HR Email Lists: Why Building Beats Buying for B2B Sellers

If you sell HR software, recruitment, training, benefits or HR consulting, build your HR email list yourself instead of buying a ready-made file.

An HR email list is a file of work addresses for the people who run human resources: CHROs and Chief People Officers, HR directors and managers, heads of talent acquisition, in-house recruiters, learning and development leads, and HRIS (HR information system) or people operations staff.

An HR list that gets replies has four things:

1. It comes out of a data platform you control.
2. It is filtered to the one HR title that owns your budget.
3. Every address is verified just before you send.
4. Every row is checked against the law where the person works.

A bought file usually misses all four. Nobody can tell you where the data came from, the titles are mixed, some of the people have already moved on, and you take on whatever the seller did to collect it.

Whether you may email an HR list depends on where the recipient works and where their data came from. The legal section maps the rules by region. This is not legal advice. If you are an HR consultancy looking for clients yourself, read our guide to outbound for HR consultancies instead.

Why does the list decide whether HR buyers reply?

When a campaign to HR goes quiet, the email gets rewritten first. The subject line and the opening sentence are easy to see, so they get changed and the campaign goes out again. The spreadsheet underneath stays as it was. That is the wrong order.

When a founder asks me why nobody answers, I ask for the list before I open a single message. Better copy cannot save a send aimed at the wrong people or coming from a burned domain.

I have seen one message run for two companies. It pulled 2% replies for one. For the other, 7.5%. The copy was identical. The difference sat outside the email: who got it, and from what sender.

HR makes this sharper, because the department has so many layers of title. An HR assistant at a 15-person company cannot approve a payroll switch for the whole business. An in-house recruiter rarely signs an outside agency alone. Fill a file with those titles and you get crickets.

A tiny list is no fix either. Fifty perfect-fit HR directors a month is a coin flip: some are busy, some not ready, some not interested. Volume negates luck. So build a list big enough to absorb that, and clean enough that each row is worth the send.

The first column I open is job title. I sort the file by it and read every distinct value. If most of the people could not sign without asking someone else, I hold the campaign until the list is fixed.

Is a free HR email list worth downloading?

Free HR lists usually come from job-seeker circles. They travel as shared PDFs on document sites, or as spreadsheets handed out on social media in exchange for a comment.

Before you trust one, run a quick check. Look for generic hr@ inboxes, personal Gmail addresses, domains that do not match the company named in the row, and a missing date for when the addresses were collected. Each of those tells you nobody maintains the file.

For a company selling to HR, these files carry three problems:

• No buyers. The contacts were gathered so people could send CVs. A recruiter who screens graduate applicants has no budget for your HRIS.
• No provenance. You cannot tell a recipient where you got their address, and in some regions you must (see the legal section).
• Crowded inboxes. Anyone can mail a public file, so those inboxes fill with CVs and pitches, and their owners have every reason to press the spam button.

Google's sender guidelines tell senders not to buy email addresses from other companies. At the time of writing, they also tell senders to keep the spam rate that Postmaster Tools reports below 0.3% (Google Workspace Admin Help). A shared dump pushes complaints up, because nobody on it expected to hear from you.

Paying a little does not fix it. Cheap lists from freelancers open poorly and bounce often. A free file has even less behind it.

If you are a job seeker, the recruiter named on a specific job post is a far better contact than any row in a shared PDF.

Which HR title should you target for what you sell?

I start every HR list with the client's past deals and trace who actually signed each one. Then I search on the exact titles used in that niche and skip the catch-all "manager". Then I look at their current customers, because the lookalike companies come from there.

When a client sells into several niches, my team builds a separate list for each from Sales Navigator, Apollo and UpLead instead of one blended file. Each list gets its own title filter and its own message. A title that signs in one niche only researches in the next.

A UK social media marketing agency we worked with ran 3 niches this way through LinkedIn and email with no paid ads, and it added up to 714 sales calls in 12 months. An HR vendor selling to both small firms and large groups should copy that split: pull past and current customers in each size band, then build a separate list of lookalikes for each.

HR teams are small, so the rows blur in smaller firms. Pave's benchmark of 3,471 companies puts the median at 1 HR person per 38 employees for private companies under 1,000 staff and 1 per 32 above that size. This is one vendor's data, so use it as a rough guide.

At a 200-person firm, that means about 5 people covering recruiting, learning, reward and HR systems.

Large companies have the opposite problem: HR is split so finely that strategy and execution sit with different people. A 2023 CAHRS study from Cornell's ILR School describes a global company where centers of excellence own strategy only, while execution, such as recruiting, sits in shared services. The person who sets recruiting strategy is not the one running hires.

Treat the table below as a starting point and check every row against the contracts you actually signed.

I leave Assistant, Associate and bare Manager titles out of my searches on purpose. In HR, that means HR Assistant, HR Coordinator, People Associate and any "Manager" with no function attached. Keep "HR Manager" only if your won deals show HR managers signing.

Company size changes the title. A small company often has one HR generalist or nobody in HR at all, so the owner or the operations lead decides. A large company splits HR into talent acquisition, learning, reward and HRIS, so your filter has to match the function you sell into.

Keep one headcount band per campaign. A note written for a 40-person firm's office manager reads oddly to a reward director at a 5,000-person group.

How fast does an HR email list go stale?

Faster than the date on the file suggests. BLS Table 3 for January 2026 shows that 20.6% of employed wage and salary workers aged 16 and over had been with their current employer for 12 months or less. Median tenure for private-sector wage and salary workers was 3.9 years in January 2026 (BLS Employee Tenure release).

These figures describe the whole US workforce. BLS publishes no separate number for HR staff, so be wary of any vendor quoting an "HR decay rate" as fact.

Surveys of HR teams do not fill that gap either. HR.com's 2025-26 retention survey found 31% of responding organizations report a voluntary turnover rate of 20% or higher. That figure covers all staff at those organizations. It still points the same way: people move, and your file goes stale.

In a file built months ago, some of the people have changed jobs. Some old addresses bounce. Others still accept mail and reach nobody, or reach a successor with no context for your note. The bounce math for a bought file is worked through in our guide to buying a B2B email list.

My team keeps rebuilding lists while a campaign runs, so every contact still matches the profile we started with. Re-verify right before each send. A vendor's "verified on" date only describes the day the vendor checked.

Is it legal to buy an HR email list and email it?

It depends on where the person works, and on whether you can show how their data reached you. The four regimes below cover the US, the UK, the EU and Canada.

United Kingdom. PECR is the UK's rule on marketing emails. The ICO's business-to-business guidance says its consent rule does not apply to corporate subscribers. Each message must still name the sender and include a working opt-out address (ICO B2B marketing guidance).

Sole traders and some partnerships count as individual subscribers, so the rule treats them like consumers. You may email them only with consent or under the soft opt-in, a narrow exception for people who already bought from you. Independent HR consultants and interim HR directors who trade on their own may fall into that group, so check those rows before sending.

The same ICO guidance says UK GDPR applies if you process personal data when sending marketing email to another business. That page carries a notice that it is under review and may change because of the Data (Use and Access) Act (ICO B2B marketing guidance).

Third-party consent has a further catch. The ICO's PECR guide says consent collected indirectly must specifically identify you, so a blanket permission for unnamed outside companies falls short (ICO guide to PECR). Paying someone else to send does not shift the responsibility off you either.

European Union. Under the GDPR, the EU's data law, the usual basis for B2B outreach is legitimate interests. That is a balancing test against the person's rights, and you have to be able to show your working (GDPR on EUR-Lex). An HRIS offer to a Head of HR is far easier to defend in that balance than the same offer to an HR assistant at a 10-person firm.

If the data came from a third party and not from the person, Article 14 obliges you to name the source to them. The GDPR sets the data rules, while each country's own marketing law decides when the email itself may be sent.

United States. The FTC's own CAN-SPAM guide makes no business-to-business exception: the law applies to any commercial email, including messages between companies (FTC CAN-SPAM compliance guide). Once someone opts out, you cannot sell or transfer their address.

Canada. The CRTC's CASL guidance lists three duties: get consent, identify yourself and provide an unsubscribe mechanism (CRTC CASL FAQ). Consent based on a published business address holds only if your message is relevant to the person's role and the address was not published with a "no unsolicited messages" statement.

Our campaigns point mainly at English-speaking buyers in the US, the UK and parts of Europe. German HR teams sit outside our core. When a client needs them, I add stricter rules of my own and reach those people through LinkedIn. In Germany, Austria and the Czech Republic I do not use cold email without a compliant basis.

How does a bought HR file compare with a list you build?

On cost, I have not found an independent published benchmark for HR list prices that I would rely on, and platform pricing varies by vendor and plan. Ask any list seller for a written quote that states exactly what it covers: record count, fields, collection date and replacement terms for bounces.

Your filters and checks matter more than which platform you pay for. For C-suite buyers, the same filters apply in sourcing a CEO email list and buying or building a CFO email list.

How do you build an HR list worth sending to?

Run these 7 steps in order, the HR version of building a B2B lead list that is worth the send. Each one depends on the step before.

1. Fix your buyer titles. Start from the title table above, then correct it with the names on your recent signed contracts.
2. Set company filters. Choose one headcount band, the industries you have proof in, and specific countries.
3. Apply title inclusions and exclusions. A boolean string does the sorting. For recruitment services, that could be ("Talent Acquisition" OR "Recruiting") AND ("Head" OR "Director" OR "VP"), with your drop list excluded.
4. Export from your data platform. If more than one person sends, give each company to one owner so nobody gets two pitches. Add a column with the platform and export date to every row.
5. Verify every address. My team runs every address through NeverBounce or DeBounce, sends only to verified ones and keeps the bounce rate below 0.5%.
6. Check each row against the region table. Tag every row with a country. Take out UK sole traders who have not consented. Move rows for countries you will not cold email to a LinkedIn track, or drop them.
7. Suppress before you load. Remove every past opt-out, current customer and open deal. Keep your outbound suppression list current and know what belongs on it.

Then go through this checklist before the first send:

• Cold email goes out from separate sending domains, never the domain your invoices and contracts use. How we run the sending setup for clients is on our cold email agency page.
• SPF, DKIM and DMARC are set on each domain before any volume goes out. Google already requires SPF or DKIM from anyone sending to Gmail accounts (Google Workspace Admin Help).
• New mailboxes have warmed for at least 10 to 14 days.
• Every email carries your identity and a working opt-out.
• The source column is filled on every row, so you can answer "where did you get my address?" in one line.
• You have checked 20 random rows by hand and can say why each person would care.

What should the first email to an HR buyer say?

Sell the meeting, not the service. Put one piece of proof inside the message and keep it short. Here is an invented example for a training company writing to a Head of Learning and Development. The proof line is a placeholder. In yours, put one real result from your own customers there:

Subject: Training for your new shift leads

Hi Claire, you are hiring shift leads for the two new Leeds sites, and new leads often start managing people with no training for it. We run a two-day program for exactly that group. [Proof: one real result from a customer like them, with a number.] Would a 15-minute call next Tuesday help you see whether it fits your onboarding plan? If I have the wrong person, say so and I will not write again.

Your sender details and the opt-out sit under the signature.

One rule covers the whole file: if you cannot name the title, the source and the date for a row, do not send to it. The list is the work. The email comes second.

Selling into HR and unsure which title actually signs? Book a call with your last few won deals and we will work out the title map together.