Business Partners at Work

GDPR Data Buying Guide

With the introduction of Data Protections Act 2018 (DPA 2018) the General Data Protection Regulation (GDPR) can into law. Within the regulations businesses are still allowed to purchase 3rd party marketing lists but there are stringent rules.

What you are purchasing would define the Legal Basis for processing or controlling the data. 

Consent would require the entrant to knowingly opted in for your company to contact them i.e. web generated lead.

Legitimate Interest requires the entrant to have aged to 3rd party marketing activity from a vertical sector.

Before Buying

Before purchasing 3rd party marketing lists or leads you should use best practice to ensure whatever you are buying is from a reputable source.

Compete Due Diligence forms that are signed by a director confirming what you are buying, how the list or leads have been complied, check they had the correct permissions to generate the lead and share the information.

Check the suppliers privacy policies to confirm that all entrants opt-in (rather than having to opt-out) and that any telephone survey leads have permission to call (chain of consent).

Calling the List

Once you have taken control of a marketing list, you will take responsibility of how it is used and stored. With a 3rd party list you will be liable for any contact with numbers registered on the Telephone Preference Service (TPS). You will also have to maintain an internal Do Not Contact (DNS) list whenever a contact asks not to be contacted again.

We would suggest that you TPS check your data no more than 28 day intervals, also keep a record of when you have checked.

Our Approach will ensure that you will be working with professionals who have pre-srceened all suppliers with a 7 page rigorous Due Diligence form, the allows you to use our network of lead generators and list owners.


Everything we deliver is through SFTP to ensure the security. 


We can also advise you on how to maintain your compliance with the law. 

* Free TPS check is an initial service and is limited to 10,000 numbers.