GDPR

EU General Data Protection Regulation (2018). For cold email, GDPR requires a lawful basis (typically 'legitimate interest' for B2B), data minimization, easy unsubscribe, and clear privacy disclosures. Member-state opt-in laws (like Germany's UWG) are often stricter than baseline GDPR.