Check micro influencer marketing rules and ethics before you brief

What to take away

Decide, before you brief anyone, whether the post counts as an ad and who writes the label. The CAP Code covers social media and the ASA enforces it, so a paid placement usually needs a visible ad label.
Identify your lawful basis for any personal data, from giveaway entries to audience insights. The Data Protection Act 2018 and the ICO principles set the standard.
Keep the commercial relationship obvious to the audience. The CMA can act against misleading practices, including advertising that hides its nature.
Put disclosure, data and contract terms in writing before the first post goes live.
Treat this as general guidance, not legal advice. Individual campaigns need a qualified adviser.

Why micro influencer marketing rules matter

Micro campaigns run on small fees and niche audiences. The duties do not shrink with the budget. A post that reads like a personal recommendation but was paid for can mislead the followers who trust it.

The Advertising Standards Authority applies the CAP Code to non-broadcast advertising, which includes social media. The Advertising codes page sets out the code that governs those posts.

The Competition and Markets Authority has a separate role. It can act against unfair commercial practices, including ads that conceal their commercial nature.

The framework has more parts than most briefs acknowledge. The micro influencer marketing UK regulations walk through the statutes and codes in order, which helps when you have to justify a decision to a client.

For a brand, the risk goes beyond a fine. A misleading post damages trust with the audience you paid to reach. That is why the rules belong at the start of campaign planning.

Responsibility sits with the brand as well as the creator. The ASA treats the advertiser as accountable for the ad, and a creator cannot sign away a duty the brand still carries. Decide who signs off before the campaign starts.

Sector rules sit on top of the general code. Alcohol, gambling, vaping and cosmetics carry extra restrictions, and financial promotions fall under the FCA as well. Check the specific rules before you agree deliverables.

Spot the ad label triggers

Ask one question: would the audience know this is an ad before they read the caption? If the answer is no, the label is not clear enough.

Is this post an ad?

Did you give cash, free products, discounts, tickets or commission?

Yes

Treat the post as an ad

Check whether you control wording, images or timing

Payment is the clearest trigger. Cash, free products, discounts, event tickets and commission links can all count as payment in kind. If you gave something of value in return for coverage, treat the post as an ad.

Control matters too. If you approve the wording, the images or the timing, you have some control over the content. That points towards an ad.

Some content sits outside the rules. A genuine personal recommendation, with no payment and no brand control, is not an ad. The line is narrow, though. A gifted product can still create an ad if there was an agreement to post.

Tools on the platform are useful, yet they do not decide the matter. A paid partnership label can guide the audience, yet the CAP Code duty sits with the advertiser. If the label is easy to miss on a phone screen, it is not clear.

Format matters as much as wording. A label that sits below the fold on a Story, or in a caption that is cut off in a feed view, is not doing its job. Put it where it is visible before any interaction.

Write the label rules down once, rather than deciding case by case under deadline pressure. A micro influencer marketing disclosure policy gives the team one answer for gifts, affiliate links and event invitations.

If you are unsure, label it. A clear label costs nothing. A hidden ad can lead to a complaint and a public ruling.

Follow the CAP Code on claims

The CAP Code requires ads to be legal, decent, honest and truthful. For an influencer post, that covers the caption, the visuals and any spoken words in a video.

CAP Code claim checks

Caption, visuals and spoken words are all covered
Claims must be accurate and substantiated
Testimonials must be genuine, not paid reviews
Comparative claims need evidence and like-for-like basis
Before and after imagery needs evidence on file
Health, beauty and financial claims need pre-brief review

Claims about a product must be accurate and substantiated. If an influencer says a supplement cures a condition, the brand needs evidence for that statement. The Claims, endorsements and testimonials guidance explains how the ASA treats those claims.

Testimonials must be genuine. A paid endorsement should not be presented as an independent review. If the influencer has never used the product, a claim that they have is likely to mislead.

Comparisons need care as well. Saying a product is better than a named rival is a comparative claim. It needs evidence and a like-for-like basis.

Before and after imagery counts as a claim too. The brand should hold evidence for the result shown, not only for the product itself. Keep that evidence with the campaign file, because the advertiser carries the burden even when the creator wrote the words.

Health, beauty and financial claims carry extra risk. Get the wording checked before the brief goes out. A qualified adviser can review the claim and the evidence behind it.

Apply data protection rules

Micro influencer campaigns collect personal data more often than brands expect. Examples include a giveaway entry list, audience insights pulled from a platform, and a spreadsheet of entrants.

Data protection steps

Identify personal data you collect, such as giveaway entries
Establish a lawful basis, such as specific consent
Provide a privacy notice to entrants
Collect only what the purpose requires
Set a written retention period and delete after
Decide who is controller for each dataset

The Data Protection Act 2018 is the main UK statute here. You can read the Data Protection Act 2018 text on the official legislation site.

The ICO publishes the principles you must follow. They cover lawfulness, fairness and transparency, plus purpose limitation and data minimisation. The data protection principles guidance explains each one and what it means in practice.

That means you need a lawful basis before you collect anything. Consent is one basis, but it must be specific and freely given. You also need a privacy notice, and the micro influencer marketing data protection article sets out how to word the notice and the consent request.

Keep what you need and no more. If you run a giveaway, do not ask for a date of birth unless the prize requires it. Set a retention period in writing and delete the data when the purpose ends.

Creators often hold their own data, such as follower lists and analytics. Decide early who is the controller for each dataset, and say so in the contract. Two controllers with no written split is how gaps appear.

Children's data needs more care again. If a giveaway could attract under-18s, take advice on age assurance and consent before you launch.

Targeting adds a second layer. If you plan to use audience data for paid targeting, check the platform terms against your own privacy notice. A mismatch between what you told people and what you do is a compliance risk.

Handle contracts and disclosure

A written agreement protects both sides. It should cover deliverables, fee, timeline and approval, plus the disclosure wording and who is responsible for it.

Contract clauses to include

Deliverables, fee, timeline and approval
Exact ad label wording and placement
Invoice process and payment date
Usage rights and usage window
Exclusivity with time limit and product scope
Who signs off final disclosure wording

Name the ad label in the contract. For example, the agreement can state that the post must carry "#ad" at the start of the caption, not buried in a block of hashtags. That removes ambiguity later.

Payment terms matter too. Late payment sours relationships and invites disputes. Set out the invoice process, the payment date and the usage rights for the content. A micro influencer marketing commercial contracts guide can deal with exclusivity, usage windows and take-down rights in one place.

Record the agreed wording in the brief itself. If the label is agreed by email but never written into the brief, it is easy for the creator to miss.

Exclusivity clauses need a time limit and a defined product scope. Without them the term becomes a negotiating dead end, and good creators walk away. An adviser can check whether the wording is enforceable.

If you work with an agency, check who holds the contract. The brand is usually responsible for the ad even when an agency ran the campaign. That is why the brand should sign off the final disclosure wording.

Liability for influencer posts

Liability does not move to the creator because a brand supplied the brief and the budget. The advertiser carries the obligation under the CAP Code and should keep the sign-off that shows oversight.

Where an agency runs the campaign, the contract should say who approves the label and who holds the evidence. If a complaint names the creator, the brand still needs its own file.

Know the CMA and ASA powers

The CMA can investigate misleading commercial practices. It can seek undertakings or take court action. The Competition and Markets Authority page gives an overview of that consumer protection role.

The ASA handles complaints about ads. It can rule that an ad must be withdrawn or changed. It can also refer repeat offenders to Trading Standards.

The ASA publishes its rulings, so a bad campaign can become a public case. The reputational cost often outweighs any single financial penalty.

Both regulators expect brands to have systems in place. A one-off mistake reads differently from a pattern of hidden ads. Policies, training and records show that you took the rules seriously.

Keep a named contact for regulator correspondence. A shared inbox with no owner is how deadlines get missed.

If a complaint arrives, do not ignore it. Respond within the deadline and take advice. Early engagement usually produces a better outcome than a delayed defence.

Build a compliance routine

Start with a checklist. Before you brief an influencer, confirm the payment type, the level of control and the disclosure wording. Record that decision in the campaign file.

Pre-brief compliance routine

Confirm payment type, control level and disclosure wording
Record the decision in the campaign file
Train the people who brief influencers
Check the post before it goes live
Save brief, contract, disclosure wording and final post
Log one row per campaign and set a policy review date

Train the people who brief. They need to recognise the triggers for an ad label. A short internal guide can cover the common cases, from gifts and affiliate links to event invitations.

Check the post before it goes live where you hold approval rights. If you do not, ask for a screenshot of the draft. That is your last chance to catch a missing label.

Keep records. Save the brief, the contract, the disclosure wording and the final post. If a regulator asks, you can show what you did and why you did it.

A simple log is enough. One row per campaign, listing the creator, the payment type, the label used and the date the post went live, answers most questions quickly. The strategy and planning guide shows where these checks fit in the campaign timeline.

Set a review date for the policy itself. Platform features and regulator guidance change, and a document written two years ago may no longer match how the team works.

Glossary

Ad labelA clear word or tag, such as "#ad", that tells the audience a post is advertising.
CAP CodeThe UK code for non-broadcast ads, including social media. The ASA enforces it.
CMAThe Competition and Markets Authority, which can act against misleading commercial practices.
Data controllerThe organisation that decides why and how personal data is used.
ICOThe Information Commissioner's Office, the UK data protection regulator.
Lawful basisA permitted reason for processing personal data, such as consent.
Personal dataInformation that relates to an identifiable person.

Common questions

Do I need a written contract with a micro influencer?

There is no single law that requires a written contract for every micro influencer deal. But a written agreement is strong evidence of the terms, including payment and disclosure, and it reduces the risk of a dispute. For paid campaigns it is standard practice.

Is a gifted product always an ad?

Not always. If the brand sent the product with no agreement to post, and the influencer posts with no brand control, it may not be an ad. If there was an agreement to post, or the brand approved the content, treat it as an ad and label it.

What happens if the ASA upholds a complaint?

The ASA can require the ad to be withdrawn or changed. It publishes the ruling, which names the advertiser, and it can refer the case to Trading Standards. The main cost is usually reputational rather than a fine.

Do I need a privacy notice for a giveaway?

Yes, if you collect personal data such as names or email addresses. You need a lawful basis and a privacy notice explaining what you will do with the data. Delete the data when you no longer need it.