Cold email in France: what's actually allowed for B2B

Most founders assume GDPR killed cold email in Europe. It didn’t — it drew a map. Some countries left a clear, legal path for B2B prospecting; others closed it almost completely. If you sell to French companies, you’re standing on some of the firmest ground in Europe. You just have to respect where the lines are.

One caveat before anything else: this is operational guidance from practice, not legal advice. For specific situations, ask a lawyer.

The French position

French doctrine — shaped by CNIL guidance — allows B2B prospecting by email without prior consent, on the basis of legitimate interest, when a few conditions hold:

• Professional relevance. The message must relate to the recipient’s professional function. You write to the managing director about their pipeline, not about their holiday plans. Relevance is the legal core, not a courtesy.
• Identification. The sender must be clearly identifiable — a real company, a real person, real contact details.
• An opt-out in every message. Every single email carries a simple, working way to decline further contact, and opt-outs are honored immediately.
• Data handling. Contact data must be sourced and stored properly, kept accurate, and not held longer than needed.

Generic company addresses (info@, contact@) are treated more permissively still — they belong to the organization, not a person.

In practice this means a precisely targeted, professionally relevant, properly identified email to a French managing director is a legal instrument of commerce — not spam, provided you behave like a professional.

How the neighbors compare

• UK & Ireland. Workable. For corporate entities, legitimate interest is the standard basis under UK GDPR and PECR; sole traders and some partnerships require more care. Identification and opt-out expectations mirror France.
• Spain. A gray zone handled with discipline. The LSSI nominally points to consent, but outreach to role-based corporate contacts in a strictly professional context is widely practiced. Spain’s regulator is active, so targeting has to stay tight and unambiguously B2B.
• Germany & Austria. Effectively closed. German law (UWG §7) requires express prior consent for email prospecting even in B2B, and enforcement through competition-law warnings is a functioning industry. We don’t run cold email to German addresses — and we’d be skeptical of anyone who says they safely can.

This asymmetry creates a strategy: German-speaking firms that want outbound growth often run it into France, Spain or the UK — markets where the legal path exists — rather than at home.

The checklist we run before sending

Compliance isn’t a paragraph in a contract; it’s how a campaign is built. Before anything goes out in a client’s name:

1. Targeting criteria written down — who, why them, why relevant to their role
2. Sender identity complete: company, person, address, working reply channel
3. Opt-out line in every email, in the recipient’s language, honored same-day
4. A suppression list that actually persists across campaigns
5. A dedicated, warmed sending domain — protecting the client’s main domain
6. Volumes that stay human: small daily batches, not blasts

That last point matters beyond deliverability. Low-volume, high-relevance outreach is what keeps you comfortably inside the spirit of legitimate interest — the message is defensible because it was worth sending to that specific person.

What this means if France is your market

French-language inboxes are noticeably less saturated than English-speaking ones, the legal basis is clear, and the SME base is enormous. For owner-led firms selling high-value services, it’s arguably the best outbound market in Europe right now — if the work is done natively in French and inside the rules.

That combination — native-language outreach, tight targeting, compliance built in — is exactly how we run the engine. And it’s why a qualified appointment in France, properly defined, is worth the discipline it takes.