ACMA SMS Compliance Guide

Complete guide to Australian Communications and Media Authority regulations for SMS marketing

View Requirements Find Compliant Providers

Quick Navigation

Understanding ACMA Consent Requirements Sender Identification Opt-Out Requirements Industry-Specific Enforcement & Penalties

Understanding ACMA SMS Regulations

The Spam Act 2003

The Spam Act 2003 is Australian federal legislation that regulates commercial electronic messages, including SMS. It's enforced by the Australian Communications and Media Authority (ACMA) and applies to all businesses sending marketing messages to Australian mobile numbers.

Who Must Comply?

• All Australian businesses sending SMS marketing
• International businesses targeting Australian customers
• Third-party SMS service providers
• Marketing agencies sending on behalf of clients

Penalties for Non-Compliance

Individuals:Up to $2.75M per violation

Corporations:Up to $13.75M per violation

Additional penalties for serious or repeated breaches, with potential criminal charges for severe violations.

The Three-Part Test

Every commercial SMS must satisfy:

1. Consent: Recipient must have given permission
2. Identify: Sender must be clearly identified
3. Unsubscribe: Easy opt-out method must be provided

Sender Identification Requirements

Required Identification Elements

• Business name or trading name
• Contact information (phone, email, or address)
• Clear indication of who is sending the message
• Consistent identification across all messages

Acceptable Identification Methods

From: [Business Name]

[Business Name]: [Message content]

This message from [Business Name] - [Contact details]

Sender ID Best Practices

Choosing Effective Sender IDs

• Use recognizable business names
• Keep within 11 character limit for alphanumeric IDs
• Avoid special characters or spaces
• Register sender IDs with carriers when possible
• Maintain consistency across campaigns

Unacceptable Identification

✗ Generic sender IDs without business name
✗ Misleading or false business names
✗ Incomplete contact information
✗ Hidden or unclear sender identity

Opt-Out Requirements

STOP Keyword Requirements

• Must accept "STOP" keyword in any format
• Process opt-out requests within 5 working days
• Send confirmation of opt-out
• Maintain permanent opt-out lists
• Honor opt-outs across all message types

Alternative Opt-Out Methods

• Reply with specific keywords (UNSUBSCRIBE, REMOVE)
• Click-to-unsubscribe links
• Phone number for opt-out requests
• Email unsubscribe options
• Online preference centers

Opt-Out Processing

Immediate Actions Required

1. Stop sending marketing messages immediately
2. Add number to permanent opt-out list
3. Send confirmation message (if requested)
4. Update all relevant databases
5. Ensure opt-out applies to future campaigns

Opt-Out Confirmation Message

You have been removed from [Business Name] SMS marketing. You will no longer receive promotional messages. For questions, contact [Phone/Email].

Industry-Specific Compliance

Healthcare SMS

Additional Requirements:

• Privacy Act compliance for health information
• TGA regulations
• AHPRA guidelines
• Patient consent for health communications

Financial Services

Additional Regulations:

• ASIC requirements
• APRA guidelines
• Privacy Act for financial information
• AML/CTF Act compliance

Education Sector

Specific Requirements:

• Privacy Act for student information
• State education guidelines
• Parental consent for minors
• Safety4Schools certification

ACMA Enforcement and Penalties

Recent ACMA Actions

Major retailer (2023):$2.5M penalty

Telco company (2022):$1.8M penalty

Multiple warning notices issued for SMS marketing violations with increased focus on consent and opt-out compliance.

Common Violation Patterns

• Sending messages without proper consent
• Inadequate sender identification
• Poor opt-out mechanism implementation
• Continued messaging after opt-out requests

Investigation Process

How ACMA Investigates

• Complaint-driven investigations
• Proactive monitoring and surveillance
• Industry audits and compliance checks
• Cooperation with other regulatory bodies

Penalty Structure

Civil Penalties

• Warning notices for minor breaches
• Infringement notices for standard violations
• Court-imposed penalties for serious breaches

Criminal Penalties

• Prosecution for serious violations
• Imprisonment (up to 5 years)
• Director liability for corporate breaches

Compliance Management Systems

Compliance Checklist

Valid consent obtained and documented

Clear sender identification in all messages

Functional opt-out mechanism implemented

Opt-out requests processed within 5 days

Regular compliance audits conducted

Staff trained on ACMA requirements

Consent records maintained for 2+ years

Legal review of messaging practices

Technology Solutions

Essential Platform Features

• Automatic opt-out processing
• Consent management tools
• Audit trail capabilities
• Compliance reporting features
• Integration with CRM systems
• STOP keyword automation
• Message content filtering
• Delivery and engagement reporting

Best Practice Compliance Tips

Proactive Compliance Strategies

Stay Informed

• Subscribe to ACMA updates and alerts
• Participate in industry compliance forums
• Regular legal compliance reviews
• Monitor regulatory changes and updates
• Engage with compliance consultants

Technology Investment

• Use compliance-enabled SMS platforms
• Implement automated opt-out processing
• Deploy consent management systems
• Regular technology audits and updates
• Integration with legal and compliance tools

Continuous Improvement

Regular Process Review

Monthly compliance process evaluation

Quarterly technology assessment

Annual legal compliance review

Ongoing staff training and development

Documentation Requirements

• Comprehensive consent records
• Detailed opt-out processing logs
• Regular compliance audit reports
• Staff training documentation
• Technology system audit trails

Need Help Ensuring ACMA Compliance?

Don't risk penalties up to $13.75 million. Find ACMA-compliant SMS providers and get expert guidance on regulatory compliance.

Find Compliant SMS Providers Compare Provider Features

Loading ACMA compliance guide...

ACMA SMS Compliance Guide

Quick Navigation

Understanding ACMA SMS Regulations

The Spam Act 2003

Who Must Comply?

Penalties for Non-Compliance

The Three-Part Test

Consent Requirements

Types of Consent

Express Consent (Recommended)

Inferred Consent (Limited)

Obtaining Valid Consent

Best Practices

Invalid Consent Examples

Record Keeping Requirements

Required Documentation

Retention Requirements

Sender Identification Requirements

Required Identification Elements

Acceptable Identification Methods

Sender ID Best Practices

Choosing Effective Sender IDs

Unacceptable Identification

Opt-Out Requirements

STOP Keyword Requirements

Alternative Opt-Out Methods

Opt-Out Processing

Immediate Actions Required

Opt-Out Confirmation Message

Industry-Specific Compliance

Healthcare SMS

Additional Requirements:

Financial Services

Additional Regulations:

Education Sector

Specific Requirements:

ACMA Enforcement and Penalties

Recent ACMA Actions

Common Violation Patterns

Investigation Process

How ACMA Investigates

Penalty Structure

Civil Penalties

Criminal Penalties

Compliance Management Systems

Compliance Checklist

Technology Solutions

Essential Platform Features

Best Practice Compliance Tips

Proactive Compliance Strategies

Stay Informed

Technology Investment

Continuous Improvement

Regular Process Review

Documentation Requirements

Need Help Ensuring ACMA Compliance?

ACMA SMS Compliance Guide

Quick Navigation

Understanding ACMA SMS Regulations

The Spam Act 2003

Who Must Comply?

Penalties for Non-Compliance

The Three-Part Test

Consent Requirements

Types of Consent

Express Consent (Recommended)

Inferred Consent (Limited)

Obtaining Valid Consent

Best Practices

Invalid Consent Examples

Record Keeping Requirements

Required Documentation

Retention Requirements

Sender Identification Requirements

Required Identification Elements

Acceptable Identification Methods

Sender ID Best Practices

Choosing Effective Sender IDs

Unacceptable Identification

Opt-Out Requirements