emailrules.today
In forceLegalIn force 31 Oct 2003

EU B2B email has no blanket legitimate-interest permission

Can legitimate interest justify cold B2B marketing email across the EU?

European Union · France · Germany

In one sentence

There is no EU-wide “B2B legitimate interest” free pass — France may allow careful B2B; Germany still wants or the customer exception.

Plain English

Member States differ. Some B2B email can rest on legitimate interest or professional contact rules with easy in places like France; Germany is far stricter. “We’re B2B so GDPR is fine” is not a strategy. Map the country of the recipient, not only your HQ.

Why it matters. One Klaviyo segment labelled “EU B2B” without country logic is how legal risk hides in a filter name.

Dotted words open definitions. Full glossary.

What to do

Your move — not a lecture

This one needs you

No platform does this for you. One concrete move, then you are done.

Nothing automatic. will send whatever you load.

Your part: National channel law, role-relevance analysis, and suppression of objectors.

What to do first

Split your EU B2B cold list by country. Apply French professional-relevance rules and German rules separately. Delete the single "EU B2B" playbook.

You can skip this if: You only email consumers under clear , or never email the EU.

Who this applies to

B2B marketers sending cold or semi-cold email into the EU, especially France and Germany.

Checklist

  • 01Never treat GDPR Article 6(1)(f) alone as email .
  • 02For France, keep professional relevance and per-message objection.
  • 03For Germany, use express or full §7(3) exception.
  • 04Do not generalise France/Germany conclusions to unresearched Member States.

That’s enough to act. Sources and exact wording are below for counsel, bosses, or AI tools that need a citation. Not legal advice.

Proof

Exact position, enforcement, sources

For records and people who will check you. Skip if Monday’s move is already clear.

The exact position

Article 13 sets rules for natural persons and leaves non-natural-person protection to Member States. That is not one EU-wide B2B cold-email licence. France's CNIL allows professional-relevance prospecting without systematic prior consent if information and duties are met. Germany's UWG requires prior express consent for advertising email, including to business mailboxes, subject only to the four-part customer exception. GDPR legitimate interests do not override national channel rules.

What happens if you do not

National rules and private claims (especially Germany) matter more than a single EU fine headline. No matched recent CNIL B2B monetary case was verified solely on professional-relevance email in the research pass.

Sources

Related

History of this page

  • Added France/Germany B2B contrast.

FAQ

Awkward questions

Who is this actually for?

People who ship email and are too busy to re-read every PDF: week-one marketers, lifecycle/CRM, deliverability, multi-country ops, DTC brands, agencies — on Klaviyo, Mailchimp, Braze, HubSpot, SFMC, or something else. Pick your tool and geos so product-specific pages only appear when they match. EU and UK are first-class filters. Not for people who sell tools about email and need a fake score to demo.

Why only ~40 rules? Isn’t that… thin?

On purpose. A wall of 400 undated “best practices” is how you look busy and still get burned. Every page needs a primary source we actually read. Thin and checkable beats fat and folklore. Europe, bulk inbox rules, measurement honesty, and protocol topics like BIMI/DMARC policy are on the shelf when we can cite them — not every Member State and not every vendor myth. Coverage map lists what we still refuse to invent.

Is this legal advice?

No. If it were, you’d have a billable hour and a longer PDF. This is a dated operator reference written by an email geek. Confirm anything high-stakes with counsel who knows your facts. Same for “will this make me compliant?” — no tool does that. Lawyers and judges do. We say what the sources say and what to do first on Monday.

Why no trust score out of 100?

Because we refuse to invent a number you can’t audit. Fake scores sell seed tests and panic. You get findings, dates, and links. If that feels less exciting than a red dial, good — you’re not the red-dial customer.

Why should I trust you more than my ESP’s blog?

ESPs sell seats. Seed-score vendors sell fear. AI invents citations when nobody watches. We sell nothing today — no pixels, no placement scores, no affiliate — so we can say when a tool is the problem. A human verifies, dates, and corrects in public. Tools may help draft; they do not ship unsourced claims. Check the primary links. Fail that test and leave.

Do I need an account?

No. Filters live in this browser and the URL. Share the link. That’s it. Accounts come later only if they earn it — not so we can nurture you about email.

I’m an agency. Where’s multi-client mode?

We tried a client-name CRM on the setup card. It made the product feel like work before it felt useful. Role filters + copy link + one-page brief (optional PDF title) is enough for now. Complexity comes back when the free shelf is habit, not before.

Is the quiet changelog a bug?

No. Quiet means nothing material moved. We don’t invent urgency so the homepage looks “alive.” Sticky risks still show what usually needs a person when the market is still.