Is Cold Email Legal? The Definitive 2026 Guide for Every Country
Published March 6, 2026
The Short Answer: It Depends on Where Your Recipient Is
Cold email is not inherently illegal anywhere, but the conditions under which you can send it vary enormously. Some countries use an opt-out model (you can email anyone until they say stop), others require opt-in (you need consent before the first message), and many offer B2B exemptions that make cold outreach legal under specific conditions.
The critical principle: the law that applies is typically based on the recipient's location, not yours. A US company emailing a German prospect must comply with German (and EU) regulations, not just CAN-SPAM.
COLD EMAIL LEGALITY BY REGION
| Country/Region | Model | B2B Cold Email? | Key Requirement |
|---|---|---|---|
| United States | Opt-out | Yes | Unsubscribe + physical address |
| EU / UK | Hybrid | Yes (legitimate interest) | LIA documentation + opt-out |
| Canada | Opt-in | Limited | Implied consent for public addresses |
| Australia | Opt-in | Limited | Consent or existing relationship |
| Japan | Opt-in | Yes (business cards) | Prior consent or business card exchange |
| Brazil | Opt-in (LGPD) | Limited | Legitimate interest basis available |
| India | Opt-out | Yes | DND registry check |
| Singapore | Opt-in | Yes (B2B exempt) | DNC registry + B2B exemption |
The Opt-Out Countries (Easiest for Cold Email)
The United States and India follow the opt-out model. You can send the first cold email without prior consent, as long as you provide a clear way to unsubscribe and honor opt-out requests promptly. This is the most permissive framework for cold outreach.
However, "opt-out" does not mean "anything goes." CAN-SPAM still requires accurate headers, physical address, and honest subject lines. India's IT Act requires compliance with the Do Not Disturb (DND) registry.
The B2B Exemption Countries
Many opt-in countries carve out exceptions for business-to-business communication. The logic: a sales director receiving a relevant B2B offer has a different expectation of privacy than a consumer receiving a weight-loss ad.
The EU's legitimate interest basis under GDPR is the most well-known B2B pathway. The UK's Privacy and Electronic Communications Regulations (PECR) explicitly exempt B2B email from opt-in requirements — corporate email addresses like name@company.com can receive cold outreach as long as you identify yourself and offer an opt-out.
Singapore's Personal Data Protection Act (PDPA) similarly exempts B2B communications sent to business contact information.
B2B cold email is legal in most major markets when done correctly. The key is understanding which framework applies to your recipient and meeting its specific requirements. When in doubt, apply the strictest applicable standard — you will be compliant everywhere.
Strict Opt-In Countries
Canada (CASL) and Australia (Spam Act 2003) have the strictest frameworks. Both require some form of consent before the first commercial email. Canada offers narrow implied consent exceptions for publicly available addresses relevant to the recipient's role. Australia is stricter — you generally need an existing business relationship or inferred consent.
CASL allows private right of action — individuals can sue senders directly for $200 per unsolicited email, up to $1 million per day. This makes Canada one of the riskiest jurisdictions for noncompliant cold email. Ensure you have documented implied consent for every Canadian contact.
Practical Compliance for International Outreach
- Segment by geography: Tag every contact with their country and apply the correct legal framework
- Default to strictest standard: If unsure, apply CASL-level compliance everywhere
- Document everything: Keep records of where you sourced each contact and your legal basis for emailing them
- Use legitimate data sources: Easy Email Finder sources contacts through the official Google Places API, providing publicly listed business information — this supports legitimate interest and implied consent arguments across jurisdictions
- Include all required elements: Sender identity, physical address, unsubscribe mechanism in every email regardless of destination
The bottom line: cold email is legal in most countries for B2B purposes when you follow the rules. Use verified contact data from Easy Email Finder to ensure you are reaching real businesses at publicly available addresses, include all required compliance elements, and respect opt-outs immediately. Compliant outreach is sustainable outreach.
Ready to find business emails?
Try Easy Email Finder free — get 5 credits to start.
Start Finding Emails