The first thing people think about when using personal data is the GDPR. Sometimes, it’s the only thing. But there’s more. You also have to look at the Privacy and Electronic Communications Regulations (AKA PECR). Unlike the GDPR, which is largely about principles and risk management, PECR has rules, and there are subtle differences depending on how you obtained your data and how you’re sending your marketing.

This course is aimed at companies, charities and public bodies who aim to send marketing to individuals – by post, by phone, by text and by email. We’ll cover all the practicalities including obtaining data, transparency, and the famous soft opt-in.

With the DPDI bill now a sad memory, we’ll also look at cookies and how PECR applies to them.

Includes:

• What is direct marketing?

• When do you need consent?

• How to assess legitimate interests

• What PECR says about live & automated calls, texts and emails

• The soft opt-in

• Profiling and research

• Transparency

• Recent ICO fines on marketing including Hello Fresh, Reed Online and Halfords