Is cold calling legal? The rules for calls and cold email in the US, UK and EU

Is cold calling legal?

Cold calling is legal in most countries, especially when you call businesses, but it is regulated. The rules depend on whether you call a company or an individual, which country you call into and how you dial. Common duties are identifying yourself, screening do-not-call registers and stopping when someone objects. Cold email follows its own, often stricter, rules.

Cold calling means contacting a potential customer who has not asked to hear from you. That is what makes it outbound, and our guide to inbound vs outbound sales explains where it fits. Legally, the label matters less than three facts: who you contact (a company, a sole trader or a private person), which channel you use (live call, automated call or email) and where the recipient is located.

This guide covers the three markets English-speaking sellers meet most often: the United States, the United Kingdom and the European Union. It is general information, not legal advice. Laws change and national or state rules can add duties, so confirm the details with a lawyer before you scale a campaign.

Is B2B cold calling legal in the US?

Yes. The FTC states that most phone calls between a telemarketer and a business are exempt from the Telemarketing Sales Rule (TSR). That exemption also removes you from the National Do Not Call Registry provisions for those calls. It does not cover everything: B2B calls selling nondurable office or cleaning supplies, such as paper, toner or ink, must follow the TSR, and so must calls that solicit individual employees to buy for their own personal use.

If you call consumers, the picture changes. The same FTC guidance says it is a violation of the TSR to make outbound telemarketing calls to a person's home outside 8 a.m. and 9 p.m. local time without prior consent, and the TSR prohibits cold calls that deliver prerecorded messages. A local contractor who phones homeowners needs a much stricter process than an agency that phones other businesses.

State laws and other federal rules can add requirements beyond the TSR, so the FTC guidance is only the floor.

Is cold email legal in the US?

Yes, if it complies with CAN-SPAM. The FTC says the law makes no exception for business-to-business email, so a cold email to a company must follow it too. The FTC lists the core duties: accurate header information, no deceptive subject lines, a clear statement that the message is an ad, your valid physical postal address and a clear way to opt out.

Opt-outs are strict. You must honor a request within 10 business days, cannot charge a fee or ask for more than an email address, and your opt-out mechanism must keep working for at least 30 days after you send. The FTC states that each separate email in violation can be subject to penalties of up to $53,088.

Is cold calling legal in the UK?

Yes, within the Privacy and Electronic Communications Regulations (PECR) and the UK GDPR. The ICO explains in its business-to-business marketing guidance that for live B2B calls you cannot call numbers registered with the Corporate Telephone Preference Service (CTPS) or the Telephone Preference Service (TPS) unless the business has consented, and you cannot call a business that has already objected.

You must also say who is calling, allow your number to be displayed and provide your contact details or a Freephone number if asked. The ICO warns that some businesses, such as sole traders and some partnerships, register with the TPS while others register with the CTPS, so you need to screen against both registers and against your own do-not-call list.

For email the rule is different. The ICO says the PECR rule on electronic mail does not apply to corporate subscribers, so you can send B2B marketing email to a company without PECR consent, as long as you do not disguise your identity and give a valid address to opt out. Sole traders and some partnerships are individual subscribers, which means consent or the soft opt-in applies. Note that the ICO marks this guidance as under review after changes made by the Data (Use and Access) Act, so check it before relying on it.

Is cold calling or cold email legal in the EU?

It depends on the Member State and the channel. Article 13 of the ePrivacy Directive says automated calling systems, fax and email for direct marketing may only be used for subscribers who gave prior consent. For other cases, such as live calls, Member States choose between requiring consent and letting people opt out. Paragraph 5 applies the consent rules to natural persons and asks Member States to protect the legitimate interests of other subscribers, so rules for companies vary by country.

The GDPR sits on top whenever a name, a personal email address or a direct phone number is involved. Recital 47 says processing personal data for direct marketing may be regarded as carried out for a legitimate interest, which is why documented legitimate interest is the usual basis for B2B outreach. But Article 21 gives people the right to object to direct marketing at any time, and once they object their data can no longer be processed for that purpose.

Penalties are serious: under Article 83(5), infringements of the basic processing principles and of data subject rights can bring fines of up to 20 million euros or, for an undertaking, up to 4% of total worldwide annual turnover, whichever is higher. For more detail, read our GDPR guide for B2B sales teams.

How do the rules compare by country and channel?

The table sums up what the sources above say, so go back to the original texts for the exact wording.

How do you cold call and cold email legally?

Follow the same short routine in every market, then add the local rules. This checklist works for a freelancer, an agency or a small team:

1. Decide who you contact. Companies, sole traders and private people fall under different rules, so tag each contact by type.
2. Check the country. Look up the rules for the recipient's location before the first message, not after a complaint.
3. Screen phone numbers. Use the registers that apply, such as the TPS and CTPS in the UK, and your own do-not-call list everywhere.
4. Identify yourself. Say your name and company on the call and put your sender identity and address in every email.
5. Give a working opt-out. Add an easy unsubscribe to every email and honor requests quickly. CAN-SPAM sets a 10 business day limit.
6. Keep a lawful basis and records. For personal data in the EU and UK, document your legitimate interest and where each contact came from.
7. Be relevant. Contact a business about something it could really use. Our cold call scripts by vertical and cold email templates for local agencies show how.

When someone asks you to delete their data, follow the process in our guide on handling data deletion requests.

Can you cold call businesses you found on Google Maps?

Yes, but the source of a contact does not decide whether the outreach is legal. The country, the channel and the type of recipient do. A phone number on a public listing still has to be screened where a register applies, and a named person's data still falls under the GDPR or the UK GDPR when you process it. For the scraping side of the question, read Google Maps scraping and GDPR.

Search Google Maps and press Start, and Vonsel gathers the business results as you explore the map. Google Maps does not provide business emails, so Vonsel visits the available business websites to find published emails, additional phone numbers and links to supported social networks. What it finds depends on what each website publishes. You then keep the businesses on a map, organise them by stage and use notes, tags and custom fields, which makes it easy to mark who must not be contacted. Watch the tutorial video to see the extraction step, and check the pricing page to compare plans.

Vonsel is a tool for building your list. It does not decide your lawful basis or run register checks for you, so you remain responsible for how you contact each business.

The short version

• Cold calling is legal in most places, and B2B calls are the least restricted, but the rules change by country and channel.
• Email is often stricter than calls: CAN-SPAM covers B2B, and EU law asks for consent for natural persons.
• Screen, identify yourself, offer an opt-out, keep records and stop when asked.

Sources

• FTC: Complying with the Telemarketing Sales Rule: B2B call exemption, nondurable supplies exception, calling hours for consumers.
• FTC: CAN-SPAM Act compliance guide for business: no B2B exception, core duties, 10 business day opt-out and the per-email penalty.
• ICO: Business-to-business marketing: PECR rules for B2B calls and email, TPS and CTPS screening, corporate subscribers and sole traders.
• EUR-Lex: ePrivacy Directive 2002/58/EC: Article 13 on unsolicited communications for direct marketing.
• EUR-Lex: General Data Protection Regulation: Recital 47, Article 21 right to object and Article 83 fines.