Why Agencies Should Hold EU and UK Prospects Out of a Client's First US Campaign

A US client's ICP says "North America," but the list comes back with a few hundred contacts in London, Dublin, Berlin, and Amsterdam. They fit the title filter. They work at the right kind of company. It is tempting to let them ride along.

We think the right default is to hold them out of the first campaign, put them in a separate queue, and only send once the client has made a deliberate decision about European outreach. Not because B2B email to Europe is forbidden, but because the rules are different, they vary by country, and the decision belongs to the client and their counsel, not to a list filter. This is general information, not legal advice.

The rules are not the same as CAN-SPAM

US cold email is governed largely by an opt-out regime. Europe layers two sets of rules on top of each other.

GDPR covers named people. The regulation applies to personal data of individuals, and a named person's work email is personal data. It can also reach companies outside the EU. Article 3(2) applies GDPR to a controller not established in the Union when its processing relates to offering goods or services to people in the Union. The European Data Protection Board's guidelines on territorial scope, and Recital 23, say the test is whether it is apparent the business envisages offering services to people in one or more member states. Simply being reachable is not enough; deliberately building a list of EU prospects and pitching them looks a lot more like targeting.

E-privacy rules decide when email is allowed at all. These come from national laws implementing the EU's e-privacy directive, and they differ. Fieldfisher's survey of EU e-marketing requirements shows the spread: some countries allow B2B email on an opt-out basis when the message relates to the recipient's professional role, while others require opt-in for individualized B2B addresses.

The UK has its own version. The ICO's guidance on business-to-business marketing says the PECR rule on electronic mail marketing does not apply to corporate subscribers, meaning companies and LLPs. Sole traders and some partnerships are treated as individuals and need consent or a soft opt-in. And UK GDPR still applies to the named person's data.

None of that makes European outreach impossible. It makes it a per-country, per-client decision, which is exactly the kind of thing that should not happen by accident inside a US campaign.

Why "hold" beats "include" or "delete"

• Including them by default means the client's domain is sending into a stricter regime nobody reviewed, from a sequence written for US buyers.
• Deleting them throws away data the client may want once they decide on a European motion, and loses the record that you chose not to contact them.
• Holding them keeps the contacts out of live sequences, preserves the decision, and gives the client a concrete number to react to: "we found [N] good-fit prospects in the UK and EU; do you want to talk to counsel about reaching them?"

A per-client geo rule

1. Tag location at sourcing. Use the prospect's location and the company's location, and keep the source of each field so you can explain later where it came from.
2. Route EU, EEA, and UK contacts to a hold queue. Not suppression. A hold with a reason.
3. Treat unknown locations as unknown. Do not assume US because the company is American. Many US companies have European staff.
4. Get a written client decision before any send. Which countries, which lawful basis, what the opt-out and privacy notice look like. That decision belongs in the client's workspace record.
5. If a held prospect replies or objects anyway, honor it immediately. GDPR Recital 70 gives people the right to object to direct marketing at any time, free of charge. Put objections on the suppression list.

Where GTM fits

GTM keeps each client in an isolated workspace, records provenance on every field, anchors retention to collection date, and keeps suppression that survives purge. Our data model is built to GDPR, and GTM is US-only today with data hosted in the US. A hold rule for European prospects fits that posture and keeps the decision with the client. For what buyers should ask about hosting, see US data residency: what agency buyers should ask.

If you run outbound for several clients, join the waitlist.

Sources

• European Data Protection Board, Guidelines 3/2018 on the territorial scope of the GDPR (Article 3): https://www.edpb.europa.eu/documents/guideline/guidelines-32018-on-the-territorial-scope-of-the-gdpr-article-3-version-adopted_en
• Regulation (EU) 2016/679 (GDPR), including Article 3 and Recitals 23 and 70: https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679
• ICO, "Business-to-business marketing": https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/business-to-business-marketing/
• Fieldfisher, "EU e-marketing requirements" (January 2024): https://res.cloudinary.com/fieldfisher/image/upload/v1706627634/PDFs/EU_e-marketing_requirements_-_January_2024_lqpl6s.pdf