This checklist is general information, not legal advice. Rules vary by country — check those that apply to you.
Data
- Data collected from public business sources
- Source of each list recorded
- Only data you need for business outreach kept
- Old data deleted on a schedule
- Honest sender name and address
- Subject line reflects the content
- Physical business address included
- Clear opt-out in every email
- Opt-outs honoured promptly across all lists
- Stricter rules checked for UK/EU recipients and sole traders
Calls and texts
- Do-not-call lists checked where they apply
- No autodialled or prerecorded calls/texts to mobiles without the required consent
- Calls made at reasonable hours
- Opt-out requests recorded
Requests from people
- Process for access and deletion requests
- Suppression list kept so deleted contacts aren't re-added
- Response within required time limits
Communities and platforms
- Platform and community rules followed
- No spam inside communities
- Messages relevant to the person's business
Read more: is web scraping legal? · GDPR and B2B cold email · CAN-SPAM