A B2B email list is a collection of professional email contacts at businesses, typically used for sales, marketing, partnerships, or customer outreach.

A record may include:

• Contact name
• Business email address
• Company name and website
• Job title or department
• Industry and company size
• Location
• Consent or verification status

For example, a list might contain procurement managers at mid-sized manufacturing companies—not consumers’ personal email addresses.

High-quality B2B lists are accurate, relevant, regularly updated, and collected lawfully. Avoid blindly buying lists: outdated or non-consensual contacts can lead to spam complaints, poor deliverability, and privacy-law problems. Build lists through opt-in forms, events, referrals, or legitimate prospecting, and follow applicable rules such as CAN-SPAM and GDPR.

Build a B2B email list legally by following this process:

1. Define where your contacts are located. Rules differ by jurisdiction:

   • United States: CAN-SPAM applies to B2B commercial email and does not generally require prior opt-in, but it requires truthful sender information and subject lines, a physical postal address, a clear opt-out method, and honoring opt-outs within 10 business days. 9CAN-SPAM Act: A Compliance Guide for BusinessYou must honor a recipient's opt-out request within 10 business days. You can't charge a fee, require the recipient to give you any personally identifying ...ftc
   • Canada: CASL generally requires prior express or implied consent, sender identification, and an unsubscribe mechanism. 25Frequently Asked Questions about Canada's Anti-Spam ...Feb 26, 2026 · You need to: (1) obtain consent, (2) provide identification information, and (3) provide an unsubscribe mechanism.gc
   • UK/EU: You may need consent or a documented legitimate-interest basis. In the UK, corporate subscribers receive different email-treatment under PECR, but personal data and privacy obligations still apply; sole traders and some partnerships are treated like individuals. 33Sending direct marketing: Choosing your lawful basis | ICODec 5, 2022 · The two lawful bases most likely to apply to sending direct marketing messages are consent and legitimate interests.Missing: contacts | Show results with: contactsico34Business-to-business marketing | ICOIn some cases PECR requires you to have consent to send direct marketing to your business contacts. If you have got consent in compliance with PECR (which must ...ico

2. Collect addresses through legitimate sources, such as:

   • Your website’s opt-in form
   • Webinar, conference, or event registrations
   • Demo requests and downloads
   • Existing business relationships
   • Referrals or partner introductions
   • Carefully researched public business contacts, where local law permits

3. Use clear, specific consent language. State what people will receive, identify your company, avoid pre-checked boxes, and keep separate consent for newsletters, promotions, and unrelated third-party sharing.

4. Document how each contact entered your list. Store the source, date, consent wording, jurisdiction, and any applicable lawful basis. For legitimate interests, complete and record a balancing assessment rather than assuming the basis applies.

5. Be transparent when collecting or sourcing personal data. Provide a privacy notice explaining what data you collect, why you use it, how long you retain it, and how people can object or unsubscribe. Public availability does not automatically mean a person agreed to marketing. 34Business-to-business marketing | ICOIn some cases PECR requires you to have consent to send direct marketing to your business contacts. If you have got consent in compliance with PECR (which must ...ico

6. Make every marketing email compliant. Use an accurate sender name and subject line, include your business identity and required address, and provide a prominent, working unsubscribe option. Never make opting out difficult or require unnecessary personal information. 9CAN-SPAM Act: A Compliance Guide for BusinessYou must honor a recipient's opt-out request within 10 business days. You can't charge a fee, require the recipient to give you any personally identifying ...ftc

7. Maintain a permanent suppression list. Remove unsubscribed contacts promptly, do not re-add them from another list, and share suppression information with vendors sending email on your behalf.

8. Treat purchased lists cautiously. Buying a list does not transfer consent to your company and can include inaccurate addresses or people who already opted out. If you use a data provider, verify its sourcing, contractual permissions, geographic coverage, and suppression process—but obtain legal advice for higher-risk campaigns.

Practical safest approach: use explicit opt-in for newsletters and promotional campaigns, segment contacts by country, send only relevant messages, and consult a privacy lawyer before cold-emailing contacts in Canada, the UK, EU, or other regulated markets.

For U.S. cold email, CAN-SPAM generally allows you to send commercial email without getting prior permission—even for B2B messages—but it applies to all commercial email, not just bulk campaigns, and has no general B2B exemption. 9CAN-SPAM Act: A Compliance Guide for BusinessDon't use false or misleading header information. · Don't use deceptive subject lines. · Identify the message as an ad. · Tell recipients where you're located.ftc14Candid answers to CAN-SPAM questionsAug 18, 2015 · The CAN-SPAM Act doesn't require initiators of commercial email to get recipients' consent before sending them commercial email.Missing: days | Show results with: daysftc

Requirements

Every cold email should:

• Use accurate header information: “From,” “To,” “Reply-To,” originating domain, and routing details must identify the actual sender and business. 9CAN-SPAM Act: A Compliance Guide for BusinessDon't use false or misleading header information. · Don't use deceptive subject lines. · Identify the message as an ad. · Tell recipients where you're located.ftc
• Use a truthful subject line that accurately reflects the message. 9CAN-SPAM Act: A Compliance Guide for BusinessDon't use false or misleading header information. · Don't use deceptive subject lines. · Identify the message as an ad. · Tell recipients where you're located.ftc
• Clearly identify the message as an advertisement where required; the law gives flexibility in how this disclosure appears. 9CAN-SPAM Act: A Compliance Guide for BusinessDon't use false or misleading header information. · Don't use deceptive subject lines. · Identify the message as an ad. · Tell recipients where you're located.ftc
• Include a valid physical postal address, such as your street address, a USPS-registered P.O. box, or an eligible commercial mailbox. 9CAN-SPAM Act: A Compliance Guide for BusinessDon't use false or misleading header information. · Don't use deceptive subject lines. · Identify the message as an ad. · Tell recipients where you're located.ftc
• Provide a clear, conspicuous, working opt-out method—for example, an unsubscribe link or reply-to address. It must be easy to understand and use, and you must offer a way to stop all future marketing emails. 9CAN-SPAM Act: A Compliance Guide for BusinessDon't use false or misleading header information. · Don't use deceptive subject lines. · Identify the message as an ad. · Tell recipients where you're located.ftc
• Honor opt-outs within 10 business days and avoid sending further commercial email after the request. 10FTC lawsuit reminds businesses: CAN-SPAM means CAN'T ...Aug 14, 2023 · If you get unwanted marketing emails, opt out of getting them. The company must honor your request within 10 business days. If there's no way to ...Missing: compliance guideftc
• Keep the opt-out mechanism active for at least 30 days after sending the email and process requests without charging the recipient or requiring information beyond an email address and opt-out preferences. 9CAN-SPAM Act: A Compliance Guide for BusinessDon't use false or misleading header information. · Don't use deceptive subject lines. · Identify the message as an ad. · Tell recipients where you're located.ftc
• Monitor vendors and agencies: You remain responsible for compliance even if another company sends the emails for you. 9CAN-SPAM Act: A Compliance Guide for BusinessDon't use false or misleading header information. · Don't use deceptive subject lines. · Identify the message as an ad. · Tell recipients where you're located.ftc

Practical cold-email checklist

Use a real business identity, write a non-deceptive subject line, explain why you’re contacting the person, include your postal address and a one-click unsubscribe, and maintain a suppression list so unsubscribed contacts are never re-added.

CAN-SPAM is only the U.S. federal baseline. State privacy laws and other countries’ rules may impose additional requirements; for example, GDPR, PECR, and Canada’s CASL can be stricter. Also, legal permission does not guarantee good deliverability—bulk or poorly targeted outreach can still damage your sending reputation.

No. CAN-SPAM generally does not require prior consent for B2B cold email sent to U.S. recipients. It is primarily an opt-out law: you may contact a prospect without prior permission, provided the email complies with its requirements. 1CAN-SPAM Act: A Compliance Guide for BusinessThe CAN-SPAM Act, a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have you stop ...ftc

Each commercial email must generally:

• Use accurate sender and routing information.
• Avoid deceptive subject lines.
• Include a valid physical postal address.
• Provide a clear, working opt-out mechanism.
• Honor opt-out requests within 10 business days.
• Ensure vendors or contractors sending email on your behalf comply as well. 1CAN-SPAM Act: A Compliance Guide for BusinessThe CAN-SPAM Act, a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have you stop ...ftc

Important limits: CAN-SPAM is only the U.S. federal baseline. Consent or additional legal bases may be required under other jurisdictions’ laws—for example, Canada’s CASL generally requires consent—and state laws or platform policies may impose additional constraints. 4Is Cold Email Legal? Yes — If You Follow These Rules (2026)In the US, no — permission is not required, only compliance with CAN-SPAM's rules. In Canada you generally need express or implied consent (CASL), and in the EU ...emailchaser