B2B Cold Calling Rules UK: What You Can and Cannot Do

Is B2B Cold Calling Legal in the UK?

Yes. Business-to-business (B2B) cold calling is legal in the UK without prior consent, provided you comply with certain regulations. Unlike consumer calling, where consent is generally required, businesses can be contacted for marketing purposes unless they have specifically opted out.

This does not mean B2B cold calling is unregulated. There are clear rules you must follow to stay compliant with UK law, particularly the Privacy and Electronic Communications Regulations (PECR) and guidance from the Information Commissioner's Office (ICO).

Key Regulations Governing B2B Cold Calling

1. The Corporate Telephone Preference Service (CTPS)

The CTPS is a register of UK businesses that do not wish to receive unsolicited sales and marketing calls. While screening against CTPS is not a strict legal requirement in the same way that TPS is for consumers, the ICO considers it best practice.

Best practice: Screen all business numbers against CTPS before calling. Calling a CTPS-registered business damages your reputation and wastes your time -- they have explicitly opted out of marketing calls.

2. The Telephone Preference Service (TPS)

The TPS is a register of individuals who do not want to receive unsolicited sales calls. It is illegal to make marketing calls to TPS-registered numbers without prior consent. Breaching TPS regulations can result in fines of up to £500,000 from the ICO.

Critical rule: Always screen against TPS. If you are calling business landlines, some may be TPS-registered (e.g., sole traders working from home). Do not assume all business numbers are exempt from TPS.

3. Privacy and Electronic Communications Regulations (PECR)

PECR governs how businesses use phone, email, text, and fax for marketing. For B2B calling, PECR allows unsolicited calls provided:

• The call is made to a corporate subscriber (a business, not an individual)
• The recipient has not opted out (via CTPS or directly to your company)
• You identify yourself clearly at the start of the call
• You provide an easy opt-out mechanism

4. UK GDPR

Under UK GDPR, you must have a lawful basis for processing personal data, including phone numbers. For B2B calling, the usual lawful basis is legitimate interests: you have a legitimate business interest in contacting potential customers, and that interest is not overridden by the data subject's rights.

You must also comply with GDPR principles: data must be accurate, kept secure, and deleted when no longer needed. If you collect email addresses or other personal data during calls, you must handle that data lawfully.

What You Must Do When Making B2B Cold Calls

1. Identify Yourself Clearly

At the start of every call, you must clearly state:

• Your company name
• The purpose of the call
• Your contact information (if requested)

Example compliant opening:

"Good morning, this is Sarah calling from PaulSpeaks Ltd. We provide staff scheduling software for care homes and hospitals. Is this a convenient time to speak briefly about how we help care facilities reduce agency costs?"

Do not withhold your caller ID or use misleading information. Doing so breaches PECR and damages trust.

2. Provide an Opt-Out Mechanism

Recipients must be able to opt out of future calls easily. This can be verbal during the call or via a follow-up method (e.g., "If you do not wish to receive further calls, please let me know now or email optout@yourcompany.com").

Once someone opts out:

• Add their number to your internal suppression list immediately
• Do not call them again for marketing purposes
• Keep records of opt-out requests for at least 6 months (ICO guidance)

Calling someone after they have opted out is a serious breach and can trigger ICO enforcement action.

3. Screen Against TPS and CTPS

Before calling any number, screen it against:

• TPS (individuals who do not want marketing calls)
• CTPS (businesses that do not want marketing calls)

Both services are managed by the Direct Marketing Association (DMA). You can purchase TPS/CTPS screening files or use a third-party service. PaulSpeaks AI Call Centre includes automatic TPS/CTPS screening built-in.

4. Keep Accurate Records

You must maintain records of:

• Who you called and when
• What was discussed
• Opt-out requests
• Where you obtained the phone number

These records help demonstrate compliance if the ICO investigates a complaint.

5. Obtain Consent for Call Recording

If you record calls, you must inform the recipient at the start of the call. A standard script is:

"This call may be recorded for training and quality purposes."

Under UK GDPR, this notice is sufficient for lawful processing. You do not need explicit consent, but you must inform the caller and give them the option to object.

What You Cannot Do

1. Call TPS-Registered Numbers

Calling individuals on the TPS without prior consent is illegal. Even if the number is a business landline, it may be TPS-registered (e.g., a sole trader working from home). Always screen.

2. Ignore Opt-Out Requests

Once someone asks not to be called again, you must honour that request. Ignoring opt-outs can result in ICO fines and serious reputational damage.

3. Use Misleading Caller IDs

You must not withhold your number or display a false caller ID. Doing so breaches PECR and undermines trust.

4. Call Outside Reasonable Hours

While not strictly illegal, calling businesses outside normal working hours (e.g., 11pm or 6am) is considered bad practice and may trigger complaints. Stick to 9am-6pm Monday to Friday unless you have reason to believe the business operates outside those hours.

5. Make Excessive Calls

Repeatedly calling the same number in a short period (e.g., 5 calls in one day) is harassment. The ICO considers this nuisance calling and can take enforcement action.

Penalties for Non-Compliance

The ICO has the power to issue fines for breaches of PECR and UK GDPR. Penalties include:

• Fines up to £500,000 for serious breaches (e.g., systematic calling of TPS-registered numbers)
• Enforcement notices requiring you to stop certain practices
• Criminal prosecution in extreme cases (e.g., deliberate mass nuisance calling)

Even if you avoid fines, non-compliance damages your reputation, wastes your calling budget, and generates complaints that harm your business.

Common Myths About B2B Cold Calling

Myth 1: "I can call any business number without restriction"

False. You must screen against CTPS (best practice) and TPS (legal requirement). Some business numbers are TPS-registered, and calling them is illegal.

Myth 2: "CTPS is optional"

Partly true. CTPS screening is not a strict legal requirement, but the ICO considers it best practice. Calling CTPS-registered businesses wastes your time and damages your reputation.

Myth 3: "I can call as many times as I want until they answer"

False. Excessive calling is harassment. If someone does not answer after 2-3 attempts over several days, move on.

Myth 4: "B2C and B2B rules are the same"

False. B2C calling requires prior consent in most cases. B2B calling does not, provided you comply with opt-out and identification rules.

Best Practices for Compliant B2B Cold Calling

1. Always screen against TPS and CTPS before calling any number
2. Identify yourself clearly at the start of every call
3. Provide an easy opt-out mechanism and honour opt-out requests immediately
4. Keep accurate records of calls, opt-outs, and data sources
5. Call during reasonable hours (9am-6pm Monday-Friday)
6. Inform callers if you record calls and handle recordings securely
7. Train your team (or configure your AI) to follow these rules consistently

How PaulSpeaks AI Call Centre Ensures Compliance

PaulSpeaks AI Call Centre includes built-in compliance features:

• Automatic TPS/CTPS screening – numbers are checked before calling
• Clear caller identification – AI introduces your company name and purpose
• Opt-out handling – AI recognises opt-out requests and adds numbers to suppression list
• Call recording with consent – AI informs callers that the call may be recorded
• Audit trail – full call recordings, transcripts, and logs for ICO compliance

Compliance is not optional. It protects your business, respects your prospects, and ensures your calling campaigns are effective and legal. Whether you use human callers or AI, following UK B2B cold calling rules is essential.

Start AI Calling Today

AI-powered call centre that makes sales calls, qualifies leads, and books demos automatically. From just £50/month.

More Articles