What does GDPR say about using public business data for B2B outreach?

GDPR permits using publicly available professional contact data for B2B outreach under the legitimate interest legal basis, provided the communication is relevant to the recipient's professional role, you identify your company clearly, and you offer an easy way to opt out. Personal email addresses require explicit consent even if publicly available. Always document your legitimate interest assessment in writing and honor deletion requests within 30 days.

Is cold emailing to businesses legal under GDPR?

Yes, cold B2B email is legal under GDPR when three conditions are met: the recipient is a professional (not a private individual), the email is relevant to their business role, and you provide a clear unsubscribe option. The CAN-SPAM Act governs US emails and has similar requirements: no deceptive subject lines, a physical address and an opt-out mechanism. In Canada, CASL is stricter and requires implied or express consent even for B2B contacts.

How should I handle a GDPR data deletion request from a prospect?

When a prospect or client requests deletion of their data: acknowledge receipt within 72 hours, delete their record from your CRM, email lists and any third-party tools within 30 days, and send written confirmation. Keep a minimal log of the deletion request itself (name, date, action taken) for compliance purposes. You are allowed to retain data if you have a legal obligation to do so (for example, invoice records for tax purposes).

What data can I legally collect and store in a B2B contact database?

For B2B outreach purposes you can legally collect and store: company name, business address, business phone number, professional email address and job title, provided the data is used for a purpose the contact would reasonably expect given their role. You cannot store sensitive personal data (health, politics, religion) without explicit consent. Data must be accurate and kept only as long as needed. Periodic list cleaning is not just a deliverability best practice; it is a GDPR compliance requirement.

Legal & GDPR for Sales

Sell without legal issues. GDPR, public data, legal cold email and how to handle data deletion requests.

All 584 Sales 49 Prospecting 20 Leads 54 Database 43 Cold Email 33 CRM 57 Sales Strategy 16 B2B Marketing 16 Automation 40 Find Business 125 Markets 14 Retention 16 Legal 12 Step by Step 52 Versus 37

Legal

Consent vs Legitimate Interest in B2B Sales

Differences between consent and legitimate interest under GDPR for B2B sales. When to use each legal basis for compliant prospecting.

Aug 20255 min

Legal

GDPR Guide for B2B Sales Teams

Everything your sales team needs to know about GDPR to prospect legally. Legal bases, public data and best practices for B2B sales.

Oct 20256 min

Legal

Cold Email Without Breaking GDPR Law

Learn how to send cold emails while staying GDPR compliant. Legal requirements, opt-out, legitimate interest and best practices for legal B2B cold email.

Mar 20265 min

Legal

How to Handle Data Deletion Requests

Practical guide to handling data deletion requests under GDPR. Deadlines, process, exceptions and how to comply with the right to erasure in B2B sales.

Jan 20264 min

Legal

How to Manage a GDPR-Compliant Database

Practical guide to managing your B2B business database in compliance with GDPR. Cleaning, updating, data subject rights and best practices.

Jan 20265 min

Legal

Is It Legal to Use Public Business Data for Sales?

Find out if using publicly available business data for B2B prospecting is legal. GDPR, public data and best practices for compliant sales.

Dec 20255 min

Legal

Legal Differences Between B2B and B2C Data

Key legal differences between B2B and B2C data under the GDPR. Why business data has different treatment and how it affects your prospecting.

Aug 20255 min

Legal

Privacy Policy for Companies Doing Prospecting

How to draft a privacy policy if your company does B2B prospecting. Mandatory clauses, legitimate interest and practical examples compliant with GDPR.

Feb 20265 min

New

Legal

Is It Legal to Scrape Google Maps? The honest answer

Is it legal to scrape Google Maps for business data? A clear, honest look at Google's Terms of Service, public data, GDPR, the hiQ ruling, real risks and...

Jun 202615 min

New

Legal

GDPR Cold Email Fines Real cases, real numbers, and how to stay clear

Real GDPR fines for cold email and marketing: actual AEPD and EU cases with amounts, what went wrong, and how to use legitimate interest correctly to stay...

Jun 202614 min

New

Legal

B2B Data Compliance Checklist 7 things to get right in 2026

A 7-point B2B data compliance checklist for 2026: lawful basis, records of processing, data subject rights, retention, breaches, transfers and cold email...

Jun 202616 min

New

Legal

US vs EU Data Privacy for sales, and what to change per market

US vs EU data privacy for B2B sales: how CAN-SPAM, CCPA and opt-out differ from GDPR opt-in and legitimate interest, with a comparison table and what to...

Jun 202616 min

No articles found