Guide to consumer consent
The ACMA has developed a guide to help industry comply with the law and meet consumer expectations regarding the use of consumer consent to conduct telemarketing and e-marketing.
How to comply
If you plan to send marketing messages or emails, you must first have consent from the person who will receive them.
Even if someone else is sending out your marketing messages for you, you must still have consent from each person who will receive your messages.
After you get consent, you must ensure your message:
Get consent
There are two types of consent:
- express
- inferred
Express consent
A person who gives express consent knows and accepts that they will receive marketing emails or messages from you. This is best practice when it comes to consent.
People can give express consent by one of the following:
- filling in a form
- ticking a box on a website
- over the phone
- face to face
You cannot send an electronic message to ask for consent, because this is a marketing message.
Keep a record when a person gives express consent, including who gave the consent, when and how.
Under the Spam Act, it's up to you to prove that you have a person's consent.
Inferred consent
In some circumstances, you may infer that you have consent to send marketing messages if the recipient has knowingly and directly given their address and it is reasonable to believe they would expect to receive marketing from your business.
This is usually when a person has a provable, ongoing relationship with your business, and the marketing is directly related to that relationship.
For example, if someone has subscribed to a service, has an account or is a member, and the marketing is directly relevant to the relationship – such as a person’s savings bank telling them about another savings account with higher interest. It would not cover the bank trying to sell them insurance products.
It does not cover sending messages after someone has just bought something from your business.
Inferred consent is not as reliable as getting someone’s express consent.
Know your responsibilities for email lists
Take care when you buy or use a marketing list.
You are still responsible for making sure you have consent for any addresses you use.
Identify yourself as the sender
In your message, you must:
- accurately identify your name or business name
- include correct contact details for you or your business
If someone else sends messages on your behalf, the message must still identify you as the business that authorised the message. Use the correct legal name of your business, or your name and Australian Business Number (ABN).
This information must remain correct for at least 30 days after you send the message.
Make it easy to unsubscribe
You need to make it easy for people to unsubscribe from your electronic mailing lists.
Under the Spam Act, every commercial message must contain an 'unsubscribe' option that:
- presents unsubscribe instructions clearly
- honours a request to unsubscribe within 5 working days
- does not require the payment of a fee
- does not cost more than the usual amount for using the address (such as a standard text charge)
- is functional for at least 30 days after you sent the message
- does not require the person to give extra personal information or log in to, or create, an account to unsubscribe from marketing messages.
Tip: Remember that if you are using an alphanumeric message header in SMS, these are generally not capable of receiving return messages.
Unsubscribe examples that are clearly worded
Email:
To stop receiving messages from us, simply reply to this email with 'unsubscribe' in the subject line.
If you no longer wish to receive these messages, please click the 'unsubscribe' button below.
SMS:
Reply STOP
Unsub: (1800-number)
Other actions that may break the spam rules
Under the Spam Act, you cannot:
- use or supply a list that has been created with address-harvesting software
- use or supply address-harvesting software
It is also against the spam rules to:
- help, guide or work with another person to break the spam rules
- encourage another person to break the spam rules
- be directly or indirectly, knowingly concerned with breaking the spam rules
If a business breaks the rules, we can take enforcement action. Read more about actions we take.
Ask for or provide information
If you or someone else breaks the spam rules, you can tell us.
If you do break the spam rules, telling us may help to fix the issue quickly. We review all cases individually, but it may be resolved without further action.
We value all information because it helps identify trends and spot serious or ongoing issues.