UK B2B Cold Calling Rules: PECR, TPS and CTPS Explained

Yes, B2B cold calling is legal in the UK, as long as a person makes the call live and you run two checks first. Check each number against the Telephone Preference Service (TPS) and the Corporate TPS (CTPS), then drop it if that subscriber has ever objected to your calls. A listed number can still be called when its subscriber has told you they do not object to your calls.

Recorded or automated sales calls are a separate case. They need specific consent before the first call, whatever the registers say.

The rules sit in regulation 21 of the Privacy and Electronic Communications Regulations 2003 (PECR), and the regulator explains them in the ICO's telephone marketing guidance. Treat it as a practical guide, not legal advice for your own setup.

A disclosure first. I work mostly through cold email and LinkedIn and have never run a dialing floor, so I have no phone results to show you. Every phone rule below comes from the legislation and the regulator.

What does PECR say about B2B sales calls?

PECR is the UK law for marketing by phone, email, text and fax. The ICO's overview of what PECR covers makes a point many B2B teams miss: the marketing rules can apply even when you cannot identify the person you are calling. A call to a head office switchboard asking for "whoever handles facilities" can still fall under them.

The ICO's guide to electronic and telephone marketing confirms that PECR covers B2B marketing, with separate rules for companies and for individuals. On the phone that split shows up in the registers: individuals sign up to the TPS and companies to the CTPS, and your list holds both.

For live calls, the ICO points to regulations 21, 21A and 21B. In plain terms, you must not make an unsolicited live marketing call:

1. To anyone who has told you they do not want your calls
2. To a number on the TPS or CTPS, unless that person has specifically consented to your calls (in the regulation's words, told you that for the time being they do not object)
3. To sell claims management services, unless the person has specifically consented
4. About pension schemes, unless you meet the strict conditions covered further down

The ICO adds a rule about the line itself. A marketing call must not hide the caller's number, unless you present another number on which you can be reached.

Do the rules cover sole traders on the TPS?

Yes, and it is an easy place for a UK B2B list to go wrong. Under PECR, sole traders and some partnerships count as individuals, and they register on the TPS. Companies register on the CTPS. A "B2B list" from any data vendor therefore holds two kinds of subscriber, and a job title will not tell you which is which.

Picture a typical UK target list: the owner of a two-person engineering practice, a freelance surveyor, a consultant who trades under her own name. Any of them may be a sole trader whose number sits on the TPS. Screen only against the CTPS because "it is a B2B list", and those numbers slip through to your callers.

The working rule is short. Screen every number against both registers, every time, whatever the vendor calls the list. The ICO's telephone marketing guidance asks B2B callers to do exactly that, plus a check against their own do-not-call list.

Which UK numbers can you call, and which are off limits?

The table below applies the ICO's telephone marketing guidance and regulation 21 to the cases a B2B caller meets most often.

A clean screen does not clear a number on its own. The ICO says you can call an unregistered business number only if that business has not objected to you. A number can pass the register screen and still sit in your objection file. When it does, the file wins.

The ICO does enforce these rules. In August 2023 it fined SGS Home Protect £70,000 and issued an enforcement notice for 24,241 unsolicited marketing calls to TPS registered numbers, a breach of Regulation 21 of PECR.

In a separate round of nuisance call fines, the ICO fined five companies a total of £590,000 for collectively making 1.9 million unwanted marketing calls.

How do you screen against TPS and CTPS, and how often?

The TPS describes itself as the UK's only official "Do Not Call" register and says organizations are required by law to screen their data against it every 28 days. Regulation 21 gives a 28-day grace: a call to a number that joined the register less than 28 days earlier is not a breach. After that it is, whether or not your last screen caught the entry.

You need a licence to screen, either your own or one held by your data provider. The TPS licence page lists ad-hoc and annual subscriptions, with prices starting at £300.

Screening stays honest if you follow these rules:

1. Stamp every list with the date it was screened and keep that date on each record
2. Treat a list with no screen date as unscreened, even if the vendor calls it "TPS checked"
3. Rescreen anything last screened more than 28 days ago before a caller sees it

Take a list built in June, screened once and parked in the CRM until September. By the time anyone dials it, the screen is long past the 28-day window. Only the date of the last screen counts.

What must a sales caller say and show on every call?

The ICO sets three duties for live calls: say who is calling, let your number or another contact number display, and give a contact address or freephone number if the person asks.

GOV.UK's direct marketing rules also say you must check that you are not calling anyone registered with the TPS or CTPS without permission, and that you must make it easy for people to opt out of direct marketing.

A compliant opener does a few small jobs. Give your name and your company, say why you are calling this particular person, and make one small ask. My rule from outbound, on any channel: a pitch in the first message is the quickest way to be ignored. Sell the meeting and keep the service for the meeting itself. A call that costs you nothing still costs them time, so you have to sell it.

Then offer the way out before they reach for it: "If this is not for you, say so and I will take your number off our list." Log it the same day. Interested prospects talk straight past it. Annoyed ones take the exit you offered instead of a complaint to the ICO.

Running the rest of the call is a different subject: openers, objections and pacing decide whether the call works once the number is cleared.

When does a call need specific consent first?

Some calls need consent before you dial, whatever the registers show.

Automated and recorded calls. The ICO says the rules on automated calls sit in regulation 19 and are stricter. You must not make a marketing call in which an automated dialling system plays a recorded message unless the person has specifically consented to that type of call from you.

General marketing consent is not enough, and neither is consent to live calls. GOV.UK applies the same logic to businesses: calls with pre-recorded messages need permission from the individual or business first.

Every automated call must also include your name and a contact address or freephone number, and must let your number or another contact number display. If you are weighing an AI voice agent, read up on an AI voice agent's legal status before you assume it counts as a live call.

Claims management calls. These need the person's specific consent, register or no register.

Pension scheme calls. The ICO limits these to trustees or managers of a pension scheme and to firms authorized by the Financial Conduct Authority. Even then, the person must have specifically consented, or the existing relationship must meet a strict set of criteria. If you sell into or from financial services, the rules on financial services outreach cover the wider outreach side.

What proof do you need if the ICO asks?

GOV.UK says you must be able to prove that you checked contact preferences and objections. So the process has to leave a trail on every record. Run each number through these steps, in this order:

1. Record where the number came from, the company and the person, so every check attaches to a named record
2. Screen it against TPS and CTPS and store the screen date with the record
3. Check it against your do-not-call list, which holds every objection anyone has made to you on any channel
4. Confirm the call type: a person dialing a person goes ahead, while a recorded or automated message stops unless you hold specific consent for it
5. Place the call or suppress the number, log the outcome, and add any "stop" to the do-not-call list before the next dial

Before each calling session, apply one gate. A number reaches today's call sheet only with a screen date inside the window, a passed suppression check and a confirmed call type.

Keep a single suppression file for every channel, because cold email has its own legal rules but the same objection logic. A prospect who says "stop" on the phone, in a LinkedIn message or in an email reply is the same person, and they will not care which tool heard it. Use a CRM so no objection gets lost. Which CRM you pick matters far less than whether every rep logs in it.

On penalties: the ICO says the Data (Use and Access) Act 2025 brings PECR enforcement powers into line with UK GDPR, so mechanisms and penalties are the same in most cases. The practical point: the ceiling now follows the UK GDPR regime, so look up the current maximum on the ICO site before you quote a figure internally.

Is the phone the right first touch for UK decision-makers?

The legal checks decide who you may call. They say nothing about whether that person wants to hear from you. When a compliant campaign gets silence, look at the list, the offer and the opener before you blame the channel. The rule I use on email and LinkedIn holds here too: a campaign that fails to convert at small volume will not start converting once you scale it up.

UK buyers are a regular part of my team's outbound work, alongside the US and mainland Europe. With UK decision-makers we start on LinkedIn and let email follow as the warmer second touch, never as the first one. The order I trust: conversations come first, and calls come out of conversations. Start in writing, book the meeting from it, and give the phone its turn after that.

That order also shrinks the compliance job. When calls go only to your warm list, the list is short and every name on it already knows yours. A number on the TPS or CTPS still needs the subscriber's notice, so keep the reply that says "call me on this number" with the record. A vague "sounds interesting" is weak evidence if anyone ever asks.

If you are still choosing a channel, weigh calling against email on cost per meeting first. Routes that open with a written touch are laid out in other ways to start the conversation.

If you want meetings from warm lists before you dial a single cold number, book a call and bring your current list. We can sort which names are safe to call.