Fan consent is the asset most artist teams think they already own. Ask them about their mailing list and they will describe tens of thousands of fans, gathered over years, ready to hear about the next single or the next tour.
The asset that is not yours
Ask most artist teams about their mailing list and they will describe an asset. Tens of thousands of fans, gathered over years, ready to hear about the next single or the next tour. Then a deal ends, a label relationship closes, a promoter moves on, and the list stops being usable. The names are still there. The right to email them is gone.
This is not a clerical failure. It is how consent works under data protection law, and almost no one in the live business has fully internalised it.
Consent is locked to whoever collected it
Andy Blair, Managing Director of Reverb Data and former Chief Privacy Officer at a major label, puts the mechanism plainly: data is transferable, but direct marketing consents generally are not. Under GDPR, consent has to be specific and informed, which means it has to name who is receiving it. The moment a list is transferred, the prior consent is no longer valid, because the sending entity has changed.
Follow that through. If a fan opted in to a label, the label cannot pass that consent to the artist when the contract ends. If the fan opted in to a promoter, the promoter cannot hand it to the artist after the tour. The records can move between systems. The permission to use them cannot. The consent dies with the relationship that collected it.
Data is transferable. Direct marketing consents generally are not. Transfer the list and the prior consent is no longer valid, because the sending entity has changed.
Andy Blair, Managing Director, Reverb Data
The soft opt-in is not the loophole people think it is
There is one narrow exception that gets misread constantly. Under the soft opt-in in EU ePrivacy rules, a business that collected contact details while selling someone a product or service can keep marketing its own similar products to that same customer on an opt-out basis. A ticket seller can email a past buyer about a future show by the same artist.
What it does not do is let one party hand a list to another. It is locked to the original collector marketing its own similar offering. It exists for continuity inside a single relationship, not for moving relationships between parties. It will not turn a promoter’s file into an artist’s mailing list.
The only structure that survives
The durable fix is unglamorous and hard to win, which is exactly why it is worth winning. The artist needs to be their own independent controller: their own opt-in, their own privacy policy, their own data entity named on the consent, separate from the label, the promoter, the ticketer, and the venue.
Built once, that consent belongs to the artist across every future deal. The same entity carries across managers, labels, promoters, and platforms. A fan who opts in to the artist directly is a fan the artist can still reach in ten years, no matter who else has come and gone.
