HCP marketing and B2B pharma outbound: where the rules and the readers differ

Two different messages, two different rulebooks

A message promoting a medicine to the doctor who prescribes it, and a message from an equipment supplier to the engineer who runs a production line, both originate from a company that operates in "pharma." Past that one word, almost nothing about them is governed the same way. Confusing the two rulebooks is not a small error. It means applying the wrong compliance framework to a message that never needed it, or assuming a lighter framework covers a message that actually needs the stricter one.

Searching "pharmaceutical advertising agency" turns up exactly the HCP-focused field described below: agencies built around promotional review, medical-legal-regulatory sign-off and prescriber-facing campaigns. A supplier selling equipment or contract manufacturing services who searches that term and hires accordingly ends up paying for a compliance discipline built for a problem it does not have, while getting none of the account-based, trigger-driven targeting an equipment or CDMO sale actually needs.

What counts as HCP marketing

HCP marketing is the regulated promotion of medicines to healthcare professionals and, in some channels, to patients. It sits under industry codes built specifically for that purpose: the EFPIA Code of Practice at the European federation level, national codes built on top of it such as the UK's ABPI Code of Practice administered by the Prescription Medicines Code of Practice Authority, and country-specific statutes such as Germany's Heilmittelwerbegesetz, the HWG, which governs advertising for medicines and medical treatments specifically. These frameworks control what can be claimed about a medicine, who can be reached with promotional material, what disclosures are required, and how interactions with prescribers are documented.

None of this framework exists because the sender is "in pharma." It exists because the message is about a medicine, aimed at the person who decides whether a patient receives it. That is the specific trigger for HCP-code coverage, not the sender's industry.

The scope of that coverage is worth stating precisely, because it is narrower than "anything a pharma company sends." A pharmaceutical company's own recruitment email, its investor update or its supplier newsletter is not HCP marketing either, even though the same company sends HCP-regulated material elsewhere. The code follows the content and the audience, medicine, prescriber or patient, not the letterhead it arrives on.

What counts as B2B supplier outbound

A supplier selling GMP equipment, validation services or contract manufacturing capacity into a plant is not promoting a medicine to anyone. It is commercial communication between two businesses, about equipment, services or manufacturing capacity, aimed at engineering, quality, supply chain or site management. That kind of message falls under the general commercial-communication and data-protection rules that apply to any B2B outreach, not under a medicines-advertising code: in the EU and UK, GDPR and its national ePrivacy implementations, and country-specific unfair-competition or communications law, such as Germany's Gesetz gegen den unlauteren Wettbewerb, the UWG, or the UK's Privacy and Electronic Communications Regulations, PECR.

Which specific national rule governs a given message depends on where the recipient sits, not on the sender's industry: Germany, Poland, Switzerland, Ireland and the UK each apply their own version of the underlying EU ePrivacy framework, or their own national statute where they sit outside it, and the differences are wide enough that a message compliant in one country can be a real problem in the next. That country-by-country detail is covered on the cold-email rules page for pharma suppliers rather than repeated here.

The distinction holds even when the supplier's product touches a regulated process. A cleanroom validation firm writing to a site's quality manager about a commissioning project is still a commercial message about a service, not a claim about a medicine's safety or efficacy. The HCP codes have nothing to say about it, because nothing in the message concerns prescribing or patient treatment.

Why the two get confused

The confusion has an obvious source: both kinds of company describe themselves as operating "in pharma," both sell into pharmaceutical companies, and search terms like "pharmaceutical advertising agency" return a mix of both without distinguishing them. A supplier researching how to reach its own buyer sees agencies built for HCP compliance and reasonably assumes some version of that discipline applies to selling equipment too.

Job titles add to it. A "marketing manager" at a pharma company might own HCP campaign approvals, or might own the corporate website and trade-show budget with no promotional-code responsibility at all, and the title alone does not say which. A supplier cold-emailing "marketing" at a target account, hoping to reach someone who can evaluate an equipment purchase, is more likely to reach the wrong function entirely than to reach a decision-maker for a manufacturing purchase.

The word "pharma" in a company's own description is doing all the misleading work here. A regulator does not ask what industry a sender operates in before deciding which code applies. It asks what the message is about and who it reaches.

It does not follow, in the sense that matters here: no medicines-advertising code governs a B2B sales email about a filling line or a qualification contract. But the confusion is not entirely wasted, because HCP marketing's discipline around documentation, consent and audience relevance is good practice generally, even outside the code that requires it in that context. The next section covers what is worth borrowing and what is not.

What a supplier may borrow from HCP discipline, and what it may not

Worth borrowing: the habit of documenting who was contacted, on what basis, and with what content, which HCP marketing treats as mandatory and B2B outbound treats as good practice that also happens to support a GDPR legitimate-interest position if it is ever questioned. Also worth borrowing: strict relevance targeting. HCP codes exist partly because promotional material reaching the wrong person, or reaching a patient directly through a channel meant for professionals, causes real harm; B2B outbound reaching the wrong department wastes a message rather than causing harm, but the discipline of only reaching people for whom the content is genuinely relevant produces better replies either way.

Not worth borrowing, because it is simply the wrong tool: any claim structure built around medicine safety or efficacy, any consent mechanism built for patient or prescriber interactions, and any assumption that clearing a message through medical, legal and regulatory review, standard for HCP content, is required for a commercial email about equipment or manufacturing capacity. Applying HCP-grade review to a B2B sales message slows a supplier down for a compliance requirement that does not exist for that message.

The practical cost of borrowing the wrong piece is real. Running a straightforward B2B sales email through a medical-legal-regulatory review cycle built for prescriber-facing claims can add weeks to a message that carries no medical claim at all, for a review step the message never needed. Knowing which rulebook actually governs the message removes that delay entirely.

The same overcorrection shows up in consent language. A supplier that copies an HCP-style patient-data consent notice onto a B2B equipment enquiry form is asking an engineer to agree to terms written for a different relationship entirely, which reads as confused at best and as a mismatch a careful buyer notices at worst. The consent and data-protection language that fits a B2B message is the ordinary GDPR notice covering a business contact's data, not a patient-facing one.

A caution on "the rules don't apply to us"

The point of separating these two rulebooks is not to conclude that a supplier's outbound sits outside regulation. It sits under a different one. General commercial-communication rules still apply in full: data protection law governs the personal data behind every contact, and national rules on unsolicited commercial communication, which vary by country, still decide what a sender may send and to whom.

"We're B2B, not HCP, so none of this applies to us" is the wrong conclusion to draw from this page. The correct one is narrower: the medicines-advertising codes do not apply, because nothing in a B2B equipment or services message concerns a medicine's promotion, but the ordinary rules governing any commercial email or call into a given country apply exactly as they would to a supplier selling into any other regulated industry.

Two facts anchor the distinction if nothing else on this page is remembered: a message about a medicine, aimed at a prescriber, sits under the HCP codes; a message about equipment, services or manufacturing capacity, aimed at anyone else at a pharmaceutical company, does not. This page states which body of rules applies to which message. It is not legal advice, and a supplier building a cross-border outbound programme should confirm its specific approach with counsel before sending.