Will cold email become illegal?

Nobody has a crystal ball here. But "will cold email become illegal?" is actually the wrong question to stress about. The more useful question is: where is the line right now, and which way is the wind blowing?

Here's where things stand. Cold email isn't universally illegal, but it's not universally allowed either. The rules depend on who you're emailing, where they are, and what you're selling. B2B cold outreach generally has more room to operate than B2C, but "B2B" doesn't mean anything-goes.

• CAN-SPAM (USA): Allows cold email as long as you identify yourself honestly, include a physical address, and make it easy to opt out. You also have to honor opt-outs within 10 business days.
• GDPR (EU/UK): Requires a lawful basis to email someone. For cold B2B outreach, "legitimate interest" is sometimes used, but it's not a free pass. You have to document it, and the interest has to genuinely outweigh the recipient's right to privacy. Regulators have penalized senders who treated it as a loophole.
• CASL (Canada): The strictest of the three. You generally need express or implied consent before you email someone. Cold email to strangers is in murky territory here, especially for B2C.

A complete global ban on cold email is unlikely. Commercial speech protections and the sheer scale of B2B sales culture make that a hard political lift in most countries. But that doesn't mean things aren't getting harder.

The real squeeze is coming from two directions at once. Regulators are enforcing existing rules more aggressively (GDPR fines have climbed significantly since 2018). And inbox providers are building their own filters that treat cold senders harshly regardless of what the law says. Outlook and Gmail don't need a regulation to route your cold emails to junk. They just need low engagement.

So what should you actually watch for? A few signals that the rules are tightening in your area:

• Regulators issuing fines to businesses in your industry or country for unsolicited commercial email
• New legislation requiring opt-in consent (watch the EU's ongoing ePrivacy Regulation discussions)
• Your cold email domain getting flagged or filtered by major inbox providers even when your authentication is clean
• Increased complaints from recipients (a practical warning sign before a legal one)

The safest place to be, legally and deliverability-wise, is sending to people who have a genuine reason to hear from you. That means targeting thoughtfully, personalizing honestly, and making it easy to say no. Cold email that feels relevant doesn't just survive legal scrutiny better. It also performs better as inbox algorithms put more weight on engagement signals.

If you're unsure whether your cold outreach setup is on solid footing, ask us directly. We'll tell you what we actually think, no pitch attached.