United Kingdom (GB) | PECR + UK GDPR (ICO), Ofcom sender rules, TPS/CTPS do-not-call registers | Marketing SMS/email/calls are opt-in; automated calling always requires consent; scrub TPS/CTPS before voice campaigns; silent and abandoned call limits for dialer traffic on the Ofcom posture page; regulated number purchase with business + address proof (ID optional) | UK PECR and ePrivacy · UK Ofcom Abandoned-Call Posture | Privacy and Electronic Communications Regulations 2003 · Ofcom |
France (FR) | GDPR + the marketing-SMS no-send windows and French STOP requirement | Marketing opt-in mandatory; no marketing sends 20:00–08:00 or Sundays/holidays; STOP au 36111; regulated number purchase with business + address + ID proof | France Marketing SMS Rules | GDPR (EU) 2016/679 |
Spain (ES) | GDPR + LSSI-CE opt-in, Ley 11/2022 General de Telecomunicaciones (LGT) sender register (CNMC), AEPD enforcement, Lista Robinson for voice | Marketing opt-in mandatory; register the alphanumeric sender with CNMC under LGT Art. 41; Spanish opt-out family (BAJA/CANCELAR/SALIR/FIN) | Spain AEPD + LGT Rules | Ley 11/2022, de 28 de junio, General de Telecomunicaciones |
Canada (CA) | CASL (CRTC) for commercial electronic messages | Express or documented implied consent before you send; sender identification and a working unsubscribe in every message | CASL (Canada) · PIPEDA Canada | S.C. 2010, c. 23 · PIPCA / OPC |
Quebec (CA-QC) | Law 25 (modernized Act respecting the protection of personal information in the private sector, CAI) on top of the Canada row | The Canada row plus Law 25’s stricter duties for Quebec residents: privacy officer and incident logging, default-highest-confidentiality settings, and the private-tenant assessment before sharing data outside Quebec | Quebec Law 25 Posture | Law 25 (CAI) |
Australia (AU) | Spam Act 2003 + Do Not Call Register Act 2006 (ACMA) + ACMA SMS Sender ID Register (2026, phased) | Consent before commercial electronic messages; identifiable sender; functional unsubscribe; scrub the Do Not Call Register for voice; alphanumeric sender IDs not on the ACMA register are stamped Unverified at the network — tenant-owned posture, no platform hard gate (register section) | Australia Spam Act | Spam Act 2003 |
New Zealand (NZ) | Unsolicited Electronic Messages Act 2007 (DIA) | Consent with a broad inferred footing (unlike AU’s strict opt-in); accurate sender identification; functional unsubscribe actioned within 5 working days; NZ Do-Not-Call expectation for voice, scoped separately from the AU register | New Zealand UEM Act | Unsolicited Electronic Messages Act 2007 |
Brazil (BR) | LGPD (ANPD) + Anatel A2P SMS rules | Channel-native sender registration dominates (short codes, WABA); LGPD consent and data-subject rights on top; regulated number purchase with heavy documents + CNPJ + authorization | Brazil LGPD + Anatel · Brazil Anatel Sender Rules | Lei nº 13.709/2018 · Anatel |
Germany (DE) | UWG §7 opt-in marketing + BNetzA numbering documentation | Opt-in before marketing; German STOPP family; 21:00–09:00 guidance window; heavy number-purchase documents | Germany UWG + BNetzA | UWG §7 |
Austria (AT) | TKG 2021 §107 opt-in (RTR/TKK telecom-side, including the alphanumeric sender-ID letter-of-authority convention) + DSG 2018 under the DSB; ECG suppression expectation | Opt-in before marketing; file the alphanumeric sender with the letter of authority; German STOPP family; 21:00–09:00 RTR guidance window over Europe/Vienna | Austria TKG 2021 + RTR/DSB Sender Rules | TKG 2021 · RTR · DSB |
Switzerland (CH) | Revised FADP (FDPIC) + UCA (SR 241) opt-in for commercial email/SMS; OFCOM/BAKOM telecom oversight | Opt-in commercial email/SMS under UCA; operator-level alphanumeric acceptance with no statutory register; DE/FR/IT STOP families; non-EEA — EU-to-CH transfers ride the adequacy decision in the GDPR transfers page | Switzerland Revised FADP + UCA Sender Rules | FADP (SR 235.1) · UCA (SR 241) |
Netherlands (NL) | Telecommunicatiewet ePrivacy provisions + ACM consumer enforcement; Bel-me-niet opt-out register | Opt-in electronic marketing; Bel-me-niet scrubbing; silent-call posture; regulated number purchase with business + address proof (ID optional) | Netherlands ACM Rules | ACM |
Belgium (BE) | Telecom Act sender rules under BIPT + Code of Economic Law Book XII opt-in (Art. XII.13) and GDPR under the GBA; Ne m’appelez pas / Bel-me-niet register for voice | Opt-in before marketing; Proximus, Telenet, and Orange BE may relabel unregistered alphanumeric senders; FR + NL STOP families (DE for the East Cantons); 21:00–09:00 market-convention window over Europe/Brussels | Belgium BIPT + GBA Sender Rules | BIPT · GBA |
Ireland (IE) | ePrivacy Regulations (S.I. 336/2011) Section 13 + GDPR / Data Protection Act 2018 (DPC); ComReg numbering and anti-spoofing (NVD) context | Opt-in marketing to individuals with a narrow existing-customer exception; alphanumeric sender accepted, registration: none, no statutory SMS registry; no national DNC register — your consent record and suppression ledger carry the exclusion; STOP ships, add Gaeilge aliases for Irish-language sends; no statutory quiet-hours — set the tenant quiet-hours window recipient-local | Ireland ComReg + DPC Rules | S.I. 336/2011 · DPC |
Finland (FI) | Information Society Code 917/2014 (Traficom, formerly FICORA) | Opt-in direct marketing; no statutory sender registry; regulated number purchase with business + address proof (ID optional) | Finland Traficom / Ficora Rules | Information Society Code 917/2014 |
Sweden (SE) | LEK (2022:482) + Marketing Act 2008:486 under PTS; NIX opt-out register | Opt-in marketing; NIX scrubbing for voice; accurate CLI on Sweden-terminating traffic; regulated number purchase with business + address + ID proof | Sweden PTS Rules | PTS |
Denmark (DK) | Markedsføringsloven (Marketing Practices Act) under the Forbrugerombudsmanden + GDPR under Datatilsynet | Opt-in electronic direct marketing; alphanumeric sender accepted at operator level with registration: none, no statutory register — registration is deliverability posture, not law; add the Danish AFMELD stop alias on Danish sends; no statutory quiet-hours — set the tenant quiet-hours window recipient-local over Europe/Copenhagen | Denmark Marketing Act Sender Rules | Markedsføringsloven (retsinformation.dk) · Datatilsynet |
Norway (NO) | Markedsføringsloven (Marketing Control Act 2009) + e-handelsloven under the Forbrukertilsynet; Nkom telecom oversight; reservasjonsregisteret for voice | Opt-in electronic direct marketing; alphanumeric sender accepted with registration: recommended — a deliverability posture, not a statutory filing; scrub the reservasjonsregisteret before voice campaigns; Norwegian STOPP alias; no statutory quiet-hours — set the tenant quiet-hours window recipient-local over Europe/Oslo | Norway Marketing Act Sender Rules | Markedsføringsloven (lovdata.no) · Nkom |
Portugal (PT) | Lei 41/2004 ePrivacy transposition + GDPR under the CNPD; ANACOM telecom context; national do-not-contact list posture for voice | Opt-in electronic direct marketing with a narrow same-category existing-customer exception; alphanumeric sender accepted at operator level with registration: none, no statutory register; scrub the national do-not-contact list before voice campaigns; Portuguese PARAR family; no statutory quiet-hours — set the tenant quiet-hours window recipient-local over Europe/Lisbon | Portugal ePrivacy + CNPD Sender Rules | Lei 41/2004 (diariorepublica.pt) · CNPD |
Italy (IT) | AGCOM sender registry + GDPR opt-in | Alphanumeric Sender IDs pre-registered (3-character minimum) before carriers pass them; marketing consent is opt-in under GDPR | Italy AGCOM + GDPR Sender Rules | GDPR (EU) 2016/679 |
Mexico (MX) | NOM-184-SCFI disclosure standard (SCT) + LFPDPPP / 2025 Ley General data-protection regime (post-INAI transition) | Promotional SMS requires explicit opt-in with a timestamp, backed by the prescribed disclosure wording; personal data behind every send sits under the LFPDPPP’s privacy notice, ARCO, and breach-notification obligations; regulated number purchase with business + address + ID proof + RFC | Mexico NOM-184 Consent · Mexico LFPDPPP Data-Protection Posture | NOM-184-SCFI-2018 · LFPDPPP |
Argentina (AR) | ENACOM telecommunications rules, data-protection obligations, and the Registro Nacional No Llame | Tenant-owned opt-out posture: identifiable sender, Spanish stop path, suppression ledger, and country=AR DNC scrub for covered marketing calls; keep CUIT/AFIP and any CCM evidence aligned with KYC | Argentina ENACOM + CCM/AFIP Rules | ENACOM · Registro Nacional No Llame |
Colombia (CO) | Ley Estatutaria 1581 de 2012 (Habeas Data) + Decreto 1377 de 2013 (SIC, RNBD) + CRC telecom sender norms; operator-level sender acceptance on Claro/Movistar/Tigo | Tenant-owned opt-in posture for commercial marketing: prior informed consent with purpose and lawful basis, habeas-data rights on the DSAR clock, suppression of revoked subjects, Spanish stop family plus RETIRAR, and operator-filed sender identity | Colombia Habeas Data + CRC Sender Rules | SIC · Ley 1581 de 2012 · CRC |
Chile (CL) | Ley 19.628 on the protection of private life (1999) replaced by Ley 21.719 data-protection reform (2024, Agencia de Protección de Datos Personales); SUBTEL telecom oversight | No statutory sender-ID register: operator-level acceptance; tenant-owned opt-in posture — prior, purpose-bound consent, statutory-window rights responses, Spanish stop family, and breach notification during the staged reform transition | Chile Ley 21.719 Data-Protection Rules | Ley 19.628 · Ley 21.719 · SUBTEL |
Peru (PE) | Ley 29733 (2011) + reglamento D.S. 003-2013-JUS + 2021 security/information-breach reglamento (Ministerio de Justicia); MAS+STI operator posture under OSIPTEL oversight | No DLT-style register — carriers accept senders on their own terms; tenant-owned opt-in posture: express prior consent (silence never counts), ARCO rights on the statutory clock, Spanish stop family, and suppression evidence for the registral posture | Peru Ley 29733 Data-Protection Rules | MINJUSDH data-protection · OSIPTEL |
India (IN) | TRAI DLT regime + DPDP Act 2023 data protection | Principal Entity, Headers (sender IDs), and content templates registered on a DLT portal before any A2P SMS delivers; DPDP consent, notice, and data-principal rights on the personal data behind every send; regulated number purchase with business + address + ID proof + GSTIN + PAN | DLT-India Onboarding · India DPDP Act Posture | TRAI TCCCPR 2018 · DPDP Act 2023 |
Indonesia (ID) | KOMDIGI (formerly Kominfo) sender registration + PDP Law No. 27/2022 | Alphanumeric sender IDs pre-registered with KYC-backed brand identity; marketing opt-in-strict under PDP Law; Bahasa Indonesia + English STOP handling; UTC+7/WIB no-overnight window convention | Indonesia KOMDIGI Sender & Marketing Rules | PDP Law No. 27/2022 · KOMDIGI |
Philippines (PH) | NTC sender-registration rules + Data Privacy Act of 2012 (NPC) | Alphanumeric sender IDs require pre-registration; capture marketing consent, publish English or Filipino stop terms, and configure tenant-owned recipient-local quiet hours | Philippines NTC Sender Rules | National Telecommunications Commission · Data Privacy Act of 2012 |
Vietnam (VN) | MIC sender-registration rules + Decree 52/2013/ND-CP on telecommunications information (MIC) | Alphanumeric sender IDs require pre-registration; capture marketing consent, publish English or Vietnamese stop terms, and configure tenant-owned recipient-local quiet hours | Vietnam MIC Sender Registration + Marketing Rules | Ministry of Information and Communications |
Saudi Arabia (SA) | CST (formerly CITC) sender-registration + marketing rules | Alphanumeric sender IDs pre-registered with KYC-backed brand identity; marketing opt-in strict; overnight no-send window convention; Arabic + English STOP handling | Saudi Arabia CST Sender & Marketing Rules | CST |
Malaysia (MY) | Communications and Multimedia Act 1998 (Act 588) + MCMC sender posture; PDPA 2010 (as amended 2020) notice-and-choice direct marketing | Alphanumeric sender IDs registered through the operators and aggregator route; notice-and-choice marketing run as recorded opt-in; Malay + English STOP | Malaysia MCMC Sender & Marketing Rules | MCMC · PDPA 2010 |
Egypt (EG) | Law 175/2018 anti-cybercrime + Personal Data Protection Law No. 151 of 2020; NTRA sender rules | Alphanumeric sender IDs registered at the operator edge; opt-in marketing consent; Arabic + English STOP; carrier-honored 21:00–07:00 marketing window | Egypt NTRA Sender & Marketing Rules | NTRA |
Nigeria (NG) | Nigeria Data Protection Act 2023; NCC sender pre-registration; NLCA 2019 lawful-interception posture | Alphanumeric sender IDs pre-registered at the operators; opt-in marketing plus operator DND scrub; overnight marketing convention | Nigeria NCC Sender & Marketing Rules | NCC · NDPC |
Kenya (KE) | Data Protection Act 2019 (ODPC); CA sender rules; national opt-out register | Alphanumeric sender IDs registered for the route; opt-in consent; register applicability tenant-confirmed with the tenant owning the scrub; English + Swahili STOP | Kenya CA Sender & Marketing Rules | CA · ODPC |
Israel (IL) | Communications Law (Bezeq and Broadcasting) spam amendment (2008) + Privacy Protection Law 5741-1981 | Statutory opt-in consent; alphanumeric sender IDs registered via the Israeli aggregator; Hebrew + English STOP with revocation honored | Israel Sender & Marketing Rules (Spam Law 2008) | Ministry of Communications · PPA |
Poland (PL) | Telecommunications Law Art. 172 marketing opt-in enforced by UKE + RODO (GDPR as applied in Polish law, UODO) | Prior opt-in with a producible consent record for marketing traffic; sender ID accepted at operator level across Orange, Play, Plus, and T-Mobile PL with no statutory register; Polish STOP vocabulary added tenant-side | Poland UKE + RODO Sender Rules | UKE · RODO / UODO |
Czechia (CZ) | GDPR opt-in marketing; the member-state penal code makes call recording two-party consent | No statutory sender registry documented here — read the live registration field before launch; numbers seed two_party_explicit for recording | Row-only market — no dedicated page yet; nearest coverage GDPR Posture Guide, recording posture Call Recording Consent | GDPR (EU) 2016/679 |
Hungary (HU) | GDPR opt-in marketing; the member-state penal code makes call recording two-party consent | No statutory sender registry documented here — read the live registration field before launch; numbers seed two_party_explicit for recording | Row-only market — no dedicated page yet; nearest coverage GDPR Posture Guide, recording posture Call Recording Consent | GDPR (EU) 2016/679 |
Luxembourg (LU) | GDPR opt-in marketing; the member-state penal code makes call recording two-party consent | No statutory sender registry documented here — read the live registration field before launch; numbers seed two_party_explicit for recording | Row-only market — no dedicated page yet; nearest coverage GDPR Posture Guide, recording posture Call Recording Consent | GDPR (EU) 2016/679 |
Slovakia (SK) | GDPR opt-in marketing; the member-state penal code makes call recording two-party consent | No statutory sender registry documented here — read the live registration field before launch; numbers seed two_party_explicit for recording | Row-only market — no dedicated page yet; nearest coverage GDPR Posture Guide, recording posture Call Recording Consent | GDPR (EU) 2016/679 |
Turkey (TR) | KVVK Law No. 6698 (Personal Data Protection Board) + BTK sender-registration regime | Alphanumeric sender ID registered with BTK before TR-bound delivery; KVVK opt-in consent, the 30-day DSAR clock, and Art. 9 cross-border residency controls on the data behind each send | Turkey KVKK + BTK Sender Rules | KVVK · BTK |
South Korea (KR) | PIPA (Personal Information Protection Commission) + KISA opt-out regime via the mobile operators | Sender pre-registration and respect for the 080 free-to-reply withdrawal path on every marketing send; PIPA consent, data-subject rights, and overseas-processing rules on the recipient data | South Korea PIPA + KISA Opt-Out Posture | PIPC · KISA |
Singapore (SG) | IMDA SGNIC sender-ID registry + PDPA 2012 as amended 2020 (PDPC SG, Part 9 DNC register) | Every alphanumeric sender ID pre-registered on the SGNIC registry or rejected at the carrier edge; PDPA deemed-consent marketing with the national DNC scrub for calls, SMS, and faxes to +65 | Singapore SGNIC Sender-ID Rules · Singapore PDPA · Singapore and Thailand PDPA Posture | IMDA / SGNIC · PDPC SG |
Thailand (TH) | PDPA B.E. 2562 (Personal Data Protection Committee, in force since 2022) | Express consent at collection for marketing with no national DNC register to lean on — the tenant suppression layer answers for every revocation; sections 39–41 processing records | Thailand PDPA · Singapore and Thailand PDPA Posture | PDPC Thailand |
Japan (JP) | APPI (Act on the Protection of Personal Information, PPC) | Purpose-and-disclosure regime: specify the purpose of use before collection, consent before use beyond it, extra care for special-care categories; record APPI Joint-Order-class cross-border transfers; regulated number purchase with business + address proof (ID optional) | Japan APPI | PPC |
South Africa (ZA) | POPIA (Information Regulator) + ICASA telecom oversight | Consent- and legitimate-interest-led direct marketing with an opt-out right on every send; operator-level sender acceptance under ICASA; POPIA accountability and cross-border transfer rules on the recipient data | South Africa POPIA | POPIA / Information Regulator · ICASA |
Hong Kong (HK) | PDPO (Cap. 486) Part 6A direct-marketing consent (PCPD) + UEMO (Cap. 593) sender identification and unsubscribe duties (OFCA), OFCA SMS Sender Registration Scheme | Alphanumeric sender IDs accepted into +852 via the aggregator’s scheme registration; the live Orbit HK row reads registration: none; Chinese and English STOP synonyms, tenant quiet hours | Hong Kong PCPD + OFCA Sender Rules | PDPO (Cap. 486) · UEMO (Cap. 593) |
United Arab Emirates (AE) | TDRA (formerly TRA) sender-registration + marketing rules | Alphanumeric sender IDs pre-registered with KYC-backed brand identity before delivery; marketing opt-in strict; carrier-honored 21:00–07:00 recipient-local marketing window; Arabic STOP keywords | UAE TDRA Sender & Marketing Rules | TDRA |
| European Union / GDPR-class jurisdictions | GDPR (opt-in regimes across member states) | Lawful basis before processing; the strictest European marketing regimes are opt-in regardless of channel | GDPR Posture Guide | GDPR (EU) 2016/679 |
United States (US) | TCPA (voice/SMS), CAN-SPAM (email), 10DLC A2P registration | 10DLC brand + campaign vetting for A2P SMS; CAN-SPAM’s opt-out-with-content-requirements model for email | CAN-SPAM · 10DLC guide · TCPA Junk-Fax Posture | 15 U.S.C. § 7701 et seq. · FCC TCPA rules |