Digital Marketing, Spam & Privacy

Spam, sales and cancellation controls: regulatory priority checklist

Practical guidance on spam, sales and cancellation controls: regulatory priority checklist, with a June 2026 explanation, business checklist and evidence questions.

Development June 2026 · Australia · Regulator Guidance · General information

What changed in June 2026

This does not change the law. ACMA’s priorities increase practical scrutiny of branded SMS scams, spam and telemarketing harms, vulnerable-customer telco sales controls and cancellation friction.

What businesses should do now

Recheck consent, sender identification, unsubscribe, suppression, call-time and cancellation controls before campaigns or subscription-style customer journeys go live.

  • Record consent, list source, collection notice, sender identity and campaign purpose.
  • Test unsubscribe, suppression, call-time and contact-preference controls before launch.
  • Synchronise opt-outs across marketing platforms, CRM, agencies and uploaded audiences.
  • Keep commercial messages separate from service messages that are genuinely necessary.
  • Review cancellation friction and vulnerable-customer safeguards across all sales channels.

Evidence to retain

  • Consent source, wording, date, recipient and channel records.
  • Campaign creative, audience rules, sender details and suppression files.
  • Pre-launch tests and proof that unsubscribe requests were actioned.
  • Complaint, cancellation and remediation records linked to the relevant campaign.

Turn the issue into a controlled decision

  • Record the affected product, claim, customer journey, system, supplier or business process.
  • Separate current requirements from proposals, priorities, allegations, warnings and matter-specific outcomes.
  • Assign an owner, action date and evidence location for every material gap.
  • Set review triggers for legal changes, new facts, supplier changes, incidents, complaints and campaign variations.
  • Escalate when the available facts or evidence do not support the proposed decision.

Questions to ask

Focus on the decision and the evidence.

  1. 01

    Can the business prove the permission basis for each recipient and channel?

  2. 02

    Are sender identity, unsubscribe and suppression controls working end to end?

  3. 03

    Does the live campaign match privacy notices, call rules and cancellation promises?

Primary sources

Check the controlling material.

Recommended training

WC04Watchdog PRO certificate

Watchdog PRO Certificate: Privacy Officer

Build practical privacy controls for digital marketing, tracking, consent and customer data.

Most relevant course moduleMarketing, Tracking and Customer Analytics
  • Map information, systems, purposes and data flows
  • Review collection, use, disclosure and retention
  • Conduct practical privacy impact assessments
Self-paced online7-10 hoursA$1,950 per learner · GST included
This course is in development. Register your interest from the course page and Watchdog will contact you when enrolment opens.

Practical support

Apply the guidance to your facts.

Identify the exact product, claim, customer journey, supplier, legal entity or process involved. Preserve the information that supports the current position, record unresolved facts, assign an owner and confirm the point at which specialist review is required.

Need help applying this?

Tell us how this issue affects your organisation and receive a tailored recommendation for the most useful next step.

Important information

Check the current position.

This resource is general information, not legal advice. Laws, official guidance and proposals can change. Do not rely on a title or summary alone to decide whether a requirement applies to a particular entity, product or activity.

Build the capability

Turn this guidance into practical skills with Privacy Officer.

Continue with the Marketing, Tracking and Customer Analytics module, or ask Watchdog for tailored support with a current issue.