UK marketing email needs prior consent.

PECR regulation 22(2): no unsolicited direct-marketing email to individual subscribers in the UK unless they have previously consented — save the regulation 22(3) exceptions.

United Kingdom PECR PECR regulation 22(2)

The rule.

The Privacy and Electronic Communications (EC Directive) Regulations 2003 (SI 2003/2426) · PECR regulation 22(2)

“unless the recipient of the electronic mail has previously notified the sender that he consents for the time being to such communications being sent by, or at the instigation of, the sender”

Verbatim extract, read on 4 November 2026 from the source below. Everything else on this page is NorthPoint’s plain-English reading.

What it requires.

  • No unsolicited direct-marketing email to individual subscribers unless the recipient has previously told the sender they consent, for the time being, to such communications from that sender.
  • Instigating counts: commissioning a partner or affiliate to send is within the rule. The exceptions are the soft opt-in in 22(3) and, for charities, 22(3A).

Who it applies to.

Anyone transmitting, or instigating the transmission of, unsolicited direct-marketing email to individual subscribers in the UK — including a business that pays an affiliate to send it.

Common violations in marketing copy.

Violation pattern · affiliate send

An affiliate emails its list about your exchange for a per-sign-up fee

You instigated the transmission; the recipients consented to the affiliate, not to you.

Violation pattern · consent to someone else

Co-registration list where consent named 'selected partners'

Consent must be to communications from, or instigated by, the sender.

Non-compliant vs compliant.

Non-compliant · example written by NorthPoint

“We rented a UK investor list — the provider says they're all opted in.”

Compliant · example written by NorthPoint

“UK email goes only to people who opted in to email from [Company] on our own form, plus customers under the soft opt-in.”

Related rules.

Source.

InstrumentThe Privacy and Electronic Communications (EC Directive) Regulations 2003 (SI 2003/2426)
ProvisionPECR regulation 22(2)
Primary sourcehttps://www.legislation.gov.uk/uksi/2003/2426/regulation/22
Official texthttps://www.legislation.gov.uk/uksi/2003/2426/contents
Read fromlegislation.gov.uk, revised text
Checked

This page is general, sourced information for marketing teams, not legal advice. The examples are written by NorthPoint to illustrate the rule; for a binding view on your own promotion, retain qualified counsel in the jurisdiction concerned.

Know before a regulator does.

Paste a URL or your copy — the full verdict lands in seconds. Free, no signup.