Washington State Texting Laws: CEMA Explained

Washington regulates text messaging through the Commercial Electronic Mail Act (CEMA), codified at RCW 19.190. Despite the name, CEMA is not just an email statute: since a 2003 amendment, it has prohibited initiating or assisting in the transmission of commercial electronic text messages to Washington residents' phones without the recipient's clear and affirmative consent. It is one of the oldest state texting laws in the country, and Washington courts have kept it very much alive.

This guide explains what CEMA covers, how it connects to Washington's Consumer Protection Act, and what organizations texting Washington numbers must do.

What CEMA Prohibits

The operative texting provision, RCW 19.190.060, makes it unlawful to initiate or assist in the transmission of an electronic commercial text message to a telephone number assigned to a Washington resident's cellular telephone or pager. RCW 19.190.070 pairs it with a damages provision. The key definitions:

• Commercial electronic text message: a text message sent to promote real property, goods, or services for sale or lease (RCW 19.190.010). The statute targets promotion, not all communication.
• Initiate or assist: liability reaches the sender and parties who substantially participate in sending, which can implicate platforms and marketing partners, not only the brand.
• Washington resident recipient: the statute protects Washington residents, so out-of-state senders texting Washington numbers are within its scope.

Unlike opt-out regimes, CEMA is an opt-in statute: the violation is sending the unsolicited commercial text at all, not failing to honor a subsequent request to stop. Consent must come first.

Penalties and the Consumer Protection Act Bridge

CEMA's teeth come from two connected provisions:

1. Statutory damages. RCW 19.190.070 sets recovery for a violating text at 500 dollars per message or actual damages, whichever is greater.
2. Consumer Protection Act violation. CEMA declares violations to be per se unfair or deceptive acts under Washington's Consumer Protection Act (RCW 19.86), which opens the door to CPA remedies, and CPA claims support class treatment. Washington plaintiffs have used this bridge repeatedly, and the Washington Supreme Court has interpreted CEMA in consumers' favor in text messaging litigation.

Because damages attach per message, broadcast campaigns to unconsented Washington numbers compound quickly, the same per-violation arithmetic that drives federal TCPA and Florida FTSA exposure.

What Counts as Consent Under CEMA

The statute frames the prohibition around unsolicited messages, so the compliance core is documented, affirmative permission before the first commercial text:

• A person who submits their number through your opt-in form, checks an unchecked consent box, or texts your keyword has solicited the messages described.
• Consent should be program-specific and recorded: the language shown, the timestamp, the number, and the source.
• A number obtained from a purchased list, a business card, or an unrelated transaction has not consented to marketing texts.

Building consent to the federal prior express written consent standard at 47 CFR 64.1200(f) satisfies CEMA's opt-in expectation as well, one more reason national programs standardize on written consent everywhere. The mechanics are covered in our guide to texting quiet hours and state rules and the state landscape in text message marketing laws by state.

What CEMA Does Not Cover

• Informational and transactional texts. Appointment reminders, service alerts, account notifications, and two-way conversations are not messages promoting goods or services for sale or lease. Keep promotional content out of those streams to preserve the classification.
• Consented marketing. CEMA prohibits unsolicited commercial texts; subscribers who asked are outside the prohibition.
• Noncommercial speech. Political, charitable-mission, and public-service messages are not commercial promotion under the definition, though federal TCPA rules and carrier requirements still apply to them.

CEMA in the National Compliance Stack

For a program texting recipients in many states, CEMA adds one hard requirement and one caution:

The caution: "assist in the transmission" language means agencies and platforms share the compliance burden, so vendors should be asking you for consent provenance. A platform that does not ask is a platform absorbing no risk on your behalf.

Complying in Practice

1. Collect affirmative, documented opt-in before the first marketing text to any number, Washington or otherwise.
2. Separate transactional and marketing streams so informational messages stay noncommercial.
3. Record consent evidence per subscriber and retain it for the life of the relationship and beyond.
4. Honor opt-outs instantly, which federal revocation rules require anyway.
5. Audit list sources: any segment whose consent you cannot trace should not receive commercial texts.

What Makes CEMA Distinctive Among State Laws

Set against the newer mini-TCPA statutes, CEMA has three features worth understanding on their own terms:

1. It predates the category. Washington regulated commercial texts in 2003, nearly two decades before Florida's amendment launched the modern wave. That longevity means a developed body of Washington case law exists, including state supreme court interpretation favorable to consumers, so CEMA claims arrive with fewer open questions than claims under younger statutes.
2. It regulates the message, not the machine. The FTSA and OTSA turn on how a message was sent, through an automated system. CEMA does not care about the sending technology at all: an unsolicited commercial text violates it whether sent by platform, by hand, or one at a time. There is no Duguid-style definitional escape, because there is no automation element to argue about.
3. The CPA bridge multiplies remedies. By declaring violations per se unfair acts under the Consumer Protection Act, the legislature connected texting claims to an enforcement statute with its own remedies and class action pathway, a structure other states have since copied in spirit.

For program design, the distinctive features converge on the same instruction as everywhere else, but with less wiggle room: consent before the first commercial message, provable per subscriber, no exceptions argued from technology.

Auditing a List for CEMA Exposure

Because CEMA liability turns entirely on consent-before-send, the audit is a list exercise. Segment your marketing audience by consent provenance and the picture draws itself:

• Documented opt-ins through your forms, keywords, and paper flows, with language and timestamps preserved: clean under CEMA and everything else.
• Imported contacts from event registrations, partner lists, or CRM history where messaging consent was never specifically captured: these are the exposure. Washington numbers in this segment should not receive commercial texts until re-permissioned through a non-SMS channel.
• Aged opt-ins with weak documentation from platform migrations: reconstruct what you can from old form versions and message logs, and where reconstruction fails, treat the contacts as unconsented.

The re-permissioning play is straightforward and worth stating: invite the gray segments to opt in via email or web, capture fresh consent with full disclosures, and let silence retire the rest. Lists shrink when audited this way, and the shrinkage is the point: every contact removed was a per-message statutory damages candidate, and the contacts that remain are the ones who actually want the messages, which is what deliverability algorithms reward anyway.

Frequently Asked Questions

Does CEMA apply if my organization has no presence in Washington?

Yes. The statute protects Washington residents, so texting a Washington resident's number brings the message within its scope regardless of the sender's location.

How do I know a number belongs to a Washington resident?

You often cannot know with certainty from the number alone, which is why programs treat area codes, subscriber-provided addresses, and any known location signals conservatively, and, more simply, why they do not send commercial texts to anyone without opt-in consent.

Is there a cure period or warning requirement before a CEMA claim?

No. The violation is complete when the unsolicited commercial text is received. There is no STOP-first requirement or cure window equivalent to Florida's amended FTSA.

Are nonprofit fundraising texts covered by CEMA?

CEMA defines commercial texts as promoting property, goods, or services for sale or lease. A pure donation appeal is not a sale, but messages promoting event tickets, merchandise, or auctions can cross the line. Nonprofits should treat anything transactional as commercial and rely on documented opt-in throughout.

What is the difference between CEMA and the TCPA?

The TCPA is a federal statute focused on how messages are sent (automated dialing, prerecorded voice) and telemarketing conduct; CEMA is a state statute focused on what is sent (unsolicited commercial texts) to Washington residents. They overlap but neither replaces the other: a compliant program satisfies both.

Opt-In First, Everywhere

FRANSiS enforces documented opt-in before any marketing message, separates transactional streams, and keeps the per-subscriber consent records that satisfy CEMA, the TCPA, and every state in between. Contact us to review your list consent, and see our security page for how those records are safeguarded.