Under CASL, businesses must obtain consent before sending commercial electronic messages (CEMs). There are two types of consent: express and implied. Express consent is obtained when a recipient opts in to receive emails, while implied consent can occur through an existing business relationship. Additionally, all emails must include an unsubscribe mechanism and identify the sender clearly.