Global cold calling does not run on one rule. A campaign may be planned in Canada, staffed in another country, call a US business number and use data obtained from a European source. Each fact can affect the compliance review.
This guide provides an operating framework, not legal advice. Rules change, regulators publish new guidance and local facts matter. Use current primary sources and qualified counsel for the campaign you intend to run.
Build a classification record before anyone dials
Start with a campaign register that answers practical questions. Where is the recipient located? Is the number business, residential, mobile or mixed-use? Is the person being contacted in a business role? Where is the caller? Will a person dial, will software assist selection, or will the campaign use a prerecorded or artificial voice? What data supports the contact and what follow-up channels are planned?
Add the local time zone, applicable preference service or registry, prior relationship, recorded consent where relevant, internal opt-out status, approved caller identity and responsible owner. The record does not decide the law by itself. It gives the legal and operational teams the facts needed to make a useful decision.
Use one control matrix for every destination
| Control | Question the campaign must answer | Evidence to retain |
|---|---|---|
| Recipient | Business entity, employee, sole trader or consumer? | Account and role classification |
| Number | Business line, residential line, mobile or unknown? | Source and validation record |
| Technology | Live manual call, assisted dialing, automated sequence, recording or artificial voice? | Tool configuration and review |
| Permission | Exemption, legitimate basis, consent or existing relationship? | Rule note and supporting record |
| Suppression | Which national, local and company-specific lists apply? | Screening date and opt-out history |
| Conduct | What identity, purpose, time and contact-detail rules apply? | Approved script and calling window |
| Follow-up | Are email, text or social messages permitted separately? | Channel-specific review |
| Accountability | Who handles objections, complaints and incidents? | Named owner and escalation path |
This matrix prevents a common failure: treating a provider's technical ability to place a call as evidence that the call is permitted.
United States: B2B is not a blanket exemption
The FTC explains that most calls from a telemarketer to a business are exempt from the National Do Not Call provisions of the Telemarketing Sales Rule. That statement is useful, but it is narrower than "all B2B calls are legal."
The campaign may still need to consider FCC requirements, state rules, sector restrictions, the kind of number called, the technology used, artificial or prerecorded voice, caller identification, prior objections and whether the call is truly business-to-business. A personal mobile number used by a business buyer can create a different fact pattern from a company switchboard.
Keep the recipient's own request central. If a company or person says not to call again, record the request against the relevant entity and numbers, then make the suppression available to every caller and workflow.
Canada: separate the DNCL exemption from telemarketing duties
The CRTC says calls made to a business consumer are exempt from the National Do Not Call List rules. The same regulator also makes clear that telemarketers have obligations beyond that exemption. Registration, identification, calling hours, recordkeeping, internal do-not-call processes and automatic dialing-announcing devices can require separate attention.
Do not merge the calling review with Canada's anti-spam rules. A live B2B call and a commercial electronic message are different channels. The follow-up email needs its own CASL analysis, including the recipient, relationship, message and required identification or unsubscribe mechanism.
For Canadian campaigns, also document province, local time, English or French requirements where relevant and whether Quebec-specific legal or language review is needed.
United Kingdom: screen, identify and respect objections
The UK Information Commissioner's Office explains that PECR applies to B2B live and automated calls. For live marketing calls, the practical controls include checking the Corporate Telephone Preference Service, Telephone Preference Service where applicable and the caller's own suppression list. Callers should identify the organisation, display a number and provide contact details when asked.
Automated marketing calls generally require consent. UK GDPR can apply when a campaign processes personal data, including a named employee's direct details. The individual's right to object to direct marketing must be respected. A corporate target does not make the person answering invisible to data-protection duties.
European Union: review the destination country, not Europe as one market
The EU ePrivacy Directive establishes a framework for privacy in electronic communications, but member states implement important details through national law. Business-call treatment, opt-in or opt-out conditions, national preference systems and enforcement practice can differ.
A global team should therefore maintain country-specific guidance. Record the national rule, the lawful basis for any personal-data processing, the suppression method, the required caller information and the review date. If the plan covers several EU destinations, do not copy the decision from one country into the others without verification.
Australia and Singapore require their own campaign checks
Australia's telemarketing industry standard addresses calling times, caller identification, calling-line identification and ending a call when requested. It can apply to organisations making or arranging telemarketing calls to Australian numbers, including numbers that are not eligible for registration on the Do Not Call Register. Confirm register treatment and exemptions separately from call-conduct duties.
Singapore's Personal Data Protection Commission explains that the Do Not Call provisions generally do not cover B2B messages directed to organisations. That distinction does not remove other data-protection responsibilities or convert a message to an individual into a business message. Preserve the business purpose, role evidence, data source and objection handling behind the classification.
Live human calling and automated outreach are different risk categories
A live caller can identify the organisation, respond to an objection, confirm the business context, accept an opt-out and end the conversation. Automation can change the legal analysis and remove that real-time judgment.
Before using power dialers, predictive systems, prerecorded audio, artificial voices, automated messages or number-masking tools, have the exact configuration reviewed. Marketing language such as "AI SDR" does not describe the legal facts. Regulators and recipients experience the actual technology, voice and message.
AI can still support research, account prioritisation and preparation. The campaign should keep a person responsible for the live exchange and make the use of automation visible to the compliance owner.
Treat data sourcing and channel follow-up as separate decisions
A public profile is not automatically permission to call, store, enrich, export and email a person in every country. Record where the data came from, why it is relevant, how current it is, where it is stored, who receives it and how correction or objection requests are handled.
Then review every channel independently. The rule used for a live call may not authorize an email, text, social message or recording. The 90-day campaign plan places those decisions in the readiness gate so they are not invented after a buyer responds.
Outsourcing changes the workflow, not the need for accountability
The client usually knows the product, substantiation, customer evidence, restricted sectors, account priorities and commercial limits. The calling provider controls people, tools, scripts in use, records, suppression execution and daily quality. A safe operating model assigns both sides work.
Agree who approves markets and claims, who validates data, who determines dialing technology, who checks registries, who maintains internal suppression, who handles a complaint and who pauses the campaign. Require access to evidence rather than accepting "our platform handles compliance" as a complete answer.
Use a pre-call and in-call checklist
Before launch, verify the country matrix, recipient and number classifications, official guidance date, legal review where needed, data basis, registry screening, local calling windows, visible caller identification, approved introduction, contact details, suppression sync, follow-up permissions and incident owner.
During calls, identify the organisation accurately, state a truthful business purpose, avoid unsupported claims, listen for an objection, honour requests promptly and write a useful record. After calls, monitor opt-outs, complaints, wrong-party contacts, invalid data, caller behaviour and any technology that did not operate as expected.
CallTeam field observation: the suppression gap was between systems
In one campaign review, the callers were willing to honour opt-outs, but a request recorded in one workflow did not reliably reach every list used for later attempts. The issue was not solved with a stronger disclaimer. It required one suppression source, defined ownership, a tested sync and a pause rule when the record was uncertain.
The lesson is operational. Respectful intent matters, but compliance also depends on whether the system can convert a person's request into durable action.
Make compliance part of weekly campaign management
Review more than meeting output. Examine opt-outs, complaints, wrong-number patterns, data sources, calling-time exceptions, identity presentation, suppressed records, escalation status and any regulatory guidance that changed. Include callers because they hear ambiguity first.
The most defensible global program is not the one with the longest policy. It is the one that can explain the facts of each campaign, apply the current destination rule, show the control in operation and stop when the evidence is incomplete.