Cold email law checker: is it legal in your country?

Home › Free tools › Cold email law checker

Pick a country and the kind of recipient. See whether a first cold email is allowed, the conditions, the law it comes from with a link to the official text, and the date we read it. 20 countries, 17 checked against the primary law. Your choices stay in your browser.

Using the checker

Pick the country your recipient is in and who they are: a company (or a named person at one, on their work address), a sole trader or partnership, or a private consumer. The checker shows one of three answers, the conditions you must meet, the law it comes from with a link to the official text, and the day we read that text.

Not legal advice. This is general information about the email-marketing rule for a first, unsolicited message. It does not cover data protection law in full, sector rules or your own facts. Check with counsel before you rely on it.

Short answer: It depends on the country and on who the recipient is. The US, Singapore and, for companies, the UK, France and Ireland let you send a first B2B email on an opt-out basis if you meet the conditions. Germany, Spain, Italy, Austria, Belgium, Denmark, the Netherlands and Switzerland want prior consent or a narrow exception even for business recipients. Canada, Australia and New Zealand accept consent implied from a conspicuously published work address.

The three answers

Emailing a company

CountryAnswerConditions
United KingdomAllowed, with conditionsThe consent rule covers individual subscribers only. A company, LLP or Scottish partnership is a corporate subscriber, so cold B2B email to it is allowed.
United StatesAllowed, with conditionsOpt-out, with no B2B exception: honest headers and subject line, identify it as an ad, a physical postal address, and a clear opt-out honoured within 10 business days.
CanadaConsent or an exception neededYou need consent. Implied consent exists only if the address was conspicuously published, with no refusal of unsolicited messages, and your message fits their business role. A data-vendor list is not proof.
AustraliaConsent or an exception neededConsent is needed. It can be inferred from a conspicuously published work address with no “no spam” note, if your message is relevant to their work. Mere publication is not enough.
GermanyConsent or an exception neededEmail advertising needs the addressee’s prior express consent, with no B2B carve-out. The only exception is existing customers whose address came from a sale, for similar products, with an objection option every time.
FranceAllowed, with conditionsB2B email can rest on legitimate interest if it relates to the person’s job. They must know their address may be used, and every email must name you and offer a simple way to refuse.
NetherlandsConsent or an exception neededPrior consent is the rule. A legal person or professional may be emailed without it only at an address they published specifically to receive such messages, used for the purposes they set. Existing customers may get similar products, with an objection option every time.
IrelandAllowed, with conditionsAllowed unless the company has told you it objects. A named person at the company is a natural person: email them only at an address that appears to be used mainly for their work, about that work.
SpainConsent or an exception neededCommercial email is prohibited unless the recipient asked for it or expressly authorised it, with no B2B carve-out. The exception is an existing contract, for similar products, with a free opt-out.
ItalyConsent or an exception neededEmail for direct marketing needs the consent of the subscriber or user, with no B2B carve-out.
AustriaConsent or an exception neededEmail for direct marketing needs the recipient’s prior consent, with no B2B carve-out. The existing-customer exception covers similar products, and only if the recipient is not on the opt-out list kept under ECG section 7(2).
BelgiumConsent or an exception neededAdvertising by email is prohibited without prior free, specific and informed consent. The law lets the King set exceptions; the royal decree setting them was not verified here, so check with counsel before relying on one.
SwedenConsent or an exception neededThe consent rule in section 19 covers natural persons. A legal person may be emailed, with a valid stop address. Whether a named employee counts as the company is not settled in the statute: check with counsel.
DenmarkConsent or an exception neededEmail direct marketing to anyone needs prior consent, with no B2B carve-out. The exception is existing customers, for similar products.
SwitzerlandConsent or an exception neededMass advertising by email needs prior consent, with an existing-customer exception for similar products. Whether a handful of one-to-one emails counts as “mass” is a question for counsel.
SingaporeAllowed, with conditionsOpt-out. The Act applies to unsolicited commercial email sent in bulk (over 100 in a day, 1,000 in 30 days or 10,000 in a year) with a Singapore link. Such email must carry an unsubscribe facility, “<ADV>” before the subject, and honest headers.
New ZealandConsent or an exception neededYou need consent: express, inferred, or deemed. Deemed consent covers an address conspicuously published in a business capacity, with no statement refusing messages, when your email is relevant to their role.
United Arab EmiratesCheck with counselNot verified here against a primary source. Ask a lawyer in that country before you send.
Saudi ArabiaCheck with counselNot verified here against a primary source. Ask a lawyer in that country before you send.
IndiaCheck with counselNot verified here against a primary source. Ask a lawyer in that country before you send.

Emailing a sole trader or partnership

CountryAnswerConditions
United KingdomConsent or an exception neededSole traders and some partnerships count as individuals. You need their consent, or the soft opt-in: details from a sale or negotiation, similar products only, and a way to refuse every time.
United StatesAllowed, with conditionsThe same CAN-SPAM rules: honest headers and subject, identified as an ad, a postal address, and an opt-out honoured within 10 business days.
CanadaConsent or an exception neededThe same test: consent, or implied consent from a conspicuously published business address with no refusal, for a message relevant to their business.
AustraliaConsent or an exception neededThe same test: consent, which may be inferred from a conspicuously published business address with no “no spam” note, for a message relevant to their business.
GermanyConsent or an exception neededPrior express consent, as for any addressee, or the existing-customer exception for similar products.
FranceConsent or an exception neededThe B2B route covers professionals contacted about their profession. Confirm with counsel that a sole trader’s address qualifies; if it does not, you need prior consent.
NetherlandsConsent or an exception neededThe same: consent, an address they published for such messages and used as they set out, or the existing-customer exception.
IrelandAllowed, with conditionsAllowed only at an address that reasonably appears to be used mainly for their business, and only about that business. Otherwise you need consent.
SpainConsent or an exception neededPrior request or express authorisation, or the existing-contract exception for similar products.
ItalyConsent or an exception neededConsent of the subscriber or user, as for any recipient.
AustriaConsent or an exception neededPrior consent, or the existing-customer exception for similar products if they are not on the ECG opt-out list.
BelgiumConsent or an exception neededPrior consent. Check any exception in the royal decree with counsel.
SwedenConsent or an exception neededA sole trader is a natural person: you need prior consent. Check any existing-customer exception with counsel.
DenmarkConsent or an exception neededPrior consent, or the existing-customer exception for similar products.
SwitzerlandConsent or an exception neededPrior consent for mass advertising, or the existing-customer exception for similar products.
SingaporeAllowed, with conditionsThe same opt-out rules for bulk email: an unsubscribe facility, the “<ADV>” label before the subject, honest headers and a working contact address.
New ZealandConsent or an exception neededConsent, which may be deemed from a conspicuously published business address with no refusal, for a message relevant to their business.
United Arab EmiratesCheck with counselNot verified here against a primary source. Ask a lawyer in that country before you send.
Saudi ArabiaCheck with counselNot verified here against a primary source. Ask a lawyer in that country before you send.
IndiaCheck with counselNot verified here against a primary source. Ask a lawyer in that country before you send.

Emailing a consumer

CountryAnswerConditions
United KingdomConsent or an exception neededIndividuals need prior consent, or the soft opt-in: details from a sale or negotiation, similar products only, and a way to refuse every time.
United StatesAllowed, with conditionsCAN-SPAM does not require consent, but every rule applies: honest headers and subject, identified as an ad, a postal address, and an opt-out honoured within 10 business days. State laws are not covered here.
CanadaConsent or an exception neededYou may send a commercial electronic message only with the recipient’s consent, express or implied.
AustraliaConsent or an exception neededCommercial email needs the account-holder’s consent: express, or reasonably inferred from their conduct and relationships.
GermanyConsent or an exception neededPrior express consent, or the existing-customer exception for similar products, with an objection option every time.
FranceConsent or an exception neededEmail advertising to individuals needs prior consent that is free, specific, informed and unambiguous. The exception is existing customers, for similar products from the same firm.
NetherlandsConsent or an exception neededPrior consent, or the existing-customer exception for similar products, offered at collection and in every message.
IrelandConsent or an exception neededIndividuals need prior consent (Regulation 13(1)). Check any existing-customer exception with counsel.
SpainConsent or an exception neededPrior request or express authorisation, or the existing-contract exception for similar products.
ItalyConsent or an exception neededConsent of the subscriber or user. Check any existing-customer exception with counsel.
AustriaConsent or an exception neededPrior consent, or the existing-customer exception for similar products if they are not on the ECG opt-out list.
BelgiumConsent or an exception neededPrior free, specific and informed consent. Check any exception in the royal decree with counsel.
SwedenConsent or an exception neededPrior consent. Check any existing-customer exception with counsel.
DenmarkConsent or an exception neededPrior consent, or the existing-customer exception for similar products.
SwitzerlandConsent or an exception neededPrior consent for mass advertising, or the existing-customer exception for similar products.
SingaporeAllowed, with conditionsThe same opt-out rules for bulk email. The Personal Data Protection Act also applies to consumers’ data and is not covered here.
New ZealandConsent or an exception neededExpress or inferred consent.
United Arab EmiratesCheck with counselNot verified here against a primary source. Ask a lawyer in that country before you send.
Saudi ArabiaCheck with counselNot verified here against a primary source. Ask a lawyer in that country before you send.
IndiaCheck with counselNot verified here against a primary source. Ask a lawyer in that country before you send.

The law, the date checked and what every email needs

CountryPrimary lawCheckedEvery marketing email
United KingdomPECR regulation 2229 October 2026PECR regulation 23: never disguise who is sending, and give a valid address for opt-out requests. UK GDPR applies to the names on your list.
United StatesCAN-SPAM Act (FTC compliance guide)29 October 2026See the conditions above.
CanadaCASL sections 6 and 10(9)29 October 2026CASL s6(2): identify the sender, give contact details and include an unsubscribe mechanism.
AustraliaSpam Act 2003, s16 to s18 and Schedule 229 October 2026Name who authorised the email, with contact details valid for 30 days, and a working unsubscribe. An opt-out takes effect within 5 business days.
GermanyUWG section 7 (English translation)29 October 2026UWG s7(2) no. 3: never conceal who the sender is, and give a valid address where the recipient can ask you to stop, free of charge.
FranceCNIL on CPCE article L34-529 October 2026See the conditions above.
NetherlandsTelecommunicatiewet article 11.72 November 2026Where you rely on the existing-customer exception, offer a way to object when you collect the address and in every message.
IrelandS.I. No. 336 of 2011, Regulation 132 November 2026Regulation 13(12): never disguise who is sending, and give a valid address for opt-out requests.
SpainLSSI (Ley 34/2002), articles 20 and 212 November 2026Article 20: the email must be clearly identifiable as commercial and name the sender. Article 21: give a simple, free way to opt out by email.
ItalyCodice privacy, article 1302 November 2026See the conditions above.
AustriaTKG 2021, section 1742 November 2026Never disguise the sender, and give an authentic address where the recipient can ask you to stop.
BelgiumCode of Economic Law, article XII.132 November 2026See the conditions above.
SwedenMarknadsföringslagen (2008:486), sections 19 and 202 November 2026Section 20: every marketing email, to a person or a company, carries a valid address where the recipient can ask you to stop.
DenmarkMarkedsføringsloven, section 102 November 2026Section 10(3): the email must be identifiable as marketing, show the sender and give an address to stop it.
SwitzerlandUnfair Competition Act (UCA), article 3(1)(o)2 November 2026Name the sender correctly and give an easy, free way to refuse further messages.
SingaporeSpam Control Act 20072 November 2026A published address is not consent (section 5(2)). Honour unsubscribe requests.
New ZealandUnsolicited Electronic Messages Act 20072 November 2026Identify the sender with contact details valid for 30 days, and include a working unsubscribe. An unsubscribe takes effect within 5 working days.
United Arab EmiratesNot verified: check with counsel
Saudi ArabiaNot verified: check with counsel
IndiaNot verified: check with counsel

What it covers and what it leaves out

Frequently asked questions

Is cold email to a business allowed without consent everywhere?

No. In Germany, Spain, Italy, Austria, Belgium and Denmark the email-marketing rule makes no exception for business recipients: you need prior consent or an existing-customer relationship. The US, Singapore, and the UK and Ireland for companies, work on an opt-out basis instead.

Why does a sole trader get a different answer from a company?

Several laws protect individuals and not companies. A sole trader is an individual, so in the UK, Sweden and others the consent rule covers them even when they are emailed about their business.

What does "a published address" mean for Canada, Australia and New Zealand?

Each lets consent be implied, inferred or deemed from a work address that was conspicuously published, with no note refusing marketing, when your email is relevant to the person's role. A bought list does not show that, so keep a record of where each address was published.

Does the US need consent for cold email?

Not under CAN-SPAM, which is opt-out. Every message still needs honest headers and subject lines, an ad identification, a postal address and an opt-out you honour within 10 business days.

What does every cold email need, whatever the country?

At least a sender you do not disguise and a working way to opt out. Several countries add more: a postal address in the US, contact details valid for 30 days in Australia and New Zealand, "<ADV>" before the subject in Singapore for bulk email.

Why does the checker say "check with counsel" for some countries?

Because we have not read their primary law. We add a country only with a link to its official text and the date we read it.

Does the checker store or send what I pick?

No. The data is built into the page and runs in your browser.

Want help running cold email inside these rules? Book 30 minutes.


ROI Maximizer is a trading name of M Ventures LTD, registered in England and Wales, company no. 15554493. Registered office: 4 Beau Street, Bath BA1 1QY, United Kingdom. moe@roimaxi.com

© 2024–2026 M Ventures LTD. Privacy notice · Editorial policy · Methodology · Corrections