You must have a valid data protection reason if you want to use people’s information to send your direct marketing messages. This is known in data protection law as having a “lawful basis”. The two lawful bases most likely to apply to sending direct marketing messages are consent and legitimate interests.
The Privacy and Electronic Communications Regulations 2003 (PECR) don’t have lawful bases. But PECR can affect your choice of data protection lawful basis. This is because sometimes PECR says you must have consent to send direct marketing. The standard of consent you must meet for PECR is the same as for data protection law.
The table below shows different methods of sending direct marketing along with the PECR requirement and the likely data protection lawful basis. Sometimes you’ll have a choice between using consent or legitimate interests.
Remember, there are conditions you must meet for consent to be valid. You can find more information about this in our consent guidance. Likewise, for legitimate interests, you must satisfy its requirements. For help with this, see our legitimate interests guidance.
For help complying with PECR rules, see our Guide to PECR.
Phone calls
| Method |
PECR requirement | Likely data protection lawful basis |
| Automated marketing calls (this is where a recorded message is played) |
|
|
| Live marketing calls in general (this is a call where a live person is speaking) |
|
|
| Live marketing calls to numbers registered on the Telephone Preference Service or Corporate Telephone Preference Service |
|
|
| Live marketing calls about claims management services |
|
|
| Live marketing calls about pension schemes by trustee or manager of a pension scheme or Financial Conduct Authority authorised |
OR
|
OR
|
Electronic mail (eg emails and text messages)
| Method |
PECR requirement | Likely data protection lawful basis |
| Electronic mail marketing to people, sole traders and some types of partnership (called “individual subscribers” in PECR) |
OR
|
OR
|
| Electronic mail marketing to limited companies and other types of business (known as “corporate subscribers” in PECR) |
|
|
Post
| Method |
PECR requirement | Likely data protection lawful basis |
| Postal marketing |
|
|
Further reading
- For more information on direct marketing please see our direct marketing guidance and resources page. Here you will find lots of other direct marketing guidance and resources to help you.
Latest updates
5 December 2022 - This content was published.