Starting today, it's illegal in Canada for a website to automatically install software on your computer.

Your consent is now also required for updates to apps on your smartphone or tablet.

The latest provision of Canada's anti-spam law to come into effect specifies that businesses installing software or computer programs on another person’s computer over the internet must have their explicit consent — "implied" consent is not enough. There are some exemptions to the requirement, including bug fixes, operating systems cookies, HTML and Javascript.

Companies must also:

Clearly disclose to users if its software could collect personal information, interfere with the normal operation of a computer, alter settings or preferences or data on a computer or allow a third party to access a computer. Those who fail to comply may be fined up to $10 million.

The law targets malware and spyware, but is controversial because it will also affect those who make or deal with legitimate software.

A previous part of the law targeting traditional email spam went into effect on July 1. It requires consent in order to send messages to customers via email, social media or instant messaging.

The messages must identify the sender, be truthful and allow the customer to unsubscribe.