ACMA Issues New Guidance on Expectations for Telemarketing and Email/SMS Marketing
-
July 29, 2024
-
As set out in their FY23/24 Regulatory Priorities,1 the Australian Communications and Media Authority (“ACMA”) has been conducting a flurry of regulatory activity regarding Spam Act compliance over the last 12 months, resulting in enforcement action against a number of large Australian and multinational corporates.
Now, the ACMA has issued new guidance articulating its expectations for how corporates should be obtaining individual consent when seeking to conduct telemarketing and e-marketing2 (email, SMS and instant messages).
What’s the Guidance Say?
Some of the key takeaways include:
Alignment with the Privacy Act: The ACMA appears to align with the definition of consent under the Privacy Act 1988 (Cth). Under the Privacy Act, consent may be express or inferred, but the Australian Information Commissioner has taken the view that, to be valid, consent must meet the following four criteria:
- the individual is adequately informed before giving consent
- the individual gives consent voluntarily
- the consent is current and specific
- the individual has the capacity to understand and communicate their consent.
This approach to consent is articulated in Chapter B of the Australian Privacy Principle Guidelines,3 but it is likely to become part of the Privacy Act in amendments expected later this year (see Proposal 11.1 in the Government’s Response to the Privacy Act Review).4
A preference for express consent: While the ACMA’s various rules (including the Do Not Call Register Act and the Spam Act) permit inferred consent, the ACMA makes a strong recommendation that organisations use express consent as it involves a clear and unambiguous choice made by a consumer.
Consent must be demonstrable: The ACMA expects organisations to be able to demonstrate valid consent, including “the method by which the consent was obtained, the terms that applied and the date and time it was obtained.”
Lines drawn on supplier risk: The ACMA does not consider that organisations can assume that using third-party suppliers will enable compliance: "You need to have oversight and assurance processes in place to ensure that these records are reliably kept and maintained by those third parties or yourself”. As such, contractual controls alone will not suffice - organisations need to be able to demonstrate sufficiently active and robust contract management.
A focus on transparency: Much like the Australian Information Commissioner, the ACMA is concerned that valid consent must be properly informed, which means information must be provided in a way that it can be understood and is likely to be seen. The ACMA recommends that organisations “[u]se express consent based on clear terms and conditions that are readily accessible to consumers at the point consent is obtained and not hidden away in fine print, lengthy privacy policies or that require multiple click-throughs to find”.
Operational tips: The guidance provides detailed “do’s and don’ts” that are a must-read for any Australian marketing team.
Ensuring Your Direct Marketing Remains Compliant
Combatting misleading marketing and spam remains at the top of the ACMA’s regulatory priorities for 2024/25,5 and changes to the Privacy Act later this year may further impact direct marketing compliance obligations.
There’s never been a better time to review your marketing operations and ensure you are defensibly complying with Spam Act requirements. If this is something your organisation needs help with, don’t hesitate to reach out.
Footnotes:
1: ACMA, “Outcomes: compliance priorities 2023–24”, Australian Communications and Media Authority (01 July 2024)
2: ACMA, “Consumer consent: expectations for businesses conducting telemarketing and e-marketing”, Australian Communications and Media Authority (01 July 2024)
3: Office of the Australian Information Commissioner, “Chapter B: Key concepts”, Australian Government (21 December 2022)
4: Australian Government, “Government Response: Privacy Act Review Report”, Australian Government (2022)
5: ACMA, “Compliance priorities 2024–25”, Australian Communications and Media Authority (01 July 2024)
Related Insights
Related Information
Published
July 29, 2024
Key Contacts
Managing Director