The Compliance Trap: Assuming CRTC Covers Everything

When you're vetting a marketing provider or planning a campaign, it's easy to assume the CRTC polices everything from your email copy to your website's privacy policy. That assumption costs you twice: you waste time worrying about rules that don't apply, and you miss the obligations that do.

The CRTC's authority comes from four core statutes: the Telecommunications Act, the Broadcasting Act, the Online News Act, and Canada's Anti-Spam Legislation (CASL). Within that framework, the CRTC administers telemarketing rules, the National Do Not Call List, and anti-spam rules for commercial email and SMS. That's the scope. Everything else marketers worry about, content quality, privacy, competition, business practices, sits outside it.

The most important boundary for marketers comes from the CRTC's May 1999 "New Media" decision, which excluded "content that is primarily alphanumeric such as emails and most webpages" from CRTC content jurisdiction. Your landing page copy, your email body text, your blog posts, none of that is CRTC-regulated content. The act of sending a commercial electronic message is regulated under CASL, but what you write inside the message is not something the CRTC reviews.

Other common misconceptions:

• ISP and mobile business practices, rates, service quality, and complaint handling are not directly CRTC-regulated; consumer complaints route to the Commission for Complaints for Telecom-Television Services (CCTS).
• Spectrum and frequency allocation, handled by Innovation, Science and Economic Development Canada, not the CRTC.
• Competition matters, the Competition Bureau's domain, not the CRTC's.
• Broadcaster content complaints, the Canadian Broadcast Standards Council handles most, with CRTC appeal rights.

The perimeter is also shifting. Bill C-11, which came into force on 27 April 2023, eliminated the categorical exclusion of internet-delivered audio and visual content, meaning streaming providers can now be designated as broadcasting undertakings. But the exact revenue thresholds and binding guidance remain undefined, leaving smaller IPTV and streaming operations in what the Yale Journal on Regulation calls a "regulatory gray area."

For marketers, the practical test is simple: when a provider claims "CRTC compliance," ask which statute they mean. If the answer is vague, the claim probably is too. A retainer-style growth partner like Worqd maps compliance work to the specific rules that apply (CASL for email outreach, DNCL for telemarketing, and platform-specific ad policies) rather than waving at a regulator that doesn't cover the work in question. That distinction matters when you're checking a provider's compliance practices, because the rules you actually need to follow are narrower, and stricter, than "CRTC-regulated" suggests.

Want help figuring out which rules apply to your campaigns before you sign with a provider? Book a growth call and we'll walk through your specific channels.

What the CRTC Actually Regulates (and What Falls Outside)

If you assume the CRTC regulates everything that touches a phone line or a screen in Canada, you'll be surprised how much sits outside its walls. The CRTC's authority comes from four core statutes: the Telecommunications Act, the Broadcasting Act, the Online News Act, and Canada's Anti-Spam Legislation (CASL). Everything else is someone else's job, or nobody's.

Here's what the CRTC actually oversees, per its own mandate: telecom and broadcasting regulation, compliance and enforcement for telemarketing rules, the National Do Not Call List, and anti-spam rules for commercial email and SMS. That last item is the one most marketers need to care about, and it's narrower than people think.

For everything else, the lines look like this:

• ISP and mobile business practices. The CRTC does not directly regulate rates, quality of service, or business practices for internet providers, and it has "very little to do" with mobile regulation outside undue-preference issues.
• Spectrum and technical matters. Frequency allocation and interference fall to Innovation, Science and Economic Development Canada, not the CRTC. The CRTC isn't equivalent to the U.S. FCC, which holds broader technical powers.
• Competition and consumer complaints. Competition in mobile is largely the Competition Bureau's responsibility, and telecom or TV service complaints go to the independent CCTS, which opened in 2007.
• Broadcaster content complaints. Offensive programming complaints go to the Canadian Broadcast Standards Council, though its decisions can be appealed to the CRTC.

The rule that matters most for marketers dates back to 1999. In its "New Media" decision, the CRTC claimed jurisdiction over internet audio and video but excluded content that is "primarily alphanumeric," such as emails and most webpages. So the words inside your marketing emails and on your website aren't CRTC-regulated content. The act of sending them, however, is a different story: commercial email and SMS marketing falls squarely under CASL enforcement.

That distinction trips people up. The content of an email isn't regulated as broadcasting; the sending of it is regulated as spam. When you're vetting a marketing partner's compliance practices, that's the question worth asking: which statute does the claim actually map to? At Worqd, we treat that mapping as a baseline, since much of what marketers do daily (email content, webpages, privacy) sits outside CRTC jurisdiction entirely.

One caveat: the perimeter is moving. Bill C-11, the Online Streaming Act, eliminated the categorical exclusion for internet-delivered audio and video, so any platform streaming content can now be designated a broadcasting undertaking. But binding thresholds remain undefined, leaving streaming providers in what Yale Journal on Regulation commentary calls a regulatory gray area. Alphanumeric content like email and webpages stays outside that expansion.

The practical takeaway: focus your CRTC compliance attention on CASL, telemarketing, and the Do Not Call List. Everything else has a different regulator attached to it.

The Shrinking 'Not Regulated' List: Bill C-11 and the Gray Areas

For years, the safe answer to "does the CRTC regulate my online content?" was a clean no. That answer is getting less safe. The Online Streaming Act (Bill C-11), which came into force on 27 April 2023, eliminated the categorical exclusion that had kept internet-delivered audio and video outside the broadcasting framework since the 1999 New Media decision.

Under the old rules, any platform delivering audio or visual content over the internet sat largely untouched. Now, according to analysis in the Yale Journal on Regulation, any such platform can be designated a broadcasting undertaking. The money is following the mandate. The CRTC has ordered ownership groups with $100 million or more in Canadian revenues to contribute 1.55% of audio-visual revenues to the Services of Exceptional Importance Fund, and online streaming services with over $25 million in annual Canadian gross broadcasting revenue must put 1.5% of their base contribution toward the Independent Local News Fund, adding roughly $40 million a year.

Here's the catch for anyone checking a provider's compliance posture: the boundaries haven't actually been drawn yet. The exact revenue threshold that defines this new class of online undertakings remains undefined in the current legislative framework, which leaves IPTV and streaming operators in a regulatory gray area until the CRTC issues binding guidance. As that commentary puts it, platforms must guess at their future obligations.

If you're vetting a marketing or media partner, two lessons apply:

• "Exempt" doesn't mean unregulated. Google's five-year exemption from the Online News Act's bargaining provisions came with conditions, including a $100 million payment to the Canadian Journalism Collective within 60 days of the decision, and the CRTC sets both the conditions and the expiry date.
• Ask which statute a compliance claim maps to. CASL, the Broadcasting Act, the Telecommunications Act, and the Online News Act are different regimes, and email or webpage content still sits outside CRTC content jurisdiction even as streaming gets pulled in.
• Watch the rulemaking if your marketing involves online audio or video. The perimeter is moving, and today's gray area can become tomorrow's binding requirement.

This is the same discipline we apply at Worqd when building outreach and follow-up systems: consent-aware, permission-based, and mapped to the specific rules that actually govern each channel, rather than vague claims about being "fully compliant." When the regulator's list of what it doesn't regulate keeps shrinking, precision about which rules apply matters more than ever.

How to Vet a Provider's Compliance Claims

When an agency says it's "CRTC compliant," your first move should be to ask which statute they mean. The CRTC's authority comes from four laws: the Telecommunications Act, the Broadcasting Act, the Online News Act, and Canada's Anti-Spam Legislation. A vague claim that doesn't map to one of these is a red flag, because much of what marketers do every day sits outside CRTC jurisdiction entirely. The content of your emails and webpages, for example, is not regulated as broadcasting under the CRTC's 1999 "New Media" decision, which excluded "content that is primarily alphanumeric such as emails and most webpages" (see the CRTC's jurisdictional history).

What is squarely within reach: the act of sending commercial messages. The CRTC enforces CASL rules for email and SMS marketing, telemarketing rules, and the National Do Not Call List, per its official mandate. So a provider's compliance story should live at that level: consent records, DNCL scrubbing, and caller identification, not hand-waving about "being regulated."

Here's a short checklist to run before you sign anything:

• CASL consent: Ask how they capture and store express consent. Look for a timestamped record of the permission, what the person agreed to, and how they handle implied consent expiry windows.
• DNCL scrubbing: If telemarketing is part of the plan, ask how often they check numbers against the National Do Not Call List and how they log those checks. Internal do-not-call lists matter too.
• Telemarketing practices: Confirm they identify themselves, provide contact information in messages, and honour opt-outs promptly. Ask who is responsible when an AI agent or automated system places the call.
• Scope honesty: A good provider will tell you what the CRTC does *not* cover. Email copy, ad creative, privacy, and competition issues fall under other regimes, and pretending otherwise is a tell.

The questions you ask an agency should mirror that list. Try: "Where does consent come from in your process, and where is it stored?" "How do you handle follow-up messaging to someone who went quiet?" "What happens when someone replies 'stop'?" At Worqd, the booking funnel asks for explicit consent ("I agree to be contacted about my request") and states that details are only used to prepare for the call, and B2B outreach is built as personalized, permission-aware outreach rather than a template blast. That's the level of specificity you should expect from anyone you hire.

One more thing to watch: the ground is shifting. The Online Streaming Act eliminated the old categorical exclusion for internet-delivered audio and video, though binding thresholds remain undefined, leaving providers in what Yale Journal on Regulation analysis calls a "regulatory gray area." If your provider runs video-heavy campaigns, ask how they're tracking that file. A specific answer beats a confident one.

Where Compliance Meets Fast Follow-Up

A lead that comes in at 9 p.m. on a Saturday is still a lead on Monday morning, but only if someone responded in the window that mattered. Permission-aware outreach isn't just a legal box to tick under Canada's Anti-Spam Legislation; it's the foundation of any conversion path worth running.

The CRTC enforces CASL for commercial email and SMS, plus telemarketing rules and the National Do Not Call List. What it doesn't police is the content of your emails or webpages. In its 1999 New Media decision, the Commission excluded primarily alphanumeric internet content from its broadcasting jurisdiction. The upshot: how you write a landing page or a follow-up email isn't a CRTC question, but whether you had consent to send it absolutely is.

That distinction matters when you evaluate a growth partner. A vendor claiming "CRTC compliance" should be able to point to a specific statute: CASL for consent and unsubscribe mechanics, the Telecommunications Act for calling rules, the DNCL for outbound phone. Anything else, including content claims, ISP pricing, or competition matters, lives with a different body entirely.

So what does compliant, conversion-ready follow-up actually look like in practice?

• Explicit consent captured at the form, with a clear statement that the details will only be used to prepare for the booked call.
• Response inside 60 seconds, around the clock, so the inquiry is qualified before intent cools.
• Personalized outreach built around the account and the context, not a template blast.
• Clean handoff to a human with full conversation history when the lead is ready to talk.

This is the approach Worqd builds into the lead-handling path for every client. Consent is captured at the booking step, the AI SDR qualifies within seconds, and the conversation moves to a real person on the client's calendar using their rules. No sensitive form fields go to public analytics, and outreach to old leads in the CRM follows the same permission-aware standard.

If your current follow-up relies on a "we'll get back to you tomorrow" inbox, the gap isn't a marketing problem. It's a compliance problem wearing a conversion costume. Book a Growth Call and we'll walk through your lead-handling path together, end to end, and show where the seconds are leaking.