3 things you need to know about the Spam Act Home Resources 3 things you need to know about the Spam Act Compliance 3 things you need to know about the Spam Act According to HubSpot, 33% of marketers send weekly marketing emails – but how many of them think about the spam laws before they hit send? Nobody likes receiving pointless marketing emails, especially if they haven’t asked for them. Spam legislation exists to set out responsibilities for organisations who send commercial emails. And with hefty fines for non-compliance, it’s something everyone should be aware of if they’re sending any type of marketing email. In Australia, every commercial email you send is covered by the Spam Act 2003, along with other commercial forms of electronic communication like SMS. In April 2021, there was an update to the SPAM Regulations 2021. There are three things you need to ask yourself to ensure your marketing emails comply with the Spam Act and protect your business from penalties. ADMA members can also access the ADMA Spam Toolkit. 1. Has this person consented to receive email marketing from my organisation? “Consent is one of the biggest challenges facing email marketers – especially understanding what constitutes consent, managing consent and making sure you have the right documentation around how consent was gained,” says Mike Zeederberg, ADMA instructor and Managing Director of digital marketing agency Zuni. Consent means getting the right permission from the recipient before you send them any type of marketing email. The Spam Act outlines two different types of permission – express and inferred. Express: Express consent is where the recipient of the email opts in to receive your emails via your website, over the phone, face to face or by completing a form. Not only do they need to provide express consent – you need to be able to prove it, which means keeping a record of when they provided permission and who gave the permission. This is particularly helpful in situations where a customer has withdrawn consent and then somehow opted in. Inferred: Inferred permission is where it is reasonable to assume a person would want to receive marketing from your business. This is most often when there is an existing business relationship and your marketing is relevant to that relationship. When building your email marketing list, there are various ways to give our customer the chance to opt in expressly. The a ‘double opt-in’ process is considered email best practice the most transparent method of for obtaining consent. This is when your recipient opts in to receive your emails using a form, then follows it up by clicking on a link in an email to confirm they are happy to receive emails from your organisation. This method is likely to build a database of your most engaged customers. There are however other ways to get customers to opt in and it is good to run your default method by your compliance teams to ensure it is in line with your company’s policy/ preference. Mike cautions that just because you have permission to send someone an email, it doesn’t mean you should. “Consent is important to understand from a legal perspective but also from a practical user perspective. Just because someone has ticked a box to opt in to communications for one department in your organisation, doesn’t mean you should spam them from 17 different business units just because you legally can.” 2. Does my email include all my identifying information? To comply with the Spam Act, your email marketing needs to include your identity and your business contact details. These details should be clearly displayed on each email, something which Mike points out is good marketing practice anyway. “There’s no point in sending a marketing email if your recipient doesn’t know who it’s from. If you’re using an email marketing platform like Mailchimp your emails will automatically include this information,” he explains. 3. Does my email include a functional unsubscribe facility? To comply with the Spam Act, your emails must contain an easy way for people to unsubscribe. It also needs to be clearly worded so people know what they need to do and it shouldn’t require users to provide any more information or set up an account. Any requests to unsubscribe should also be honoured quickly – within five working days. An unsubscribe feature will usually be built in to your emails, as long as you’re using a reputable email marketing platform. “Most email platforms make it almost impossible to send out an email without having an unsubscribe link automatically built into it,” Mike explains. “But you want to think about what people are unsubscribing from when they hit the button.” Instead of making it the default for a person to unsubscribe from every single email from your organisation, Mike suggests creating a ‘nuanced unsubscribe’ where users can choose which emails to opt out of from a list of options – like news, product updates, e-newsletters or marketing emails. You still legally need to provide an option to unsubscribe from all, but allowing people to tailor the emails they receive may help keep some of those subscribers on your database. Should you buy a list from a third party? There are a lot of companies out there offering to sell email marketing lists to marketers, but Mike stresses that this is to be avoided. “It’s a really, really bad idea,” he explains. “You have no idea what the consent criteria is on that list, what people have opted in to actually receive and what the consent frameworks are.” If a marketer ends up with a list without the right consents, your organisation may find the costs associated will go beyond the list purchase price – it could be the cost of a breach. What happens if I don’t comply with the Spam Act? Non-compliance with the Spam Act can come with a number of consequences beyond just legal. As well as fines and penalties, if your emails receive a lot of unsubscribes and spam complaints, your email service provider may close your account. If this happens, you won’t be able to send emails to anyone - even people who genuinely want to receive them. If you are in any doubt over whether to send an email, or you’re not sure where to draw the line over inferred or express consent, check with your legal team. Want to learn more about email marketing strategy? In the ADMA IQ Email Marketing Strategy course, Mike will teach you how to plan, create and evaluate effective email marketing campaigns. FIND OUT FIRST, STAY CONNECTED Sign up to receive ADMA newsletters, updates, trends, special offers, events, critical issues and more Job role*Agency Account Manager/ExecutiveAgency Account/Strategy DirectorCDOCEO / Managing DirectorClient Service / Sales ManagerClient Service/Sales DirectorCMO / CCO / Marketing DirectorCreative Director / HeadData Analyst / Scientist / EngineerDesigner/Copywriter/Creative ManagerEarly Career Data Analyst / Scientist / EngineerHead of Analytics / Analytics LeaderHead of Category/Customer Experience/InsightsHead of Marketing/BrandHead of ProductHR/Learning and Development ManagersIT Director/ManagerLegal/RegulatoryMarketing ConsultantMarketing Executive / CoordinatorMarketing Freelancer / ContractorProduct / Brand / Digital / Communication ManagerSenior Data Analyst / Scientist / EngineerSenior Marketing/Brand ManagerOther You may unsubscribe at any time using the link provided in the communication. View our Privacy Policy. Filter Resources Filter Courses Capability Capability Campaign Integration Compliance Customer Experience Marketing Technology Insights Learnings Brand Development Content Format Content Format Information sheet Member-only Press-release Article Blog Case Study Data Event Infographic Media Coverage Research Tool-kit Video Webinar Whitepaper Topics Topics ADMA Spotlight CMO Crib Sheet CMO Spotlight Global Forum Global Forum 2023 Privacy Awareness Week Privacy series Regulatory Spotlight Resource The Weakest Link Compliance Resources CEO Blog Compliance Regulatory Content Copywriting Creative Data Data-driven Marketing Digital Campaigns Leadership Social Media Thought Leadership Member-only CMO Crib Sheet - Impact of Search on AI 12th Aug 2025 5 mins CMO Crib Sheet - Impact of Search on AI The rise of AI-powered search tools is reshaping how consumers discover and engage with content, reducing reliance on traditional search engines and SEO. Marketers will need to adapt strategies for AI summarisation, recommendation systems, and zero-click results to maintain brand visibility in this changing environment. This is a members-only resource - log in with your member account to view. Member-only CMO Crib Sheet - Cookie Deprecation 05th Aug 2025 5 mins CMO Crib Sheet - Cookie Deprecation Third-party cookies are being phased out, and marketers must pivot to privacy-first strategies. This Crib Sheet breaks down what cookie deprecation means, the latest updates from browsers and regulators, and practical steps to stay compliant while maintaining effective targeting. This is a members-only resource - log in with your member account to view. Article 30th Jul 2025 8 minutes Australian retailers be warned of pricing pitfalls For many businesses, EOFY, Black Friday and Boxing Day are the biggest campaign and sale periods in their marketing calendars. However, businesses engaging in sale frenzies should be warned. Sweeping statements about the size and scope of discounts and ‘sitewide’ or ‘storewide’ sales should be navigated with caution. Article 30th Jul 2025 8 minutes The Weakest Link Series: The Board The role the board plays in the data privacy chain is a critical one. As the governing body responsible for setting organisational direction and holding executive teams accountable, the board is uniquely positioned to influence how privacy is prioritised, funded, and enforced. Yet despite this authority, many boards remain a passive or under-informed participant in the data privacy conversation. Article 17th Jul 2025 7 mins No CMO is an island: Why collaboration is more important than ever to marketing leadership In an increasingly complex landscape, the role of the CMO is expanding fast. Andrea Martens, CEO of ADMA, unpacks how collaboration, capability and clarity are redefining what it means to lead in marketing today. Article 25th Jun 2025 9 minutes The Privacy Series: Data breach response plan To help marketers prepare for the impact that the privacy reforms will have on the industry and our practices, we have created The Privacy Series. Each month we will deep dive into one of the key components set to reshape the Privacy Act to understand what they mean for marketers and their businesses. This month we look at data breach response plans. Load More
Member-only CMO Crib Sheet - Impact of Search on AI 12th Aug 2025 5 mins CMO Crib Sheet - Impact of Search on AI The rise of AI-powered search tools is reshaping how consumers discover and engage with content, reducing reliance on traditional search engines and SEO. Marketers will need to adapt strategies for AI summarisation, recommendation systems, and zero-click results to maintain brand visibility in this changing environment. This is a members-only resource - log in with your member account to view.
Member-only CMO Crib Sheet - Cookie Deprecation 05th Aug 2025 5 mins CMO Crib Sheet - Cookie Deprecation Third-party cookies are being phased out, and marketers must pivot to privacy-first strategies. This Crib Sheet breaks down what cookie deprecation means, the latest updates from browsers and regulators, and practical steps to stay compliant while maintaining effective targeting. This is a members-only resource - log in with your member account to view.
Article 30th Jul 2025 8 minutes Australian retailers be warned of pricing pitfalls For many businesses, EOFY, Black Friday and Boxing Day are the biggest campaign and sale periods in their marketing calendars. However, businesses engaging in sale frenzies should be warned. Sweeping statements about the size and scope of discounts and ‘sitewide’ or ‘storewide’ sales should be navigated with caution.
Article 30th Jul 2025 8 minutes The Weakest Link Series: The Board The role the board plays in the data privacy chain is a critical one. As the governing body responsible for setting organisational direction and holding executive teams accountable, the board is uniquely positioned to influence how privacy is prioritised, funded, and enforced. Yet despite this authority, many boards remain a passive or under-informed participant in the data privacy conversation.
Article 17th Jul 2025 7 mins No CMO is an island: Why collaboration is more important than ever to marketing leadership In an increasingly complex landscape, the role of the CMO is expanding fast. Andrea Martens, CEO of ADMA, unpacks how collaboration, capability and clarity are redefining what it means to lead in marketing today.
Article 25th Jun 2025 9 minutes The Privacy Series: Data breach response plan To help marketers prepare for the impact that the privacy reforms will have on the industry and our practices, we have created The Privacy Series. Each month we will deep dive into one of the key components set to reshape the Privacy Act to understand what they mean for marketers and their businesses. This month we look at data breach response plans.