Harper James is a UK full-service commercial law firm advising ambitious businesses on the laws of England and Wales, including data protection, commercial contracts and regulatory compliance. B2B marketing is not exempt from legal controls, and a campaign can create risk through its contact list, messaging, tracking technology or claims.
Classify each recipient before sending a campaign. Under the Privacy and Electronic Communications Regulations (PECR), marketing emails to limited companies generally do not require prior consent, but the message must identify the sender and provide a simple opt-out. Sole traders and some partnerships receive stronger protection. Email marketing to them requires consent or a valid soft opt-in, with clear records showing how the contact was collected and why the message was permitted.
The same discipline applies to telephone campaigns. Screen numbers against the Telephone Preference Service and, where relevant, the Corporate Telephone Preference Service. Keep an internal do-not-contact list and make sure agencies follow the same process. For a broader overview of related commercial legal developments, see this curated legal resource.
UK GDPR applies when a business processes personal data for lead generation, account-based marketing, event invitations or CRM activity. Before a campaign launches, document the lawful basis, provide a suitable privacy notice and explain profiling or enrichment where applicable. A legitimate interests assessment should address the business purpose, the data used, the recipient’s reasonable expectations and the objection mechanism. Cookies, pixels and similar technologies also require careful review, particularly where they are used to identify visitors or measure behaviour.
Marketing claims must be accurate, capable of substantiation and presented in a way that does not mislead the audience. The CAP Code applies to many non-broadcast marketing communications, including digital content. Keep evidence for performance claims, comparisons, testimonials, environmental statements and pricing. B2B status does not remove the need to respect advertising standards, intellectual property rights or confidentiality obligations.
Use a campaign checklist covering the data source, audience classification, lawful basis, suppression list, unsubscribe wording, privacy notice, claims evidence and approval owner. Record when consent was obtained, which wording was used and how opt-outs are processed. Review supplier contracts where an agency, CRM provider or email platform handles personal data, and confirm that data retention periods are defined.
The Data (Use and Access) Act 2025 is changing the UK data protection framework in stages, so compliance owners should track commencement dates and update notices, records and procedures when new provisions apply. A quarterly review of templates, consent records, vendor arrangements and complaint trends gives the board a practical view of marketing risk without slowing routine activity.