Make It Happen
My Tipsheets are chock full of ideas. They are all aimed at translating knowledge into a quick, action-oriented 60-second nugget.

First Name:
Last Name:
Tipsheet Archive
Randall's Resources
Whenever I speak or write, I often prepare extra "bonus" materials.
Enter the Resource Code to access this special content:
Resource Code:
Try this example Resource Code: eventplanning

CASL: Double Opt-in is not Express Consent (and vice-versa)

by Randall Craig on June 20, 2014

Filed in: Blog, Make It Happen Tipsheet, Marketing

Tagged as: , , , , ,

With seven-digit penalties, many marketers are looking carefully at how they are addressing the new Canada Anti-Spam Law (CASL). Unfortunately, many are making a critical error that may later haunt them – and cost.  They are assuming that an email “double-opt-in” constitutes Express Consent. Sometimes it does – and sometimes it doesn’t.

First, some definitions.  Express Consent is when a person explicitly has given permission for you to send Commercial Electronic Messages to them.  Double opt-in.  After a user enters their name and email address on a website form, the email system sends a validation email back to that user.  When they click a specially encoded link within that email, they will have validated their email address, and “double-opted-in” to the list.

1) Express Consent doesn’t require double opt-in.

There are many ways to get Express Consent that have nothing to do with double opt-in.  Consider these examples:

  • A person clicks an “Express Consent” link within an email, and you capture the action in your database.
  • A form is filled out on your website asking for Express Consent, and this is captured in your database.
  • A verbal “yes, I consent” either during a meeting, or over the phone.
  • An event feedback form that has a check-box for express consent.
  • A guest register or attendance record, where there is a check box for Express Consent.
  • An email reply from a reader, where they manually write in that they are giving Express Consent.
  • A lead form from a tradeshow where they have given Express Consent.

All of these examples are valid, but there are potential pitfalls: Can you prove that they themselves actually gave you Express Consent?  And are you capturing what they have give Express Consent for?  Since the burden of proof is on you, maintaining appropriate records is critical.  This means saving event feedback forms, emails, lead forms, etc.  And it means confirming verbal conversations in writing.  Using double opt-in has it’s advantages, but it isn’t the only game in town.

2) Double opt-in does not automatically mean that you have Express Consent.

Many organizations already have part of their email address lists that are double opted-in, but does this mean that those people have provided Express Consent?  Not necessarily – consider these examples:

  • A subscriber had double opted-in, but you later changed your email system. You transferred all of the “old” email addresses into the new system, but the proof of double opt-in stayed in the old system – which is no longer available.
  • A subscriber had double opted-in a number of years ago where they had agreed to receive X.  Yet today, you are sending them Y – and in the future, you may wish to send them Z.  You do not have Express Consent for Y or Z – even though your system shows them as having double opted-in.
  • A subscriber had double opted-in a number of years ago, but since the web form has changed many times over the years, you don’t have proof of what they had actually agreed to when they originally signed.  You may indeed have Express Consent, but you can’t prove it.  (If this is the case, here is how to sleuth your way to uncovering “old” versions of your site, and proof.)

While double opt-in does not automatically mean that you have Express Consent, at least having something (eg the double opt-in) is better than nothing.

This week’s action plan:  CASL is all about compliance, but it is also about using email marketing in a strategic fashion.  It’s far better to have 100 influential names on your list, than 10,000 people who don’t care – or don’t like your interruption. This week, do two things: focus on all of the ways that you can capture Express Consent, beyond email.  And then for your existing double-opt-ins, build your record of proof.

This week’s even more important action plan:  Beware the July 1st CASL deadline.  After this date, your ability to reach out to your contacts and ask for Express Consent will be severely restricted, or completely cut off.  You MUST reach out before this date.  More details here.

Note: The Make It Happen Tipsheet is also available by email. Go to to register.

Randall Craig

@RandallCraig (follow me)
:  Professional credentials site
.com: Web strategy, technology, and development
:  Interviews with the nation’s thought-leaders


Randall has been advising on Digital Strategy since 1994 when he put the Toronto Star online, the Globe and Mail's GlobeInvestor/Globefund, several financial institutions, and about 100+ other major organizations. He is the author of eight books, including Digital Transformation for Associations, the Everything Guide to Starting an Online Business, and Social Media for Business. He speaks and advises on Digital Transformation, Digital Trust, and Social Media. More at

Leave a Comment

Previous post:

Next post: