Email Marketing Compliance in Australia: A Guide to the Spam Act

Email remains one of the most effective ways for Australian small businesses to stay in touch with customers. It is affordable, measurable and direct. However, sending marketing emails in Australia is governed by the Spam Act, which sets clear rules about consent, identification and unsubscribing. Getting it right protects your reputation and keeps you on the right side of the law.

What the Spam Act requires

The Spam Act applies to commercial electronic messages, including email, SMS and instant messaging. It requires that you send such messages only with consent, include accurate sender identification, and provide a functional unsubscribe facility. These three elements are the foundation of compliant email marketing.

The Act is enforced by the Australian Communications and Media Authority (ACMA). Penalties can apply for breaches, but most businesses find that following the rules is straightforward once they have good processes in place.

Consent: express and inferred

Consent can be express or inferred. Express consent is when someone actively opts in — for example, by ticking a box on your website or signing up at a trade show. Inferred consent is less clear. It may exist when you have an existing business relationship and the recipient would reasonably expect to receive marketing messages.

• Express consent: Keep a record of when, how and what the person agreed to receive.
• Inferred consent: Use caution. A one-off purchase may not be enough to infer consent for ongoing marketing.
• No consent: Purchased, rented or scraped email lists are not compliant. Avoid them entirely.

Consent does not last forever. If someone has not engaged with your emails for a long time, it is good practice to re-confirm their interest or remove them from your list.

Identifying your business and unsubscribing

Every marketing email must clearly identify your business and include accurate contact details. This usually means your business name, ABN if applicable, and a physical or postal address. A generic "online business" identity is not enough.

The unsubscribe facility must be easy to find and use. It should not require a login, payment or lengthy form. Once someone unsubscribes, you must action it within five business days. Do not send further marketing messages to that address unless they opt in again.

Transactional emails — such as order confirmations and shipping notices — are generally not subject to the same consent rules, but they should still be accurate and not contain unrelated marketing.

List hygiene and third-party data

Good list hygiene improves deliverability and reduces complaints. Remove hard bounces, inactive subscribers and unsubscribes promptly. Use a reputable email service provider that handles unsubscribe requests automatically and provides authentication tools such as SPF and DKIM.

If you work with a digital marketing specialist or SEO agency, clarify who owns the list and how consent is recorded. Never let a third party add contacts to your list without documented consent. Similarly, if you use creative services such as VFX services in Melbourne for campaign assets, ensure the final email still meets compliance requirements.

A practical compliance checklist

• Collect consent clearly and record it.
• Include your business name and contact details in every campaign.
• Provide a working unsubscribe link in every marketing email.
• Action unsubscribe requests promptly.
• Do not use purchased or rented lists.
• Review your email templates and sign-up forms regularly.

Compliance is not just a legal requirement; it is a sign of respect for your audience. When customers trust that your emails are relevant and easy to opt out of, they are more likely to engage with your brand.

Frequently asked questions

Can I email customers who bought from me before?

You may be able to rely on inferred consent if there is an existing business relationship and the recipient would reasonably expect marketing messages. Keep records and always provide an easy way to opt out.

What happens if someone unsubscribes?

You must action the request within five business days and stop sending marketing messages to that address. You can still send transactional messages related to a purchase if they are not marketing.

Are purchased email lists ever allowed?

No. Purchased, rented or scraped lists do not provide valid consent under the Spam Act. Using them risks penalties and can damage your sender reputation.