Definition
Employment change events — a subscriber leaving one company for another, getting promoted, or changing job functions — create unique challenges for B2B email marketing consent. When a person changes jobs, their relationship with the brands they previously subscribed to changes fundamentally. Consent given through a corporate email address (john.smith@oldcompany.com) does not automatically transfer to a new corporate address (john.smith@newcompany.com). Under GDPR, consent is specific, informed, and unambiguous — consent given in the context of one employer's relationship does not carry over to the subscriber's new role. Under CASL, implied consent based on an existing business relationship expires when that relationship ends, typically two years after the last transaction or interaction.
The legitimate interest basis under GDPR complicates employment change scenarios. A B2B marketer may have relied on legitimate interest to send marketing emails to a subscriber at their corporate address based on the business relationship between the two companies. When the subscriber moves to a new company, the legitimate interest argument weakens because the pre-existing business relationship has ended. Continuing to email the subscriber at their old address — which may now be forwarded to a replacement employee — could mean sending to a different person entirely without proper consent. Marketers must reassess their legal basis following employment changes rather than assuming that consent or legitimate interest persists indefinitely.
Role-based email addresses (sales@oldcompany.com, info@oldcompany.com, john@oldcompany.com) present a particular challenge when people leave companies. The email address itself does not indicate whether the intended recipient still works there. Sending to a role-based address after the contact has left may result in the email reaching their replacement, a colleague, or an unmonitored inbox. This can cause confusion, damage the brand relationship, and potentially violate data protection principles if personal data continues to be processed without the new recipient's consent. Re-consent and re-engagement strategies specifically targeted at employment change events — such as email verification campaigns that ask "are you still at this company?" — can mitigate these risks while maintaining contact with valuable B2B prospects.
Best Practices
Implement an employment change detection process by monitoring email bounces, out-of-office replies with new contact information, and changes in company domain enrichment data. Automated identification of job changes allows timely re-consent outreach.
Send a re-consent email specifically designed for job changers that acknowledges the employment change and asks the subscriber to confirm their interest in continuing the relationship at their new address. Keep the confirmation process simple — a single click to re-subscribe with the new email address.
Segment subscribers who have changed jobs into a distinct re-engagement flow separate from standard re-engagement campaigns. Job changers have different needs and expectations than disengaged subscribers, and treating them as such improves re-consent rates.
Never assume that consent or legitimate interest transfers to a new employer. Treat the new corporate email address as a fresh contact with no prior consent unless the subscriber actively confirms their interest in staying subscribed.
Remove or suppress role-based email addresses associated with departed employees if there is no way to verify the new recipient's identity and consent status. The risk of continuing to email unknown recipients at a role-based address outweighs the potential value of maintaining the contact.
Document consent and legal basis records with timestamps that allow you to identify when a contact's employment context has changed. This audit trail is essential for compliance with GDPR's accountability principle and for responding to data subject access requests.
Related Glossary Terms
Australia Spam Act
Australia's Spam Act 2003 regulates commercial electronic messages including email. It requires consent, functional unsubscribe mechanisms within 5 working days, and sender identification. Penalties reach AUD $2.22 million per day.
Email B2B Consent
The legal requirements for B2B email marketing consent, covering GDPR legitimate interest, CASL implied consent, CAN-SPAM exemptions, and jurisdiction-specific best practices.
Email CASL
Canada's Anti-Spam Legislation requirements for commercial electronic messages, including consent types, record-keeping, and penalties up to $10 million per violation.
Email CCPA
California Consumer Privacy Act requirements for email marketing, including consumer rights to access, delete, and opt out of data collection and sale.
Email Consent Record
Email consent record-keeping captures proof of opt-in including timestamp, IP address, method, and exact wording shown. GDPR requires controllers to demonstrate consent upon request.
Email Consent Renewal
Consent renewal campaigns restore permission to email subscribers whose consent has expired under GDPR regulations, typically achieving 10-30% renewal rates.
Frequently Asked Questions
Consent does not automatically transfer to the new employer's email address. The marketer must obtain fresh consent at the new address. Legitimate interest, if that was the legal basis, also does not transfer because the business relationship that justified it has ended.
Not without verifying the new recipient's identity and consent status. A role-based address such as marketing@company.com may now reach a different person entirely. Continuing to send without confirmation risks processing personal data without a valid legal basis.
Monitor hard bounces on the old address, parse out-of-office replies that include new contact details, use B2B data enrichment services, and track domain changes in email engagement data. Automated alerts can trigger a re-consent workflow when a job change is detected.
Send a personalised email acknowledging the change and asking for confirmation at the new address. Use a single-click confirmation link that captures the new email address and records the consent event. Offer a clear value proposition that reminds the contact why they subscribed originally.
GDPR applies to personal data processing regardless of whether the context is B2B or B2C. A corporate email address containing an individual's name (john.smith@company.com) is personal data. The principles of consent, legitimate interest, and data subject rights apply fully in B2B employment change scenarios. ## Related Terms - email-b2b-consent - email-purchased-list - bounce-classification - double-opt-in