Pizza Hut Canada Settles CASL Action
As previously reported by Mickey Chandler and Matthew Vernhout, PH Canada Company (the corporate entity for Pizza Hut in Canada) recently entered into a $500,000 (CAD) enforcement undertaking with the Canadian Radio-television and Telecommunications Commission (CRTC) over alleged violations of Canada’s Anti-Spam Legislation (CASL).
According to the official CRTC undertaking announcement, an investigation into commercial electronic messages sent between January 1, 2025, and February 12, 2026, cited three core compliance issues: sending without having recipient opt-in permission, missing unsubscribe links, and failing to process unsubscribe requests.
This "undertaking" (essentially a regulatory settlement agreement, in my non-lawyerly interpretation) isn't a formal admission of guilt or a court conviction, but rather a voluntary agreement to resolve outstanding regulatory concerns. As part of this agreement, Pizza Hut agreed to make a $500,000 (CAD) payment to the Receiver General for Canada, review and upgrade its internal CASL compliance program, and ensure that any third parties authorized to send emails on its behalf strictly comply with the law.
When you send mail to people who didn't ask for it (or to people who explicitly opted out) they click "Report Spam." Elevated complaint rates ruin your sender reputation, trigger throttling and junk folder placement, and show up as compliance warnings in Google Postmaster Tools.
Not every sender with broken opt-out processes gets noticed by a government regulatory agency. For most, non-compliance is really more of a reputation issue. But for the small percentage of senders that do get drawn into a formal investigation, the outcome can become a very public and expensive lesson, along with being listed on a government website.
That is why deliverability bloggers like Mickey, Matthew, and myself spend so much time prattling on about permission best practices and opt-in as the one true path. We want to help ensure that you never end up as a cautionary case study in a regulatory press release.
Take a moment this week to trace an unsubscribe request through your organization. Click the link in a test email, process the opt-out, and verify whether every database, vendor, and platform in your ecosystem actually got the message and appropriately updated the opt-in status for your email address.