The TCPA at 47 U.S.C. § 227(b)(1) bars using an automatic telephone dialing system (ATDS) or a prerecorded voice to call any "telephone number assigned to a paging service, cellular telephone service, specialized mobile radio service, or other radio common carrier service, or any service for which the called party is charged for the call" without prior express consent ^[3]. Nothing in that text limits the ban to US subscribers. Point your autodialer at a NANP-assigned Canadian mobile number and you've stepped into TCPA territory.

I'm not aware of any FCC ruling that grants a Canadian-number exemption. Enforcement in practice has centered on US plaintiffs, partly because the TCPA gives a private right of action to "persons" and most litigants are US residents. But the statute doesn't exclude Canadian residents, and a sharp plaintiff's attorney could build the argument.

Safer operating assumption: treat NANP-assigned Canadian numbers exactly like US mobile numbers under the TCPA. Get prior express written consent before running an ATDS or prerecorded voice. If a live agent triggers each call on a power dialer (no ATDS), TCPA risk drops a lot, though never to zero after Facebook v. Duguid ^[6]. And you're still bound by CRTC rules either way.

For the TCPA's core structure, see our TCPA explainer. For what enforcement costs in dollars, the cash app TCPA class action settlement and credit one TCPA settlement show the real numbers.

What consent do you need before calling Canadian leads?

It depends on the call type and which law governs it. Here's the breakdown.

Voice calls under CRTC Telemarketing Rules. You don't strictly need prior consent to make a live-agent telemarketing call to a Canadian number, as long as it isn't on the National DNCL (or your internal DNC list) and you're calling within permitted hours. The CRTC regime is opt-out for voice calls to numbers off the DNCL, close to the US FTC/FCC model for landlines.

Automated or prerecorded calls. The CRTC's Unsolicited Telecommunications Rules ban automated messages without prior express consent from the called party. This lines up with TCPA requirements on the US side. Predictive or auto-dialing with prerecorded messages needs express prior consent from Canadian recipients before you start.

SMS to Canadian numbers. CASL requires express or implied consent before sending commercial electronic messages. Implied consent lives only inside defined time windows after a prior business relationship. Cold SMS with no prior relationship or consent is a CASL violation.

What express consent means under Canadian rules. The CRTC has said express consent must be clearly and voluntarily given, and the person has to understand what they're agreeing to. A checkbox buried in a terms of service doesn't clear the bar. The consent request has to identify who's asking and describe the type of messages or calls that will follow ^[1].

One practical note on bought lists. If you picked up a file of "Canadian business leads," the original collector's consent (if it existed) almost certainly won't cover your calls. Consent under CASL doesn't transfer freely without disclosure at the moment it was collected. If the form that captured the contact info didn't say "you may be contacted by third-party companies including [your company]," that consent doesn't reach you.

What are the calling hours and identification rules for Canadian calls?

The CRTC sets fixed windows for telemarketing to Canadian consumers, and they run on the recipient's local time, not yours. These come from the Unsolicited Telecommunications Rules ^[2].

Day	Permitted calling hours (local time of called party)
Monday to Friday	9:00 AM to 9:30 PM
Saturday	10:00 AM to 6:00 PM
Sunday	No telemarketing calls permitted
National holidays	No telemarketing calls permitted

Read that column again: local time at the called party's location. Calling from Chicago, you calculate off where the Toronto or Vancouver recipient is, not Central Time.

On caller identification. Canadian Telemarketing Rules require you to display your name (or the name of the company you're calling for) and a phone number the recipient can call back during business hours. You can't display a number that's out of service or that won't reach a live person to opt out ^[2]. A false or misleading caller ID breaks CRTC rules and, if the call touches US infrastructure, the US Truth in Caller ID Act at 47 U.S.C. § 227(e) ^[3].

Your dialer needs dynamic caller ID that shows a valid, reachable callback number. If your outbound system displays a number that dead-ends, fix it before you run a single Canadian campaign.

One more requirement, and it applies to every call. At the start of each telemarketing call, the caller has to identify themselves and the organization they're calling for, and provide contact information on request. Not optional. Not situational. Every call.

How do you set up your US dialer to handle Canadian compliance requirements?

Configuring your dialer for Canadian calls is mostly an operational checklist problem. Here's what actually has to change.

Scrubbing. Your lead file needs a scrub against both the US National DNC Registry (if any leads carry US-assigned numbers or you're also dialing US leads) and the Canadian DNCL. Most third-party DNC scrubbing services (DNC.com, Contact Center Compliance, and others) offer Canadian DNCL scrubbing as an add-on. The 31-day freshness rule means one batch scrub won't cover a whole quarter. Build a recurring scrub into the workflow.

Time zone enforcement. Your dialer's time zone logic has to map Canadian area codes correctly. Codes like 403 (Alberta, Mountain), 604 (British Columbia, Pacific), 416 (Ontario, Eastern), and 514 (Quebec, Eastern) must route to the right local-time math. A dialer that defaults to US time zones will manufacture violations. Test it explicitly before launch.

Calling mode. Running a predictive or progressive dialer with prerecorded messages for Canadian leads means you need prior express consent on file before the campaign runs. A power dialer where a live agent manually starts each call carries lower TCPA ATDS risk (not zero, post-Facebook v. Duguid ^[6]), and the CRTC's automated-message rules don't apply. Plenty of teams dial Canadian leads in manual-trigger mode for exactly this reason: it keeps them out of the automated-call consent requirement.

Internal DNC list. Keep a separate internal DNC list for Canadian numbers. When a Canadian lead says "don't call me again," suppress that number right away and hold it on your internal DNC. This is separate from honoring the national DNCL.

Caller ID. Set your outbound caller ID to a real, reachable number. Document that the callback number is staffed during business hours. That covers both the CRTC and the Truth in Caller ID Act.

LeadCompliant's compliance kit includes a Canadian-call checklist you can run before your first campaign. Worth grabbing if you're setting this up cold and want a pre-flight template.

For how to build a cold calling program with compliance baked in from the start, our cold-call guides are a good place to begin.

What are the fines and penalties for getting this wrong?

Canada's penalty structure is severe, and here's the twist: unlike the TCPA's private-lawsuit model, CASL and CRTC enforcement gets initiated by regulators, not class-action plaintiffs. That changes the dynamic, but not in a way that should relax you.

CASL administrative monetary penalties. Up to CAD $1 million per violation for individuals, up to CAD $10 million per violation for businesses ^[1]. The CRTC has issued multi-million-dollar AMPs. Compu-Finder drew CAD $1.1 million in 2015 ^[12]. Kellogg Canada paid CAD $60,000. Porter Airlines settled for CAD $150,000. None of these are hypotheticals.

CRTC Telemarketing Rules penalties. Up to CAD $1,500 per violation for individuals and CAD $15,000 per violation for corporations on each non-compliant call ^[2]. The CRTC reviews consumer complaints filed through the DNCL complaint system and can escalate to enforcement.

TCPA penalties on the US side. $500 per negligent violation, up to $1,500 per willful violation ^[3]. Class actions stack these fast. The credit one TCPA settlement gives a sense of the scale.

Cross-border reality. Canada can pursue US companies whose calls hit Canadian residents. CASL's private right of action provisions, paused before full implementation but still written into the statute, would let Canadian consumers sue directly. For now the CRTC is the primary enforcer, and being offshore is no safe harbor. The CRTC has issued notices of violation to foreign telemarketers ^[12].

The honest risk calculus: run a high-volume Canadian campaign without DNCL compliance or proper consent for automated calls, let a regulator catch a cluster of complaints, and you're looking at large aggregate fines. Canada's regime doesn't hand defendants the friendly per-call caps some US courts have read into TCPA damages.

Is there a business-to-business exemption for calling Canadian companies?

Yes, but it's narrower than US B2B callers assume.

Under the CRTC's Unsolicited Telecommunications Rules, calls to businesses are generally exempt from National DNCL requirements, with conditions ^[2]. The exemption applies when you're calling a business number to do business, not when you're calling a business's main line to pitch individual employees on personal offers.

The CRTC draws a line between calls to a business as an entity and calls that are really consumer pitches routed through a business number. Selling B2B software to a company's procurement manager: the DNCL exemption likely applies. Calling a small business owner's line to pitch personal insurance: the exemption gets shaky.

Sole proprietors and very small businesses are a gray zone. The CRTC has treated some very small businesses more like consumers than corporations for telemarketing protection, especially when the business number doubles as the person's primary contact number.

On business email, CASL's B2B implied-consent provisions run more permissive than the consumer rules, but they still require a prior relationship or that the recipient's contact info is publicly available and the message fits their professional role ^[1].

Practical guidance: on a genuine B2B Canadian campaign, document the business relationship or the public source of the contact info for each lead. "It's a business" is not a blanket exemption. The CRTC has fined companies that leaned on B2B exemptions too loosely.

How do you document consent and compliance for Canadian campaigns?

Documentation is your defense. Whether the question comes from the CRTC, a Canadian plaintiff, or your own audit, it's always the same question: prove you had the right to make that call.

What to capture and store for each lead:

• Date and time of the DNCL scrub (must be within 31 days of each call)
• Scrub confirmation from your DNCL subscription provider
• For consent-based leads: when and how consent was obtained, what the form or recording shows, and who collected it
• For B2B leads: evidence of the business relationship or the public source of the contact info
• Call recordings, if legally permitted in both jurisdictions (which varies by province)
• DNC opt-out requests and the date each was honored

Retention period. The CRTC recommends holding telemarketing compliance records for at least three years. CASL enforcement can be brought within three years of the violation ^[1]. Hold longer if you're in a regulated industry.

Consent records for SMS and automated calls. Relying on express consent for CASL or automated-call purposes means keeping a record that shows the consent was freely given, specific, and informed. A screenshot of a web form, a timestamped database entry with IP address, or a recorded verbal consent all work. "The list vendor said they had consent" does not.

Internal DNC list. Keep a running suppression file of Canadian numbers that opted out. Log the opt-out date, the channel it arrived through (call, email, text), and the date suppression was applied. This file should feed back into your dialer before every campaign run.

For US-side documentation that overlaps, see our guide on cold call compliance recordkeeping.

What does a compliant Canadian outbound calling process look like step by step?

Here's a working process for a US team running outbound calls to Canadian leads. It's a template, not a legal opinion.

Step 1: Classify your leads. Separate Canadian mobile numbers from landlines. Identify each lead's province (for time zone and any local considerations). Flag consumer versus B2B.

Step 2: Assess consent status. For consumer leads, ask whether you hold express consent for automated calls or SMS. If not, you're limited to live-agent calls to non-DNCL numbers. For B2B leads, document the basis for the exemption.

Step 3: Scrub against the Canadian DNCL. Subscribe through the DNCL portal and run your list within 31 days of launch. Keep the confirmation. Run the list against your internal Canadian DNC file too.

Step 4: Configure your dialer. Set time zone logic for Canadian area codes. Set calling hours to the CRTC windows (Mon-Fri 9am to 9:30pm local, Sat 10am to 6pm local, no Sundays). Set caller ID to a real, reachable callback number. Using automated messages? Confirm consent on file for every number in that segment.

Step 5: Brief your callers. Every agent identifies themselves and the company at the start of each call. Every agent can hand over contact information on request. Every agent honors opt-outs immediately and logs them.

Step 6: During the campaign. Watch for DNCL complaints through the CRTC system. Confirm opt-outs get captured and suppressed in real time, not at end of day.

Step 7: After the campaign. Update your internal DNC file with every new opt-out. Archive scrub records and consent documentation. Re-contacting these leads more than 31 days out means a fresh scrub before the next run.

LeadCompliant's one-time compliance kit has a pre-campaign checklist that maps to this workflow. Handy if you want something a junior ops person can run on their own.

Are there any province-specific rules you need to know about?

Federal CRTC rules and CASL are the main frameworks, and they apply nationally. But a few provincial points are worth flagging.

Quebec. Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25, substantially amended in 2023) sets stricter rules for collecting and using personal information, including contact data used for marketing ^[7]. Collecting leads directly from Quebecers, or using third-party data about Quebec residents, can trigger consent and transparency obligations beyond CASL. Quebec also carries a French-language requirement under the Charter of the French Language: marketing directed at Quebec consumers should be available in French.

Alberta and British Columbia. Both have their own private-sector privacy laws (PIPA Alberta and PIPA BC), substantially similar to PIPEDA at the federal level but with local differences ^[8]. These laws govern how you collect, use, and store personal data. Building your own lead lists from Alberta or BC residents means complying with the applicable provincial PIPA rather than PIPEDA.

PIPEDA (with CPPA in transition). Canada's federal privacy law, currently PIPEDA (Personal Information Protection and Electronic Documents Act), governs how organizations collect, use, and disclose personal information in commercial activities ^[9]. Its successor, the Consumer Privacy Protection Act (CPPA), is still working through Parliament. Under PIPEDA you need a lawful basis to collect and use a Canadian's contact information for marketing. Bought a lead list? Verify the data processor had valid consent to share that data with you for marketing.

None of these provincial rules add a "don't call" requirement beyond the CRTC framework. What they do is govern whether you can legally hold and use the contact data at all. A Canadian lead whose data you can't lawfully possess is a lead you can't lawfully call.

Frequently asked questions

Do I need to register with both the US National DNC Registry and the Canadian DNCL?

Yes, if you're calling both US and Canadian leads. The US National DNC Registry and Canada's National Do Not Call List are separate systems run by different governments. Subscribing to one does nothing for the other. For Canadian calls you must subscribe through the Canadian DNCL portal and scrub your Canadian leads against it within 31 days before each campaign run.

Can I use a predictive dialer to call Canadian mobile numbers?

You can, but only with prior express consent from each recipient for automated calls. The CRTC prohibits automated or prerecorded telemarketing messages to Canadian numbers without express consent, and predictive dialers delivering prerecorded messages fall under that rule. A predictive dialer connecting to a live agent carries lower CRTC risk, but you still owe DNCL compliance and a TCPA analysis given the shared NANP numbering.

What counts as express consent under Canadian rules for telemarketing calls?

The CRTC requires consent that's clearly and voluntarily given, specific to the type of contact requested, and not buried in terms of service. The request must identify the organization seeking consent and describe the nature of the calls or messages. A checked opt-in box with clear disclosure on a web form is typical. Consent inferred from a prior purchase is implied consent, which does not meet the express consent standard for automated messages.

Is SMS to Canadian leads covered by CASL or TCPA?

Both, potentially. CASL treats commercial SMS as a commercial electronic message and requires express or implied consent before sending. The TCPA may also apply if the Canadian number is a NANP-assigned mobile line and you're using an ATDS. In practice CASL is the more stringent framework for Canadian SMS: penalty caps reach CAD $10 million per violation for businesses, and enforcement runs through regulators rather than private lawsuits.

What happens if I call a Canadian number that's in the US area code format?

Canadian numbers share the +1 country code with the US under the North American Numbering Plan, so area codes like 416, 604, and 647 look identical to US area codes from your dialer's view. These calls fall under both CRTC rules (the recipient is in Canada) and the TCPA (the number is NANP-assigned and your dialer can't distinguish it from a US mobile). You need DNCL scrubbing, correct time zone logic, and TCPA-compliant consent for automated calls.

Are B2B calls to Canadian companies exempt from DNCL rules?

Calls to businesses are generally exempt from the National DNCL requirement under CRTC rules, but the exemption isn't unlimited. The call has to be genuinely business-to-business, not a consumer pitch routed through a business number. Very small businesses and sole proprietors sit in a gray area. You still must follow CRTC calling hours, caller identification requirements, and your own internal DNC list even for B2B calls.

How fresh does my DNCL scrub need to be for Canadian calls?

The CRTC requires you to scrub your call list against the Canadian National DNCL no more than 31 days before making the calls. A list scrubbed more than 31 days earlier puts you in technical violation even if you subscribed to the DNCL. Build a recurring scrub into your campaign workflow rather than scrubbing once a quarter and hoping it holds.

Can the Canadian government fine a US company for telemarketing violations?

Yes. The CRTC can investigate and issue administrative monetary penalties against any organization whose telemarketing calls reach Canadian consumers, including US-based companies. CASL's enforcement scope also reaches foreign entities that send commercial electronic messages to Canadian recipients. A US location creates no exemption. Several foreign companies have received CRTC notices of violation.

What calling hours does the CRTC allow for telemarketing to Canadian consumers?

Monday through Friday, 9:00 AM to 9:30 PM local time of the called party. Saturday, 10:00 AM to 6:00 PM local time. No telemarketing calls on Sundays or Canadian national holidays. Time zone runs on where the recipient sits, not your call center. Dialing a Vancouver number at 8 PM Pacific from the Eastern zone is fine; dialing it past 9:30 PM Pacific violates the rules.

Do I need to display caller ID when calling Canadian leads?

Yes. CRTC Telemarketing Rules require you to display your name or the company name plus a valid callback phone number. The number shown must be reachable during business hours so the recipient can call back to be added to your internal DNC list. Displaying a non-working or misleading number violates both CRTC rules and the US Truth in Caller ID Act if the call originates from US infrastructure.

How long do I have to honor a Canadian consumer's do-not-call request?

Indefinitely, in practice. Once a Canadian consumer requests not to be called, you add them to your internal DNC list and suppress the number. The CRTC recommends retaining telemarketing compliance records, including DNC opt-outs, for at least three years. There's no provision letting you re-contact someone who opted out after a set period, unlike some readings of the US rules.

Does Quebec have stricter rules than other Canadian provinces for marketing calls?

Quebec's Law 25 (in force since 2023) imposes stricter privacy requirements for collecting and using personal information, including marketing contact data. Quebec also requires consumer-facing marketing to be available in French under the Charter of the French Language. Federal CRTC telemarketing rules still apply, but the data collection and consent standards run higher in Quebec, particularly for personal data processed by third parties like list vendors.

What records do I need to keep to defend a Canadian telemarketing compliance audit?

Keep DNCL scrub confirmations with dates, consent records for automated or SMS campaigns (showing when and how consent was obtained), internal DNC opt-out logs with timestamps, call records confirming calls fell within permitted hours, and caller ID configuration documentation. Retain these for at least three years. The CRTC can pursue enforcement within three years of a violation, and CASL's limitation period is also three years.

Sources

1. CRTC, Canada's Anti-Spam Legislation (CASL): CASL came into force July 1, 2014; administered jointly by CRTC, Competition Bureau, and Office of the Privacy Commissioner; AMPs up to CAD $1 million per violation for individuals and CAD $10 million per violation for businesses; implied consent windows of two years for a customer relationship and six months for an inquiry; express consent must identify the requester and describe the messages
2. CRTC, National Do Not Call List and Telemarketing Rules: Canadian DNCL mandatory for most outbound telemarketing; scrub must be within 31 days of call; CRTC calling hours (Mon-Fri 9am-9:30pm, Sat 10am-6pm local time, no Sundays or holidays); caller ID display requirements; fines up to CAD $15,000 per violation for corporations
3. Legal Information Institute, Cornell Law, 47 U.S.C. § 227 (TCPA): TCPA prohibits ATDS or prerecorded voice calls to cellular or radio common carrier numbers without prior express consent; $500 per violation, up to $1,500 for willful violations; Truth in Caller ID provisions at 47 U.S.C. 227(e); no explicit geographic limitation to US-assigned numbers
4. North American Numbering Plan Administration (NANPA): Canada and the US share the +1 country code under the North American Numbering Plan; Canadian area codes (e.g., 416, 604, 647) are part of the same numbering plan as US area codes
5. Supreme Court of the United States, Facebook, Inc. v. Duguid, 592 U.S. 395 (2021): Supreme Court narrowed the TCPA's definition of ATDS to systems that use a random or sequential number generator; manual-trigger power dialers have lower TCPA exposure under this ruling
6. Commission d'accès à l'information du Québec, Law 25: Quebec's Law 25, substantially amended and phased in through 2023, imposes stricter consent and transparency requirements for collecting and using personal information for commercial purposes, including marketing contact data
7. Office of the Privacy Commissioner of Canada, Privacy laws in Canada: Alberta and British Columbia have substantially similar private-sector privacy legislation (PIPA) that applies in lieu of PIPEDA for provincially-regulated activities; organizations must comply with applicable provincial PIPA when collecting data from residents
8. Office of the Privacy Commissioner of Canada, PIPEDA: PIPEDA requires a lawful basis (typically consent) to collect, use, and disclose personal information for commercial activities, including using contact data for marketing purposes; successor CPPA is in transition through Parliament
9. FTC, National Do Not Call Registry: US National DNC Registry is a separate system from Canada's DNCL; US telemarketers must subscribe and scrub against it independently; scrubbing the US registry does not satisfy Canadian DNCL requirements
10. CRTC, Enforcement actions under CASL: CRTC has issued AMPs including CAD $1.1 million against Compu-Finder (2015) and other enforcement actions against businesses and foreign telemarketers for CASL violations