UK PECR rules: get consent, or use soft opt-in only when every part fits — contact details obtained in a sale or negotiation of a sale, similar products or services, opt-out offered at collection and in every message. Purchased lists are not soft opt-in. Charities have a narrow extra route; do not copy it for commerce.

In forceLegalIn force 11 Dec 2003Verified 2 Aug 2026

In the UK, marketing email to individuals needs consent or a complete soft opt-in

Q: When does PECR soft opt-in allow emailing UK consumers without prior consent?

PECR regulation 22 requires prior consent for unsolicited direct-marketing email to individual subscribers unless every soft-opt-in condition holds: you obtained details during a sale or negotiations for a sale of your own products/services; you market your own similar products/services; and a simple free opt-out was offered at collection and in every message. Bought lists cannot inherit soft opt-in. From 5 February 2026 a separate charity soft-opt-in exists under DUAA amendments. Corporate subscribers are treated differently from individuals and sole traders.

Q: What happens if you do not?

ICO has issued monetary penalties for PECR email failings (see public notices such as HelloFresh and others). Consent quality and suppression failures are the usual story.

When does PECR soft opt-in allow emailing UK consumers without prior consent?

United Kingdom

How email works

In one sentence

UK marketing email needs or a complete (sale, similar products, at capture and in every mail) — bought lists fail on arrival.

Emailrules interpretation

UK rules: get , or use only when every part fits — contact details obtained in a sale or negotiation of a sale, similar products or services, offered at collection and in every message. Purchased lists are not soft . Charities have a narrow extra route; do not copy it for commerce.

Why it matters. UK is not “almost like the US.” is a four-part lock, not a vibe.

Dotted words open definitions. See how email actually works.

What to do

Your move — not a lecture

Part platform, part you

The platform covers the mechanical bit. The judgement is still yours.

and preference centres cover the mechanical opt-out.

Your part: Whether conditions were ever true, and charity-route eligibility.

What to do first

Pick your highest-volume UK welcome flow. Write which route it uses ( vs vs corporate). If you cannot, that is the gap.

You can skip this if: You never email individual subscribers in the UK.

Who this applies to

Anyone emailing UK individual subscribers (including many sole traders).

Checklist

01Do not buy UK consumer lists and call it .
02Keep collection-time evidence for .
03Treat sole traders carefully—they may be individual subscribers.
04If you are a charity, read the 5 February 2026 route before relying on it.

That’s enough to act. The exact wording, the enforcement record and every primary source sit under Proof & sources, for counsel, bosses, or AI tools that need a citation. Not legal advice.

Proof

Exact position, enforcement, sources

For records and people who will check you. Skip if Monday’s move is already clear.

Source fact

regulation 22 requires prior for unsolicited direct-marketing email to individual subscribers unless every condition holds: you obtained details during a sale or negotiations for a sale of your own products/services; you market your own similar products/services; and a simple free was offered at collection and in every message. Bought lists cannot inherit soft . From 5 February 2026 a separate charity soft-opt-in exists under DUAA amendments. Corporate subscribers are treated differently from individuals and sole traders.

What happens if you do not

ICO has issued monetary penalties for email failings (see public notices such as HelloFresh and others). quality and suppression failures are the usual story.

Sources

Privacy and Electronic Communications Regulations 2003, regulation 22
Published 11 Dec 2003Read primary source
ICO, Direct marketing guidance
No publisher dateRead primary source

History of this page

2 Aug 2026Added including charity soft opt-in commencing 5 Feb 2026.

Take this with you

GET https://emailrules.today/rules/uk-pecr-email-needs-consent-or-a-complete-soft-opt-in?format=json

Same URL, same answer, every field including the ones behind the Proof tab. An Accept: application/json header on the plain URL does the same thing. All the endpoints.