CASL for financial advisors: consent, seminars and email follow-up done right

The seminar was three weeks ago and the sign-up sheet is still in its folder. You have not emailed a single name on it, because you are not sure you are allowed to. By then the six-month clock will have run and the evening you spent presenting is wasted.

Most advisors either email everyone forever or email nobody out of fear. Both lose money. This article explains what CASL actually requires, where the consent windows fall, and how to build a form-to-newsletter flow that lets you follow up for years.

A guide from Finnect, a Montréal-based lead generation agency for Canadian financial advisors.

CASL for financial advisors comes down to three duties every time you send a commercial electronic message, whether a newsletter, a seminar follow-up or a text. The duties: have consent, identify yourself, and offer a working unsubscribe. Express consent must be opt-in and never expires. Implied consent expires two years after a purchase or six months after an inquiry. The burden of proving consent is yours, and one checkbox carries it.

In this article

1. What counts as a commercial electronic message for an advisor?
2. Express vs implied consent: the two-year and six-month windows
3. The seminar sign-up sheet problem and two networking myths
4. Identification, unsubscribe and records: the mechanics the CRTC checks
5. PIPEDA and Québec Law 25: forms, pixels and the privacy officer
6. A form-to-newsletter consent flow that works
7. Common advisor email scenarios: consent status and what to do
8. Do texts and LinkedIn messages fall under CASL?
9. How consent connects to nurture sequences and your newsletter
10. Frequently asked questions

What counts as a commercial electronic message for an advisor?

You have probably sent a “thanks for attending” email without calling it marketing. If it invited a booking, it was. A commercial electronic message (CEM) is any electronic message whose purpose, or one of whose purposes, is to encourage participation in a commercial activity. For a Canadian advisor that includes the monthly newsletter, the “thanks for attending, here is how to book a call” email and an RRSP-deadline reminder that invites a meeting.

Canada’s Anti-Spam Legislation (CASL) came into force on July 1, 2014 and is enforced by the CRTC. The CRTC’s CASL FAQ is the plain-language reference, and the three requirements are the same for every CEM: consent, sender identification and an unsubscribe mechanism. Not a CEM: a purely personal note, information a client asked for about their own account, or a meeting confirmation with no promotional content.

The trap is the hybrid: one line of “if you know anyone who could use a plan, send them my way” turns your service email into a CEM. CIRO or AMF rules govern what the message says. CASL governs whether you may send it at all, as our pillar on compliant marketing for Canadian advisors under CIRO, the AMF and CASL explains.

Express vs implied consent: the two-year and six-month windows

You have probably got both kinds sitting in one CRM list with no way to tell them apart. Express consent is a clear, opt-in “yes” to receiving your messages, and it does not expire. Implied consent arises from a relationship and expires: two years after a purchase or contract, six months after an inquiry. That single distinction decides whether your list is an asset or a liability.

• Express consent. The person actively agreed, knowing who was asking and what they would receive: an unticked box they tick, a signed line on a form, a verbal yes you record with the date. Pre-checked boxes do not count. It never expires.
• Implied consent, existing business relationship. A purchase or contract gives you two years from that transaction; an inquiry or application gives you six months. When the window closes, so does the consent, unless you converted it to express in the meantime.
• Implied consent, published address. A business email address that is conspicuously published, without a note refusing unsolicited messages, and only for messages relevant to that person’s business role. A narrow lane, discussed next.

The Gowling WLG guide to CASL is a good second reference. The practical rule: implied consent is a countdown, express consent is a permission. Your seminar sheet is where the countdown usually starts.

The seminar sign-up sheet problem and two networking myths

A seminar sign-up sheet with a name and an email column gives you, at best, implied consent for six months, because registering is treated in practice as an inquiry. It does not give you a newsletter subscriber. One added line gives you both.

The line is an unticked checkbox: “Yes, send me [advisor name]’s monthly newsletter and event invitations. You can unsubscribe at any time.” Below it, your name, firm and mailing address.

Scan the sheet the same day and tag contacts in your CRM as express (ticked) or inquiry (clock running). For webinars, the same box goes on the registration page. Our guide to seminars and webinars that fill calendars covers the follow-up.

Two myths cost advisors more than the sheet does:

• The business card myth. A card handed to you at a chamber of commerce mixer is not consent to a retirement-planning newsletter; the published-address category covers messages relevant to the person’s business role, not consumer marketing. Ask for consent in the conversation and write down that you did.
• The LinkedIn connection myth. Accepting a connection is not consent to email, nor to a pitch inside LinkedIn. A connection is a door; consent is the invitation through it.

Identification, unsubscribe and records: the mechanics the CRTC checks

You have probably assumed your newsletter tool handles all of this. It handles the unsubscribe; the rest is on you. Every CEM must identify who is sending it, include contact information, and carry an unsubscribe mechanism that works for 60 days and is honoured within 10 business days. And you must be able to prove all of it, because the burden of proving consent sits with the sender.

• Identification. Your name, your firm and a mailing address, plus a phone number, email or web address. If you send on the firm’s behalf, both names.
• Unsubscribe. A link or reply instruction in every message, functional for 60 days after sending and actioned within 10 business days. A newsletter tool handles this; a personal Outlook blast does not.
• Records. For each contact: how consent was obtained, when, the exact wording, the source, and supporting data such as an IP address or a scanned page.
• Penalties. The maximum administrative penalty is $1 million per violation for an individual and $10 million for an organization. Your firm’s compliance team will treat the exposure as real at any size.

PIPEDA and Québec Law 25: forms, pixels and the privacy officer

If your landing page has a Meta pixel and any Québec traffic, this section is about you. CASL decides whether you may send; privacy law decides what you may collect and how you must protect it. PIPEDA, the federal private-sector privacy law enforced by the Privacy Commissioner, rests on 10 fair-information principles; the ones that touch marketing most are consent, limiting collection, safeguards and openness. A lead form asking for net worth before a first call fails the limiting-collection test and tanks conversion.

Québec’s Law 25, phased in from September 2022 to 2024, applies to any advisor collecting information from Québec residents:

• A privacy officer. By default the person with the highest authority, so the principal of the practice, unless delegated in writing. Their contact details go in the privacy policy.
• A plain-language privacy policy, published where forms are, in French for Québec visitors.
• Cookies and pixels (section 8.1). Users must be told about any technology that identifies, locates or profiles them and how to activate it. The Commission d’accès à l’information reads this as opt-in for non-essential tracking, so the Meta pixel on your landing page fires only after a Québec visitor consents. This is the point most often missed.
• Privacy impact assessments for certain projects and cross-border transfers, which can include a US-hosted CRM.
• Breach reporting to the CAI. Penalties: administrative up to $10 million or 2 percent of worldwide turnover, penal up to $25 million or 4 percent.

Our guide to marketing for financial advisors in Québec covers the French-language side.

A form-to-newsletter consent flow that works

You have probably built a form that captures the lead and loses the consent. The flow that works captures express consent at the moment of highest intent, records it automatically, and gives everyone who did not opt in a time-limited path to do so.

1. The form. Name, email, phone, one qualifying question. Below the button, an unticked checkbox: “Yes, send me [name]’s newsletter and event invitations. Unsubscribe any time.” Name, firm and mailing address in the footer. In Québec, the cookie banner appears before the pixel loads.
2. The record. The CRM stores the timestamp, form version, consent wording, IP address and checkbox value, automatically.
3. The confirmation. A welcome email that restates what they agreed to and offers the unsubscribe. A confirmation click is optional under CASL but strengthens your proof.
4. The two lanes. Ticked: newsletter and event invitations indefinitely. Not ticked: a short follow-up sequence tied to their inquiry, ending before six months, with one clear ask to join the newsletter.
5. The sunset. An automated rule that stops CEMs when implied consent expires, and flags clients whose last transaction was more than two years ago.
6. The footer. Every message from every tool carries identification and the unsubscribe. Audit quarterly.

Here is the same flow with numbers on it.

Common advisor email scenarios: consent status and what to do

Find your situation before you hit send. The table covers the situations advisors ask about most. “Consent status” is the typical reading of CASL; your firm’s policy may be stricter.

Do texts and LinkedIn messages fall under CASL?

Yes. You have probably texted a seminar reminder without thinking of it as a CEM. CASL covers electronic messages sent to an electronic address, and the CRTC applies it to text messages and to messages sent to social media accounts, not only email. A text that says “spots left for Thursday’s retirement seminar, reply to book” is a CEM and needs consent, identification and a way to opt out, even at 160 characters.

On LinkedIn, a message that asks a genuine question is personal; one that ends with a calendar link and a line about your planning process is commercial. Build the conversation in the platform, and ask for permission before moving it to email or text. Our article on LinkedIn for financial advisors in Canada covers a cadence that respects this.

How consent connects to nurture sequences and your newsletter

You have probably noticed that the slowest leads are the first you lose permission to email. Consent shapes your whole follow-up system, because the leads that need the longest nurture are the ones whose implied consent runs out first. Broadridge’s 2024 Canadian advisor marketing report found that a marketing-sourced client took 3.7 months on average to convert, against 1.6 months for a referral.

A six-month inquiry window is long enough only if the sequence starts on day one and the opt-in ask arrives early. That is why the checkbox belongs on the form, not in email four.

What to send and in what order is in our guide to the financial advisor marketing funnel from ad to booked call. The newsletter clients read and forward is in the client email your book actually opens. CASL does not make either harder. It only insists that the people reading them chose to.

Frequently asked questions

This article is general information for Canadian financial advisors, not legal, compliance or investment advice. Your registration category, your firm’s policies and your provincial regulator govern what applies to you. Figures are illustrative unless a source is cited.

Put this into practice: marketing funnels · paid ads & lead generation
Related reading: Seminars and webinars that fill calendars · Marketing funnels for advisors: from ad to booked call