Rules and ethics
Part of Event marketing rules and ethics: check before you plan
Event marketing advertising rules without the guesswork
A checklist for event marketing agencies in England covering CAP Code ad rules, ICO controller duties, hospitality tax treatment and disclosure before launch.
What to take away
- An agency in England promoting a client's Birmingham conference with paid social ads and a landing page is publishing ads, so the CAP Code applies to that copy.
- Client entertaining is generally not tax-deductible, and staff hospitality can trigger a benefit-in-kind charge, so invoice wording matters.
- Disclosure, consent and substantiation are the three checks event campaigns most often fail.
- Seek a qualified adviser on VAT, employment taxes or a specific data incident; this checklist is general guidance.
Check the ad rules before the creative is signed off
Start with the AdviceOnline library for marketers on ad rules, which collects the Advertising Standards Authority's guidance on the CAP Code. That Code covers paid social, email, printed programmes and most event microsites. ASA AdviceOnline articles on substantiation and on recognising marketing communications set out the tests.
Ad rules pre-launch checks
- Claims capable of substantiation
- Ad obviously identifiable as marketing
- Reference price genuinely charged
- Keep screenshots of original rate card
Two checks catch most problems. CAP Code rule 3.1 prohibits misleading ads.
CAP Code rule 3.7 (ASA AdviceOnline: Substantiation) requires dated evidence for objective claims, so "The UK's leading AI summit" needs proof on file. CAP Code rule 2.1 (ASA AdviceOnline: Recognising marketing communications) requires ads to be obviously identifiable, so a sponsored speaker slot or branded lounge still counts.
Pricing claims are a recurring risk. CAP Code rule 3.17 (ASA AdviceOnline: Price statements) requires price statements to be accurate, and rule 3.24 (ASA AdviceOnline: Price comparisons) covers price comparisons. If a delegate pass is advertised at "50% off", the reference price must be the one genuinely charged, so keep screenshots of the original rate card.
Sort the contract and the data roles
The ICO's guidance on controllers and processors explains how to decide which role each party holds. In most agency-client event campaigns both sides decide why and how personal data is used, so both are controllers.
That changes the paperwork: a joint controller arrangement or clearly separated purposes, a lawful basis for each use, and a retention period for delegate lists. Consent to receive marketing emails is separate from consent to attend.
Our guide to event marketing data protection in England sets out the practical steps for delegate lists, badge scans and follow-up.
Get the tax treatment right on hospitality
HMRC's overview of expenses and benefits for entertainment confirms that business entertaining is generally not allowable for tax relief, while staff entertaining can be a taxable benefit. The two are treated differently.
An agency in Manchester hosts a client dinner for 40 guests, with a venue invoice of £3,200 including VAT and transport adding £600. At the standard VAT rate of 20%, that invoice includes £533.33 of VAT.
As client entertaining, both sums are normally disallowed for corporation tax. The catering input VAT is not reclaimable in the usual way.
If the same evening were for staff only, the annual parties and similar functions exemption in ITEPA 2003, section 264, could cover the £3,200 venue cost. That cost is £80 per head for 40 guests, below the £150 per head cap. The exemption is often called the staff party exemption.
Label every invoice line as client or staff entertaining. Mixing them creates an audit problem later.
Confirm disclosure and permissions
Disclosure is not optional. A speaker paid to mention a product must say so, and an influencer on a free ticket who posts about the event needs a clear ad label.
Permissions apply to the venue as well. Filming, drone use, music licensing and close-up delegate photography each need consent or a licence. A notice at registration does not cover everything.
Build the checklist into your process
Our internal guide, event marketing: UK rules and compliance guide for 2027, is the parent reference for the wider framework, so attach this checklist to each campaign brief.
Copyable checklist:
| Check | Owner | Evidence | Sign-off date |
|---|---|---|---|
| Ad claims | Dated proof for each objective claim (CAP Code rule 3.7) | ||
| Ad recognition | Ad label or sponsorship disclosure (CAP Code rule 2.1) | ||
| Pricing | Original rate card and reference price (CAP Code rules 3.17 and 3.24) | ||
| Data roles | Controller or joint controller note (ICO controllers and processors guidance) | ||
| Tax coding | Invoice lines marked client or staff entertaining (HMRC expenses and benefits for entertainment) | ||
| Disclosure | Paid speaker or influencer agreement | ||
| Permissions | Filming, drone, music and photography consents |
Assign an owner per line: ad copy, data roles, tax coding, disclosure, permissions. Sign-off belongs before the first ad goes live.
Keep ad evidence for at least the ASA's three-month complaints window from publication, and longer if a complaint is under investigation. Keep personal data no longer than necessary under UK GDPR Article 5(1)(e), as the ICO's storage limitation guidance says. Record who approved each item.
Common questions
Do the CAP Code rules apply to event marketing in Scotland and Wales?
Yes. The CAP Code is a self-regulatory code applied by the ASA across the UK, so the same standards apply in Scotland, Wales and Northern Ireland.
Is client entertaining ever tax-deductible?
Generally no, but there are narrow exceptions. Take advice from a qualified accountant on your own facts.
Do we need a data processing agreement with the client?
Only if the client is genuinely a controller and you act as a processor. In most joint campaigns both parties are controllers, so a joint arrangement is the right document.
How long should we keep campaign evidence?
The ASA can consider complaints made within three months of publication, and the ICO requires personal data to be kept no longer than necessary under UK GDPR Article 5(1)(e). Set separate retention periods for ad evidence and delegate data.
