If your company installs or directs the installation of programs on someone’s computer (e.g., browser extensions, etc.) then you need to keep Canada’s Anti-Spam Legislation (CASL) in mind.
Generally speaking, (as in some circumstances you might be considered to already have consent in relation to java script, HTML, cookies, etc.), under CASL if you are going to ‘install or cause to be installed a computer program on any other person’s computer system in the course of a commercial activity’ then you need to obtain express and meaningful consent.
A real world example of this was where a company (among other CASL violations) installed a chrome extension that collected personal information without meeting the consent requirements. This resulted in them agreeing to pay a $100,000 penalty.
