Email Marketing Compliance in Europe — GDPR, ePrivacy and Country-Specific Rules 2026

Email marketing compliance in Europe is not uniform. GDPR sets a baseline, but each EU member state has national implementing legislation that creates meaningful differences between markets. Germany is significantly stricter than the Netherlands. France has specific CNIL guidance that differs from German court interpretations. The UK operates independently under UK GDPR post-Brexit. This guide maps the compliance landscape across the major European B2B markets.

GDPR Basics for B2B Email — The Legitimate Interest Basis

GDPR does not prohibit cold email. It requires a lawful basis for processing personal data, and for B2B cold email, that basis is legitimate interest under Article 6(1)(f). A Legitimate Interest Assessment (LIA) that documents three things establishes the basis: your legitimate commercial interest in reaching the contact, the necessity of processing their data to achieve that interest, and a balancing test confirming the contact's privacy interests do not override your commercial interest for professionally relevant outreach. The balancing test is straightforward: the contact published their professional email for business contact purposes, your message is professionally relevant, the contact can easily opt out, and the processing is proportionate.

Country-Specific Rules — Germany, France, Netherlands, UK

Germany: strictest interpretation in Europe. The UWG Section 7 adds a layer above GDPR. German courts have held that prior consent or an existing customer relationship is required in many cases. Legitimate interest is available but requires a stronger proportionality argument and detailed LIA documentation. Maintain clean suppression lists and process opt-outs immediately.

France: the CNIL has published specific guidance stating that B2B cold email to professional email addresses of employees is permissible under legitimate interest when the message is relevant to the recipient's professional function. French-language campaigns perform significantly better. CNIL actively investigates complaints.

Netherlands: the AP (Autoriteit Persoonsgegevens) applies a standard GDPR legitimate interest analysis. More permissive than Germany and France. KVK cross-referencing for company verification.

UK: operates under UK GDPR and PECR independently from the EU post-Brexit. ICO enforcement is less aggressive than CNIL or German authorities for B2B email. Companies House cross-referencing is the data quality standard.

ePrivacy Directive and the B2B Exemption

The ePrivacy Directive governs electronic communications and requires consent for unsolicited commercial messages sent to subscribers. The critical B2B distinction: most EU member states implement ePrivacy in a way that exempts B2B email to corporate addresses of employees acting in their professional capacity from the consent requirement, permitting legitimate interest as the basis instead. The UK's PECR makes the same distinction explicitly. The pending ePrivacy Regulation (in legislative limbo since 2017) is expected to maintain this professional email address exemption when eventually adopted.

Practical Compliance Checklist for European B2B Email

(1) Complete a Legitimate Interest Assessment documenting your commercial purpose, necessity, and balancing test — save it. (2) Verify that your data was sourced from public business directories, published professional profiles, or registries. (3) Include sender's full legal name and contact details in every email. (4) Ensure unsubscribes are processed immediately and added to a global suppression list. (5) Store LIA documentation and opt-out records for at least 3 years.

European Market Performance by Compliance Tier

Permissive tier (Netherlands, UK, Ireland, Scandinavia): open rates 14-24%, reply rates 1.5-4.5%. Moderate tier (France, Spain, Italy, Belgium): open rates 13-20%, reply rates 1.2-3.5%. Strict tier (Germany, Austria): open rates 12-18%, reply rates 1.0-2.8%. Eastern EU (Poland, Czech Republic, Romania, Hungary): open rates 14-22%, reply rates 1.5-3.5% — less saturated inboxes and moderate regulatory environments produce above-average performance relative to GDP per capita. All European benchmark data is available at B2B Data Index country benchmarks.