Most marketers know GDPR exists. Far fewer know the Unfair Commercial Practices Directive (UCPD), even though it governs the actual claims in their copy across every EU market. It's the framework behind "you can't say that" — and it applies to ad copy, landing pages, emails, and product descriptions alike. This guide is a plain-language tour of what the UCPD prohibits, the practices that are banned outright, and how to keep persuasive copy on the right side of the line.
What the UCPD covers
The UCPD prohibits commercial practices that are unfair to consumers. For copy, two categories matter most:
- Misleading actions — false information, or true information presented in a deceptive way, that causes the average consumer to make a different decision.
- Misleading omissions — leaving out material information the consumer needs, or hiding it in fine print.
The test is the average consumer of your target audience — someone reasonably well-informed and reasonably observant. For vulnerable groups (children, the ill, the elderly), the bar is higher and the scrutiny tighter. This is a behavioural test, not a literal-truth test: a claim can be technically true and still mislead if the overall impression deceives.
The Annex I blacklist
The Directive includes a list of 31 practices that are banned outright — no case-by-case test needed. If you do them, they're unfair, full stop. The ones that catch marketers:
| Banned practice | What it looks like in copy |
|---|---|
| False scarcity | "Only 2 left!" when stock is unlimited |
| Fake free | "Free" when extra payment is required |
| Bait advertising | Advertising at a price you can't actually honour |
| False "limited time" | "Sale ends tonight" that runs every night |
| Fake endorsements | Claiming approval/certification you don't hold |
| Editorial disguise | Ads dressed up as independent reviews ("advertorial" not labelled) |
These are the fastest way to a complaint because they require no nuanced analysis. There's no balancing test, no "but it converted" defence — if the practice is on the list, it's unfair. The recurring offenders in performance marketing are manufactured scarcity and perpetual countdowns, both of which are trivially easy to prove and increasingly automated to detect.
Substantiation: the rule behind most flags
For any objective claim, you must hold evidence before you publish. "Clinically proven," "rated #1," "10,000 happy customers" — each needs backing you could produce on request. The burden is on the advertiser, not the regulator. If you can't prove it today, soften it or cut it.
Substantiation is the single most useful discipline for staying compliant, because it converts a vague worry into a concrete question: can I prove this specific sentence right now? If the answer is no, you have your answer. This applies equally to numbers ("40% faster"), comparatives ("better than X"), and credentials ("award-winning").
Comparative and superlative claims
Comparisons ("better than X," "cheaper than the competition") are allowed but regulated — they must compare like for like and be verifiable. Superlatives split two ways:
- Puffery — vague, subjective praise no one takes literally ("the comfiest chair in the world"). Generally fine.
- Objective superlatives — measurable claims ("the fastest delivery in Germany"). Need proof.
The line is whether a reasonable consumer would read it as a factual claim. "We think we're the friendliest support team around" is opinion; "The #1 support team in Europe" is a factual assertion you'd have to substantiate. When in doubt, ask whether the statement could be falsified by evidence — if it could, treat it as a claim.
Sector-specific overlays
The UCPD is the baseline. On top of it sit tighter regimes:
- Health & nutrition claims — only authorised wording (Regulation 1924/2006). Implying a product treats or cures a condition is high risk and often prohibited.
- Financial promotions — risk warnings required, no guaranteed-return language.
- Environmental / "green" claims — increasingly enforced; "eco-friendly" and "carbon neutral" need substantiation, and the EU is actively tightening greenwashing rules.
If you operate in these sectors, assume the strictest rule wins. And note the overlap with privacy: a health-product ad that collects buyer data can engage GDPR Article 9 special-category obligations on top of the claim rules — the two risks compound, as covered in our Facebook & Meta ad copy guide.
Where the UCPD meets GDPR
Marketers tend to treat privacy and advertising claims as separate compliance worlds, but on any given ad they run in parallel. GDPR asks what did you say about the data? The UCPD asks did the claim mislead? A landing page can pass one and fail the other. The most resilient copy review checks both at once — the data story and the claim — because a campaign gets pulled the moment either fails. Our landing page GDPR checklist and Google Ads compliance guide cover the two sides in practice.
Keeping copy compliant in practice
- Separate opinion from objective claim in every headline.
- For each objective claim, confirm you hold evidence now.
- Check your offer against the Annex I blacklist — especially scarcity, urgency, and "free."
- Disclose material conditions up front, not in fine print.
- Apply sector overlays where relevant.
What enforcement actually looks like
The UCPD isn't an abstract risk. Enforcement reaches advertisers through several channels, and understanding them clarifies why the rules bite:
- National consumer authorities investigate and fine advertisers directly. Each EU member state has one, and they coordinate on cross-border campaigns.
- Competitor complaints are a major trigger. A rival who can't make a claim will happily report you for making it without substantiation — and they often have the evidence to show you can't back it up.
- Self-regulatory bodies (advertising standards organisations) handle complaints quickly and publish rulings that name the advertiser, which carries reputational cost even without a fine.
- Platform enforcement — Google, Meta, and others apply policies derived from the same principles, so a UCPD-risky claim often gets disapproved before a regulator ever sees it.
The practical takeaway: you don't have to be unlucky to get caught. A competitor, a watchdog, or an automated platform review is usually enough, and the substantiation burden means you lose the moment you can't produce evidence.
Why a parallel review beats a sequential one
Teams often check privacy and advertising claims in separate passes — legal reviews the data story, a different person eyeballs the claims. The problem is that a single sentence can carry both risks at once. "Our clinically proven supplement cures inflammation — by clicking you agree we may use your data for personalized ads" contains a prohibited health claim, an unsubstantiated "clinically proven," a special-category data inference, bundled consent, and undisclosed ad recipients in one breath. A sequential review catches some and misses others depending on who's looking.
Reviewing both dimensions together — claim and data, in the same pass over the same copy — is the only reliable way to catch sentences that fail on multiple axes. It also matches how enforcement works: a regulator or competitor doesn't care which rulebook you broke, only that the copy misled or over-collected.
Greenwashing: the fastest-growing enforcement area
Environmental claims deserve their own warning because EU enforcement here is accelerating. "Eco-friendly," "sustainable," "carbon neutral," "100% recyclable," and similar terms are now squarely in regulators' sights, and the EU has introduced dedicated rules to curb greenwashing on top of the general UCPD baseline. Vague green claims with no substantiation, or claims that overstate a marginal environmental benefit, are treated as misleading like any other unsupported assertion.
The standard is the same one that governs every objective claim — you must hold evidence — but the scrutiny is higher and rising. "Carbon neutral" needs a defined, verifiable basis, not an offset arrangement nobody can inspect. "Made from recycled materials" needs to reflect the actual proportion, not a token amount. Generic eco-labels you award yourself carry little weight and can themselves be the misleading element. If sustainability is part of your pitch, treat every green claim as a high-substantiation claim and be ready to show your working.
Building substantiation before you need it
The recurring theme across every category — superlatives, guarantees, health, green — is substantiation, and the time to assemble it is before launch, not after a complaint. The strongest position is a simple internal habit: for every objective claim in a campaign, record the evidence that supports it and where that evidence lives. When a regulator, a competitor, or a platform asks, you produce the file rather than scrambling.
This is also where claim review and recordkeeping meet. A documented pass over each piece of copy — what claims it makes, whether each is opinion or fact, and what backs the factual ones — does two jobs at once: it catches the unsupportable claim before it ships, and it leaves the accountability trail the UCPD's enforcement model effectively expects. The advertiser who can show their substantiation on demand rarely ends up the subject of an enforcement action in the first place.
Scan your claims before you publish
A claim-by-claim review is exactly what the free GDPR Ad Copy Checker automates — it flags unsubstantiated superlatives, banned-practice language, and sector risk with safer rewrites, alongside the GDPR signals on the same copy. No login required. For the complete framework, see the GDPR advertising compliance guide.
This article is general information, not legal advice. Use it as a risk signal alongside human compliance review.