Parish Council Newsletters: The Publicity Rules, GDPR, and How to Distribute Lawfully

A newsletter is one of the most effective ways a parish council can keep residents informed — and one of the few council activities that touches publicity law, data protection, and spending powers all at once. Most councils produce one happily for years without incident, but the rules are worth knowing, because the two places councils get caught are political content during election periods and mishandled mailing lists. This guide sets out what governs a parish newsletter and how to run one cleanly.

The publicity code: what governs the content

Parish council publicity is governed by the Code of Recommended Practice on Local Authority Publicity, issued under section 4 of the Local Government Act 1986. The Act requires local authorities to "have regard to" the code when deciding on publicity. Parish councils are squarely within scope: section 6 of the same Act defines "local authority" to include a parish or community council.

"Have regard to" is a real obligation, not a suggestion — the council must actively consider the code's principles, and a newsletter that ignores them is exposed if challenged. The code's principles for any council publication are that it should be:

• Lawful — within the council's powers
• Cost-effective — proportionate to the benefit
• Objective — factual and even-handed, not designed to persuade on contested issues
• Even-handed — not favouring one political view
• Appropriate — addressing the council's functions
• Have regard to equality and the public interest
• Issued with care during periods of heightened sensitivity — particularly the run-up to elections

The single rule clerks most need to remember: the underlying prohibition in section 2 of the Local Government Act 1986 bars a council from publishing material that, in whole or in part, appears designed to affect public support for a political party. A parish newsletter must report the council's work, not campaign. Keep it factual: meeting dates, decisions, services, consultations, local events.

The pre-election period

During the pre-election period — the weeks before local or national elections — councils should exercise particular care. The publicity code advises against any publicity that could be seen as supporting a candidate or party. In practice, parish councils pause or trim their newsletters in the run-up to an election, and avoid anything that profiles individual councillors who are standing. If your newsletter normally carries a "from the chairman" column, suspend it during the pre-election period.

Data protection: the parish council lawful-basis quirk

A parish council's mailing list is personal data, so data protection law applies. But there is a quirk in which lawful bases are open to a parish council, and it catches clerks who have read general guidance written for principal authorities.

Under section 7(3) of the Data Protection Act 2018, a parish council in England is not treated as a "public authority" for UK GDPR purposes, even though it is a public authority under the Freedom of Information Act. The operative provision excludes "a parish council in England" from the public-authority definition.

Why this matters for a newsletter: the final sentence of Article 6(1) of the UK GDPR says that legitimate interests (and the "ea" basis) "shall not apply to processing carried out by public authorities in the performance of their tasks." So a principal authority (district or county council) generally cannot rely on legitimate interests for its public-task processing. A parish council, being excluded from "public authority" status by section 7(3), is not caught by that bar — it can fall back on legitimate interests as a lawful basis where a principal authority could not.

Note what the section 7(3) exclusion does not do: it does not "unlock" consent. Consent is available to any body, parish council or principal authority alike — there is no Article 6 carve-out that removes it. The reason large authorities are often steered away from consent is a separate principle: where there is a clear imbalance of power between the body and the individual — as Recital 43 of the UK GDPR and the ICO's guidance flag for public authorities — consent may not be "freely given." That is a power-imbalance question, not a consequence of the section 7(3) status.

For a voluntary, opt-in parish newsletter the power-imbalance concern does not really bite — nobody suffers a detriment for declining to receive it — so consent remains the cleanest, most defensible basis in practice, and it is the one most councils use. (A parish council still must register with the ICO and appoint a data protection officer where required, and all the other GDPR principles continue to apply — the section 7(3) exclusion is narrow.)

Running the mailing list lawfully

Whether the council relies on consent or another lawful basis, the practical rules for the list are:

• Collect consent properly. Consent must be specific, informed, and an active choice. A pre-ticked box or an ambiguous opt-out does not count. The sign-up form should say plainly what the resident is agreeing to receive.
• Provide a privacy notice. Tell residents how their data will be used, how long it is kept, and how to unsubscribe. Link the council's privacy notice from the sign-up form — see the GDPR compliance guide for what the notice must contain.
• Make unsubscribing easy. Every electronic newsletter must carry a working unsubscribe link, and requests must be actioned promptly.
• Keep the list secure and minimal. Hold only what you need (usually just an email address), store it securely, and review it periodically to remove stale entries.
• Never expose the list. Send by BCC, or use a mailing tool — never put residents' addresses in the visible To or CC field. A To-field disclosure of a whole mailing list is a textbook personal data breach.

Electronic distribution: the PECR rules

If the newsletter goes out by email, the Privacy and Electronic Communications Regulations (PECR) may apply on top of UK GDPR. PECR's rules bite on electronic direct marketing — a purely informational council newsletter is largely outside that scope, but where any content is promotional, the safe position is to treat the whole send as marketing. For a voluntary opt-in newsletter, the safe position is straightforward: send only to people who have actively opted in, identify the council clearly as the sender, and include an unsubscribe mechanism in every message. The ICO's guidance on direct marketing and PECR is the reference point.

A printed newsletter delivered to every household does not engage PECR or, generally, GDPR for the delivery itself (no personal data is processed to push a leaflet through every door) — but the content rules above still apply.

Paying for it: the funding power

A parish council needs a legal power to spend money on a newsletter. Informing residents about the council's own functions and services falls within the council's ordinary powers. Where a council wants to spend on something less directly tied to its statutory functions, the general power under section 137 of the Local Government Act 1972 (or the general power of competence, if the council qualifies) may apply, subject to the usual limits. Record the spending decision in the minutes and account for it like any other expenditure — it will appear in the council's transparency publications if it exceeds the £100 threshold.

Common mistakes

Straying into political content. A newsletter that praises or criticises a party or a candidate breaches section 2 of the 1986 Act. Keep it factual and council-focused.

Publishing during the pre-election period without thinking. The safest approach is to pause or strip the newsletter back in the weeks before an election.

Mishandling the mailing list. Exposing addresses in the To field, using a pre-ticked consent box, or having no unsubscribe option are the breaches the ICO sees most.

Misreading which lawful basis the section 7(3) exclusion affects. The exclusion does not "unlock" consent — consent is open to any body. What it does is keep legitimate interests available to a parish council for processing that a principal authority could not use it for, because the Article 6(1) bar on legitimate interests applies only to public authorities acting "in the performance of their tasks." For a voluntary opt-in newsletter, consent is still the simplest basis to rely on.

Where the newsletter fits the compliance picture

A newsletter sits at the intersection of three obligations the council already tracks: publicity (the 1986 Act), data protection (UK GDPR and PECR), and proper spending (recorded in the minutes and transparency publications). Treat it as a recurring governance item: a standing privacy notice, an opt-in list reviewed annually, and content that stays factual. Use the compliance checklist tool to confirm the data-protection side is covered alongside the council's other obligations.

Sources

• Local Government Act 1986, Section 4 — duty to have regard to the publicity code
• Local Government Act 1986, Section 6 — definition of local authority (includes parish councils)
• Local Government Act 1986, Section 2 — prohibition on political publicity
• Code of Recommended Practice on Local Authority Publicity — GOV.UK
• Data Protection Act 2018, Section 7 — meaning of public authority (parish council exclusion)
• UK GDPR, Article 6(1) — lawful bases (legitimate interests restricted for public authorities "in the performance of their tasks")
• ICO — Direct marketing and PECR guidance
• Local Government Act 1972, Section 137 — expenditure power

This article is for general guidance only and does not constitute legal advice. Where the lawful basis for processing or a spending power is unclear, take advice appropriate to your council's circumstances.