Digital Marketing, Spam & Privacy
Spam, sales and cancellation controls: regulatory priority checklist
Practical guidance on spam, sales and cancellation controls: regulatory priority checklist, with a June 2026 explanation, business checklist and evidence questions.
What changed in June 2026
This does not change the law. ACMA’s priorities increase practical scrutiny of branded SMS scams, spam and telemarketing harms, vulnerable-customer telco sales controls and cancellation friction.
What businesses should do now
Recheck consent, sender identification, unsubscribe, suppression, call-time and cancellation controls before campaigns or subscription-style customer journeys go live.
- Record consent, list source, collection notice, sender identity and campaign purpose.
- Test unsubscribe, suppression, call-time and contact-preference controls before launch.
- Synchronise opt-outs across marketing platforms, CRM, agencies and uploaded audiences.
- Keep commercial messages separate from service messages that are genuinely necessary.
- Review cancellation friction and vulnerable-customer safeguards across all sales channels.
Evidence to retain
- Consent source, wording, date, recipient and channel records.
- Campaign creative, audience rules, sender details and suppression files.
- Pre-launch tests and proof that unsubscribe requests were actioned.
- Complaint, cancellation and remediation records linked to the relevant campaign.
Turn the issue into a controlled decision
- Record the affected product, claim, customer journey, system, supplier or business process.
- Separate current requirements from proposals, priorities, allegations, warnings and matter-specific outcomes.
- Assign an owner, action date and evidence location for every material gap.
- Set review triggers for legal changes, new facts, supplier changes, incidents, complaints and campaign variations.
- Escalate when the available facts or evidence do not support the proposed decision.
Questions to ask
Focus on the decision and the evidence.
- 01
Can the business prove the permission basis for each recipient and channel?
- 02
Are sender identity, unsubscribe and suppression controls working end to end?
- 03
Does the live campaign match privacy notices, call rules and cancellation promises?
Primary sources
Check the controlling material.
Recommended training
Watchdog PRO Certificate: Privacy Officer
Build practical privacy controls for digital marketing, tracking, consent and customer data.
- Map information, systems, purposes and data flows
- Review collection, use, disclosure and retention
- Conduct practical privacy impact assessments
Practical support
Apply the guidance to your facts.
Identify the exact product, claim, customer journey, supplier, legal entity or process involved. Preserve the information that supports the current position, record unresolved facts, assign an owner and confirm the point at which specialist review is required.
Tell us how this issue affects your organisation and receive a tailored recommendation for the most useful next step.
Important information
Check the current position.
This resource is general information, not legal advice. Laws, official guidance and proposals can change. Do not rely on a title or summary alone to decide whether a requirement applies to a particular entity, product or activity.
