How to apply affiliate marketing advertising rules to your programme

What to take away

Affiliate marketing advertising rules are the mix of consumer protection law, the CAP Code and data protection law that apply when a publisher promotes a brand for commission. In England, the ASA enforces the CAP Code, while the ICO covers data protection. The CMA can also act on misleading commercial practices. This is general guidance, not legal advice; individual cases need a qualified adviser.

• Confirm every affiliate link is identifiable as an advert before a consumer clicks it.
• Check publisher contracts cover disclosure, data processing and claim substantiation.
• Keep records of approvals, creatives and commission terms.
• Review environmental claims separately because they attract specific attention.
• Escalate borderline claims to a qualified adviser rather than deciding internally.

Start with the rules that apply to affiliate ads

The CAP Code is the primary rulebook for non-broadcast ads in the UK, and it covers affiliate content.

The advertising codes published by the ASA set out the recognition, substantiation and misleadingness tests that apply to affiliate posts and paid links.

Read them alongside the affiliate marketing rules and compliance guide if you need the wider UK picture, because the CAP Code sits inside a broader framework of consumer law.

Use a pre-launch checklist

Run this list before any affiliate campaign goes live in England.

It catches the failures that regulators and complainants most often raise.

1. Is the commercial relationship disclosed clearly and early, before the consumer engages with the link?
2. Does the disclosure use plain words such as "ad" or "advert" rather than vague labels?
3. Can the publisher substantiate every factual claim in the creative?
4. Are prices, savings and availability statements accurate on the date of publication?
5. Does the publisher have a lawful basis for any personal data it processes?
6. Are environmental or sustainability claims supported by evidence?
7. Is the affiliate link tracked so you can evidence the arrangement?
8. Have you checked the publisher against previous ASA rulings?

Check the business regulation context

Affiliate operations sit inside general business regulation, from consumer protection to e-commerce duties.

The business regulation overview on GOV.UK explains which rules affect how you trade and advertise.

Your programme should have named compliance owners, a documented approval process and a fast route for taking down non-compliant content.

Who is responsible for disclosure?

Both the brand and the publisher can be responsible.

The brand usually controls the brief and the commission terms, so it cannot blame the publisher alone when a disclosure is missing.

If responsibility is unclear in your contracts, take advice from a qualified adviser.

What records should you keep?

Keep the brief, the approved creative, the disclosure wording, the commission terms and any correspondence about claims.

Complaints can arrive months after a campaign ends, so a folder per campaign is worth the effort.

Handle data protection and environmental claims separately

Data protection is a distinct regime.

If your programme uses tracking, cookies or audience data, you need a lawful basis and clear information for consumers.

The data protection guidance for England programmes sets out the practical steps, including consent and record keeping, that affiliate teams often overlook.

Environmental claims need their own check.

The ICO guidance on environmental information and access to information matters where a campaign touches environmental information or public authority requests.

Consumer-facing green claims are governed by the CAP Code and consumer law.

Do not let a publisher call a product "eco-friendly" or "carbon neutral" without evidence you can produce on request.

Common questions

Do affiliate links always need an ad label?

Yes, where the link is paid and the content is promotional.

The label should be clear before the consumer clicks, not buried in a footer.

If the relationship is not obvious, treat it as needing a label.

Does the CAP Code apply outside England?

The CAP Code applies across the UK, but enforcement and some consumer law differ in Scotland, Wales and Northern Ireland.

If your programme targets those nations, check the relevant regulator guidance as well as the CAP Code.

Can a brand be liable for a publisher's claim?

Yes. A brand that controls the brief or approves the claim can be liable alongside the publisher.

That is why approval records and take-down processes matter more than a disclaimer in the contract.

What should we do if we find a non-compliant affiliate post?

Pause the campaign, ask the publisher to correct or remove the post, and record what happened.

If the claim is serious or repeated, take advice from a qualified adviser before restarting the relationship.