Also called: General Data Protection Regulation
GDPR is the EU regulation governing how personal data gets collected, processed, and stored. For cold outbound, it means the rules for contacting a person are jurisdiction-dependent and generally stricter than the opt-out model under US CAN-SPAM.
GDPR sets the rules for handling personal data across the EU and, through adjacent frameworks, much of Europe. It applies to any organization processing the personal data of people in the EU, regardless of where the sender is based, which is why it comes up in outbound conversations even for companies with no EU office.
For cold email specifically, the picture is more jurisdiction-dependent than a single rule. Legitimate interest can, in some circumstances, cover B2B outreach, but the specifics vary by member state and by whether the recipient is being contacted as a natural person in a business role. That's a meaningfully different posture than CAN-SPAM's opt-out default, and it isn't something a general answer can settle.
GDPR also isn't only about the email itself. It covers how personal data gets collected, stored, and processed more broadly, which means a compliant outbound program has to account for where a contact list came from and how long the data sits around, not just what a given message says. A list built from a scraped or third-party source can raise GDPR questions before a single email goes out, separate from anything about the message's content.
Teams running outbound into the EU generally treat this as a legal question first, not a growth-tactics question. The honest answer depends on which countries are in scope and how a specific list was built, so it gets routed to counsel rather than decided by a playbook.
GDPR gets flattened into a single rule, 'you need opt-in for everything in Europe,' when the reality is more jurisdiction-specific than that. The other common mistake is treating a UK or EU-facing list as safe because a similar US list worked, without checking whether the legal basis for contacting that specific list actually holds.
Tell us how your motion runs today. We'll show you what we'd engineer.
Contact us