Direct Marketing Consent Check (UK)

What data protection covers

A direct-marketing-consent review usually looks at the wording shown at sign-up, the user's action, channel-specific permissions, suppression records, and later marketing use. The key issue is whether the business can prove a lawful basis for the marketing actually carried out.

Under UK GDPR Article 6(1), processing of personal data is lawful only if at least one listed basis applies — including consent for one or more specific purposes. Where marketing relies on consent, UK GDPR Article 7 requires the controller to be able to demonstrate that consent, and states that withdrawal must be as easy as giving consent. For email specifically, PECR 2003 Regulation 22 provides that (except for the soft-opt-in / charity cases in paragraphs (3) and (3A)) a person must not transmit unsolicited electronic mail for direct marketing unless the recipient has previously notified consent for the time being. PECR Regulation 23 additionally restricts marketing email that disguises the sender’s identity or omits a valid opt-out address. ICO direct-marketing guidance and the business’s own sign-up and campaign records sit alongside those provisions.

Key legal requirements

• the sign-up wording, consent mechanism, identity of the sender, and marketing channels should be documented clearly (aligned with UK GDPR Article 7 demonstrability and PECR Regulation 22 consent / soft-opt-in conditions)
• the business should be able to show what the person agreed to and when, including any opt-out or suppression changes
• the campaign activity should match the lawful basis under UK GDPR Article 6, the audience scope, and the channel permissions recorded under PECR
• privacy notices, CRM records, and outbound communications should not contradict one another

Why this matters

Marketing compliance often fails not because consent was never sought, but because the evidence trail cannot prove what was actually agreed.

Next step with VetroCheck

Use the Direct marketing consent agent if you want a structured review of sign-up language, CRM evidence, and campaign alignment.

Compliance note

This glossary content is provided for informational and educational purposes only. It does not constitute formal legal advice, does not create a solicitor-client relationship, and should be checked against current legislation, official guidance, and the facts of the specific case.