Quick answer
No, not the way most people mean by "cold email". Germany's UWG Section 7 treats unsolicited email advertising as unreasonable harassment by default, for businesses just as much as consumers, and there's no general B2B exception the way there partly is for phone calls. The only real carve-out is a narrow existing-customer exception with four conditions attached. Get those wrong and the email itself is the problem, no matter how relevant the product is.
The short answer
I'm Hlib Storchak. I build and run outbound systems for B2B founders and sales teams, mostly cold email and LinkedIn, and Germany is one of the markets clients ask me about most, because the honest answer really is different there. So here it is plainly: sending unsolicited B2B cold email into Germany the way you might into the UK or the Netherlands is not safely legal. Germany's UWG, the Gesetz gegen den unlauteren Wettbewerb, its unfair competition law, Section 7 requires prior consent for email advertising by default, and it doesn't carve out a softer rule just because the recipient is a business.
That's the headline. The rest of this article is the detail that actually matters if you're deciding whether to email into Germany at all, and what to do instead if you shouldn't.
What UWG Section 7 actually says
UWG Section 7(2) No. 2 states that advertising by email sent without the recipient's prior express consent counts as unreasonable harassment. That's the operative German legal standard for unsolicited commercial email, sitting alongside GDPR rather than replacing it. It doesn't distinguish between a private inbox and a company inbox. A message to a stranger's business email address, sent because their job title looked relevant, does not have a lawful basis under this rule just because the product might genuinely help them.
This is stricter than how a lot of B2B teams assume EU rules work. The common shorthand, "B2B is more relaxed than B2C", is true in some EU countries for some marketing channels. For German email specifically, it mostly isn't.
Why being B2B doesn't help for email
Most of the EU treats B2B email marketing more loosely than B2C, resting on GDPR's own "legitimate interest" language and each member state's reading of it. Germany doesn't extend that looseness to email specifically. There's no separate, softer threshold for a business recipient the way there is for phone calls under UWG Section 7(2) No. 1, where a business's presumed interest can sometimes stand in for actual consent. For email, German legal guidance is consistent that being a business contact doesn't unlock a lower bar than a consumer would get.
I'll flag the caveat here directly: that phone exception isn't something I use or recommend building a channel around. I don't sell cold calling, and I'm not saying this to point you toward it, only to explain accurately why "just call instead" comes up so often in German-market advice, and why it isn't relevant to how I work.
The one exception: existing customers
UWG Section 7(3) allows email to an existing customer without fresh consent, but only if four conditions all hold at once, described in detail by German legal guidance on email marketing without consent:
- The address was obtained directly from the customer, in connection with an actual completed sale, not a form fill or an abandoned inquiry.
- The email advertises the sender's own goods or services, and they're similar to what the customer already bought, not just anything in the same catalog.
- The customer hasn't objected to receiving further email.
- The customer was clearly told, at the point the address was collected and in every message since, that they can object at any time at no cost beyond basic transmission.
All four, together, every time. Miss one and the exception doesn't apply, which puts you back under the general consent requirement. This is narrower than most teams assume when they hear "existing customer exception" and treat it as a blanket pass to email anyone who's ever bought from them.
Channel by channel: what's actually defensible
Because the rule changes by channel and by relationship, it's easier to see as a table than as one paragraph of caveats.
| Channel | What German law actually requires | Where that leaves you |
|---|---|---|
| Cold email to a new B2B contact | Prior express consent (opt-in), UWG §7(2) No. 2 | Not defensible without it |
| Email to an existing customer | UWG §7(3)'s four cumulative conditions | Defensible only if all four hold |
| Cold B2B phone call | A narrower presumed-consent pathway under §7(2) No. 1 | Case by case; not a channel I offer or run for clients |
| A LinkedIn message to a connection | Governed by LinkedIn's own commercial-use terms, not UWG's email rule | The channel I actually default to for a first touch |
Also check. Separately from consent, German commercial email needs full sender identification, comparable to a website's Impressum: legal name, address, and register details where they apply. That's a distinct compliance gap from the consent question above, and it's easy to miss because it's a formatting requirement rather than a "can I send this" question.
Where this differs from the reading of GDPR elsewhere
GDPR sets the EU-wide floor, and its Recital 47 lets direct marketing count as a "legitimate interest" in principle, which is the reasoning a lot of cold email advice for the UK, the Netherlands, or Ireland leans on for B2B. Germany layers UWG Section 7 on top of that GDPR floor as its own unfair-competition law, and UWG closes the gap that legitimate-interest reasoning leaves open in those other markets. In practice, that means advice that's broadly fine for outbound into, say, the UK doesn't transfer to Germany just because both sit under the same GDPR. You have to check it against UWG specifically, not only against GDPR.
What actually happens when you get it wrong
UWG enforcement isn't limited to the person who received the unwanted email. Competitors and qualified trade or consumer bodies can also send a formal warning letter, an Abmahnung, demanding a signed cease-and-desist declaration and reimbursement of legal costs, often well before anyone goes near a courtroom. As one overview of B2B cold email compliance in Germany puts it, there's no presumption and no relief for "warm" leads once you're relying on intent signals rather than documented consent.
I won't put a number on what one of these letters typically costs, because I haven't verified a figure I'd stand behind, but the legal fees alone are enough that a single badly targeted send campaign can cost more than the campaign was ever going to earn back. Repeat or willful violations escalate toward injunctions and larger penalties from there. This is the part that makes Germany genuinely different in practice, not just on paper: the risk isn't hypothetical regulator attention years later, it's a fast, commercially motivated enforcement channel that exists specifically because UWG lets competitors use it.
Why I run German outreach LinkedIn first
This is the part that comes from actually running campaigns into the DACH region rather than reading the law in the abstract: the mistake I see most often is a team that's already built a cold email sequence for Germany before anyone checked whether the list behind it has real consent attached. By the time that gets flagged, the copy, the segmentation and the send schedule are all sunk cost. For a first touch into Germany, I default to LinkedIn instead of email, exactly because it sits under LinkedIn's own commercial-use terms rather than UWG's email-advertising rule, and because what actually books meetings on LinkedIn doesn't require the same opt-in infrastructure email does. Once a real conversation exists, moving it to email is a different, much easier question, because you're no longer sending cold.
If you're building out DACH as a market rather than treating Germany as one more country on an EU-wide list, I run outbound into the region through outsourced SDR and outbound for DACH, and the legal read above is a big part of why that engagement is structured LinkedIn-first rather than email-first from day one.
If you still want to use email in Germany
Email into Germany isn't off the table, it just needs consent built in rather than bolted on afterward. In practice that means gating your list on an actual opt-in, a webinar signup, a gated resource, or a checkbox at a form fill, rather than a scraped or purchased list of job titles. It means documenting when and how consent was collected, separately from the general data-processing basis you'd need under GDPR anyway. It means including sender identification and a working unsubscribe in every message, not just the first one. And if you're relying on the existing-customer exception, it means checking all four conditions against your actual data, not assuming a CRM tag of "customer" is enough on its own.
If you're sending in German rather than English, the compliance language, the opt-out line, the sender identification, needs the same care as the rest of the message. I've written more on when that kind of native-language localization is actually worth it, and Germany is one of the clearer cases for it, since a German-language opt-out notice reads as more legitimate to a German recipient than an English one bolted onto an otherwise English email.
The mistakes I see most often
Treating "I found their business email on the company website" as consent. It isn't; consent has to be given, not merely inferable from an address being public. Treating a LinkedIn connection or a past conversation with someone else at the company as consent for a different person's inbox. Treating the existing-customer exception as a blanket pass rather than four specific conditions that all have to hold. And underestimating how this compares to running outbound elsewhere in Europe: if you're weighing Germany's cost and risk profile against other EU markets before deciding where to start, I've broken down what outsourced SDR services in Europe actually cost by market, which is worth reading alongside this one before you commit budget to any single country.
Key takeaways
- UWG Section 7(2) No. 2 requires prior express consent for email advertising in Germany, for business recipients as well as consumers.
- There's no general B2B exception for email the way there partly is for phone calls under Section 7(2) No. 1.
- The only real carve-out is the existing-customer exception in Section 7(3), and it needs all four conditions to hold, not just one.
- UWG enforcement runs through Abmahnung warning letters that competitors and trade bodies can send directly, which is why the risk is faster and more commercial than it looks on paper.
- LinkedIn messaging sits under a different set of rules entirely, which is why I default to it for a first touch into Germany.
FAQ
Is cold email illegal in Germany?
Sending unsolicited B2B email advertising without prior consent falls foul of UWG Section 7(2) No. 2, which treats it as unreasonable harassment regardless of whether the recipient is a business or a consumer. It isn't a criminal offense, but it's unlawful under unfair-competition law and opens the door to a cease-and-desist warning.
Is this a GDPR rule or a UWG rule?
Both apply, but they're doing different jobs. GDPR governs the lawful basis for processing the contact's data in the first place. UWG Section 7 is Germany's separate unfair-competition law, and it's the one that specifically requires consent for the email advertising itself. Being GDPR-compliant on data processing doesn't automatically make an unsolicited email UWG-compliant.
We met at a trade show and they gave us a business card. Can we email them?
A business card gets you an address, not consent to send marketing email. Unless you also captured a clear opt-in at the point of collection, sending a follow-up marketing sequence from that card alone isn't covered by consent, and it doesn't meet the existing-customer exception either, since no sale has taken place.
Is cold calling B2B contacts legal in Germany?
There's a narrower presumed-consent pathway for phone under UWG Section 7(2) No. 1 that doesn't extend to email, which is why the two channels get treated so differently in practice. I don't sell or run cold calling for clients, so I'd point you to a specialist and German legal advice rather than a general answer here.
Is LinkedIn outreach a safe workaround for Germany?
It's not a workaround, it's simply a different legal framework: a LinkedIn message is governed by LinkedIn's own commercial-use terms rather than UWG's email-advertising rule. That's a genuine, legitimate difference in the rules that apply, not a loophole, which is why it's the channel I default to for a first touch into the German market.