CRTC Enforcement and CASL Penalties: What Dealerships Risk
Many Canadian dealers treat CASL as a low-priority formality — until a complaint lands and a regulator asks for records they do not have. The CRTC (Canadian Radio-television and Telecommunications Commission) actively investigates and penalizes businesses that send non-compliant commercial messages. Understanding how enforcement works, and what actually triggers it, helps you take the risk seriously before it becomes expensive.
Who Enforces CASL
The CRTC is the primary enforcement body for the messaging provisions of CASL. It has the power to investigate, issue notices to produce records, hand down notices of violation, and negotiate undertakings that come with monetary payments and compliance commitments. It works alongside the Competition Bureau and the Office of the Privacy Commissioner on related matters, so a single sloppy campaign can attract attention from more than one regulator at once.
What Triggers an Investigation
Enforcement almost always starts with complaints from consumers, and the most common triggers are patterns your own customers can easily report:
Messages sent with no consent record behind them
Unsubscribe requests that keep getting ignored across channels
Missing sender identification or contact information
Texts or calls to numbers that asked to be left alone
High-volume blasts that generate spam reports and forwarded complaints
The Spam Reporting Centre gives Canadians a single, easy place to report offenders, which means it takes very few annoyed customers to put your dealership on a regulator's radar.
The Scale of the Penalties
CASL carries administrative monetary penalties of up to $1 million per violation for individuals and up to $10 million for organizations. Real-world settlements are typically far below those ceilings, but Canadian businesses have paid six-figure amounts, and undertakings often bundle a payment with mandatory program changes. For a single-rooftop dealership, even a modest penalty plus legal fees can wipe out a quarter's marketing budget and the goodwill of the community.
The Burden of Proof Is on You
If the CRTC comes calling, you must prove you had valid consent for every message in question. There is no presumption in your favour and no benefit of the doubt. Dealers who track consent in memory, on sticky notes, or across scattered spreadsheets simply cannot meet this bar — and the inability to produce clean records is itself damaging to your position in any negotiation.
How to Lower Your Risk
The practical defence is systematic, not heroic: capture consent at the source, keep immutable timestamped records, honour every unsubscribe instantly and across all channels, and include full identification in every send. Automating these steps removes the human error that causes the overwhelming majority of violations. Treat compliance as infrastructure you build once, not a task you hope a busy team remembers every day.
This article is general information and not legal advice; seek qualified counsel for enforcement matters.
Dabadu Communication AI maintains a complete, timestamped consent and unsubscribe audit trail, so if the CRTC ever asks, you can prove compliance in minutes rather than scrambling.
Protect your dealership from CASL penalties with Dabadu Communication AI, which keeps a defensible audit trail of every consent and opt-out.
