Outsourced SDR and sales outsourcing in Europe: what the law allows on calls and email

Outsourced SDR in Europe works when every campaign follows the rules of the country it calls into, not the rules of the country you sell from. For B2B outreach, Europe's rules split by channel: the EU's ePrivacy Directive requires consent before marketing email to individuals and leaves sales calls to each member state, Germany asks for at least presumed consent before a sales call to a business and prior consent before marketing email, and the UK lets you call businesses that have not opted out. The phone is usually the channel with the most room. We sell outsourced SDR across EU and US time zones, so read this as a buyer's guide from a provider, and check the sources we link rather than taking our word for it. This is not legal advice.

What changes when outbound crosses into Europe

Three things change at once when a US or EU company starts calling European buyers.

• The rules multiply. GDPR applies across the EU, but the rules on which channel you may use for marketing are set nationally under the ePrivacy Directive. A campaign into Germany, the Netherlands and the UK runs under three regimes.
• The calling day moves. A US team calling Europe has a short overlap with the European working day. A team that covers EU time zones calls when European buyers are at their desks.
• People answer more. On A-Sales's own records, which our cold calling benchmarks page publishes, a person answered 14.0% of B2B cold calls on European multi-country campaigns in the first half of 2026, 2.2 times the US rate.

The rules on B2B calls and email, by jurisdiction

The EU baseline: ePrivacy decides the channel, GDPR the data

Article 13 of the ePrivacy Directive says automated calls, fax and email for direct marketing "may be allowed only in respect of subscribers or users who have given their prior consent". For every other kind of unsolicited marketing, including a person dialling a person, each member state chooses between requiring consent and letting people opt out. Paragraph 5 then limits both rules to subscribers who are natural persons, and leaves it to each member state to protect "subscribers other than natural persons". That is why the answer to "can I cold email a company in Europe?" changes at every border.

GDPR governs the contact data itself. Recital 47 says processing personal data for direct marketing "may be regarded as carried out for a legitimate interest", the basis in Article 6(1)(f), as long as that interest is not overridden by the person's rights. Article 21 gives every contact the right to object to direct marketing at any time, and once they object, "the personal data shall no longer be processed for such purposes". In practice, a provider calling for you needs a suppression list that holds across every campaign and every channel.

Germany: the strictest common case

Section 7 of the UWG, Germany's unfair competition act, treats a sales call to a business as unacceptable harassment unless the business has given at least its presumed consent ("zumindest mutmaßliche Einwilligung"). Advertising by email needs the recipient's prior express consent, and the text makes no exception for business recipients. The only email exception, in section 7(3), covers your own customers who gave you their address when they bought, for similar products, with a clear way to object.

Our reading, not legal advice: a call into Germany should have a concrete reason the business would want it, tied to its situation, and the reason should be written down before the call. A cold email sequence is not a default channel there.

United Kingdom: calls screened, email open to corporate addresses

The UK left the EU, but its Privacy and Electronic Communications Regulations follow the same pattern. Regulation 21 requires a marketing caller to show a number it can be reached on, and bars calls to a number that has asked not to be called or that is listed on the register kept under regulation 26, which corporate subscribers can join in writing. Regulation 22, the consent rule for marketing email, "applies to … individual subscribers", so it does not require consent before email to a corporate address.

What this means for the channel mix

• Lead with the phone where email is closed. In Germany, a researched call with a documented reason is the channel the law leaves open. Email follows a conversation instead of opening one.
• Screen before you dial. UK numbers go through the register check; every country gets the same suppression list, so an objection in one campaign stops contact in all of them.
• Write the legal basis down per country. One line per target country: which rule applies to calls, which to email, and which channel the campaign will lead with.
• Match the calling day to the buyer's. European buyers answer during the European working day. Ask any provider which time zones its callers actually cover.

Questions to ask an outsourced SDR provider before a European campaign

1. Which rule applies to calls and to email in each country we target, and where is that written down?
2. Where does the prospect data come from, and what legal basis do you rely on for each country?
3. How is an objection recorded, and does it stop contact across every channel and campaign?
4. Are UK numbers screened against the do-not-call register before dialling, and is our caller ID shown?
5. Which languages do your callers actually speak on the phone, rather than in translated email?
6. Which time zones do your callers cover?
7. Which published European campaigns can we read, with the client named?

How A-Sales covers Europe

A-Sales covers EU and US time zones, and its callers work in English and Swedish. The phone leads, with email and LinkedIn alongside it where the country's rules allow. Published European campaigns include:

• Payt Software, a Dutch accounts-receivable platform, reaching finance leaders responsible for collections, invoicing and cash flow at companies of 51 to 5,000 employees.
• Yalmar Solutions, a Norwegian wealth-tech platform for family offices and fund managers, where the campaign widened from the Nordics to Western Europe.
• Smart Source, a Swedish software consultancy, where the lists targeted CTOs, IT directors and product owners and every meeting had to meet five written booking criteria.

Managed engagements start from $4,000 a month. Once your target profile is proven, pay-per-appointment starts from $500 per held, qualified meeting, and no-shows are not billed. For how providers compare on price, channel and contract, see our list of the best outsourced SDR companies.

Sources

• Directive 2002/58/EC (ePrivacy), consolidated text, Article 13, checked 6 November 2026
• Regulation (EU) 2016/679 (GDPR), Article 6(1)(f), Recital 47, Article 21, checked 6 November 2026
• Gesetz gegen den unlauteren Wettbewerb (UWG), § 7, checked 6 November 2026
• Privacy and Electronic Communications (EC Directive) Regulations 2003, regulation 21, regulation 22 and regulation 26, checked 6 November 2026
• A-Sales cold calling benchmarks, January to June 2026