Is cold email legal? A plain-English answer for B2B

This question comes up on almost every call, usually with a slightly worried tone. The short answer: yes, cold email is legal for B2B in most of the markets my clients sell into, as long as you do it properly. The longer answer is worth understanding, because “properly” is doing a lot of work in that sentence.

A quick caveat first: I run cold email campaigns, I’m not a lawyer, and this isn’t legal advice. If you’re unsure about your specific situation, get a professional opinion. Here’s the lay of the land as I work with it.

The US: CAN-SPAM is permissive

In the United States, B2B cold email is allowed without prior consent. You don’t need someone to opt in before you can email a business contact. What you do need is to play by the rules: tell the truth in your subject line and “from” details, make it clear it’s an outreach message, include a real physical address, and honour opt-out requests promptly. Break those and the per-email penalties get expensive fast.

The EU and UK: lean on legitimate interest

Europe is stricter but still workable. For B2B, most senders rely on “legitimate interest” rather than consent. It’s essentially a common-sense test:

• Do you have a genuine business reason to make contact?
• Is email a proportionate way to do it?
• Would a reasonable person in that role be surprised or harmed by hearing from you?

A relevant, well-targeted message to the right decision-maker at a well-matched company generally passes that test. A scattergun blast to a bought list almost never does, which, conveniently, is also why blasts don’t work commercially.

The behaviour that keeps you compliant and the behaviour that actually books meetings are the same behaviour: be relevant, be targeted, be easy to opt out of.

The strict ones: Germany, France, Canada

A few markets are tougher. Germany and France interpret the rules cautiously and often expect prior consent even for B2B. Canada’s CASL is stricter again and generally requires consent up front. If your buyers live in those markets, the approach has to change. That’s a planning decision I make per campaign, not an afterthought.

How I keep clients on the right side of it

In practice it’s not complicated. Tight targeting instead of mass blasts. Honest sender details and subject lines. A clear, working way to opt out, respected immediately. Lists that are relevant rather than scraped indiscriminately. Do those things and compliance mostly takes care of itself, and the campaign performs better for the exact same reasons.

If you want to run outbound but you’re nervous about getting it wrong, that’s a good conversation to have on a call. I’ll tell you straight what’s sensible for the markets you’re selling into.