The most devastating aspect of CASL:
You cannot just collect an email on a form, you MUST get a positive opt in, ie check a box saying I agree to be emailed ads and RECORD that check box as being checked. Otherwise they are only giving you their email for transactional emails.
This means emails collected that do not have this check box may need to be removed from your list once the law goes into effect.
And btw, there are serious fines and jail time for not following the rules.
There are exceptions and nothing is finalized yet but is anyone worried about this? Anyone take away something different from the proposed rules than what I did?