Telephone Marketing Rules: Staying PECR‑Compliant

Telephone marketing can be a powerful way to reach new clients, nurture existing relationships, and help your business grow. But before you pick up the phone and start dialling, there’s an important question you need to ask: are you compliant with the UK’s strict rules on telephone marketing? It can be confusing to navigate the legal landscape-especially when you’re keen to get your message out there. But don’t worry, we’ll break down everything you need to know about UK telephone marketing laws, from the basics of what counts as “telephone marketing” to exactly how to stay compliant with the Privacy and Electronic Communications Regulations (PECR) and the UK GDPR. By setting up your approach correctly now, you’ll protect your business from penalties and build trust with your audience. If you’re ready to reach more customers the right way, read on for your comprehensive guide.

What Is Telephone Marketing?

Let’s start with the basics. Telephone marketing (sometimes called “telemarketing” or “direct marketing calls”) simply means using telephone calls-either live or automated-to promote your products or services, solicit donations, conduct research, or build brand awareness with individuals or other organisations. In practise, this could include:

• Phoning previous customers to offer a new deal or cross-sell services
• Cold calling prospects about a special offer or event
• Running automated call campaigns (so-called “robocalls” or pre-recorded messages) to deliver promotions
• Calling businesses (B2B) to pitch your goods or partnerships

Whenever you use the phone as a tool to market to specific people, you’re engaging in telephone marketing-and you need to comply with the rules set out in the Privacy and Electronic Communications Regulations 2003 (PECR) and, where relevant, the UK General Data Protection Regulation (UK GDPR). Non-compliance can lead to complaints, fines, or lasting reputational damage.

Why Do Telephone Marketing Rules Exist?

Telephone marketing can be effective, but it also has a long history of misuse. Unsolicited calls-especially automated ones-are among the top complaints from UK consumers. Regulators have introduced rules to protect individual privacy, prevent nuisance calls, and give consumers a say over who is allowed to contact them. The two key pieces of legislation you need to know about are:

• PECR: Sets out specific rules for telephone, email, SMS, and other electronic marketing. It aims to strengthen privacy in electronic communications, building on the standards set by UK GDPR.
• UK GDPR: Governs how any personal data (including phone numbers) can be used for marketing. It requires that personal information is handled fairly, securely, and transparently.

In practise, you must follow both. PECR overlays additional, stricter rules on top of UK GDPR when it comes to marketing calls.

Who Needs to Comply With Telephone Marketing Rules?

It doesn’t matter if your business is a cutting-edge startup, a family-run shop, or a fast-growing SME-all organisations making marketing calls must comply with PECR. This includes companies, charities, clubs, political groups, sole traders, and even partnerships. If you’re promoting your goods, services, or a cause via telephone, these rules apply to you. This also means that if you work with a third-party call centre or marketing agency, you’re still responsible for their compliance. You can’t pass off liability to another provider-so it pays to choose partners who understand the law and avoid risky practices.

What Are the Key Telephone Marketing Rules in the UK?

The main requirements for lawful telephone marketing are set out in PECR. Let’s break down the essentials for live calls, automated calls, consent, opt-outs, and how to navigate preference registers.

Live Marketing Calls to Individuals

• Consent is required in some cases: If a number is listed on the Telephone Preference Service (TPS) or the Corporate Telephone Preference Service (CTPS), you must have prior consent to call them for marketing. The TPS applies to individuals and sole traders; the CTPS covers businesses and other organisations.
• Do not call lists: You cannot make marketing calls to numbers on the TPS/CTPS unless you have evidence of the recipient’s consent.
• Identification: You must promptly say who you are and who you’re calling for. Your number (or an alternative contact number) must be displayed when making calls.
• Contact details on request: If asked, you must provide a contact address or freephone number for the business making the call.

Tip: You can check the TPS and CTPS lists by registering at the official site and screening your calling lists before launching a campaign. This is essential for compliance and customer goodwill.

Automated Calling Systems (Robocalls)

• You may not use automated calling systems or pre-recorded messages for marketing unless you have the recipient’s prior consent in writing.
• This includes voice broadcasting systems that play a recorded message, regardless of whether a human picks up the call or it’s left as a voicemail.

Automated calls are viewed as highly intrusive-so fines for breaches tend to be severe.

Live Calls to Corporate Subscribers (B2B Marketing)

PECR distinguishes between individuals (including sole traders and partnerships) and corporate subscribers (limited companies, LLPs, charities, trusts, and public bodies). While rules are slightly less strict for corporate numbers, you cannot call businesses registered with the CTPS without consent for marketing purposes. This means you need good processes in place no matter who you are contacting. It’s best to obtain clear opt-in wherever you can.

What Counts as “Consent” for Telephone Marketing?

Consent is at the heart of lawful marketing. But not just any consent will do-under both UK GDPR and PECR, it must be:

• Freely given (not obtained under pressure or as a requirement of another service)
• Specific (covers the exact marketing methods, e.g., “by telephone marketing”)
• Informed (the individual knows what they are consenting to and by whom)
• Unambiguous (must be clear affirmative action, e.g., ticking a box or signing a form)

It’s safest to keep a clear audit trail. If you ever need to show you had “consent,” you’ll need dated records, details of the consent wording, and information on how the person gave their consent. If your marketing lists are outdated, or you can’t prove consent, don’t risk using them for new campaigns. To learn more about privacy and consent wording, check out our data privacy consent form guide.

How Can People Opt Out (And Why Does It Matter)?

No matter how you obtained someone’s data, individuals must have an easy way to say “no thanks” to further marketing calls. You must explain-at the point their details are collected and during every call-that they have the right to opt out at any time.

• If someone asks you to stop calling for marketing purposes, you must honour this immediately.
• You cannot charge them for opting out or make the process a hassle. Make it simple, quick, and free.
• You must keep a “do not contact” list and cross-check it for every future campaign.

This is not just good practice, it’s the law under both PECR and the UK GDPR.

What Identification and Transparency Steps Are Required?

Transparency is non-negotiable in telephone marketing. Every marketing call-whether to a consumer or another business-must:

• Clearly state your identity, both as an individual caller and as your business/organisation
• Disclose your caller ID (the number must display-you cannot “withhold” or “conceal” the number)
• Provide a contact address or freephone number if asked, so recipients can make a complaint or reach out for more info

Calls that conceal your identity are likely to be reported to the ICO and, in some cases, your phone carrier may block your outgoing calls or number.

What Are the Penalties for Breaking PECR Telephone Marketing Rules?

Enforcement of electronic marketing law in the UK is handled by the Information Commissioner’s Office (ICO). The ICO can:

• Investigate your business for any complaints or concerns about nuisance calls
• Issue enforcement notices that require you to change marketing practices or delete data
• Fine businesses up to £500,000 per breach of PECR-for serious or repeated non-compliance
• Prosecute persistent offenders or refer serious breaches to trading standards or criminal courts

It’s not just about the financial hit. Negative press and consumer backlash from failing to comply can cause lasting harm to your brand and future sales. The ICO regularly publishes examples of enforcement action for high-profile cases, making it clear they take telephone marketing breaches very seriously.

How Is Telephone Marketing Different for Individuals vs. Corporate Subscribers?

PECR sets stricter standards for marketing calls to individual subscribers (private persons, sole traders, and unincorporated partnerships) than to corporate subscribers (limited companies, LLPs, charities, and public entities). Here’s how the key distinctions work:

• Individual Subscribers: You cannot call those registered with the TPS without explicit, provable consent. The rules are designed to protect individuals from intrusions on their privacy.
• Corporate Subscribers: Generally, you can call businesses unless they are registered on the CTPS or have asked you to stop. Still, all calls should include a clear opt-out and identification. Non-compliance rules (including fines) apply equally to B2B campaigns targeting the CTPS list.

Always assume the stricter standard applies-especially if you’re not sure whether you’re contacting an individual or an organisation. And remember, a partner or sole trader counts as an individual subscriber in the eyes of the law.

What About Email or Other Electronic Marketing?

While this article focuses on telephone marketing, you’ll find that similar principles apply to email, SMS, and other forms of electronic direct marketing. For a detailed breakdown of the different requirements, see our guides on GDPR compliance and legal rules for online marketing. Need to send commercial emails? Familiarise yourself with the additional PECR requirements for emails and SMS-including consent, the “soft opt-in” rule, and requirements for unsubscribe links on every message.

How Can Your Business Stay PECR-Compliant With Telephone Marketing?

Compliance is as much about systems as it is about knowledge. Here’s a practical checklist to keep your telephone marketing campaigns on the right side of the law:

1. Screen your calling lists against the TPS and CTPS every 28 days before starting a campaign.
2. Obtain and record consent-with a clear audit trail-before calling anyone not already your customer or who has not previously agreed to marketing.
3. Review your scripts to ensure all callers identify themselves, explain why they’re calling, and provide opt-out information at the start of every call.
4. Display your correct caller ID on every outbound marketing call.
5. Log all opt-outs and add these to your own “do not call” lists for future use.
6. Train your staff and third-party partners-everyone making calls must understand these requirements and your reporting/escalation processes for complaints.
7. Use automated calling systems only with written consent-and keep records showing how, when and for what the consent was given.
8. Regularly review your compliance-laws change, so update your processes and call scripts as needed. Consider scheduling annual legal health checks-we can help with this.

For a closer look at setting up compliant marketing agreements or staff training, see our guides on essential business legal documents and specific legal services for marketing and data protection.

Common Telephone Marketing Mistakes-and How to Avoid Them

Over the years, we’ve seen a handful of errors crop up again and again for UK businesses trying telephone marketing for the first time. Watch out for these pitfalls:

• Not updating call lists-calling people who’ve opted out or are on the TPS/CTPS because your list is out of date
• Not keeping proof of consent-especially for inherited or purchased marketing lists
• Hiding your caller ID-which can lead to consumer complaints and even your number being blocked
• Forgetting opt-out information-not telling recipients how to stop future calls
• Using automated calls without explicit consent
• Poor staff training-agents failing to identify themselves or missing out on compliance steps

To shield your business from unnecessary risk, it’s crucial to get your legal structures and documents right from day one. And if you’re not sure? Ask a legal expert!

Key Takeaways

• Before you launch a telephone marketing campaign, check the rules under PECR and the UK GDPR-they apply to every business, no matter your size.
• You must not make live marketing calls to anyone listed on the TPS/CTPS unless you have clear, provable prior consent to do so.
• Automated calling systems (including pre-recorded/robocalls) require explicit, written recipient consent-substantial fines may apply for breaches.
• Always identify yourself and your business, use a visible caller ID, and provide opt-out options in every call.
• Consent for marketing must be specific, informed, and freely given; you need robust records to prove it.
• The ICO can issue fines up to £500,000 for breaches of marketing laws, plus order changes to your marketing practises.
• Staying compliant protects both your business and your reputation-get in touch for tailored legal support and regular compliance checks.

---

If you need help making your business PECR-compliant or want to ensure your telephone marketing is legally sound, you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat with our team of legal experts.