CASL consent checker: when implied consent runs out for each contact
In short: Reads each contact's consent basis (express, purchase, inquiry, membership, business card) and start date, works out when implied consent ends under CASL (2 years from a purchase, 6 months from an inquiry) and splits the list into can email, expiring soon and expired. Limit: It reads the consent type and date you give it. It can't confirm how an address was really collected, and it isn't legal advice.
This CASL consent checker works out when implied consent ends for each contact. Under Canada's anti-spam law, a purchase or contract gives implied consent for two years and an inquiry for six months; express consent lasts until it is withdrawn. Upload a CSV with the email, how you got it and the date, and download who you can still email.
Price: this tool is free. Checking a whole email list is from $9/mo, and the first 100 checks are free with Google, no card. See pricing
Sample result
4 of 7 contacts can still get commercial email; 1 has expired implied consent.
- Can still email
- 4 of 7
- Expiring in 30 days
- 1
- Role-related only
- 1
What this means for you
Implied consent from the May inquiry ends on 20 November. Ask for express consent before then.
- Paste a list or drop a CSV
- 2 years from a purchase, 6 months from an inquiry
- Expiry date and days left per row
- Can email, expired and expiring files
- CASL
- Implied consent
- CSV
By SimpleVerifier Team · Last updated · Runs in your browser; nothing you paste is sent to us
Consent is settled. Now check the addresses still work.
- Download the contacts you can still email.
- Upload that file at /verify for a live mailbox check on every address; implied consent can last two years, long enough for inboxes to close.
- The first 100 email checks are free with a Google sign-in, no card.
How do I check CASL implied consent expiry for a list?
- Export your contacts with the email, how each one gave consent (express opt-in, purchase, inquiry, membership, business card) and the date of the last purchase, inquiry or sign-up.
- Upload or paste the CSV. Pick what rows with no consent type should count as, and the day to check against (today by default).
- Press Check consent. Each row gets its basis, the day implied consent ends, the days left and a status.
- Download the contacts you can still email, the expired ones and the ones expiring within 30 days, who need a consent request now.
Example
- You enter
- A 7-row CSV with email, consent and date, checked as of 6 Nov 2026: one
express opt-in, apurchaseon 2024-09-14, aninquiryon 2026-05-20, aquote requeston 2026-08-01, apurchaseon 2025-12-01, abusiness cardand one row with no consent type. - You get
- Express, no expiry (1); implied consent expired on 2026-09-14 for the 2024 purchase; the 20 May inquiry ends on 2026-11-20 (14 days, expiring); the quote request ends 2027-02-01 and the 2025 purchase 2027-12-01 (valid); the business card is role-related only; the blank row can't tell. Downloads: 4 you can email, 1 expired, 1 expiring soon.
- Limits
- Runs in your browser with no row cap; an uploaded file can be up to 25 MB.
How long does implied consent last under CASL?
Two years from a purchase, lease, barter or written contract, and six months from an inquiry or application, according to section 10 of Canada's Anti-Spam Legislation. The clock restarts with each new purchase or inquiry, so the date that matters is the most recent one. A donation, volunteer work or a membership with a registered charity, political party or club also gives two years.
Express consent, given by opting in, has no expiry; it lasts until the person withdraws it. That is why the CRTC and most Canadian senders treat the window of implied consent as the time to ask for express consent, with a re-permission email.
What about addresses on a website or a business card?
CASL also implies consent when someone publishes their address conspicuously, on a website or in a directory, or hands it to you, as with a business card, and doesn't say they don't want commercial email. There is no time limit, but the message has to relate to the person's role or business. The checker marks these "role-related only" and leaves the call to you, because the file can't show what your message is about.
Cold email to Canadian prospects usually rests on this exception, and it is narrow. The CASL cold email guide walks through what counts.
CASL consent at a glance
| How you got the address | Consent | How long |
|---|---|---|
| Opted in to your list | Express | Until withdrawn |
| Bought from you or signed a contract | Implied | 2 years from the last purchase |
| Asked a question or applied | Implied | 6 months from the inquiry |
| Published it, or handed you a business card | Implied | No limit, role-related messages only |
Every commercial message also needs your identity, contact details and an unsubscribe, whatever the consent.
Who uses this tool, and for what?
- Canadian retailers
- Find customers whose last order was more than two years ago before the holiday campaign, and send the rest a consent request while there is time.
- B2B marketers
- Split webinar and demo-request leads, whose implied consent lasts six months, from customers on two-year consent.
- Agencies
- Show a client which part of an inherited list can still be mailed before it goes into a new platform.
What can’t this tool tell you?
- It reads the consent type and date you give it. It can't confirm how an address was really collected, and it isn't legal advice.
- Consent types are matched from words like purchase, inquiry or opt-in; anything else counts as the default you choose.
- Role-related exceptions (published addresses, business cards) have no expiry but depend on what your message says, which the file can't show.
- It doesn't know about unsubscribes; remove those first, since withdrawn consent ends everything.
Common questions
- How long is implied consent valid under CASL?
- Two years after a purchase, lease, barter or contract, and six months after an inquiry or application. Each new purchase or inquiry starts the period again.
- Does express consent expire under CASL?
- No. Express consent lasts until the person withdraws it, for example by unsubscribing.
- Can I email someone to ask for consent after implied consent expires?
- No. A request for consent is itself a commercial electronic message under CASL, so it has to go out while implied consent still applies. Send it before the expiry date.
- Does CASL apply to email sent from outside Canada?
- Yes, if the message is sent to or accessed from a computer in Canada. Where your company is based doesn't change that.
- Is my file uploaded?
- No. The checker runs in your browser and nothing is sent unless you choose to check the addresses afterwards.
Sources
A tidy list can still be full of dead addresses.
Extracting, deduplicating and syntax checks all work on the text of an address. None of them can tell whether the mailbox exists. Only the server that hosts it can answer that, through an SMTP check, and that is what the paid product does.
- Upload the cleaned file as it is: CSVs up to 100,000 rows
- A real SMTP mailbox check on every row, with catch-all detection
- Small list? Starter at $9/mo covers 2,500 emails a month, cancel anytime
Plans from $9 a month, cancel anytime, no contract. Sign in with Google and your first 100 email checks are free, no card. The free tools stay free either way.