GDPR and Cold Email: What You Can (and Can't) Do

Quoted on this wiki

Every place a page here uses this source, in the order the words come in it.

1. Understanding the legal basis for cold email “GDPR requires a "lawful basis" for processing personal data — and an email address is personal data.” Consent

   In GDPR and ePrivacy

2. “If you send cold emails to prospects in Europe — or if your company is based there — GDPR applies to you, regardless of where your servers are located.” The good news: GDPR does not ban cold email. The bad news: most people get compliance wrong, either by being too cautious (and missing out on a massive market) or too reckless (and exposing themselves to serious fines). This chapter gives you a practical, actionable framework for B2B cold outreach under GDPR — not a legal opinion, but the operational playbook that thousands of compliant senders follow every day.

   In GDPR and ePrivacy

3. Consent “Consent means the individual has explicitly agreed to receive your communications.” Legitimate interest

   In GDPR and ePrivacy

4. The General Data Protection Regulation (GDPR) is the most comprehensive data privacy framework in the world, and it governs how you can contact anyone in the European Union or European Economic Area. If you send cold emails to prospects in Europe — or if your company is based there — GDPR applies to you, regardless of where your servers are located. “The good news: GDPR does not ban cold email.” This is not legal advice

   In GDPR and ePrivacy

5. “If you send cold emails to prospects in Europe — or if your company is based there — GDPR applies to you, regardless of where your servers are located.” The good news: GDPR does not ban cold email. The bad news: most people get compliance wrong, either by being too cautious (and missing out on a massive market) or too reckless (and exposing themselves to serious fines). This chapter gives you a practical, actionable framework for B2B cold outreach under GDPR — not a legal opinion, but the operational playbook that thousands of compliant senders follow every day.

   In GDPR territorial scope

6. Understanding the legal basis for cold email “GDPR requires a "lawful basis" for processing personal data — and an email address is personal data.” Consent

   In Prospecting transparency notices

7. Understanding the legal basis for cold email “There are six lawful bases in GDPR, but for cold B2B outreach, only two are relevant: consent and legitimate interest.” Consent

   In Prospecting transparency notices

Quotes are verbatim and belong to their publishers. Where a quote has been translated, the original wording is kept below it.