Archive for the ‘Privacy Management’ Category

New Anti-Spam Legislation passed by Canadian Parliament

Monday, December 20th, 2010

Bill C-28, the Fighting Internet and Wireless Spam Act (FISA) received Royal Assent on December 16, 2010. The law which is expected to come into effect within the next 6-8 months, seeks to prevent the sending of commercial electronic messages without consent.  Bill C-28 goes further by prohibiting other actions such as the installation of computer programs without consent and defines “electronic message” broadly to include SMS and other text messages. It also allows for a private right of action against spammers. Investigative and enforcement powers will be divided between three federal agencies with primary responsibility for enforcement given to the Canadian Radio-television and Telecommunications Commission (CRTC).

Canadian marketers are largely supportive of FISA. This law provides an enforcement regime with enough teeth to significantly reduce spam and to go after malicious online activity. At the same time, it allows responsible marketers to continue using the channel for consent-based electronic commercial communication.

It is hoped that as the regulations are written, there will be a good balance between the need to go after the bad actors while protecting the ability for legitimate marketers to use this important marketing channel.

Email Privacy Do’s and Don’ts

Monday, June 28th, 2010

Email is an important marketing channel for many businesses. Not only is it cost effective and provides marketers with impressive speed-to-market, it is also an important way to connect with your customers. So what are the privacy rules that impact email marketing? Email privacy is complex, particularly given the way email travels across borders making complying with multiple laws a requirement for responsible marketers.

So what are the do’s and don’ts regarding email marketing?

Do make sure you abide by the laws in every country where you email. Or better yet, review the rules for each country and abide by the law that reflects the highest possible standard for your email communications.

Don’t forget to include a functioning opt-out mechanism in each of your emails. All email privacy laws include this requirement.

Do collect consent to email at the time of collection if you plan to email Canadian consumers. This is the current requirement in Canada under the Personal Information Protection and Electronic Documents Act (PIPEDA) and is also the rule under a pending new anti-spam law the Fighting Internet and Wireless Spam Act (FISA).

Don’t use words like “save”, “free”, “cash” or oversized graphics with large or bright fonts. These kinds of trigger words or gimmicks are often used by spammers and can land your email in the junk mail folder. Keep in mind that these triggers are constantly changing so staying abreast with the latest developments is important to keep your email in the inbox.

Do make sure to include a header/footer on your email to identify the origin of the email and provide opt-out instructions.

Don’t rent email lists that are collected without appropriate consent. A lot of list owners will claim that they’ve got opt-in consent but opt-in practices are often different from one list owner to the next. Make sure that the approach they take is consistent with your corporate standards.

So while email marketing can be very effective, following the rules and conventions of the prevailing privacy laws can make sure that your message is well received and that you stay on the right side of the regulators.

Susan Oliver – Vice President Marketing, Chief Privacy Officer

National Do Not Call List – Is it working?

Tuesday, April 20th, 2010

The National Do Not Call List has been in force for a year and a half now.  Introduced in September 2008, The National Do Not Call List (NDNCL) is a nationwide registry that allows consumers to reduce unwanted telemarketing calls by registering their phone number with the service.  Telemarketers must use this registry to suppress the phone numbers of those consumers who have asked not to receive telemarketing calls prior to conducting any telemarketing campaigns.  Enforceable under the Telecommunications Act, there are significant financial penalties for non-compliance (up to $15,000 per violation).

After an initial flurry of complaints that people with registered numbers were receiving more, rather than fewer calls, most people would now agree that the service seems to have resulted in a significant reduction in unwanted telemarketing.

Critics of the regime have expressed dissatisfaction with the number of exemptions built into the law including exemptions for research companies, registered charities, political parties and their candidates, newspapers soliciting subscriptions, telemarketing to business consumers (B2B calls) and calls to current customers with whom organizations have an established business relationship (EBR).

However, under existing telemarketing laws, all organizations, including those exempted are required to keep and use their own “do not call” file for those individuals who have contacted them and asked them not to call.

So who is responsible for compliance?  The marketer who has initiated the telemarketing campaign is responsible for compliance and must subscribe to the NDNCL.  This is true regardless of whether or not they are doing the telemarketing in-house or through an outsourced call centre.  The outsource provider does not need a license or subscription.  Instead, they are covered under the marketer’s subscription and the service provider can use the marketer’s subscription identifier to download the NDNCL to enable them to run the suppressions.

While the vast majority of medium-sized and large companies are well educated regarding the requirements, there are still a surprising number of small business owners who are not.  In our list brokerage group we still receive list rental requests from individuals who are surprised to hear that a law exists and that they must register and pay for a license in order to comply.

So while there is still a way to go to ensure that all businesses comply with the rules, the majority of marketers have met their obligations to respect consumer’s wishes to not be called.

Susan Oliver, Vice President Marketing and Chief Privacy Officer