Direct marketing and data protection
-
The Data (Use and Access) Act 2025 got Royal Assent on 19 June 2025. All the provisions affecting data protection law and the Privacy and Electronic Regulations Communications are now in force. The Department for Science and Innovation (DSIT) has set out the commencement plans. You can find more details on the Gov.uk website.
Direct marketing focusses on reaching specific individuals with messages, through direct channels such as email, text, outbound calls, post, or targeted social media. It is different to mass marketing, which aims to reach broad audiences through channels like TV, Radio or magazines.
When you’re planning and delivering direct marketing messages, you must comply with the Privacy and Electronic Communications Regulations (PECR). Where these activities involve the use of personal information, you must also comply with the UK General Data Protection Regulations (UK GDPR). Learn how to carry out your direct marketing compliantly, in ways people will trust.