Building an email list as a musician: consent rules, what to send, and which kind of tool you need

Streaming platforms decide who sees your release. Social feeds decide who sees your post. An email list is the rare channel where the address belongs to the relationship between you and the fan, and where a message you send arrives in an inbox rather than a ranking. That is why it is worth building, and why the rules around it matter: the same directness that makes email valuable is what consent laws exist to protect.

This guide covers the basics as we read them on 24 Oct 2026. It is a practical guide, not legal advice, and it covers three regimes: the EU's GDPR, the UK's PECR, and the US CAN-SPAM Act. Other countries have their own laws, so check where your fans live.

Do I need permission to email fans?

In the EU and UK, generally yes, and it has to be the right kind of permission.

The EU (GDPR). Where you rely on consent, Article 7 of the GDPR sets the conditions. You "shall be able to demonstrate that the data subject has consented", so you need a record of who signed up, when and how. If the consent request sits inside a longer document, it must be "clearly distinguishable from the other matters" and written in plain language. Fans can withdraw at any time, and "it shall be as easy to withdraw as to give consent." Article 7 also asks whether consent was freely given when something else, such as a service, was made conditional on it.

The UK (PECR). The Information Commissioner's Office guidance on electronic mail marketing says you can email individuals who have "specifically consented to electronic mail from you", for example by ticking an opt-in box. There is a narrow "soft opt-in" for existing customers: someone who bought, or talked about buying, a similar product from you, provided you gave them "a clear chance to opt out" when you collected their details and you offer that opt-out in every message. The ICO says it does not cover prospective customers or bought-in lists. You must not "disguise or conceal your identity", and you should keep a do-not-contact list of people who have opted out.

The US (CAN-SPAM). The US works the other way round: the law does not require opt-in, but it sets rules for every commercial email. According to the FTC's compliance guide, you must:

• use accurate "From", "To" and "Reply-To" information;
• write a subject line that matches the content;
• clearly disclose that the message is an advertisement;
• include a valid physical postal address (a registered PO box or private mailbox counts);
• explain how to opt out, and honour opt-outs within 10 business days, without charging a fee or asking for more than an email address.

Each violating email can cost up to $53,088, the FTC says. Hiring a service to send your mail does not move the responsibility off you. Purely transactional messages, such as an order receipt, are mostly exempt, but the FTC defines them narrowly.

The practical upshot

If you have fans in more than one country, one simple standard covers all three: collect explicit opt-in, keep a record of it, put an unsubscribe link and a postal address in every email, and act on unsubscribes quickly. A PO box or registered mailbox keeps your home address off the footer.

Where do sign-ups come from?

Ask in places where the fan has already shown interest, and say plainly what they are signing up for:

• Merch table and shows. A sign-up form on a phone or tablet beats a paper sheet you have to retype later, and it gives you a timestamp for your consent record.
• Your website and link-in-bio page. One line under the form: what you send and how often.
• Purchases. In the UK, a buyer can fall under the soft opt-in only if you offered the opt-out at checkout. Simplest: add a separate, unticked box.
• A reason to join. An unreleased demo, a ticket presale or a lyric sheet works. Under GDPR Article 7, think carefully before making a download depend on joining the list; a separate, optional box is the safer path.

What not to do: scrape addresses, import a festival's attendee list, or add everyone who ever emailed you about a gig. None of that is the specific consent the ICO describes, and in the US it is a fast way to collect spam complaints.

What should I actually send?

Send things fans would be annoyed to miss. A useful test: would this email still be worth opening if there were no link in it?

• Release news, sent first. If you are running a pre-save, the list is where your most committed listeners hear about it before social. Our pre-save campaigns explainer covers how those work.
• Tour dates by city. Most email tools can segment by a location field, so fans in Mumbai do not get the Berlin announcement.
• Presales and list-only offers. Merch drops, signed copies, early tickets.
• The story behind the work. A paragraph on how a track was made, a voice memo, a photo from the session. This is the part social feeds rarely reward and fans often value most.
• A plain ask, occasionally. Add to a playlist, come to a show, buy the record.

On cadence, there is no rule we could source. Consistency matters more than frequency: a monthly note that always arrives beats a weekly one that stops. Tie your email schedule to your release timeline so the list hears about each stage at the right moment.

Will my emails land in the inbox?

Deliverability is now part of compliance in practice. Google's email sender guidelines say all senders to Gmail accounts must authenticate with SPF or DKIM, use TLS, and keep spam rates reported in Postmaster Tools below 0.3%; the same page recommends staying below 0.10%. Senders of more than 5,000 messages a day must also set up SPF, DKIM and DMARC, and support one-click unsubscribe with a clearly visible unsubscribe link for marketing mail.

You can meet most of this by sending from a proper email service on your own domain rather than from a personal inbox, and by letting the service handle the authentication records. The spam rate is the part only you control, and it is why consent and relevance matter: people who asked for your email rarely report it as spam.

Which kind of tool do I need?

We are not ranking products here. The categories, and what to check in each:

Whatever you pick, the export test matters most. If you cannot take your list, with its sign-up records, to another service, you have rebuilt the dependency an email list is meant to escape.

What we think

The rules read like a burden, but for artists they point at the right strategy. A list of 300 people who chose to hear from you is worth more than 3,000 addresses you gathered from a contest, because the first group opens, buys and turns up, and the second group files spam reports that drag your sending reputation down for everyone else on the list. Consent is not just the law here; it is the filter that keeps a list valuable.

We would also push back on treating the list as a megaphone for links. The platforms already compete to be your link-sending channel. What they cannot do well is carry a long, personal, slightly unpolished note from you to someone who asked for it. Write the email you would want from an artist you love, keep the record of who said yes, and make leaving easy. Fans who know they can leave in one click are more relaxed about staying.

FAQ

Can I add people who followed me on social media? Not to your email list without asking. A follow is not the specific consent to email that the ICO describes. Post a sign-up link and let them opt in.

Do I need a postal address in every email? Under CAN-SPAM, commercial email must include a valid physical postal address; a registered PO box or private mailbox qualifies.

How fast do I have to process an unsubscribe? The FTC says within 10 business days under CAN-SPAM. In the UK the ICO says to act on opt-outs promptly. Most email services do it instantly.

Is a show sign-up sheet enough consent? It can be, if the sheet says clearly what people are signing up for and you keep it as your record. GDPR Article 7 expects you to be able to demonstrate consent later.