“Do Not Call” means Do Not Call: CRTC Enters into MOU with FTC on Spam and Unsolicited Telecommunications

By Roland Hung, Beverly Ma and Keith Rose on April 1st, 2016Posted in Anti-Spam, Regulatory Compliance, Telecommunications

On March 24, 2016, the Canadian Radio-television and Telecommunications Commission (“CRTC”) signed a memorandum of understanding (“MOU”) with the United States Federal Trade Commission.[1]  This MOU is an effort by Canada and the United States to work together on anti-spam enforcement measures, and expressly refers to unsolicited telecommunications, unsolicited commercial electronic messages (spam), and other unlawful electronic threats (e.g., malware and botnets).

The MOU

The relevant anti-spam laws of Canada and the United States (collectively, the “Participants”), respectively embodied in the Canadian Anti-Spam Legislation (“CASL”) and the Federal Trade Commission Act, 15 USC §§ 41-58, contemplate that information may be shared with foreign agencies under certain circumstances. Further, as part of the objectives and scope of the MOU, the Participants understand that it is in their common public interest to cooperate with respect to Covered Violations.  Part I(B) of the MOU defines “Covered Violation” as practices that would violate the Applicable Laws of one Participant’s country and that are substantially similar to practices prohibited by any provision of the Applicable Law of the other Participant’s country.

“Applicable Laws” is a defined term in the MOU, which covers a specific list of Canadian and US statutes. In Canada, the list consists of CASL and the Telecommunications Act.  The Unsolicited Telecommunications Rules (“UTRs”) are not expressly referred to in the MOU but are implicitly included as rules made pursuant to the Telecommunications Act.  The scope of the MOU can also be extended by agreement in writing.

The MOU will allow the Participants to facilitate research and education related to unauthorized communications. Both Commissions also plan to share knowledge and expertise through training programs and staff exchanges, and to inform each other of developments related to the laws, among other activities. Under Part II(C) of the MOU, the Participants expressed an intention to use their best efforts to:

1. disclose information upon request, including complaints and other personally identifiable information;
2. provide investigative assistance in appropriate cases in accordance with domestic law;
3. provide other relevant information in relation to matters within the scope of the MOU, such as information relevant to consumer and business education; government and self-regulatory enforcement solutions; amendments to relevant legislation; and staffing and other resource issues;
4. explore the feasibility of staff exchanges and joint training programs;
5. coordinate enforcement against cross-border Covered Violations that are a priority for both Participants;
6. collaborate on initiatives to promote technical and commercially viable solutions to unlawful telemarketing and electronic messages;
7. participate in periodic teleconferences to discuss ongoing and future opportunities for cooperation; and
8. provide other appropriate assistance that would aid in the enforcement against Covered Violations.

Due Diligence for Organizations

CRTC has continually expressed its determination to reduce spam and unsolicited telemarketing. Indeed, CRTC indicated that the MOU will strengthen its efforts to deter spammers and telemarketers who do not respect the relevant laws and rules. In light of the MOU, organizations are encouraged to take extra precautions to ensure compliance with CASL and UTRs. In the CRTC’s view, whether organizations have exercise due diligence in their CASL compliance efforts is an all-or-nothing question, and no partial defence is available. As such, organizations should consider:

1. ensuring that related third parties and relevant service providers are meeting CASL standards;
2. incorporating a regular and routine due diligence plan to ensure that CASL provisions are complied with, and provide key employees with appropriate training on CASL compliance;
3. maintaining accessible, timely, and accurate records to demonstrate proof of consent respecting commercial electronic messages and/or the installation of computer programs;
4. ensuring that unsubscribe mechanisms are in place and easily accessible; and
5. keeping track of Canadians who are registered on the National Do Not Call List, as the CRTC has already issued over $6.5 million in monetary penalties associated with companies making unsolicited phone calls.

There are substantial monetary penalties at stake under CASL, and organizations are encouraged to develop, maintain, and implement best practices to avoid liability, particularly in light of the fact that provisions creating a private right of action are scheduled to come into force on July 1, 2017.  Penalties under the UTRs are somewhat lower, but can still be substantial: penalties of more than $1 million have been assessed.

Organizations may find McCarthy Tétrault LLP’s forthcoming Canadian Spam, Telemarketing and Privacy Handbook (First Edition, 2016) to be helpful. Further details will be announced soon.

[1]      See also: Government of Canada, “CRTC signs partnership agreement with U.S. Federal Trade Commission to fight unlawful spam and unsolicited telecommunications” News release (24 March 2016), online: Canadian Radio-television and Telecommunications Commission <http://news.gc.ca/web/article-en.do?nid=1042219>.

Original