You cleared GDPR. Your consent banner works. Then a UK regulator flags your ad for a claim that would have been perfectly fine in the US.
Privacy law is the compliance issue every marketer has heard of. It is not the only one that changes what a campaign can say once it crosses a border. Advertising standards, consumer protection rules, and language requirements each carry their own regulator, their own enforcement style, and their own way of catching US-built creative off guard.
Advertising standards bodies aren't optional guidance, they're binding
The US relies mostly on FTC enforcement after the fact. Several major markets run pre-emptive or fast-response self-regulatory bodies that US marketers routinely underestimate.
The UK's Advertising Standards Authority (ASA) reviews complaints and can force an ad down within days, and it's scaling up an AI-based Active Ad Monitoring system in 2025-2026 to proactively flag non-compliant ads before complaints even arrive, according to Osborne Clarke's 2026 regulatory outlook. Ireland's ASAI, Germany's Deutscher Werberat, and similar bodies across the EU operate on comparable logic: industry-run, complaint-driven, but with real teeth.
A US claim that never gets challenged domestically can still get pulled in the UK. The ASA doesn't require a lawsuit, a complaint and a review is enough.
Current ASA enforcement priorities for 2025-2026 include environmental and "greenwashing" claims, influencer disclosure, protecting children and vulnerable consumers, and disclosure of AI use in ads. If your global campaign touches any of those themes, budget time for a UK-specific legal read before launch, not after a takedown notice.
The EU adds a layer the UK and US don't have: harmonized but locally enforced
The EU's Unfair Commercial Practices Directive sets baseline rules across all member states, but each country's consumer protection authority enforces it differently, and national laws can be stricter. Germany, for instance, has a long history of strict enforcement against misleading comparative claims and aggressive influencer marketing enforcement through its competition law framework.
This means a single "EU-compliant" campaign asset doesn't guarantee compliance in every member state, the directive is a floor, not a ceiling. Marketers running pan-EU campaigns typically need at least a spot-check from local counsel or a compliance partner in the two or three largest markets they're targeting, not just a single EU-wide legal review.
Build in that local spot-check as a checklist item before pan-EU launch, and you catch the country-specific gaps before a regulator does.
Language requirements are a real legal category, not a translation nicety
Several markets legally require marketing communications in the local language, independent of any privacy or ad-standards issue. Quebec's Charter of the French Language (Bill 96, updated significantly in recent years) requires French to be at least as prominent as any other language on product packaging, in-store marketing, and commercial advertising directed at Quebec consumers.
France applies similar principles through the Toubon Law for advertising aimed at French consumers. These aren't stylistic preferences, non-compliant packaging can be pulled from Quebec shelves.
- Check whether the market has a binding language law, not just a cultural expectation
- Confirm whether translation must be equally prominent or merely present (Quebec requires "markedly predominant" French in most contexts as of recent amendments)
- Treat disclosure text (terms, disclaimers, influencer disclosures) as part of the language requirement, not an exemption
Skipping this check is one of the most common and most avoidable compliance misses for US brands expanding into Canada and France.
Canada adds its own privacy and anti-spam rules on top
Beyond Quebec's language law, Canada's CASL (Canada's Anti-Spam Legislation) is stricter than US CAN-SPAM in one critical way: CASL generally requires opt-in consent before commercial email, not opt-out. A US list built under CAN-SPAM rules is not automatically CASL-compliant the moment it includes Canadian addresses.
CASL penalties can reach up to CAD $10 million per violation for organizations, a scale that dwarfs typical CAN-SPAM fines. Segment Canadian contacts and confirm they gave real opt-in consent before folding them into a US-built email program.
A practical starting checklist for going international
Before launching a campaign in a new market, run it through four questions: does this market have a self-regulatory ad body that can pull the ad, does local consumer protection law diverge from the EU/US baseline you built for, is there a binding language requirement, and does the local email/SMS consent model differ from what your platform defaults to.
Answering those four questions early costs a few days of legal review. Skipping them costs a pulled campaign, a language-law fine, or a CASL penalty discovered only after the send.
Keep a living one-page matrix per market: ad standards body, consent model (opt-in vs opt-out), language requirement, and last review date. It turns a scattered compliance scramble into a five-minute lookup before every new market launch.
The takeaway
Privacy law gets all the attention, but advertising standards bodies, national consumer protection rules, and language laws each independently gate what a campaign can say in a given market. Treat "going international" as a compliance checklist with at least four categories, not one.