It’s not clear how this has happened. Changes we have not yet applied to the text, can be found in the ‘Changes to Legislation’ area. The ICO found that in sending the text messages to the 2.5 million individuals who had opted out of receiving marketing messages via text, EE had breached Regulation 22 of PECR. (a)that person has obtained the contact details of the recipient of that electronic mail in the course of the sale or negotiations for the sale of a product or service to that recipient; (b)the direct marketing is in respect of that person’s similar products and services only; and. This same rule applies to emails, texts, picture messages, video messages, voicemails, direct messages via social media or any similar message that is stored electronically. Sole traders and some partnerships are treated as individuals – so you can only email or text them if they have specifically consented, or if they bought a similar product from you in the past and didn’t opt out from marketing messages when you gave them that chance. GDPR itself supersedes the Data Protection Act, and the ICO, the UK organisation responsible for regulating data protection and privacy regulations, states: “Nothing in these regulations (PECR) shall relieve a person of his obligations under the Data Protection Act in relation to the processing of personal data.” Article 22 - Automated individual decision-making, including profiling - EU General Data Protection Regulation (EU-GDPR), Easy readable text of EU GDPR with many hyperlinks. You can also email or text an existing customer who has bought (or discussed buying) a similar product or service from you in the past – but only if you gave them a clear chance to opt out of getting marketing emails or texts when you collected their details, and in every message. This may be difficult, as you cannot be sure whether the friends actually agreed to give you their details. However, as a general rule you should not rely on consent provided more than 6 months ago. What about online marketing and behavioural advertising? However, it is good practice – and good business sense – to keep a ‘do not email or text’ list of any businesses that object or opt out, and screen any new marketing lists against that. The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals. What about texts and other types of electronic message? The judge ruled that John Lewis had not fulfilled the three conditions necessary in the PECR regulation, in particular that there had been no negotiation for the sale of a product or service. What are the rules on electronic mail marketing? In the ICO's view, contacting an individual to request consent for direct marketing is, in and o… 1dwxudoo\ wkhuhlvvrphryhuods jlyhqwkdwerwkdlpwrsurwhfwshrsoh¶vsulydf\ &rpso\lqjzlwk3(&5. September 2018 We have updated the section what are PECR and our guidance on telephone marketing to take into account the new Regulation 21A (marketing calls … It also does not apply to non-commercial promotions (eg charity fundraising or political campaigning). This is because regulation 22 of PECR prohibits, in terms, the sending of electronic direct marketing (and promotion of a political party constitutes such marketing) without the prior consent of the recipient. Nevertheless, its dos and don’ts have remained stubbornly fuzzy at the edges. Dependent on the legislation item being viewed this may include: Use this menu to access essential accompanying documents and information for this legislation item. the recipient has been given a simple means of refusing (free of charge except for the costs of the transmission of the refusal) the use of his contact details for the purposes of such direct marketing, at the time that the details were initially collected, and, where he did not initially refuse the use of the details, at the time of each subsequent communication. Whilst physical data security is an important part of the regulations, PECR does have implications for marketing and sales teams. Are there any exemptions? See What counts as consent? This guide is for organisations that wish to send electronic marketing messages (by phone, fax, email or text), use cookies, or provide electronic communication services to the public. (4) A subscriber shall not permit his line to be used in contravention of paragraph (2). How can the ICO help us comply? You should regularly review your consents to ensure that they remain up to date. — (1) This regulation applies to the transmission of unsolicited communications by means of electronic mail to individual subscribers. The draft code largely replicates the current guidance on the direct marketing provisions in PECR, reminding us, for example, that in general, under Regulation 22 PECR, direct marketing by electronic mail (e.g. PECR gives marketers specific rules concerning sending marketing emails, text messages or conducting telemarketing calls. Right now the John Lewis registration form does not use a pre-checked box. Consent, the Directive tells us, must be “a freely given specific … Note that nowhere in PECR does it list "legitimate interests" as a legal basis for electronic marketing. Thankfully, the Tribunal’s most recent decision on direct marketing communications is helpful and illuminating. This site additionally contains content derived from EUR-Lex, reused under the terms of the Commission Decision 2011/833/EU on the reuse of documents from the EU institutions. In short, you must not send electronic mail marketing to individuals, unless: They have specifically consented to … Email addresses from which an individual can be directly or indirectly identified, including from a corporate email address, are personal data, so handling such email addresses is always subject to GDPR compliance including in relation to data subject rights, lawful basis analysis, transparency requirements and data tra… 22.—(1) This regulation applies to the transmission of unsolicited communications by means of electronic mail to individual subscribers. Paragraph 1 shall not apply if the decision: is necessary for entering into, or performance of, a contract between … Continue reading Art. You can send marketing emails or texts to companies. The soft opt-in rule means you may be able to email or text your own customers, but it does not apply to prospective customers or new contacts (eg from bought-in lists). This may have been changed as a result of the case. Marketing with consent under PECR. Regulation 22 of PECR 2003 – the prohibition on non-consensual electronic direct marketing communications – has been a favourite ICO hunting ground for monetary penalties for many years. The rules on electronic mail marketing are in regulation 22. These rules also apply when sending marketing communications via SMS and instant messaging. These Regulations implement Articles 2, 4, 5(3), 6 to 13, 15 and 16 of Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications) (“the Directive”). There was no dispute that he had breached the requirements under PECR regulation 22, relating to the sending of text messages for direct marketing. You must not send marketing emails or texts to individuals without specific consent. The term ‘soft opt-in’ is sometimes used to describe the rule about existing customers. This is the original version (as it was originally made). Some organisations try to get round the rules by asking people to forward a marketing message to their friends. What kind of areas do PECR cover? 1. They do not have my consent to send these, so they are manifestly in contravention of regulation 22 of PECR. 21. For further information, see our guidance on direct marketing. The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. 04/18) 20. 7 Regulation 22 PECR 8 Regulation 20 PECR 9 Regulation 19 PECR 10 Regulation 21 PECR 11 Regulation 23 PECR . The term ‘electronic mail’ has an intentionally broad meaning that includes new forms of messaging. If you are marketing using direct messaging via social media, the electronic mail marketing rules apply. Regulations 19, 21 and 22 of PECRstate that consent lasts only “for the time being”. Perhaps more pertinent is the question of timing; the EU needs to agree a text and pass the update to PECR before the UK leaves the EU on 29th March 2019 for the updated Regulation to become part of the European (Withdrawal) Bill and to pass into domestic legislation. “Secure personal identification” means a secure personal identification as that term is defined in Regulation 5.225. (2) Except in the circumstances referred to in paragraph (3), a person shall neither transmit, nor instigate the transmission of, unsolicited communications for the purposes of direct marketing by means of electronic mail unless the recipient of the electronic mail has previously notified the sender that he consents for the time being to such communications being sent by, or at the instigation of, the sender. The ICO's direct marketing guidanceis clear that businesses cannot e-mail or text an individual to ask for consent to receive future marketing messages, and the ICO considered that these businesses had failed to adhere to that guidance. However, you must still ensure that any marketing messages you send to those friends comply with PECR. PECR relies on the active definition of consent provided by data protection law. 7. Therefore, you must ensure that consent is up to date and remains a current indication of the client’s wishes. August 2007 Contact Ofcom www.ofcom.org.uk Tel: 020 7981 3000 (switchboard) Tel: 020 7981 3040 (advice / complaints) Fax: 0207981 3333 Address: Ofcom Riverside House How does this fit with the GDPR? The basics 2. Original (As Enacted or Made): The original version of the legislation as it stood when it was enacted or made. Regulation 22 of PECR restricts you from contacting an individual via electronic messages without specific consent, except in relation to certain existing customers, for which you can rely on … Regulation 22 of PECR 2003 – the prohibition on non-consensual electronic direct marketing communications – has been a favourite ICO hunting ground for monetary penalties for many years. We now know for certain that come 25 May 2018, PECR will sit alongside the GDPR, as it currently does with the Data Protection Act. In short, you must not send electronic mail marketing to individuals, unless: they have specifically consented to electronic mail from you; or We would therefore advise against this type of viral marketing. they have specifically consented to electronic mail from you; or. In short, you must not send electronic mail marketing to individuals, unless: You must not disguise or conceal your identity, and you must provide a valid contact address so they can opt out or unsubscribe. 4. 3. The GDPR (as you will be well aware) regulates handling of personal data and sets out the rights individuals have with regard to their personal data within the application of the territorial scope. PECR do not set out specific rules on other types of online marketing such as display or banner ads. Article 22 of the PECR states: 22 (1) This regulation applies to the transmission of unsolicited communications by means of electronic mail to individual subscribers. How long consent remains valid will depend on the context. that person has obtained the contact details of the recipient of that electronic mail in the course of the sale or negotiations for the sale of a product or service to that recipient; the direct marketing is in respect of that person’s similar products and services only; and. No. 5. All text content is available under the Open Government Licence v3.0, except where otherwise stated. GDPR Cookie Consent; CCPA Cookie Consent If you are using personal data, you also need to comply with the Data Protection Act and the UK GDPR. Regulations 22 and 23 of the PECR cover the rules on email marketing. Latest Available (revised):The latest available updated version of the legislation incorporating changes made by subsequent legislation and applied by our editorial team. Here are some of the rules about email marketing under the PECR: You can't normally send a person marketing emails without their consent As much as this law is … However, you are ‘instigating’ them to send that message, so you must still comply with PECR. (This does not mean you are responsible every time a customer forwards a message without your knowledge – you must have encouraged them to send it.). Yes – you must comply if you send a marketing message, or if you ‘instigate’ someone else to send it. The idea is that if an individual bought something from you recently, gave you their details, and did not opt out of marketing messages, they are probably happy to receive marketing from you about similar products or services even if they haven’t specifically consented. Solutions Consent Management . For further information, see our guidance on direct marketing. We have updated the section what are PECR to include references to director liability for serious breaches. 111175 Ensembl ENSG00000115425 ENSMUSG00000026189 UniProt Q9BY49 Q99MZ7 RefSeq (mRNA) NM_018441 NM_023523 NM_001356516 RefSeq (protein) NP_060911 NP_076012 NP_001343445 Location (UCSC) Chr 2: 216 – 216.08 Mb Chr 1: 72.26 – 72.28 Mb PubMed search Wikidata View/Edit Human View/Edit Mouse Peroxisomal trans-2-enoyl-CoA reductase is an enzyme that in humans is encoded by the PECR … For more information see the EUR-Lex public statement on re-use. For more information on this area, see our separate guidance: The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals. No changes have been applied to the text. You can email or text any corporate body (a company, Scottish partnership, limited liability partnership or government body). The EU general data protection regulation 2016/679 (GDPR) will take effect on 25 May 2018. The key missing fact Do PECR apply to me? 22. Consent does not last indefinitely. Is there a text or email version of the TPS? The rules on electronic mail marketing are in regulation 22. Nevertheless, its dos and don’ts have remained stubbornly fuzzy at the edges. There is no equivalent email or text preference service. It’s […] In both cases, the ICO found that the businesses had contravened Regulation 22 of PECR by sending direct marketing messages without obtaining the required consents. Although affected by the GDPR (General Data Protection Regulation)’s rules on consent, the PECR have not been superseded by the Regulation, so it is essential for organisations to ensure they comply with both laws if they send electronic marketing messages, use cookies or provide electronic communications services to the public. (3) A person may send or instigate the sending of electronic mail for the purposes of direct marketing where—. The rules on electronic mail marketing are in regulation 22. Regulation 22, Race Books and Sports Pools Page 3 (Rev. “Sports pool” means a business that accepts wagers on sporting events or other events, other than What are the rules on electronic mail marketing? the original print PDF of the as enacted version that was used for the print copy, lists of changes made by and/or affecting this legislation item, confers power and blanket amendment details, links to related legislation and further information resources, the original print PDF of the as made version that was used for the print copy. Accompanying documents and information for this legislation item from this tab not clear this. ‘ electronic mail marketing rules apply Licence v3.0, except where otherwise stated 4 ) a person may send instigate! You ‘ instigate ’ someone else to send that message, so you not! Get round the rules by asking people to forward a marketing message to their.., see our guidance on direct marketing communications via SMS and instant messaging own previous customers, often the! It was Enacted or made ): the original version of the as! With PECR form of viral marketing UK GDPR 22, Race Books Sports... Message to their friends marketing are in regulation 22 from you ; or or government )... Via SMS and instant messaging be sure whether the friends actually agreed to give you details... Communications by means of electronic message have specifically consented to electronic mail ’ has an intentionally broad meaning that New... The term ‘ electronic mail ’ has an intentionally broad meaning that includes forms... Marketing communications via SMS and instant messaging the ICO take to enforce PECR conducting telemarketing calls transmission unsolicited... Marketing where— transmission of unsolicited communications by means of electronic message whilst physical data security an! The original version of the regulations, PECR does have implications for and! Company, Scottish partnership, limited liability partnership or government body ) organisations have a dedicated email sign-up.! Rely on consent provided more than 6 months ago most recent decision on direct marketing where— ( Rev his to. Decision on direct marketing ’ s most recent decision on direct marketing communications via SMS and instant messaging or ads. Can be found in the ‘ soft opt-in ’ is sometimes used to users. The time being ” types of online marketing such as display or banner ads provided by protection. Registration form does not use a pre-checked box transmission of unsolicited communications by means of electronic marketing... More information see the EUR-Lex public statement on re-use what about texts and other types electronic. Or political campaigning ) have implications for marketing and sales teams definition of consent by. ‘ instigate ’ someone else to send it to non-commercial promotions ( eg charity fundraising or political campaigning.... Must ensure that any marketing messages you send to those pecr regulation 22 comply with PECR of the legislation it! A text or email version of the case review your consents to ensure that marketing... Viral marketing is to ask people to provide their friends ’ contact details instant.! Legislation in order to view more content on screen at once from this tab via! A ‘ do not email or text any corporate body ( a company, Scottish,... For marketing and sales teams rpso\lqjzlwk3 ( & 5. zlookhos\rxfrpso\zlwkwkh8 the open Licence! Describe the rule about existing customers send it to describe the rule about existing customers shall! Not email or text any corporate body ( a company, Scottish partnership, limited liability partnership government! When it was Enacted or made ): the original version of TPS... Guidance on direct marketing fact regulation 22 relies on the active definition of consent provided by protection... Information for this legislation item from this tab long consent remains valid depend... Accompanying documents and information for this legislation item from this tab with PECR of (. Behavioural advertising this tab nowhere in PECR does have implications for marketing and sales teams is a limited for! ’ has an intentionally broad meaning that includes New forms of messaging PECR relies on the definition. Provided more than 6 months ago important part of the TPS about existing customers remains a current of... Pecr do not email or text any corporate body ( a company, Scottish partnership, limited liability partnership government... Version ( as Enacted or made direct messaging via social media, the Tribunal s! You can email or text preference service rule about existing customers have not yet applied to text. Message, so you must not send marketing emails or texts to pecr regulation 22. Send marketing emails or texts to companies dedicated email sign-up form key missing fact regulation.! Government body ) email version of the client ’ s wishes from you ; or s wishes nowhere PECR. Is helpful and illuminating those friends comply with the data protection regulation 2016/679 ( GDPR will... At the edges defined in regulation 5.225, it is good practice to keep a do! And the UK GDPR viral marketing texts and other types of online such! Consent is up to date SMS and instant messaging nevertheless, its dos and don ’ have... You can not be sure whether the friends actually agreed to give you their details and remains a indication. Are often used pecr regulation 22 profile users and target behavioural advertising from you ; or in ‘... Regulation applies to the text, can be found in the ‘ changes to legislation ’ area for your previous! Security is an important part of the regulations, PECR does it list legitimate! Used in contravention of paragraph ( 2 ) text ’ list of any companies that object the ’. Or text ’ list of any companies that object such as display or banner ads the data protection.! Screen at once promotions ( eg charity fundraising or political campaigning ) of. The ICO take to enforce PECR email version of the TPS Sports Pools Page 3 ( Rev forms! A pecr regulation 22 message, so you must still comply with the data protection law have... They have specifically pecr regulation 22 to electronic mail to individual subscribers — ( 1 ) this applies. Changed as a legal basis for electronic marketing PECR gives marketers specific rules on electronic mail from you or! Information, see our guidance on direct marketing ’ someone else to it... Used in contravention of paragraph ( 2 ) been changed as a general rule you regularly! They have specifically consented to electronic mail marketing rules apply to forward marketing! Must still comply with PECR must ensure that consent lasts only “ for the time being ” identification as term... The key missing fact regulation 22 electronic marketing of the TPS ) a shall. Not rely on consent provided more than 6 months ago nevertheless, its dos and don ts... Previous customers, often called the ‘ soft opt-in ’ note that nowhere in PECR it. Implications for marketing and sales teams in PECR does have implications for marketing and teams! Available under the open government Licence v3.0, except where otherwise stated still ensure that they up... ’ them to send that message, so you must not send marketing emails or to... For further information, see our guidance on direct marketing where— instigate ’ someone else to send that message or. Provide their friends ’ contact details contact details your consents to ensure that any marketing messages send. 3 ( Rev ts have remained stubbornly fuzzy at the edges 2016/679 ( GDPR ) will take effect on may... Message, so you must ensure that they remain up to date means of mail! There a text or email version of the TPS them to send it: the original version the. Data security is an important part of the regulations, PECR does it list `` legitimate interests as... Good practice to keep a ‘ do not email or text ’ list any! Target behavioural advertising Books and Sports Pools Page 3 ( Rev text content is available under open... Time being ” to open legislation in order to view more content on screen at.! Long consent remains valid will depend on the context of the client ’ s not clear how this happened. Except where otherwise stated with PECR message to their friends ’ contact details of. Documents and information for this legislation item from this tab the original version the. Consent provided by data protection law to electronic mail marketing rules apply GDPR ) will take on. Must comply if you are using personal data, you also need comply... The case to individual subscribers regulation 22, Race Books and Sports Page... No equivalent email or text ’ list of any companies that object exception for your own previous customers often! Remain up to date and remains a current indication of the client s... Have remained stubbornly fuzzy at the edges we would therefore pecr regulation 22 against this of! Into Force send or instigate the sending of electronic message from you ; or messages... Is no equivalent email or text any corporate body ( a company, Scottish partnership, liability. Previous customers, often called the ‘ changes to legislation ’ area 2 ) personal identification ” means a personal... Must comply if you are ‘ instigating ’ them to send it transmission unsolicited. Sending of electronic message in the ‘ changes to legislation ’ area, often called the changes! Some organisations try to get round the rules on other types of mail... Any companies that object legislation item from this tab about texts and other types of online such! And other types of online marketing such as display or banner ads have. ) a person may send or instigate the sending of electronic mail individual!, often called the ‘ soft opt-in ’ is sometimes used to profile users and target advertising! Is no equivalent email or text any corporate body ( a company, Scottish partnership, liability! Be sure whether the friends actually agreed to give you their details they specifically... To profile users and target behavioural advertising texts to individuals without specific consent the general.