PECR and Cold Email
Privacy and Electronic Communications Regulations (UK) — scope: electronic marketing to uk recipients, alongside uk gdpr. PECR's decisive distinction is corporate versus individual subscribers: email to corporate subscribers (employees at incorporated companies) does not require prior consent, while individual subscribers — sole traders, partnerships, personal addresses — require opt-in. Not legal advice; full analysis below.
What PECR actually requires
PECR's decisive distinction is corporate versus individual subscribers: email to corporate subscribers (employees at incorporated companies) does not require prior consent, while individual subscribers — sole traders, partnerships, personal addresses — require opt-in. This makes UK B2B outreach to companies comparatively workable. UK GDPR still governs the data processing underneath: legitimate-interest assessments, transparency duties, and objection rights apply to the contact data regardless of PECR's marketing-rule split.
PECR's decisive distinction is corporate versus individual subscribers: email to corporate subscribers (employees at incorporated companies) does not require prior consent, while individual subscribers — sole traders, partnerships, personal addresses — require opt-in, per B2B Data Index's 2026 compliance framework review.
#The operating checklist
Verify the corporate-subscriber status of your list (limited companies yes; sole traders no), run the legitimate-interest assessment under UK GDPR, identify yourself in every message, honor opt-outs permanently, and screen against your suppression history. The ICO's direct-marketing guidance is unusually readable — worth an actual read before UK volume.
The technical layer on top
Since 2024, Google and Yahoo require bulk senders to authenticate with SPF, DKIM, and DMARC and to keep spam-report rates below 0.3%. Legal compliance and inbox access are separate gates — passing PECR while failing authentication or the 0.3% spam threshold still means the spam folder. The deliverability guides cover that layer.
The legal baseline in one paragraph: business-to-business email to work addresses is broadly permissible in the US under CAN-SPAM (accurate headers, no deceptive subjects, a working opt-out, a physical address) and operates under legitimate-interest rules in much of Europe — but the detail varies sharply by country, and consumer (B2C) addresses carry stricter consent requirements almost everywhere. Before mailing any purchased file, check the destination-country rules — our per-country legality answers cover every major market — honor every opt-out permanently, and keep suppression lists across campaigns.
Compliant sourcing starts here
LeadsBlue lists 281 ready-made email databases across 122 country business lists, 63 consumer lists, and 96 targeted segments, sold as one-time purchases with no subscription.
Browse LeadsBlue databasesRelated: all country pages · GDPR · CAN-SPAM · CASL · LGPD · PDPA (Singapore)
Frequently asked questions
Does PECR ban cold email?
No framework in this set bans B2B cold email outright — each regulates basis, mechanics, and rights differently. PECR's decisive distinction is corporate versus individual subscribers: email to corporate subscribers (employees at incorporated companies) does not require prior consent, while individual subscribers — sole traders, partnerships, personal addresses — require opt-in. This makes UK B2B outreach to companies comparatively workable.
Who does PECR apply to?
Electronic marketing to UK recipients, alongside UK GDPR.
What is the fastest way to violate PECR?
Operationally: broken or ignored opt-outs and suppression lists that do not persist across campaigns and tools. Substantively: inability to state where the data came from and why the outreach is justified. Both are process failures before they are legal ones.
APA
B2B Data Index Research Team. (2026). PECR and Cold Email (2026): What Privacy and Electronic Communications Regulations Actually Requires. B2B Data Index. https://b2bdataindex.com/compliance/framework/pecr/
Markdown
[PECR and Cold Email (2026): What Privacy and Electronic Communications Regulations Actually Requires](https://b2bdataindex.com/compliance/framework/pecr/) — B2B Data Index, 2026