# Standards and Regulatory References

## Primary Legislation

### GDPR (Regulation (EU) 2016/679)
- **Article 21(2)** — Right to object to processing for direct marketing purposes (absolute right)
- **Article 21(3)** — Obligation to cease processing for direct marketing upon objection
- **Article 21(4)** — Obligation to inform data subjects of the right to object to direct marketing
- **Article 12** — Transparent communication and modalities
- **Recital 70** — Right to object to direct marketing: data subjects should be able to exercise this right free of charge

### Privacy and Electronic Communications Regulations 2003 (PECR) — United Kingdom
- **Regulation 22** — Unsolicited communications for direct marketing by electronic mail
- **Regulation 21** — Unsolicited calls for direct marketing purposes
- **Regulation 22A** — Use of electronic mail for direct marketing (applies to corporate subscribers from 01 January 2024)

### ePrivacy Directive 2002/58/EC (as amended by 2009/136/EC)
- **Article 13** — Unsolicited communications: consent requirement for electronic marketing, soft opt-in exception for existing customers

### UK Code of Non-broadcast Advertising and Direct & Promotional Marketing (CAP Code)
- **Section 10** — Database practice: requirement to suppress opted-out individuals from future campaigns

## Regulatory Guidance

### Information Commissioner's Office (ICO) — United Kingdom
- **Direct marketing guidance** (updated 2024): Comprehensive guidance on GDPR and PECR requirements for direct marketing, including consent, soft opt-in, suppression lists, and enforcement.
- **Guide to PECR** (updated 2024): Specific guidance on electronic marketing communications rules.

### European Data Protection Board (EDPB)
- **Guidelines on Transparency under Regulation 2016/679 (WP260 rev.01)** (adopted 11 April 2018): Guidance on providing clear information about the right to object to direct marketing.

## Industry Standards

### Direct Marketing Association (DMA) UK
- **DMA Code of Practice**: Industry standard for responsible direct marketing, including suppression list management and preference service compliance.
- **Telephone Preference Service (TPS)**: Statutory register of individuals who do not wish to receive unsolicited sales or marketing calls.
- **Mailing Preference Service (MPS)**: Register of individuals who do not wish to receive unsolicited direct marketing by post.