How to write a copywriting services disclosure policy

What to take away

A copywriting services disclosure policy is a written internal rule. It says how your agency labels paid content, affiliate links, sponsorships and marketing emails for clients. It covers three areas: advertising identification, electronic marketing consent and cookies or tracking.

The rules come from the CAP Code, PECR and ICO guidance, and they apply across the UK. A policy protects clients, protects readers and gives writers a single reference point. The steps below show how to build one in a working session. This is general guidance; individual cases need a qualified adviser.

Map the three rule areas

Start by listing every disclosure trigger your writers meet. Advertising identification sits under the UK Code of Non-broadcast Advertising and Direct & Promotional Marketing, which the Advertising Standards Authority enforces. Electronic marketing consent sits under the Privacy and Electronic Communications (EC Directive) Regulations 2003. Cookies and tracking sit under the same regulations.

The ICO publishes a guide to PECR that sets out the obligations for email campaigns, cookies and tracking. Read it before you draft, not after.

For the wider legal picture, including how consumer protection law touches commercial content, see the parent guide at copywriting services UK rules and compliance guide for 2027. It places these three areas alongside contract and tax questions so you can see where the disclosure policy fits.

Decide what gets labelled

List the content types that need a label. Sponsored articles, paid placements, affiliate links, gifted product mentions and advertorials all qualify. So do social posts that a client pays for.

The label must be clear before the reader engages, not buried at the foot of the page. "Ad" or "Advertisement" works. "Sponsored by [client]" works. Vague phrases such as "in association with" do not.

Set a rule for links. If a link earns commission, say so near the link or in a standing note at the top. If a client approves copy but pays nothing, that is editorial input, not sponsorship, and needs no label.

Write the consent rules

Email marketing needs consent before the first send. Under PECR, consent must be freely given, specific and informed. A pre-ticked box does not count.

Soft opt-in applies in some cases where you already have a customer relationship and the message concerns similar products. Record how you rely on it. Keep proof of consent with a date and the source.

Every marketing email needs a working unsubscribe route. Honour opt-outs promptly and keep a suppression list. Write these steps into the policy as instructions, not principles.

Handle cookies and tracking

If a client site sets cookies that are not strictly necessary, the visitor must consent first. Analytics, retargeting and embedded media usually need consent.

State who owns the cookie banner: the client or your team. State who checks it after a site change. A banner that only appears on some templates is a common failure point.

If your writers embed third-party content, such as a video or a social post, note that the embed may set cookies. Flag it in the brief.

Set the internal workflow

Give each piece of content a disclosure field in your brief template. The writer fills it in, the editor checks it, and the client signs it off.

Keep a log of labelled content with dates and client names. If a complaint arrives, the log is your evidence.

Review the policy twice a year. Rules and platform features change, and a stale policy is worse than a short one.

Build the checklist

Use this list before publishing any client content.

Common questions

Does the policy need to be public?

No, but a short public version builds trust. Publish the internal version as a client-facing statement if you want to show how you work. Keep the operational detail in the internal document.

Which rules apply in Scotland, Wales and Northern Ireland?

The CAP Code, PECR and ICO guidance apply across the UK. Enforcement routes can differ, but the disclosure standards are the same. Say so in the policy to avoid confusion.

How does this connect to client contracts?

Disclosure duties should sit alongside your commercial terms. Read copywriting services commercial contracts to see how to allocate responsibility for labels, consent records and sign-off between you and the client.

What happens if a label is missed?

The ASA can require changes to an ad, and the ICO can act on marketing breaches. Fix the piece, log the error and update the checklist so the same gap does not recur. Take advice on any specific complaint.