# Cold Calling Laws in the UK (2026): Is It Legal?

Yes. Cold calling is legal in the UK, to businesses and to individuals, as long as you don't call numbers registered with the Telephone Preference Service (TPS) or Corporate TPS (CTPS), you say who's calling, you show your number and you stop when asked. Automated calls need consent. Since 5 February 2026, fines can reach £17.5 million or 4% of global turnover.

Reviewed October 2026. A plain summary for business-to-business calls, not legal advice.

| Rule | Summary |
|---|---|
| B2B cold calls | Allowed, after screening against the TPS and CTPS |
| Registers to check | TPS (individuals, sole traders, some partnerships) and CTPS (companies and other corporate bodies) |
| Calling hours | None set in law |
| Caller ID | Your number, or another contact number, must be shown |
| Automated calls | Only with specific consent |
| Maximum fine | £17.5 million or 4% of global turnover |
| Regulator | Information Commissioner's Office (ICO) |

## Which laws cover cold calling in the UK?

Two sets of rules apply. The Privacy and Electronic Communications Regulations (PECR) cover marketing calls: who you can call, what you have to say and which calls are banned. UK GDPR and the Data Protection Act 2018 cover the personal data behind each call, such as a contact's name, job title and direct number.

The same rules apply in England, Scotland, Wales and Northern Ireland, and the Information Commissioner's Office (ICO) enforces both. Doorstep selling falls under different rules and isn't covered here.

## Is B2B cold calling legal in the UK?

Yes. The ICO says the rules for live marketing calls to businesses are the same as for calls to individuals. You can call a business unless its number is registered with the TPS or CTPS, or it has told you not to call. If a registered business has told you it's happy to hear from you, you can call it.

For a B2B list, screen every number against both registers. Companies register with the CTPS, but sole traders and some partnerships register with the TPS, as individuals do.

## TPS and CTPS: who's on which register?

- TPS: individuals who have opted out of live marketing calls, including sole traders and some partnerships.
- CTPS: companies and other corporate bodies, such as limited liability partnerships, Scottish partnerships and government bodies.
- Your own do-not-call list: anyone who tells you not to call again goes on it, whether or not they're on a register.

## What you must do on every call

- Say who's calling, and who you're calling for.
- Show your number, or another number people can call you back on.
- Give a contact address or freephone number if asked.
- Stop calling anyone who asks you to.
- Give privacy information, including where you got the person's details, by the time of your first contact. If you record calls, say so at the start.

## Calls that need consent

- Automated marketing calls with a recorded message need specific consent to that type of call. General marketing consent isn't enough.
- Calls about claims management services need the person's specific consent, even if they aren't on the TPS.
- Calls about pensions are only allowed from a scheme's trustees or managers, or firms authorised by the FCA, and only with consent or to existing customers.

## UK GDPR and your call list

A named contact at a company is personal data, so you need a lawful basis to call them. For B2B calls it's usually legitimate interests: a genuine business reason the person would reasonably expect, weighed against their rights. Anyone can object to direct marketing at any time, and once they do, you must stop.

## Penalties for breaking the rules

Since 5 February 2026, the ICO can fine organisations up to £17.5 million or 4% of global turnover for breaking PECR, under the Data (Use and Access) Act 2025. The previous maximum was £500,000. The ICO has said its PECR guidance is under review because of the Act, so check it again before a large campaign.

## Are there legal calling hours in the UK?

No. PECR doesn't set calling hours for marketing calls. For B2B calls, normal business hours are the practical choice, because that's when decision-makers are at their desks.

## Can you call a lead who asked you to?

Allowed if they told you they don't object to your calls (Until they withdraw it).

- The TPS and CTPS rules apply to unsolicited marketing calls. If someone on the TPS has told your company that they don't, for the time being, object to your calls, you can call them (PECR, regulation 21(4)). They can withdraw that at any time.
- The ICO puts it as specific consent to calls from you, and says this applies even to existing customers on the TPS. Keep a record of when and how they asked.

Sources: [PECR, regulation 21](https://www.legislation.gov.uk/uksi/2003/2426/regulation/21), [ICO: Telephone marketing](https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guide-to-pecr/electronic-and-telephone-marketing/telephone-marketing/)

## What has changed

- 5 February 2026: The maximum fine for breaking PECR, which includes the TPS and CTPS rules, rose from £500,000 to £17.5 million or 4% of global turnover under the Data (Use and Access) Act 2025.

## FAQs

### Is cold calling illegal in the UK?

No. Live marketing calls are legal in the UK, as long as you screen against the TPS and CTPS, say who's calling, show your number and stop when asked. Automated calls with a recorded message need specific consent.

### Is cold calling illegal in England or Scotland?

No. PECR and UK GDPR apply across the UK, so the rules are the same in England, Scotland, Wales and Northern Ireland.

### Do I need to screen against the CTPS for B2B calls?

Yes. The ICO says you must screen B2B call lists against both the TPS and the CTPS, because companies register with the CTPS and sole traders and some partnerships register with the TPS.

### Is there a new cold calling law in the UK?

The biggest change is the Data (Use and Access) Act 2025. Since 5 February 2026, the ICO can fine up to £17.5 million or 4% of global turnover for breaking PECR, up from £500,000. Who you can call hasn't changed.

### Can I make automated sales calls in the UK?

Only to people who have specifically consented to automated calls from you. General marketing consent, or consent to live calls, isn't enough.

## Sources

- [ICO: Telephone marketing](https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guide-to-pecr/electronic-and-telephone-marketing/telephone-marketing/)
- [ICO: Business-to-business marketing](https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/business-to-business-marketing/)
- [ICO: Statement on the commencement of the DUAA](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/02/statement-on-the-commencement-of-the-data-use-and-access-act-duaa)

Page: https://switchstack.io/cold-calling-laws/uk
Cold calling services in this market: https://switchstack.io/cold-calling-services/uk