The Regulatory Landscape: CRTC and the Patchwork of Rules

Ask who regulates telemarketing in Canada and you'll get a short answer — the CRTC — followed by a much longer one. The short answer is correct, but the longer one is what keeps campaigns compliant.

The Canadian Radio-television and Telecommunications Commission (CRTC) is Canada's primary telemarketing regulator, administering the rules under section 41.2 of the Telecommunications Act. According to the CRTC's official framework, the Unsolicited Telecommunications Rules were first established in Telecom Decision 2007-48 and comprise three distinct parts.

• National DNCL Rules — governing registration, subscription, and list-scrubbing against the Do Not Call List
• Telemarketing Rules — covering calling hours, caller identification, and internal do-not-call lists, which apply even to DNCL-exempt callers
• ADAD Rules — restricting Automatic Dialing-Announcing Devices and prerecorded messages

The CRTC doesn't do all of this alone. It delegates day-to-day operations to two functionaries: a National DNCL operator that administers the list databases, and a Complaints Investigator delegate that looks into alleged contraventions, per the Unsolicited Telecommunications Rules.

Layered on top is a patchwork of overlapping federal instruments. CASL governs commercial electronic messages, PIPEDA covers data privacy, and the Voter Contact Registry kicks in during election periods — requiring registration within 48 hours of the first election-related call, according to CallHub's analysis of Canadian outreach rules.

The channel matters enormously. Voice calls and texts fall under entirely different regimes: voice telemarketing sits under the CRTC's Unsolicited Telecommunications Rules, while SMS falls under CASL, enforced jointly by the CRTC, the Competition Bureau, and the Office of the Privacy Commissioner, as outlined in this Canadian SMS regulation guide. The penalty gap is stark — up to $15,000 per violation for corporations under the Telecom Act framework versus up to $10 million per violation under CASL, per the CRTC's enforcement guidance.

The model itself is under internal scrutiny. In a 2025 concurring opinion, CRTC Commissioner Bram Abramson questioned why voice telemarketing remains opt-out when electronic messages default to opt-in, noting that robocalls and impersonation fraud have "surged, now assisted increasingly by AI," according to the official CRTC order.

For organizations running outbound campaigns, this patchwork is why list discipline matters before a single dial. At My AI Call Center, every campaign begins with a list and consent review — checking list source, consent records, and calling windows — because the applicable rule set depends on the channel, the purpose, and the relationship behind each number.

Exemptions That Aren't Exemptions: What Still Applies

Being exempt from the National DNCL does not mean being exempt from the rules. This is one of the most misunderstood corners of Canadian telemarketing regulation, and it trips up organizations that assume their charitable or political status gives them a free pass.

Registered charities, political parties, riding associations, candidates, survey collectors, and newspapers are all exempt from DNCL scrubbing requirements. But according to the CRTC's Unsolicited Telecommunications Rules, the Telemarketing Rules apply whether or not a call is exempt from the National DNCL Rules. That is a direct statement from Telecom Decision CRTC 2008-6, and it closes the door on the "we're exempt, so the rules don't apply" argument.

In practice, exempt callers still face a concrete set of obligations:

• Register with the National DNCL — even exempt telemarketers must register (free of charge) at www.LNNTE-DNCL.gc.ca before calling.
• Maintain an internal do-not-call list — the CRTC states plainly that "being an exempt telemarketer does not eliminate your responsibility to maintain your own internal do not call list" (CRTC telemarketing guidance).
• Respect calling hours — 9:00 a.m. to 9:30 p.m. on weekdays and 10:00 a.m. to 6:00 p.m. on weekends, with stricter provincial limits taking precedence.
• Display proper caller identification — exempt status changes nothing about ID requirements.
• Process opt-outs on a deadline — requests made during a call must be processed at the time of the call, with names added to the internal list within 14 days and records retained for 3 years and 14 days.

Two more distinctions matter. First, unions are not automatically exempt. Unlike registered charities, unions must scrub call lists against the DNCL unless they are calling existing contacts, per guidance on CRTC outreach rules. Second, calls to business consumers fall outside the DNCL Rules entirely, and calls made purely for market research, polls, or surveys are not considered telemarketing calls at all.

Then there is the existing business relationship safe harbor — and it is narrower than many callers assume. Under the CRTC's definitions, the exemption covers a purchase, lease, or rental within the last 18 months, a written service contract in effect or expired within the last 18 months, or an inquiry or application within the last 6 months. A name sitting in your CRM from three years ago does not qualify. This is why win-back and reactivation campaigns targeting 12-to-24-month dormant contacts need their relationship windows documented before a single dial.

The operational takeaway is straightforward: classify every campaign by purpose and relationship before launch, then apply the rule set that actually governs it. At My AI Call Center, that classification happens during list and consent review — list source, consent records, and calling windows are checked before any campaign launches, and opt-outs are logged and honored immediately across all campaigns. Exemption status determines whether you scrub against the DNCL. It never determines whether the Telemarketing Rules apply to you.

Operational Compliance: Registration, Scrubbing, and Calling Windows

Operational compliance in Canada starts before a single number is dialed. The CRTC requires every telemarketer to register and subscribe to the National DNCL before making telemarketing calls, and the list you scrub against must be no older than 31 days — anything staler puts the campaign out of compliance from the first ring. CRTC guidance makes this a hard prerequisite, not a best practice.

• Federal calling windows: 9:00 a.m.–9:30 p.m. weekdays; 10:00 a.m.–6:00 p.m. weekends, with stricter provincial limits taking precedence (CRTC)
• Abandoned-call threshold: a live agent must be available within 2 seconds of answer on predictive-dialed calls (CRTC Rules)
• ADAD/robocall rules: contact information in the message must remain valid for 60 days; equipment must disconnect within 10 seconds after the recipient hangs up (CRTC)
• Internal do-not-call requests honored at the time of the call, added to the internal list within 14 days, records retained for 3 years and 14 days (CRTC Rules)

These aren't optional guardrails. Penalties under the Telecommunications Act reach $1,500 per violation for individuals and $15,000 for corporations, with each day of non-compliance potentially a separate violation (CRTC). CASL violations for text channels climb to $1 million and $10 million respectively (CRTC). My AI Call Center builds these windows, scrub cycles, and opt-out SLAs into every campaign plan before launch — because the cost of a missed 31-day refresh or a 2-second breach isn't theoretical, it's a line item on a Notice of Violation.

Opt-Out Handling and Record Retention: The 14-Day / 3-Year Standard

Canada's telemarketing rules don't just require you to honor opt-outs — they dictate exactly how fast you must do it and how long you must keep the proof. Miss these deadlines, and you're not just risking a complaint; you're undermining the due-diligence defense that could overturn an enforcement judgment later.

The core standard comes from the CRTC's Unsolicited Telecommunications Rules. When a consumer asks not to be called during a live call, the request must be processed at the time of the call — not at the end of the shift, not after the campaign wraps. The number must then appear on your internal do-not-call list within 14 days of the request, and the consumer's information must be retained for 3 years and 14 days from the request date.

That 14-day processing window is the outer limit, not a target. Best practice — and the approach My AI Call Center builds into every managed campaign — is logging and honoring opt-outs immediately, then carrying those requests into client DNC records so suppression persists across all future campaigns.

The 14-day rule is only one of several overlapping timelines Canadian telemarketers must track:

• DNCL grace period: consumers' numbers are added to the National DNCL within 24 hours of registration, but telemarketers have a 31-day window to update calling lists — meaning your scrub data must be no older than 31 days, per CRTC telemarketing guidance.
• CASL unsubscribe timelines: electronic message opt-outs must be honored within 10 days according to CRTC compliance guidance, though some sources cite 10 business days — a discrepancy worth verifying against primary sources before setting your internal SLA.
• Registration records: DNCL subscription and registration records must be kept for 3 years under the Unsolicited Telecommunications Rules.
• Enforcement windows: the CRTC can issue a Notice of Violation within 2 years of a telemarketing violation and within 3 years of a CASL violation, according to compliance analysis of CRTC and CASL outreach rules.

That enforcement horizon is what turns record retention from housekeeping into legal protection. Violators can overturn judgments by demonstrating due diligence, per the CRTC — but a due-diligence defense only works if you can produce the logs. If your opt-out records, consent documentation, and campaign dispositions disappear after 18 months, you've effectively disarmed yourself for half the enforcement window.

The practical minimum, then, is a 3-year retention standard across everything: internal DNC requests (3 years plus 14 days), DNCL subscription records (3 years), and campaign-level records like dispositioned contact lists, per-call notes, and opt-out logs. This is why My AI Call Center delivers opt-out and DNC logs as a named campaign deliverable — the documentation exists precisely because the regulator may ask for it years after the last call.

The stakes for getting this wrong scale quickly. Penalties reach $1,500 per violation for individuals and $15,000 for corporations under the Telecommunications Act framework — and as the CRTC warns, each day of non-compliance may constitute a separate violation. A single mishandled opt-out that persists for a month isn't one violation; it can be thirty.

Penalties, Enforcement Trends, and the Shift Toward Opt-In

Non-compliance in Canadian telemarketing is not an abstract risk — it is a daily compounding one. The CRTC itself warns that "the total amount of the financial penalties can add up quickly," because each day of non-compliance may constitute a separate violation.

The numbers are stark. Under the Telecommunications Act framework, penalties reach $1,500 per violation for individuals and $15,000 for corporations — and because violations can accrue daily, a single campaign run against stale lists can multiply into serious exposure. If your outreach crosses into CASL territory, such as texts or electronic messages, the stakes jump dramatically: up to $1 million per violation for individuals and $10 million for corporations. Enforcement windows are long, too — the CRTC can issue a Notice of Violation within 2 years of a telemarketing violation and 3 years of a CASL violation.

The CRTC's enforcement toolkit escalates with the severity of the conduct:

• Warning Letters — the entry-level response for less serious cases
• Citations — published on the CRTC website for public visibility
• Notices of Violation — may carry administrative monetary penalties and are published
• Negotiated Settlements and Undertakings — resolutions reached with investigators who, per the CRTC, "use their discretion" in matching the response to the circumstances

Violators can overturn judgments by demonstrating due diligence and may appeal to the Federal Court — which makes documented list sourcing, consent records, and DNC logs genuinely valuable, not just paperwork.

The bigger story is where regulation is heading. In a June 2025 concurring opinion, CRTC Commissioner Bram Abramson asked directly: "Why, in 2025, do we still regulate unsolicited voice telemarketing on an opt-out basis, when unsolicited commercial electronic messages default to an opt-in framework?" He also noted that robocalls, unregistered telemarketing, and impersonation fraud have "surged, now assisted increasingly by AI".

That is a signal, not yet binding regulation — but the direction is clear. Voice calling is drifting toward the CASL consent standard, and AI-assisted outreach is drawing particular scrutiny. This is exactly why My AI Call Center reviews list source and consent records before any campaign launches, and declines bought lists without clear permission history. Treating every outbound campaign as if opt-in were already the rule is the safest posture — and increasingly, the smartest one.