Operations
Part of Email list building, cross-checked against the record, 2027 edition
Email list building questions, answered with the evidence to check
Answers to common email list building questions on public addresses, bought lists, purchases, events, confirmation, form fields, and healthy growth metrics.
What to take away
- A visible address, purchase, event attendance, referral, or old contact record is not automatic proof that recurring marketing was requested.
- Check recipient type, market, source, wording, purpose, transfer, message use, withdrawal, and current official guidance before import or send.
- Healthy growth combines understandable collection with usable evidence, low abuse, simple control, and mature customer value.
Common email list building questions often ask whether an address can be added and how fast a list should grow.
Can a public business email be added?
The ICO's business-to-business marketing guidance distinguishes corporate subscribers from sole traders and some partnerships. It also says that a public business contact detail does not automatically mean the person agreed to direct marketing.
In the United States, CAN-SPAM (15 U.S.C. 7701-7713) requires accurate headers, no deceptive subject lines, a clear opt-out honored within 10 business days, and a valid physical postal address. It does not require prior consent for commercial email.
In Canada, CASL (S.C. 2010, c. 23) requires express or implied consent before sending a commercial electronic message. Implied consent under CASL s. 10(9) can arise when a business address is conspicuously published and no statement says unsolicited messages are unwelcome. It can also arise when the recipient gives the address with no indication against messages.
CASL s. 10(10) covers existing business relationships. The CRTC enforces these rules.
Can a business buy an email list?
The ICO's section on how organizations collect information and generate leads says organizations collecting personal information from other sources generally need to explain the categories held and the source, as well as the intended use. It also warns that public availability does not make every direct-marketing use expected, fair, or lawful.
A vendor promise is insufficient. A compliant source record shows the email address, the exact form wording, the date, the collection URL, the consent checkbox text, and the market. A non-compliant record shows only an email address and the word "web" as the source. Responsibility may remain with the promoting business. If eligibility cannot be proven, do not send.
Does a purchase create marketing permission?
Not automatically across markets or uses. Separate the transaction and essential messages from optional marketing, explain the sender and purpose, and record the customer's actual choice. Review any exception or soft opt-in requirements specifically.
Can event attendees be imported?
Attendance, badge access, or a business card does not by itself prove every marketing use. Preserve the event notice, signup action, date, collector, and any transfer terms. Import only verified cases.
Should confirmation be required?
It can verify address control, reduce mistakes, and restate expectations. Whether it is legally required depends on the market and context. Define expiry, retries, accessibility, support, and unconfirmed-record handling. It cannot repair an unclear original request.
How many fields should a form have?
Collect the minimum needed to deliver the promise and make a defined decision. For a simple newsletter, email address only can work. For a lead magnet, email address, first name, and an unchecked consent checkbox that names the sender and purpose is typical.
Explain optional fields. Test whether extra data improves downstream value enough to justify friction, privacy, security, accuracy, and maintenance.
What makes list growth healthy?
Look beyond additions. Typical ranges: bounce rate under 2 percent and complaint rate under 0.1 percent. A useful cohort measure is 90-day engagement by signup source. Growth without relevance or control is merely database expansion.
Maintain a dated rule matrix and a source record for every address. When a collection method, transfer, or historical record is uncertain, pause it.
Question review table
| Question | Evidence to inspect | Escalate when |
|---|---|---|
| May we add it? | Source, wording, action, market | The record is incomplete |
| May we send? | Recipient, purpose, message rule | Classification is disputed |
| Should we confirm? | Risk, context, user impact | Address control is uncertain |
| Is growth healthy? | Mature value and harm | Volume is the only measure |
Resolve the question with a decision record
The GAO evaluation design guide connects questions with evidence needs. Apply that to list decisions. The W3C Privacy Principles statement warns against shifting privacy work to individuals. Review the governing law and configuration.
Common questions
Is a public email address marketing consent?
No universal rule says that. The answer depends on the market, recipient type, context, and applicable law.
Can a customer be added after one purchase?
Do not assume so. Separate essential purchase messages from optional marketing and check the current rule and evidence for the sender, market, and collection wording.
Who should resolve a difficult list question?
Route it to the accountable privacy, legal, channel, security, accessibility, or data owner who can verify the relevant fact and document the decision.
