The big idea: The marketing that lasts asks before it collects, says clearly when something is paid or made by AI, and never tricks people into a yes.
In 60 seconds
- Ask before you collect. Opt-in should be specific and as easy to undo as it was to give.
- Say plainly when something is paid, gifted or made by AI, and explain what data you collect and why.
- Before any tactic goes in a plan, ask: would people expect it, did they agree, and could we explain it face to face?
Do this: build trust into four Final Pitch sections and run the three-question test on every tactic in your deck.
How privacy and marketing ethics work
How privacy and marketing ethics work
Ask before you collect. Never trick anyone into a yes.
Good digital marketing runs on data and attention, and both belong to the customer.
This is not legal advice. This page teaches the principles and the best-known rules at a high level. Laws change and differ by country and state. A real client should check its own plan with a lawyer, and you should check the official sources in Go deeper.
Where the data comes from
The closer the data is to the customer, the more trust it carries.
- 1Third-party dataCollected by companies with no direct relationship to the customer, then sold or rented.Trust: lowest. Customers rarely know it exists.
- 2Second-party dataAnother company’s own customer data, shared through a partnership.Trust: depends on what that partner’s customers agreed to.
- 3First-party dataCollected directly by the brand: purchases, sign-ups, site visits, app use.Trust: high, when the brand is clear about what it collects.
- 4Zero-party dataWhat customers choose to tell the brand: preferences, quiz answers, birthdays.Trust: highest. They handed it over on purpose.
The two habits behind every rule
Ask first. Say it plainly.
Permission: ask first
- Opt-in, not opt-out. People take an action to say yes. No pre-checked boxes.
- Specific. Yes to email is not yes to texts, and yes to receipts is not yes to promos.
- Easy to undo. Unsubscribing or opting out is as easy as signing up.
Honesty: say it plainly
- Disclose the money. Paid, gifted or employee posts are labeled where people will see them.
- Explain the data. Tell people what you collect and why, in words they understand.
- Label the AI. Realistic AI-made people, places or events are never passed off as real.
Email rules: CAN-SPAM basics, the US law every commercial email has to follow
The CAN-SPAM Act covers commercial email in the US, including business-to-business email. According to the FTC’s compliance guide, a marketing email must:
- Use accurate “From,” “To” and “Reply-To” information that identifies the sender.
- Use a subject line that is not deceptive.
- Make clear the message is an ad.
- Include a valid physical postal address.
- Tell people how to opt out, and honor opt-outs within 10 business days.
The brand stays responsible even when an agency or email platform sends for it.
CAN-SPAM does not require permission before the first email, but best practice does. Purchased lists hurt deliverability, most email platforms do not allow them, and other countries, including those in the EU, have stricter consent rules.
The three-question test
One “no” means fix it or drop it.
Before any tactic goes in a plan, ask:
- Would people expect this?
- Did they agree to it?
- Would we be fine explaining it to them face to face?
One “no” means fix it or drop it. You will practice this in the Would You Run It? lab below.
Tracking is changing
Build on data customers gave you.
- Safari and Firefox block many third-party cookies by default.
- Apple asks iPhone users before apps track them.
- Chrome’s plans have changed more than once.
Build strategies on first-party and zero-party data.
Trust is the strategy
Ethical marketing is also durable marketing.
Every tactic on this page that crosses the line also tends to backfire: spam complaints, ad account bans, angry comments, lost customers.
Influencers, endorsements and reviews
If there is a connection, say so where people will see it.
Make it hard to miss
Put the disclosure with the endorsement, not at the end, behind “more,” on a profile page or lost in a pile of hashtags. In videos, say it and show it on screen.
Use plain words
“Ad,” “Sponsored” or “Thanks to Brand for the free product” work. Vague labels like “sp,” “spon” or “collab” do not.
Do not rely on the button alone
Platform tools like a paid partnership label help, but the FTC says creators should not count on them by themselves.
Keep it truthful
Creators should only talk about products they have used, and cannot make claims the brand could not prove.
Watch out: the brand is responsible for monitoring its creators, not only the creator.
What counts as a material connection
The FTC’s Endorsement Guides say that when there is a material connection between a brand and the person talking about it, it has to be disclosed clearly.
A material connection includes payment, free or discounted products, a family or personal relationship, or employment.
Reviews
Fake reviews, reviews from people who never used the product, and staff reviews that hide the relationship are deceptive. The FTC has a rule against fake reviews and testimonials. Ask real customers for honest reviews instead.
Dark patterns
Design that tricks people has an honest version.
Dark patterns are design choices that push people into decisions they would not otherwise make. The FTC published a staff report on them in 2022 and has taken action against companies that use them.
Dark pattern
- A countdown that resets on every visit
- Fees that appear only at the last step
- “No thanks, I hate saving money”
Honest version
- A real deadline: “Ends Sunday at midnight”
- Show the full price up front
- “No thanks”
All seven dark patterns and the honest version
| Dark pattern | Looks like | Honest version |
|---|---|---|
| Fake urgency | A countdown that resets on every visit | A real deadline: “Ends Sunday at midnight” |
| Fake scarcity | “Only 2 left!” when there are hundreds | Show real stock, or say nothing |
| Sneaking | Fees that appear only at the last step | Show the full price up front |
| Pre-checked boxes | An add-on or newsletter already selected | Let people choose |
| Hard to cancel | One click to join, a phone call to quit | Cancel as easily as you signed up |
| Confirmshaming | “No thanks, I hate saving money” | “No thanks” |
| Disguised ads | An ad styled as a news story or review | Label it as an ad or sponsored |
Inclusive and honest targeting
Target the situation, not the identity.
Target the situation and the interest (“planning a lake weekend”), not the identity.
- Do not exclude by protected traits.
- Do not imply you know something personal.
- Treat sensitive data as off limits.
- Include on purpose.
Reach the right people without excluding or exposing anyone
- Do not exclude by protected traits. Ads for housing, jobs and credit cannot leave people out because of traits the law protects, such as race, religion, sex, national origin or disability, or because of stand-ins for them such as ZIP code. Meta limits targeting options for these ad categories.
- Do not imply you know something personal. “Struggling with debt?” or “Are you pregnant?” in an ad tells people they are being watched. Meta’s ad policies do not allow ads that assert or imply personal attributes like health, finances or religion.
- Treat sensitive data as off limits. Health, religion, sexual orientation and similar topics should not drive targeting unless people chose to share them for that purpose.
- Include on purpose. Check that your creative, imagery and language welcome everyone in your persona, and that alt text and captions make ads accessible.
Try it: Would You Run It?
Tool · MARK 465
Would You Run It?
Eighteen tactics a marketing team might pitch. Sort each one and get the call, the reason and the better move right away. A teaching tool, not legal advice.
- 1Read the tactic
- 2Make your call
- 3See why
Your call
Calls to look at again
Your sorting board
Run it
Only with consent or disclosure
Don’t run it
Put it to work: a pitch your client can trust
There is no separate ethics slide in the Final Pitch. Trust shows up inside four sections: Email & Lifecycle, Paid Media Recommendation, Social Media Strategy (where your influencer plan lives) and Measurement Plan. A client should be able to run your plan without breaking a rule or embarrassing the brand. Expect a question on it in Q&A.
Build trust into four sections
Email & Lifecycle: grow the list by opt-in
Show where new subscribers come from and what they said yes to. No bought lists, no pre-checked boxes. Learn the stages on Email & Lifecycle Marketing.
Your slide: the sign-up offer, where it appears (site, register, event), what subscribers are promised, and one line confirming every email has an unsubscribe link and the business address.
Paid Media: target the situation, not the identity
Describe audiences by interests, behaviors and locations. If you retarget or upload a customer list, say it depends on the client’s privacy policy and consent. Flag housing, job or credit ads as a special category. See Paid Media.
Your slide: each audience in one plain line, plus a short note such as “Retargeting runs only after the site’s consent banner is live.”
Social Media Strategy: disclose every partnership
If your plan uses creators, gifting or employee advocates, write the disclosure into the plan. Pair it with Influencer & UGC Strategy.
Your slide: one line from your creator brief, such as “Say ‘This is an ad for Brand’ in the first seconds, show it on screen, and turn on the paid partnership label.”
Measurement Plan: be transparent about data
Choose KPIs you can track from consented, aggregate data: key events and UTM-tagged campaigns in GA4, list growth, unsubscribe rate. Never personal details in analytics. See Analytics & GA4.
Your slide: your three to five KPIs plus one line on how the data is collected, such as “GA4 with a cookie consent banner; no personal information in analytics.”
Run the three-question test on the whole deck
Read every tactic in the pitch and ask: would people expect it, did they agree to it, would we explain it face to face? Label any AI-generated mockups in the deck.
Your deliverable: a deck with zero tactics you would put in the “Don’t run it” bin, and an answer ready if the client asks, “Is this legal?”
Example: what this looks like on the slidesA made-up local coffee shop, section by section
For example, a local coffee shop pitch (an invented example) might include these lines:
Email & Lifecycle
“Free drink on your birthday when you join our list” on a QR card at the register. The sign-up asks for an email and an optional birthday (zero-party data) and promises two emails a month.
Paid Media
Instagram ads to people within a few miles who are interested in coffee and studying, plus retargeting of menu-page visitors once the consent banner is live.
Social Media Strategy
Five campus creators get a free drink card. The brief asks them to say “gifted by the shop” in the video and on screen if they post.
Measurement Plan
Email sign-ups per week, UTM-tagged traffic from each campaign, and birthday-offer redemptions counted at the register. No names or emails in GA4.
Before you submitA trust checklist for the whole team
- [ ] Our email list grows only by opt-in, and we say what subscribers are promised.
- [ ] Any texting plan has its own separate opt-in.
- [ ] Every creator, gifting or employee post in our plan has a clear disclosure.
- [ ] Our paid audiences do not exclude people by protected traits or use sensitive data.
- [ ] Retargeting and customer-list audiences are tied to the client’s privacy policy and consent.
- [ ] Our KPIs use aggregate data, with no personal information in GA4.
- [ ] No dark patterns: real deadlines, real stock, honest subject lines, easy opt-outs.
- [ ] AI-generated images or video in our plan or deck are labeled.
- [ ] If the client sells to kids or to Europe, we flag it for a legal check.
- [ ] We can answer “Is this legal and fair?” for every tactic.
Go deeper
Back to all Marketing 465 topics
In-class group activity · 25 min
Red Team Your Plan
Your group has a list of the data your brand collects and how it gets permission, three tactics rewritten to pass the three-question test, and a ready-to-use opt-in line and creator disclosure line. Your instructor will give you the password in class.
Frequently asked questions
What is the difference between first-party and zero-party data?
First-party data is collected directly by a brand through purchases, sign-ups, site visits and app use, while zero-party data is what customers choose to tell the brand, such as preferences, quiz answers or birthdays. Zero-party data earns the highest trust because people handed it over on purpose. Third-party data, collected by companies with no direct customer relationship, earns the lowest.
What does real consent look like in marketing?
Real consent is opt-in, specific and easy to undo. People take an action to say yes, such as ticking an unchecked box, and a yes to email is not a yes to texts. Pre-checked boxes, one yes stretched to every channel, and opt-outs buried behind a login are examples of fake consent. Every email should include an unsubscribe link.
How can you tell if a marketing tactic is ethical?
Use the three-question test: Would people expect this? Did they agree to it? Would we be fine explaining it to them face to face? One no means fix the tactic or drop it. Tactics that cross the line also tend to backfire through spam complaints, ad account bans, angry comments and lost customers, so ethical marketing is also durable marketing.
What does CAN-SPAM require in a marketing email?
CAN-SPAM requires accurate From, To and Reply-To information, a subject line that is not deceptive, a clear statement that the message is an ad, a valid physical postal address, and a way to opt out, with opt-outs honored within 10 business days. The brand stays responsible even when an agency or email platform sends for it. This page is not legal advice.
How should influencers disclose sponsored posts?
Influencers should disclose any material connection, such as payment, free products, a personal relationship or employment, right with the endorsement in plain words like Ad or Sponsored. Vague labels like sp, spon or collab do not work, and disclosures should not hide behind more or in a pile of hashtags. In videos, say it and show it on screen. Brands must monitor their creators too.