The UK rules and ethical standards that govern professional services marketing

What to take away

Who regulates professional services marketing in the UK

Professional services marketing spans general consumer law and sector-specific rules.

A law firm advertising on LinkedIn must meet the Solicitors Regulation Authority's code, the Advertising Standards Authority's CAP Code, the Information Commissioner's Office's cookies guidance and the Competition and Markets Authority's consumer enforcement guidance. A management consultancy has a shorter list but must still comply with consumer protection law and data protection rules.

England and Wales has its own legal services regulators. The Solicitors Regulation Authority covers solicitors there. Scotland has the Law Society of Scotland and the Scottish Legal Complaints Commission, and Northern Ireland has the Law Society of Northern Ireland.

Each sets its own advertising and publicity rules, so cross-border firms must know which regulator's rule applies to each campaign.

Accountants, architects and surveyors have separate bodies. The Institute of Chartered Accountants in England and Wales, the Architects Registration Board and the Royal Institution of Chartered Surveyors each publish conduct and advertising requirements. These are not optional extras. They sit alongside the general law.

Consumer protection and the DMCC Act 2024

The Digital Markets, Competition and Consumers Act 2024 changed consumer protection law for marketers. The Act gives the CMA stronger powers to enforce consumer protection rules directly, including the ability to fine businesses for unfair commercial practices without going to court. The Act received Royal Assent on 24 May 2024.

The CMA's direct enforcement powers for unfair commercial practices came into force on 6 April 2025. The subscription contract provisions are being commenced separately; check the commencement regulations for the current position.

The Act also introduces specific rules on subscription contracts and trial offers. If you offer a free trial that rolls into a paid subscription, the Act's requirements on reminder notices and cancellation rights may apply. Professional services firms that sell retainers or ongoing advisory packages on a subscription basis need to review their terms and their marketing copy.

For most firms, the practical impact is on how you describe your services and how you handle renewals. The CMA has published detailed guidance for businesses on consumer protection, and you should read the sections that apply to your model.

A useful starting point is the CMA's consumer protection guidance for businesses, which sets out the enforcement approach and the types of practice that attract scrutiny. The guidance is updated as the CMA's powers expand.

You can check ASA rulings on the ASA's rulings page and CMA guidance on the CMA's consumer enforcement guidance page.

Advertising rules and the CAP Code

The Advertising Standards Authority applies the CAP Code to most marketing communications in the UK, including social media posts, paid search ads, email campaigns and website content. The CAP Code requires that marketing is legal, decent, honest and truthful. For professional services, the honesty requirement is the one that catches most firms out.

Comparative claims are a common risk. Saying you are "the leading" firm in a practice area is a comparative claim that must be substantiated. Saying you are "recommended by" a directory is acceptable if the recommendation is current and you do not imply it is an accreditation. Testimonials must be genuine and you must have permission to use them.

The ASA publishes regular updates on its advice and resources news page, including enforcement actions and changes to the codes. Following those updates is a practical way to keep your marketing compliant without reading the full CAP Code every quarter.

If you want a detailed walkthrough of the advertising rules as they apply to professional firms, our guide to professional services marketing advertising rules breaks down the CAP Code requirements by channel.

Data protection and the ICO's cookie guidance

Data protection law applies to almost every marketing activity. If you collect email addresses for a newsletter, you are processing personal data. If you use analytics cookies on your website, you need to comply with the Privacy and Electronic Communications Regulations as well as the UK GDPR.

The Information Commissioner's Office has published detailed guidance on the use of storage and access technologies that covers cookies, pixels and similar tools. The guidance is clear that consent must be freely given, specific and informed. Pre-ticked boxes and implied consent do not meet the standard.

For professional services firms, the biggest risk is lead capture. A contact form that sends data to a CRM, a webinar registration that shares data with a partner, or a LinkedIn lead gen form all involve data processing. You need a lawful basis, a privacy notice that covers the processing and a process for handling subject access requests.

Our article on professional services marketing data protection explains how to map your lead capture processes and what to include in your privacy notice.

Sector rules for law firms and other regulated professions

Law firms face additional rules from the Solicitors Regulation Authority. The SRA's Code of Conduct requires solicitors to act with honesty and integrity. Its transparency rules require firms to publish on their website the price of certain services, including conveyancing, probate, immigration and employment tribunal claims.

They must also publish a description of those services, who will carry them out, the firm's complaints procedure and its regulatory status, including the SRA number. Those transparency requirements apply to your website as well as to client care letters.

Scotland and Northern Ireland have their own regulators. A firm with offices in Edinburgh and Manchester must comply with both the Law Society of Scotland's rules and the SRA's rules for the England and Wales office. The same applies to accountancy practices regulated by different bodies in different jurisdictions.

Other regulated professions have similar requirements. Financial advisers must comply with Financial Conduct Authority rules on financial promotions. Estate agents must comply with the Estate Agents Act and the CAP Code. Architects must comply with the Architects Code. In each case, the sector regulator's rules sit on top of the general consumer and advertising law.

Disclosure, native advertising and thought leadership

Professional services firms increasingly use thought leadership and native advertising to reach clients.

A sponsored LinkedIn article, a webinar hosted with a partner or a research report under a firm's brand raises disclosure questions. The CAP Code requires marketing communications to be identifiable. If readers cannot tell content is paid for, disclosure is inadequate.

LinkedIn's sponsored content advertising platform allows firms to target specific job titles and industries. The platform's ad policies require that sponsored content is clearly labelled. Firms should also ensure that any thought leadership published as sponsored content does not breach the sector regulator's rules on advertising.

A written disclosure policy is the most effective control. It should set out who approves sponsored content, how it is labelled, what disclaimers are required and how the firm handles corrections. Our guide to professional services marketing disclosure policy provides a template structure you can adapt.

Commercial contracts and agency agreements

Marketing often involves third parties: agencies, freelancers, data processors and platform providers. Each relationship creates contractual obligations that interact with the regulatory rules. An agency that runs a paid search campaign on your behalf may be acting as a data processor, which means you need a data processing agreement.

Commercial contracts also need to address compliance warranties. If an agency warrants that its creative work complies with the CAP Code and it does not, you may have a claim. But the regulator will still hold your firm responsible for the marketing. You cannot outsource regulatory risk.

Our article on professional services marketing commercial contracts covers the clauses to include in agency agreements and how to allocate compliance responsibilities.

What compliance costs depend on

Compliance costs vary with the number of regulators, the complexity of your campaigns and whether you have template materials. There is no published average. Budget for legal review of comparative claims, price claims and new data processing.

Common questions

Do the CAP Code rules apply to law firms in Scotland?

Yes. The CAP Code applies across the UK. However, the Solicitors Regulation Authority's rules apply to solicitors in England and Wales, not Scotland. Scottish solicitors are regulated by the Law Society of Scotland, which has its own advertising and publicity rules. A firm operating in both jurisdictions must comply with both sets of sector rules.

Can I use client testimonials in my marketing?

Yes, if the testimonial is genuine, you have the client's permission and it does not breach client confidentiality. The CAP Code requires that testimonials are not misleading. For law firms, the SRA's rules on confidentiality may also apply. You should not use a testimonial that implies a guarantee of a particular outcome.

What consent do I need for marketing emails?

Under the Privacy and Electronic Communications Regulations, you generally need consent to send marketing emails to individuals. There is a limited exception for existing customers, but it is narrow. The ICO's direct marketing guidance sets out the test. Consent must be a positive action, and you must keep a record of it.

Does the DMCC Act 2024 apply to B2B marketing?

The DMCC Act's consumer protection provisions cover consumer-facing marketing. If you market to individuals, including sole traders in some circumstances, the Act may apply.

If you market exclusively to businesses, the consumer protection rules are less likely to apply, but the advertising codes and data protection law still do. Check the CMA's guidance for the specific definitions.