Australia’s Spam Act expects consent (express or inferred under their rules), accurate sender identity, and a functional unsubscribe you honour quickly (five business days is the classic bar). Labelling a promo as transactional to skip the rules is how regulators write press releases.

In forceLegalIn force 10 Apr 2004

In Australia, commercial email needs consent, identity and a working unsubscribe

Q: What does Australia's Spam Act require in every marketing email?

Australia's Spam Act requires consent (express or reasonably inferred) for commercial electronic messages with an Australian link, accurate sender identification with contact details valid at least 30 days, and a functional unsubscribe valid at least 30 days that takes effect within five business days. The sender bears the evidential burden. ACMA has repeatedly enforced against brands that mislabelled promo as transactional or ignored opt-outs.

What does Australia's Spam Act require in every marketing email?

Australia

In one sentence

Australia needs , clear identity, and a working actioned within five business days — fake “” promos get fined.

Plain English

Australia’s Spam Act expects (express or inferred under their rules), accurate sender identity, and a functional you honour quickly (five business days is the classic bar). Labelling a promo as to skip the rules is how regulators write press releases.

Why it matters. APAC lists are often an afterthought on US tools. Australia is not “same as .”

Dotted words open definitions. Full glossary.

What to do

Your move — not a lecture

Part platform, part you

The platform covers the mechanical bit. The judgement is still yours.

footers and suppression queues handle mechanics when configured.

Your part: proof, Australian-link analysis, and honest vs commercial labelling.

What to do first

Sample ten "" templates. If any is primarily promotional, fix the template class before ACMA does.

You can skip this if: You have no Australian-link commercial messages.

Who this applies to

Senders of commercial electronic messages with an Australian link.

Checklist

01Prove ; bought lists do not transfer the burden.
02Keep identity and valid ≥30 days.
03Honour withdrawals within five business days without login walls or fees.
04Do not reclassify promo as service mail to dodge .

That’s enough to act. Sources and exact wording are below for counsel, bosses, or AI tools that need a citation. Not legal advice.

Proof

Exact position, enforcement, sources

For records and people who will check you. Skip if Monday’s move is already clear.

The exact position

Australia's Spam Act requires (express or reasonably inferred) for commercial electronic messages with an Australian link, accurate sender identification with contact details valid at least 30 days, and a functional valid at least 30 days that takes effect within five business days. The sender bears the evidential burden. ACMA has repeatedly enforced against brands that mislabelled promo as or ignored opt-outs.

What happens if you do not

ACMA publishes repeated enforcement actions and penalties through 2026. Combined spam-and-telemarketing figures in some releases cannot always be split into spam-only amounts.

Sources

Spam Act 2003 (Cth)
Published 10 Apr 2004Read primary source
ACMA, spam compliance guidance and enforcement releases
No publisher dateRead primary source

History of this page

2 Aug 2026Added Australia Spam Act baseline.

Awkward questions

Who is this actually for?

People who ship email and are too busy to re-read every PDF: week-one marketers, lifecycle/CRM, deliverability, multi-country ops, DTC brands, agencies — on Klaviyo, Mailchimp, Braze, HubSpot, SFMC, or something else. Pick your tool and geos so product-specific pages only appear when they match. EU and UK are first-class filters. Not for people who sell tools about email and need a fake score to demo.

Why only ~40 rules? Isn’t that… thin?

On purpose. A wall of 400 undated “best practices” is how you look busy and still get burned. Every page needs a primary source we actually read. Thin and checkable beats fat and folklore. Europe, bulk inbox rules, measurement honesty, and protocol topics like BIMI/DMARC policy are on the shelf when we can cite them — not every Member State and not every vendor myth. Coverage map lists what we still refuse to invent.

Is this legal advice?

No. If it were, you’d have a billable hour and a longer PDF. This is a dated operator reference written by an email geek. Confirm anything high-stakes with counsel who knows your facts. Same for “will this make me compliant?” — no tool does that. Lawyers and judges do. We say what the sources say and what to do first on Monday.

Why no trust score out of 100?

Because we refuse to invent a number you can’t audit. Fake scores sell seed tests and panic. You get findings, dates, and links. If that feels less exciting than a red dial, good — you’re not the red-dial customer.

Why should I trust you more than my ESP’s blog?

ESPs sell seats. Seed-score vendors sell fear. AI invents citations when nobody watches. We sell nothing today — no pixels, no placement scores, no affiliate — so we can say when a tool is the problem. A human verifies, dates, and corrects in public. Tools may help draft; they do not ship unsourced claims. Check the primary links. Fail that test and leave.

Do I need an account?

No. Filters live in this browser and the URL. Share the link. That’s it. Accounts come later only if they earn it — not so we can nurture you about email.

I’m an agency. Where’s multi-client mode?

We tried a client-name CRM on the setup card. It made the product feel like work before it felt useful. Role filters + copy link + one-page brief (optional PDF title) is enough for now. Complexity comes back when the free shelf is habit, not before.

Is the quiet changelog a bug?

No. Quiet means nothing material moved. We don’t invent urgency so the homepage looks “alive.” Sticky risks still show what usually needs a person when the market is still.