Technically, yes — but Canada’s anti-spam law treats the send the same way whether a person or an agent triggered it.
Short answer
Yes, technically. But Canada’s anti-spam law does not care whether a person clicked send or an AI agent triggered it — the consent and identification rules attach to the message itself, and your organization is the one legally sending it either way.
Canada’s anti-spam legislation is written broadly enough to already cover an automated sender. Section 6(1) states: “It is prohibited to send or cause or permit to be sent to an electronic address a commercial electronic message unless (a) the person to whom the message is sent has consented to receiving it, whether the consent is express or implied”. The phrase “cause or permit to be sent” already reaches an automated process configured to send on your behalf — an AI agent drafting and dispatching the message is your organization sending it, not a separate legal actor.
The same section addresses AI-assembled send lists directly, even though it was written long before generative AI existed. Subsection 6(4) states that a message “is considered to have been sent once its transmission has been initiated”, and “it is immaterial whether the electronic address to which an electronic message is sent exists or whether an electronic message reaches its intended destination”. If an agent compiles a list that includes a stale or mistyped address, the law does not care whether the message actually landed — only whether consent and identification were in place before it went.
Seeking express consent has its own disclosure requirement. Section 10(1) requires that a person seeking it “set out clearly and simply” the purpose for which consent is sought and information identifying who is asking. An agent cannot generate that consent after the fact; it has to already exist, in a form that meets the statute, before the agent is allowed to send.
Treadstone Law’s own answer on the underlying consent question — not written with AI in mind, but addressing the same general email-marketing-consent principle — makes the point plainly: “Consent obtained for order fulfillment doesn’t automatically stretch to cover unrelated promotional use just because the business already has the address on file”. That distinction does not change because an agent, rather than a person, is the one pressing send.
An agent sending a transactional follow-up to an existing customer about their own order sits in a very different place than an agent sending a prospecting blast to a purchased or scraped list — the second needs the same consent trail a human-run campaign would need, and a person should still approve the list and the message before an agent is allowed to send it. See what human-in-the-loop actually means and why agents need guardrails.
See how outbound messaging gets built to stay compliant.
