B2B demand generation: key UK rules in England

What to take away

Does UK data law apply to B2B prospecting in England?

Yes. The UK GDPR and the Data Protection Act 2018 apply across the whole UK, including England. The ICO sets out six lawful bases, and you must choose one before processing personal data such as a named work email address.

Legitimate interests is the basis most B2B teams use for prospecting, but it is not automatic. You need a documented balancing test, a privacy notice and a clear route for people to object. The ICO's lawful basis guidance explains both the tests and the record-keeping behind them.

Record what you did and when. A balancing test written after a complaint is worth far less than one written before the list was built.

An agency acting as a controller should check whether it must register with the ICO under the Data Protection (Charges and Information) Regulations 2018. Exemptions apply, so use the ICO's registration self-assessment.

Data protection is one part of the rules an England-based demand generation agency may need to consider.

Does PECR govern B2B email and calls?

The Privacy and Electronic Communications Regulations 2003 (PECR) set separate rules for electronic marketing. The ICO's Direct Marketing Guidance explains how they apply alongside the UK GDPR.

For email, PECR distinguishes corporate subscribers, such as limited companies, from individual subscribers, including sole traders and some partnerships. You can generally send unsolicited marketing email to a corporate subscriber without prior consent, but you must identify yourself and provide a valid way to opt out. For an individual subscriber, prior consent is generally needed unless the soft opt-in applies.

The soft opt-in is limited: you must have obtained the contact details during a sale or negotiations for a sale, be marketing your own similar services, and have offered an opt-out when collecting the details and in each message. Even when PECR permits an email, the UK GDPR applies if you process personal data such as a named work email address.

Before making live marketing calls, screen numbers against the Telephone Preference Service (TPS) or Corporate Telephone Preference Service (CTPS), as appropriate. Do not call a number registered with the relevant service unless you have the required consent, and do not call anyone who has previously objected.

What employment rules affect demand gen agencies in England?

Agencies scale delivery with freelancers, contractors and short-term hires. Whether someone is an employee, a worker or self-employed changes tax, holiday pay and dismissal rights, and the labels in a contract do not settle it. Where an agency engages a contractor through an intermediary, the off-payroll working rules, commonly called IR35, may determine who is responsible for assessing employment status for tax.

For written statements, working hours and notice, GOV.UK's pages on contracts of employment and working hours are the starting reference for England, Scotland and Wales. The Employment Rights Act 1996, section 1, requires a written statement of particulars for employees, with related written-particulars rights for workers. The Working Time Regulations 1998 govern working time and rest entitlements. Northern Ireland has its own employment law, so a Belfast hire is not simply an English hire with a different address.

Commission structures deserve care. Where someone qualifies as a worker or employee, the National Minimum Wage Act 1998 and National Minimum Wage Regulations 2015 set minimum-pay requirements; a sales role paid largely on pipeline outcomes can raise questions if the person is treated as self-employed but behaves like staff. Individual cases need a qualified adviser. Depending on the person’s status and the right involved, a breach of statutory employment rights may lead to an employment tribunal claim.

Do ASA rules cover B2B case studies and claims?

The CAP Code applies to marketing communications, and B2B advertising is not exempt. Claims must be evidence-based, and testimonials must be genuine and capable of substantiation. The ASA's guidance on claims, endorsements and testimonials is the reference when you publish a client result. For business-to-business advertising, the Business Protection from Misleading Marketing Regulations 2008 (BPRs) also prohibit misleading advertising and set conditions for comparative advertising. The ASA can publish adverse rulings and seek amendment or withdrawal of non-compliant advertising; persistent non-compliance may be referred to Trading Standards.

A frequent problem is a case study that implies a guaranteed outcome. If a page states a pipeline figure, hold the underlying data and be able to explain the method. For example, a team paying £4,000 a month for a retainer should name the measurement period in the case study.

Comparative claims such as "the leading agency for SAAS" need substantiation too. If you cannot evidence it, rewrite it as an opinion or drop it.

The ICO can take enforcement action for breaches of the UK GDPR and PECR. The ASA can also publish rulings and take action against advertising that does not comply with the CAP Code.

Where do contracts and liability fit?

A signed contract is the practical control for scope, fees, IP ownership, confidentiality and liability caps. England and Wales contract law governs the agreement, while data protection terms should reflect the parties' roles and obligations under data law. The 2015 Names and Trading Disclosures Regulations, which replaced the 2008 rules, also require company details on business communications and websites; check the required company name, registered number, place of registration and registered office details on business letters, order forms and websites. Without a contract, a dispute over an unpaid invoice or a reused asset becomes a facts-and-memory argument.

Payment terms matter as much as scope. A 30-day clause that the client's procurement team routinely stretches to 90 days is a cash flow problem, not a paperwork detail. For qualifying business-to-business debts, the Late Payment of Commercial Debts (Interest) Act 1998 may provide a right to statutory interest when payment is late. The statutory interest rate is 8% plus the Bank of England base rate for business-to-business transactions.

Our article on B2B demand generation commercial contracts covers the clauses that most often cause trouble, including termination and data processing terms. Read it before you sign a master services agreement or accept a client's paper.

Common questions

Does the UK GDPR apply to B2B contact data?

Yes, if the data identifies a person, such as a named work email. Company-level data with no individual attached sits outside it, but most outreach lists mix the two.

Can I cold email businesses in England without consent?

Not always. Under PECR, prior consent is generally required for marketing emails to individual subscribers, including sole traders and some partnerships, unless the soft opt-in applies. That exception is limited to details obtained during a sale or negotiations for a sale, marketing your own similar services, and offering an opt-out when the details are collected and in each message. You can generally email a corporate subscriber, such as a limited company, without prior consent, but you must identify yourself and provide a valid opt-out. If you use a named person's work email, the UK GDPR still applies; legitimate interests may be an appropriate lawful basis if you pass the balancing test and meet the other requirements.

Are ASA rules relevant to a B2B agency's own website?

Yes. Your site, LinkedIn posts and sales decks are marketing communications, so claims and client results need evidence behind them.

Do I need a lawyer to review a demand gen contract?

For high-value or multi-year work, yes. A qualified adviser can check liability, IP and termination terms that generic templates often miss.