B2B cold email and the anti-spam law: which ground are you standing on

Canada's anti-spam law does not ban B2B cold email. It bans sending a commercial electronic message without consent, and then it lists, narrowly, the cases where that consent is implied. The whole question sits there. For every contact on a list, somebody has to be able to name the ground the sending rests on. When nobody can name it, what you own is not a prospecting list. It is exposure.

This page separates the four grounds that almost everyone blends into one, states what every message must carry, and gives you the questions to put to whoever emails in your name. It will not tell you whether your own list is compliant. That question belongs to your own counsel, and the answer depends on your contacts, not on a blog post.

Four different grounds, and they are not equal

In the conversations I have with owners of Québec industrial SMEs, the four grounds get treated as one broad permission. They are not. Each carries its own conditions, and two of them expire.

1. Express consent

This is the strongest ground, and the only one that does not depend on a prior relationship. The Act frames the request itself: section 10(1) requires whoever seeks express consent to set out, in simple and clear terms, what the consent covers when they ask for it.

A plant manager who signs up to your technical newsletter, knowing what he will receive, has given you that ground. An address bought inside a file never gave it to you, whatever the seller of the file says.

2. Implied consent and its two-year clock

Section 10(9) states that consent is implied only in the cases it lists. The first covers a person you have an existing business relationship or an existing non-business relationship with. Existing business relationship is then defined, and it is dated: section 10(10) ties it, among other branches, to a purchase or a lease by that person within the two years preceding.

For a machine shop in the Beauce, that translates plainly. A buyer who purchased last year and a buyer who purchased in 2019 are not in the same box, even though both sleep in the same customer file. The purchase date is not administrative trivia. It is what holds the ground up, and it is usually the one column nobody kept current.

3. The published address

The same section covers an address the person conspicuously published, without a statement saying they do not want to receive commercial electronic messages, and on the condition that the message relates to their business role, functions or duties. Another case covers an address the person disclosed to you directly, on the same conditions.

Two conditions, then, never one. A purchasing director's address on his plant's website does not open the door to any message at all. Offering him material-handling equipment and offering him a recruitment service are not judged the same way, because the link to his duties is not the same.

4. The business-to-business exemption

This is the one everybody invokes, and almost always by half. The regulation words it this way.

« envoyé par l'employé, le représentant, le consultant ou le franchisé d'une organisation [...] à l'employé, au représentant, au consultant ou au franchisé d'une autre organisation si leurs organisations respectives entretiennent des rapports et que le message concerne les activités de l'organisation à qui le message est envoyé »Electronic Commerce Protection Regulations, SOR/2013-221, section 3, French consolidated text, fetched 23 September 2026

The condition is inside the sentence: the two organisations must already have a relationship, and the message must concern the activities of the organisation receiving it. Nowhere does it say a business may write to any other business. The same section also exempts a message sent in response to a request, including a request for information, or to a complaint, or otherwise solicited by the person it is sent to.

This is where the Québec industrial case gets concrete. A ventilation systems manufacturer selling to three hundred identifiable buyers can name its ground contact by contact: that one purchased eight months ago, that one asked for a quote, that one published his address and works in the right department. The same company holding ten thousand scraped addresses can name nothing at all. The message goes out to all ten thousand anyway, and that indifference to the ground is exactly what the law is aimed at.

What every message must carry

Section 6 sets two requirements at once. The recipient must have consented, and the message itself must comply. The mandatory content comes down to three things: the message identifies who sends it and the person on whose behalf it is sent, it gives contact information so they can be reached, and it carries an unsubscribe mechanism that meets section 11.

The second element deserves a pause, because owners tend to discover it late. If an agency or a freelancer sends in your name, your company is named in the message. The exposure is not only theirs.

Unsubscribing has its own rules. Section 11(1) requires the recipient to be able to express, at no cost, their wish to receive no further messages. Section 11(3) puts a number on the delay: without delay and, in any event, no later than ten working days after that wish is communicated.

Ten working days is not a layout question. It is an operating obligation: somebody has to receive unsubscribes, process them and apply them everywhere the address exists inside your company. In an SME where the newsletter list, the sales file and the supplier's file live in three places, a person opts out of one send and gets the next one anyway.

What to demand from whoever emails in your name

You do not need to become a specialist. You need four questions and the ability to recognise a bad answer.

• For this list, which ground applies, contact by contact, and who can demonstrate it. One blanket answer for ten thousand addresses is not an answer.
• Who is identified as the sender, and on whose behalf. Your name is in the message, so you are entitled to read the message.
• Who receives unsubscribes, and how fast they are applied everywhere. Everywhere includes your own files, not just the supplier's tool.
• What is kept to support the ground, and who keeps it. If the proof lives only with a third party, it leaves when they do.

Three answers should end the meeting. "It is B2B, so we are exempt" drops the condition that the two organisations already have a relationship, which is half the sentence in the regulation. "The addresses are public, so it is allowed" drops both conditions attached to that ground. And "we handle compliance, do not worry about it", with no ground named for anyone, is not an answer. It is a phrase.

One more reason to ask before the first send rather than after: the amounts. Section 20(4) sets the maximum penalty for a violation at $1,000,000 for an individual and $10,000,000 for any other person. Section 20(3) lists what is weighed in setting the amount, including the scope of the violation, the person's history and the ability to pay. I state it once, because fear is a poor guide to a decision.

There is a commercial reason to tighten these questions too. A supplier selling you a volume of sends rather than meetings walks you back into the problem I described in MQL versus signed contract: a number climbing while the order book stays flat. The full logic, from targeting through to measurement, sits on the B2B marketing agency page.

When you do not need cold email at all

This has to be said plainly, because nobody says it while trying to sell you a list. An SME whose order book fills through trade shows, referrals and forty existing accounts often has no reason to run cold email. Its market fits in a list of names its rep can phone. Bolting a bulk sending programme on top of that does not create demand. It creates administration and risk.

In that situation the effort belongs elsewhere: being known to the buyer before the tender goes out, and arriving at the show with something to show rather than an empty booth, which I covered in industrial trade show preparation. And when the buyer writes to you first, the question of the ground is posed differently anyway, since the regulation exempts a message sent in response to a request.

This page describes public rules. It is not legal advice. Have your own counsel confirm your situation before you start sending.

Sources

• Canada's anti-spam law, S.C. 2010, c. 23, section 6, Justice Laws, French text, laws-lois.justice.gc.ca/fra/lois/E-1.6/page-1.html, fetched 23 September 2026.
• Canada's anti-spam law, sections 10 and 11, Justice Laws, French text, laws-lois.justice.gc.ca/fra/lois/E-1.6/page-2.html, fetched 23 September 2026.
• Canada's anti-spam law, section 20, Justice Laws, French text, laws-lois.justice.gc.ca/fra/lois/E-1.6/page-3.html, fetched 23 September 2026.
• Electronic Commerce Protection Regulations, SOR/2013-221, section 3, Justice Laws, French text, laws-lois.justice.gc.ca/fra/reglements/DORS-2013-221/page-1.html, fetched 23 September 2026.