From www.holmanwebb.com.au: Under the Spam Act 2003 (Cth), businesses cannot send unsolicited commercial electronic messages without prior consent from the recipient, with both express and inferred consent being acceptable.

An exception exists for designated commercial electronic messages, which can be sent without consent if they consist solely of factual information with specific additional details, but must avoid any inference of marketing.

Violations of the Spam Act can result in significant penalties, with companies facing fines up to $3.3 million per day for breaches, as illustrated by the Commonwealth Bank’s recent fine for sending unsolicited messages.