Rules and ethics
Part of When to check content agency rules and ethics before you brief
Content marketing compliance: UK consent and claims
Content marketing compliance for UK agencies: the consent and claims laws, regulators and practical checks to review before appointing or renewing a supplier.
What to take away
Content marketing compliance means identifying which checks are worth doing before money moves, whether you sign, renew or extend a retainer in England. The UK rules for content agencies set the framework.
- Before any tag fires, confirm who owns the consent record: the agency or the client.
- Treat ad claims as a joint risk, because the ASA can act against the brand and the agency that wrote the copy.
- Company reporting duties belong to the agency as a business, but you can check its filings before you sign.
- Give every campaign a named approval step for any comparison, price or health claim.
- Set a compliance line in the budget. A team paying £2,500 a month in fees might add £200 a month for tag audits and sign-off checks, for example.
Most of these rules are UK-wide, not England-only
Content marketing compliance is largely governed by UK-wide rules. The Information Commissioner's Office (ICO) regulates data protection across the United Kingdom, enforcing the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. The Privacy and Electronic Communications Regulations 2003 (PECR) cover storage and access technologies. The Advertising Standards Authority (ASA) administers the CAP Code across the UK. Company law under the Companies Act 2006 runs UK-wide, though insolvency and court procedures differ in Scotland and Northern Ireland.
Rules that vary tend to sit in housing, health or education advertising rather than general marketing. Treat England as your operating base, then check the sector regulator for the client's product.
For a wider overview, see Content agencies: UK rules and compliance guide, which maps the regimes relevant to agency work.
Consent comes before measurement
Consent for non-essential cookies and similar technologies is principally governed by Regulation 6 of the Privacy and Electronic Communications Regulations 2003 (PECR). Where personal data is involved, the UK GDPR and Data Protection Act 2018 also apply. Consent must be specific, informed and freely given, and the banner has to let people refuse as easily as they accept. The ICO's guidance on the use of storage and access technologies explains what counts as consent and what records to keep. The ICO can take enforcement action, including imposing monetary penalties for breaches.
Consent before measurement
- Banner: refuse as easily as accept
- Tag list owner agreed in contract
- Banner updated when tools change
- Consent log kept and owned
Agree in the contract who maintains the tag list, who updates the banner when tools change, and who keeps the consent log. Small omissions here become large problems after a campaign launch.
Claims and the CAP Code
Advertising copy is judged under the UK Code of Non-broadcast Advertising and Direct & Promotional Marketing (CAP Code), administered by the Advertising Standards Authority (ASA). CAP Code Rule 3.7 requires documentary evidence for objective claims before publication, while its comparison rules require comparisons to be verifiable and not misleading. Misleading commercial practices are also covered by consumer protection law: the Consumer Protection from Unfair Trading Regulations 2008 were replaced on 6 April 2025 by the consumer protection provisions in Part 4 of the Digital Markets, Competition and Consumers Act 2024. ASA enforcement is mainly self-regulatory: it can publish upheld rulings and use media sanctions, while persistent non-compliance may be referred to Trading Standards or the Competition and Markets Authority for statutory action. The ASA's AdviceOnline library for marketer compliance queries is a practical first stop when a writer asks whether a phrase is allowed.
Two-minute claim approval
- Writer flags the claim
- Account lead checks evidence
- Client signs off
- Record the date
If a piece includes paid partnerships, gifted products or affiliate links, the disclosure must stay visible after editing, and Content agencies disclosure policy in England explains which wording survives legal review and who signs it off.
Company reporting duties sit with the agency
A supplier trading as a limited company has its own statutory obligations. It files annual accounts and a confirmation statement at Companies House under the Companies Act 2006. It must also show its registered name, company number and registered office on its website and business letters.
Those duties do not transfer to you, but they are useful signals. A Companies House check before you sign shows whether filings are current and whether the entity matches the name on the contract.
A scoring rubric for the next pitch
| Check | Evidence to request | Weight |
|---|---|---|
| Consent mechanics | Tag audit, banner configuration, consent log owner | High |
| Claim approval | Named approver, evidence file, sign-off date | High |
| Data roles | Written controller or processor position | High |
| Company identity | Registered number and office shown on the site | Medium |
| Complaint handling | Who answers the ICO or ASA, and in what timescale | Medium |
| Subcontractors | Named freelancers and tools with data access | Low |
Score each row from 0 to 2, then treat 9 or more out of 12 as a supplier with the basics in place. Below 6, ask for the missing documents before the next statement of work. This article is general guidance only; individual cases need a qualified adviser.
Common questions
Do these rules differ in Scotland or Wales? Not for data protection or advertising. The ICO and the ASA work UK-wide, so the consent and claims position is the same in Cardiff, Glasgow or Manchester.
Who is liable when a claim is misleading? Both the advertiser and the agency can be held to the CAP Code. The client owns the product truth, while the agency owns the wording it produced.
Do we need a solicitor for every contract? No. Most retainers are covered by a schedule setting out consent ownership, claim approval and data roles. Ask a qualified adviser for regulated sectors such as finance or health.
Does the Companies Act 2006 apply to small agencies? Yes, to companies registered in the UK, including small ones, and the website disclosure duties apply regardless of turnover.
