The Short Answer: Yes, But Compliance Owns the Outcome

Yes — someone in Canada can text someone in the US, and nothing in the regulatory landscape stops it. But for businesses sending texts to US customers, the real question isn't whether the message can cross the border. It's whether it gets delivered — and that depends entirely on consent and compliance, not geography.

On the legal floor, the picture is clear. The US Department of Justice's final rule restricting cross-border data transactions with "countries of concern" — effective April 8, 2025 — explicitly exempts telecommunications services, and Canada is not on any list of concern. Both governments have also formally committed to preserving the cross-border flow of data between allies, calling it critical to our economic well-being at the 2024 US–Canada Cross Border Crime Forum held in Washington, D.C. on July 12, 2024.

Regulators are actively cooperating, too. On August 29, 2024, the FCC and Canada's Privacy Commissioner signed an MOU covering mutual assistance, complaint sharing, and investigative cooperation for telecom carriers. As FCC Chairwoman Jessica Rosenworcel put it, protecting consumer privacy matters "in today's world, where access to consumers' personal information is not limited by devices, or borders."

So the border is not the barrier. The barrier is what happens after you hit send.

Person-to-person texts face almost no friction. Business texts face a completely different standard. US carriers require business messaging to be registered under A2P 10DLC rules, and messages sent without proper consent documentation, registration, and opt-out handling get filtered or blocked before they ever reach a customer's phone. For a Canadian business texting US customers — or a US business using a Canada-based service like CallMyLeads — that framework applies regardless of where the sender sits.

What that means in practice:

• Consent must be explicit and documented before the first business text goes out.
• Business sending numbers must be registered under US carrier rules (A2P 10DLC).
• Telemarketing quiet-hours rules and immediate opt-out handling are non-negotiable.
• Unregistered or non-compliant traffic gets blocked by carriers — not by the border.

There's a further wrinkle worth knowing: Canada and the US take different approaches to digital privacy. Canadian courts have rejected the US "third-party doctrine" since the early 1990s, and the Supreme Court of Canada stated plainly in 2024 that "our approach is distinct from the United States." A Canada-based provider operating under that stricter privacy tradition can be an advantage when US customers ask where their data goes.

The takeaway is simple. A text from Halifax to Houston works the same as one from Houston to Dallas — technically and legally. What determines the outcome is whether the sender did the compliance work first.

What the Regulators Actually Agree On

When regulators on both sides of the border speak about Canada–US communications, the message is remarkably consistent: keep the data flowing, and cooperate when something goes wrong. For businesses that text customers across the border — like a Halifax-based company such as CallMyLeads serving US clients — that regulatory posture matters.

No prohibition exists in US rules. The Department of Justice's final rule restricting data transactions with "countries of concern" (28 CFR Part 202, effective April 8, 2025) includes a telecommunications services exemption under Section 202.509 — and Canada does not appear on any list of countries of concern. In plain terms, the strictest US data-security rule on the books carves out exactly the kind of traffic texting represents.

The goodwill flows both directions. At the July 12, 2024 meeting of the US–Canada Cross Border Crime Forum in Washington, D.C., both governments formally agreed on "the need to preserve the cross-border flow of data between allies and partners that is critical to our economic well-being." That language treats cross-border data movement as something to protect, not restrict.

Regulators are also actively coordinating enforcement. On August 29, 2024, the FCC and Canada's Office of the Privacy Commissioner signed a memorandum of understanding covering mutual assistance, complaint sharing, investigative help, and bilateral training for telecom carriers. Canada's Privacy Commissioner Philippe Dufresne put it plainly: in a world where information flows transcend borders, "information sharing and enforcement cooperation with international partners is essential."

Three takeaways form the factual backbone here:

• No researched US regulation bars Canada–US texting — the DOJ rule exempts telecom services and omits Canada from its countries of concern.
• Both governments committed in 2024 to preserving cross-border data flows between allies as critical to economic well-being.
• The FCC and Canada's Privacy Commissioner are formally cooperating on telecom privacy enforcement as of August 2024.

For any business texting across this border, the practical read is straightforward: the regulatory direction supports open, compliant communication rather than blocking it. Regulators are coordinating, not prohibiting. That's why services operating across the border — handling lead follow-up, appointment reminders, and customer texts for US businesses — can run confidently within standard consent and carrier rules. The compliance work happens at the level of consent, disclosure, and opt-outs, not at the border itself.

One honest caveat: these sources cover privacy enforcement and data-flow policy, not the specific consent statutes that govern commercial texting in each country. Those rules still apply on each side of the border — but nothing in the regulatory record suggests the border itself is a barrier.

The Privacy Divergence That Affects Your Data

When your text crosses the Canada–US border, it passes through two legal systems that disagree on a fundamental question: does sharing your data with a carrier strip it of privacy protection? In the United States, the answer has long been yes. In Canada, the courts say no — and that difference matters for any business texting across the border.

The US has followed the "third-party doctrine" since the 1970s, which removes privacy protection from data you share with third parties like phone carriers. Canadian courts rejected that doctrine back in the early 1990s, and the Supreme Court of Canada made the split explicit in 2024, stating that "[o]ur approach is distinct from the United States" on privacy rights.

This divergence is a genuine trust signal for cross-border business communication. When a Canadian company handles message data for US clients, that data sits under a legal tradition with stronger baseline protections — one where sharing information with a service provider does not automatically extinguish your reasonable expectation of privacy.

The cooperation between the two countries reinforces this. On August 29, 2024, the FCC and the Office of the Privacy Commissioner of Canada signed a memorandum of understanding covering mutual assistance, complaint sharing, and investigative cooperation — all aimed at ensuring telecom carriers handling users' personal data adhere to privacy and cybersecurity standards. As FCC Chairwoman Jessica Rosenworcel put it, "access to consumers' personal information is not limited by devices, or borders."

For a Halifax-based service like CallMyLeads, which handles lead response and appointment-setting for US businesses, this legal backdrop aligns naturally with a consent-first operating model:

• Canadian privacy law treats carrier-shared data as still deserving of protection, not forfeited.
• Regulators on both sides of the border now formally cooperate on telecom privacy enforcement.
• Explicit consent collection and immediate opt-out honoring match the stricter of the two privacy philosophies.
• Transparent AI disclosure fits a jurisdiction where courts have warned that unregulated surveillance could "annihilate any expectation that our communications will remain private."

One caveat deserves honest treatment. Proposed Canadian legislation — Bill C-22, the Lawful Access Act — combined with a potential CLOUD Act agreement could let US law enforcement access Canadian data, including texts, directly from Canadian tech companies. Canada–US CLOUD Act negotiations have been ongoing since 2022, and critics note that a Canadian user's texts with someone under US investigation could be incidentally collected.

It is important to frame this correctly: Bill C-22 and the CLOUD Act are law-enforcement access issues, not commercial texting rules. They do not change what a business may text, to whom, or with what consent. They concern who governments can compel companies to hand data to — a separate question from day-to-day compliance.

The practical takeaway is straightforward. Cross-border texting between Canada and the US operates in an environment where both governments have agreed to preserve cross-border data flows between allies, and where the Canadian side of the transaction carries a stronger privacy tradition. Businesses that build consent, disclosure, and opt-out into every message are not just following the rules — they are matching the direction both legal systems are heading.

How CallMyLeads Handles Cross-Border Compliance Today

The regulatory floor for cross-border texting isn't a barrier — it's a foundation. U.S. rules explicitly exempt telecommunications services from data-restriction orders and do not designate Canada as a country of concern, while both governments have formally committed to preserving cross-border data flows between allies. That clarity lets a Halifax-based service operate on established compliance rails rather than navigate legal gray zones.

• A2P 10DLC registration with U.S. carriers — business texting fully registered under carrier rules
• Explicit consent collected at every booking point before the first message sends
• Immediate, automatic opt-out honoring the moment a lead replies STOP
• Quiet-hours enforcement aligned with telemarketing laws so texts never land at 2 a.m.
• HIPAA-aligned configurations for dental and medical clients — approved scripts only, no diagnosis or treatment advice
• Known spam and robocall numbers screened before they ever reach a calendar

The FCC and Canada's Privacy Commissioner formalized their cooperation on telecom privacy enforcement with an MOU signed August 29, 2024, covering mutual assistance, complaint sharing, and investigative coordination. That regulator-to-regulator alignment means the compliance standards CallMyLeads already follows — consent-first messaging, instant opt-out, quiet-hours guardrails — are the same standards both countries' authorities expect. Canadian courts have also rejected the U.S. third-party doctrine, with the Supreme Court stating in 2024 that Canada's privacy approach "is distinct from the United States," a divergence that reinforces higher default protections for data handled north of the border.

For U.S. home-service, dental, and med-spa clients, the practical result is simple: every lead gets a compliant, consent-backed response in seconds, 24/7/365, without the client managing carrier registrations or privacy configs. The Canadian base isn't a workaround — it's an operational advantage backed by the same regulatory framework the research confirms exists.

What to Verify Before You Send (And What We Handle for You)

Texting across the border is the easy part — the compliance work happens before the first message ever goes out. With regulators on both sides actively cooperating (the FCC and Canada's Privacy Commissioner signed a formal enforcement MOU in August 2024, per official reporting), a business that cuts corners on texting compliance leaves itself exposed in two countries at once.

The good news: no US rule bars Canada-to-US messaging. The DOJ's data-security rule that took effect April 8, 2025 explicitly exempts telecommunications services and does not list Canada as a country of concern, according to the Federal Register. Both governments have also formally committed to preserving cross-border data flows between allies, as noted in the 2024 Cross Border Crime Forum communique. What that means in practice: you can text your US leads freely — if your house is in order.

Before your first cross-border campaign, run through this checklist:

• Confirm A2P 10DLC registration — US carriers require business texting to run through approved brand and campaign registration. Unregistered traffic gets filtered or blocked.
• Document consent for every contact — record where each lead came from and that they agreed to hear from you. Your booking flow should capture explicit consent at the point of contact.
• Enforce quiet hours in the recipient's time zone — a 9 PM text in Halifax is a 5 PM text in Los Angeles, but the rules follow the recipient, not the sender.
• Automate opt-out processing — an unsubscribe request must stop messages immediately, not at the next business day.
• Screen known spam numbers — junk calls and robocalls should be filtered out before they waste your team's time (or your per-minute budget).

That list is exactly what CallMyLeads handles as part of its done-for-you setup. Lead sources get connected first, so consent trails are clean from the start. Response rules, quiet-hour windows, and opt-out handling are configured for you. Everything flows into your existing CRM and calendar, and source-to-booking tracking shows where every lead came from and what happened to it. Screened spam and robocalls are never billed — only minutes spent on real leads count.

One more reason to get this right from day one: cross-border data handling is an actively debated policy area. Canadian courts have taken a distinct approach to privacy from the US since the early 1990s, and the Supreme Court of Canada reiterated in 2024 that its framework differs from America's, as academic analysis notes. A consent-first setup protects you no matter how that debate evolves.

Ready to stop paying for leads you never get to talk to? Book a free 15-minute scoping call — we'll confirm the right plan for your call volume and get your cross-border texting compliant from day one. Every lead answered in seconds, 24/7/365.