The compliance question that trips up most marketers

You hear "CRTC" and assume it covers everything you send. Cold email, ad creative, even your landing page. That assumption creates a compliance gap that costs you time and trust. The reality is narrower. The CRTC’s mandate is sector-specific, governing broadcasting and telecom, not universal communications.

The confusion stems from treating the CRTC as a catch-all regulator. In truth, its jurisdiction has clear boundaries. Several communications-adjacent areas fall outside its direct oversight. Knowing where those boundaries sit helps you build a funnel that actually works.

Consider the most common marketing channels. The CRTC does not directly regulate rates, quality of service, or business practices for Internet service providers. It also has very little to do with the regulation of mobile phone service, outside of specific "undue preference" issues. These are the clearest exclusions. They mean your paid media and mobile campaigns are not subject to CRTC rate-setting or service-quality mandates.

Then there is the content itself. In its 1999 "New Media" decision, the CRTC explicitly excluded content that is primarily alphanumeric, such as emails and most webpages, from its jurisdiction. This commitment to non-interference means your standard email marketing and website copy do not require CRTC approval. You do not need to worry about CRTC content rules for your B2B outreach or digital ads.

For marketers, the real complexity lies in the multi-agency structure for anti-spam enforcement. The CRTC enforces commercial electronic message (CEM) rules, specifically consent and unsubscribe mechanisms. But it does not set the policy, handle deceptive marketing, or oversee privacy matters. The 2024–25 CASL Performance Measurement Report clarifies this split:

• Policy-setting belongs to Innovation, Science and Economic Development Canada (ISED).
• Deceptive marketing practices, including oral telemarketing, fall to the Competition Bureau.
• Privacy and PIPEDA matters are handled by the Office of the Privacy Commissioner (OPC).

This division of labor is critical. If you are running a campaign that mixes email, phone calls, and web ads, you are navigating three different regulatory bodies, not just the CRTC. The CRTC’s role is limited to ensuring you have proper consent and a working unsubscribe link for electronic messages. It does not police the truthfulness of your ad copy or the privacy of your data handling.

When you build your outreach strategy, you need to know which agency watches which channel. A recent government report highlights that spam sent into Canada is subject to CASL regardless of origin, but enforcement is fragmented. This fragmentation is where mistakes happen. You might comply with CRTC consent rules but violate Competition Bureau guidelines on deceptive claims.

Worqd approaches this by treating compliance as a design feature, not an afterthought. We build personalized, permission-aware outreach that respects these boundaries. We ensure every inquiry is qualified and handled within 60 seconds, keeping your funnel fast and compliant. Understanding what the CRTC does not regulate is the first step. The next step is ensuring your team knows what the other agencies do watch. That clarity protects your brand and keeps your leads flowing without friction.

Where the CRTC's reach actually stops

Most people assume the CRTC touches every part of Canadian communications. It doesn't. Its mandate covers broadcasting and telecom, and even within those sectors, whole areas sit outside its authority.

Start with internet service. According to the CRTC's own overview, the commission "does not directly regulate rates, quality of service issues, or business practices for Internet service providers." It monitors the sector and tracks trends, but if your ISP raises prices or delivers shaky service, the CRTC isn't the body stepping in.

Mobile phone service is similar. The commission has "very little to do with the regulation of mobile phone service, outside of 'undue preference' issues." It doesn't set wireless rates, doesn't rule on service quality, and its approval isn't needed for wireless provider sales or mergers the way it is for broadcasting deals. Spectrum availability for mobile service falls to ISED (formerly Industry Canada), not the CRTC. ISED also handles the technical side the CRTC never did: allocating frequencies, managing the broadcast spectrum, and dealing with interference. Unlike the U.S. FCC, the CRTC simply lacks those powers.

Competition is another gap. Keeping the telecom market competitive is "largely the responsibility of the Competition Bureau." And if you're a consumer or small business with a telecom complaint, you go to the Commission for Complaints for Telecom-Television Services (CCTS), an independent body created in July 2007, not the CRTC itself.

For marketers, two exclusions matter most:

• The 1999 "New Media" decision excluded "content that is primarily alphanumeric such as emails and most webpages" from CRTC jurisdiction, paired with an exemption order committing to non-interference. Your email campaigns and landing pages sit outside CRTC content regulation.
• Telephone companies don't need CRTC licences at all, and CRTC approval isn't generally required to sell one. Even Canadian-ownership rules for telecom providers aren't enforced by the CRTC.
• Broadcast content complaints go to the Canadian Broadcast Standards Council first, an independent industry body, though its decisions can be appealed to the CRTC.

One boundary is shifting, though. Online content was long treated as untouchable, but Bill C-11 eliminated the categorical exclusion created back in 1999, meaning internet platforms delivering audio or video can now be designated as broadcasting undertakings. That's a moving target, not a settled fact, so treat any "the CRTC doesn't regulate online content" claim with caution.

The practical takeaway for anyone running outreach in Canada: know which agency owns which rule. The CRTC enforces CASL's commercial message rules (consent and unsubscribe), but ISED sets policy, the Competition Bureau handles deceptive marketing including oral telemarketing, and the OPC covers privacy. When you're checking a provider's compliance practices, asking "is this CRTC-compliant?" is the wrong question. Asking "which regulator does this touch, and is the practice compliant there?" gets you a real answer. It's the lens we use at Worqd when building permission-aware outreach, because the rules that apply depend entirely on the channel and the claim.

Who actually regulates your marketing: the four-agency map

If you're checking whether your outreach is compliant, "what does the CRTC not regulate?" is the wrong question. The better one is: who actually regulates this specific thing I'm doing? Because for marketers in Canada, the answer is almost never a single agency.

Under Canada's Anti-Spam Legislation, responsibility is split across four bodies. According to the government's CASL performance measurement report for 2024–25, the CRTC enforces the rules for commercial electronic messages, meaning consent and unsubscribe mechanisms. That's it. The CRTC doesn't set CASL policy, and it doesn't touch deceptive marketing or privacy. Here's the map:

• CRTC, enforces commercial electronic message rules: consent, unsubscribe mechanisms, and malware-related provisions under CASL.
• ISED, sets policy through its National Coordinating Body. If the rules themselves change, this is where that happens.
• Competition Bureau, handles deceptive marketing, including deceptive oral communications by telecommunications, a provision introduced through CASL amendments to the Competition Act. So a misleading telemarketing script is a Bureau matter, not a CRTC one.
• OPC (Office of the Privacy Commissioner), handles privacy and PIPEDA questions, including how you collect, store, and use contact data.

This split matters in practice. In 2024–25, the CRTC analyzed roughly 25 companies with high complaint volumes, assessing their consent and unsubscribe mechanisms, and issued warning letters rather than penalties in the cases it identified. That tells you what a CRTC review actually looks at: your email and SMS consent trail, not your ad claims or your data handling.

The scale of the problem explains why enforcement is active. Over 90% of phishing attacks begin with an email, and more than half of spam and malicious emails are now AI-generated, per the same ISED report. The agencies also coordinate: the Canadian Digital Regulators Forum, established in 2023, brings together the Competition Bureau, CRTC, and OPC, and since September 2024 the Copyright Board of Canada as well.

So when you evaluate a growth partner's compliance practices, ask the question by domain. Is the consent language explicit before someone is contacted? Does every outreach message include a working unsubscribe path? Are claims in telemarketing scripts accurate, since oral deception lands with the Bureau? Is contact data handled in line with PIPEDA? At Worqd, our B2B outreach is built as personalized, permission-aware contact with relevant accounts, and our own booking funnel requires explicit agreement to be contacted before anything else happens. That structure exists precisely because consent is the piece the CRTC actually examines.

One more boundary worth knowing: the CRTC has never regulated most alphanumeric internet content. Its 1999 New Media decision excluded "content that is primarily alphanumeric such as emails and most webpages" from its jurisdiction, per the commission's regulatory history. Your email copy and landing pages answer to CASL and the Competition Act, not to broadcast rules. Knowing which door to knock on saves you from auditing the wrong thing entirely.

The boundary that keeps moving: online content and streaming

If you read a marketing blog from 2021 that said "the CRTC doesn't touch online content," it was telling the truth at the time. Today, that same sentence would be out of date. This is the one area of CRTC jurisdiction where the honest answer changes depending on when you ask.

For most of the internet's history, the boundary was clear. In its 1999 "New Media" decision, the CRTC claimed jurisdiction over internet audio and video but excluded content that is "primarily alphanumeric such as emails and most webpages," and issued an exemption order committing to a policy of non-interference, according to the CRTC's own history. That exemption is why your emails, landing pages, and web copy sat outside CRTC oversight for over two decades.

The ground shifted with Bill C-11, the Online Streaming Act, which amends the Broadcasting Act of 1991. A Yale Journal on Regulation commentary describes the bill as eliminating the categorical exclusion for internet-based content delivery that existed under the 1999 New Media Exemption Order. Under the new framework, any platform delivering audio or visual content over the internet can be designated as a broadcasting undertaking, and the CRTC now holds broad discretionary power over compliance and content discoverability.

Here's the contradiction, stated plainly. OpenMedia, writing in June 2022, said the CRTC did not yet regulate online audiovisual content or streaming platforms, with the telling caveat: "Not yet, but they could soon." The Yale commentary describes that exclusion as already eliminated. Both sources are describing different moments on the same timeline. Neither is wrong; the boundary genuinely moved between them.

What does this mean for you as a marketer?

• Don't treat "the CRTC doesn't regulate online content" as a permanent fact. Attach a date to any claim like that, including ones you read here.
• The exact obligations for online undertakings remain unsettled. The Yale commentary notes that thresholds and classification criteria are still being defined, and that platforms are left guessing at future obligations.
• Your core marketing communications still fall under other regulators. Email consent and unsubscribe rules belong to the CRTC under CASL, deceptive claims to the Competition Bureau, and privacy to the OPC.
• Watch for finalized CRTC regulations on online undertakings, which were expected to roll out progressively through late 2024 and 2025.

The practical takeaway for anyone checking a provider's compliance practices: ask not just "what rules apply today" but "which rules are in motion." At Worqd, we treat this the same way we treat outreach itself, with permission-aware practices built in rather than bolted on, and we'd rather flag a moving boundary than pretend it's fixed. When a vendor gives you a flat "the CRTC doesn't regulate that" answer about streaming or online content, ask when they last checked.

What this means for your outreach and follow-up

If the CRTC isn't watching most of your email, web, and ad channels directly, it's tempting to treat that as a green light. It isn't. The rules still exist; they just live with other agencies, and with the consent practices you build yourself.

Start with the map. Under CASL, responsibility is split across four bodies: the CRTC enforces commercial electronic message rules (consent and unsubscribe mechanisms), policy-setting sits with ISED, deceptive marketing belongs to the Competition Bureau, and privacy matters fall to the Office of the Privacy Commissioner, per the government's 2024–25 performance report. So even though the CRTC excluded "content that is primarily alphanumeric such as emails and most webpages" from its jurisdiction back in its 1999 New Media decision, your outreach is still covered elsewhere. Spam sent into Canada is subject to CASL regardless of where it originates.

The enforcement picture is active, not theoretical. The CRTC analyzed roughly 25 companies with high complaint volumes in 2024–25, assessing their consent and unsubscribe mechanisms. Meanwhile, more than half of spam and malicious emails are now AI-generated, according to the OECD, and over 90% of phishing attacks begin with an email. Regulators know this. The Canadian Digital Regulators Forum, established in 2023, brings the Competition Bureau, CRTC, and OPC together precisely because these boundaries overlap.

What does this mean in practice for your follow-up?

• Email and web content aren't CRTC-regulated, but every commercial electronic message needs valid consent and a working unsubscribe path.
• Deceptive claims in your outreach, including oral telemarketing, are Competition Bureau territory.
• Personal data handling in your funnel falls under PIPEDA and the OPC, so consent language matters beyond just spam rules.

This is also why how you outreach matters as much as whether you outreach. At Worqd, B2B outreach means personalized, permission-aware contact with relevant accounts, the opposite of a template blast. A message written for one specific account, grounded in why it's relevant to them, is both more effective and far easier to defend than a mass send. And consent should be explicit at the point of booking: our own booking funnel requires an "I agree to be contacted about my request" confirmation, and states that details are used only to prepare for the call.

That posture costs you almost nothing in performance and buys you a lot in durability. Compliance isn't a ceiling on outreach volume; it's a design constraint that filters out lazy tactics. The marketers who get in trouble are usually the ones who never asked who regulates what.

Knowing who regulates what is the first step toward outreach that holds up when a complaint lands, a regulator asks questions, or a prospect simply asks how you got their email. Build the consent trail before you need it.

Want to see how permission-aware outreach and fast follow-up fit inside a funnel that's built to last? Book a Growth Call at worqd.com/book.