Rules and ethics
Part of Out of home advertising rules and ethics without the guesswork
What an out of home advertising disclosure policy means for UK buyers
How to build an out of home advertising disclosure policy, covering CAP Code duties, UK GDPR rules for digital screens and 2024 consumer law changes.
What to take away
- The Digital Markets, Competition and Consumers Act 2024 changed how commercial messages must be presented, so disclosure is now a buying decision, not just a creative one.
- A working policy names who approves each placement, what is recorded before a campaign runs and where proof of consent sits.
- Digital place-based screens that process personal data need a lawful basis, usually consent, under the UK GDPR.
- The CAP Code applies to out of home copy, and CAP webinars are a free way to keep a buying team current.
- The Digital Markets, Competition and Consumers Act 2024 sits alongside existing advertising rules rather than replacing them.
What a disclosure policy has to cover
Decide what counts as disclosure
Disclosure is the information a buyer, site owner or platform must give before an audience sees a commercial message. In out of home advertising that means the advertiser's identity, any material connection to a publisher, and the basis on which audience data was collected. A policy should list these categories in plain terms rather than leaving them to individual account managers. If your team is still assembling the wider rule set, the UK rules and compliance guide sets out the legal framework this policy sits inside.
Set a single approval route
Write down who signs off each format. A static poster, a digital six-sheet and a screen that measures footfall do not carry the same risk. Give one named role the final say, and require a second check where personal data is involved. This avoids the common failure where a media owner accepts copy that the advertiser's own compliance team would have stopped. Keep the route short enough that a campaign is not delayed by more than a working day.
How to build the policy step by step
Map each placement to its rule source
Start with the placement, not the campaign. For each site, record the format, whether it captures any personal data, and which regulator guidance applies. Most out of home copy falls under the CAP Code, while screens that infer audience characteristics raise data protection questions. England has its own planning and licensing layer on top, which the England regulations guide explains for teams buying locally. Record the rule source next to the site so nobody has to reconstruct it later.
Write the evidence trail
A policy is only as good as its records. For every booking, keep the approved artwork, the consent wording used, the date of approval and the name of the approver. Store these in one place with a retention period you can defend. If a complaint arrives, the trail is what shows the decision was reasoned. Where a platform supplies audience measurement, note whether it uses aggregated counts or individual-level data, because the two carry different obligations.
Train the people who buy
The policy fails if only the compliance lead understands it. Run a short session each quarter on the formats your team actually buys. Regulator training materials are updated regularly, and CAP webinars cover the areas most likely to generate complaints. Keep attendance logged so you can show a consistent standard across accounts.
| Format | Main rule source | Evidence to keep |
|---|---|---|
| Static poster | CAP Code | Approved artwork, booking date |
| Digital screen, no capture | CAP Code | Approved artwork, loop schedule |
| Digital screen with audience measurement | CAP Code and UK GDPR | Consent wording, data flow note |
| Sponsored content on a screen | CAP Code and consumer law | Advertiser identity, material connection note |
Common questions
Does a small advertiser need a written policy?
Yes, though it can be short. Even a one-page document naming the approver and the records kept is better than an informal arrangement, because it shows a consistent approach if a complaint is made.
Who enforces out of home advertising rules?
The Advertising Standards Authority administers the CAP Code for most out of home copy, while the Information Commissioner's Office handles data protection and the Competition and Markets Authority covers consumer law matters.
How often should the policy be reviewed?
At least once a year, and again whenever you add a format that captures data. Consumer law changed with the Digital Markets, Competition and Consumers Act 2024, so reviews should check that older wording still reflects current duties.
What happens if a disclosure is missed?
Outcomes vary by regulator and by the facts. This article is general guidance only, so take advice from a qualified adviser on any individual case before deciding how to respond.
