Rules and ethics
Part of How to vet ad creative compliance software for UK campaigns
How to vet ad creative compliance software for UK campaigns
What to check in ad creative compliance software: CAP Code coverage, ASA ad checks, UK GDPR duties and the approval record your team has to keep.
What to take away
- Compliance software screens creative against a rule set; the advertiser still approves what runs.
- Ask which CAP Code rules and which UK GDPR duties the tool maps to, and how often that map is reviewed.
- The approval record answers the question a regulator askswho decided, and when.
- Test the tool on your worst live creative before you buy, not on vendor demo assets.
- Where personal data or generated copy is involved, name the lawful basis in the contract.
What the software can and cannot decide
Most tools read on-screen text, image tags and metadata, compare them with a rule set, and return a flag with a confidence note. That is useful triage when a campaign runs to hundreds of variants.
Tool flags vs human decides
Check
- Absolute claims
- Wording like guaranteed
- Promotional pricing
- Missing end dates
- Testimonials
- Named people, quotes
- Comparative claims
- Competitor names
Tool can flag
- Absolute claims
- Substantiation
- Promotional pricing
- Price availability
- Testimonials
- Consent and genuineness
- Comparative claims
- Fair and verifiable
Person must decide
- Absolute claims
- Promotional pricing
- Testimonials
- Comparative claims
It is not a legal opinion. A checker cannot know whether a price was available for the whole stated period, or whether a testimonial came from a real customer. Those are questions about your business, not about language.
Tool can flag
- Absolute or unqualified claims
- Wording such as "guaranteed" or "best"
- Promotional pricing
- Missing end dates or missing qualifying text
- Testimonials and endorsements
- Named people and quoted text
- Comparative claims
- Competitor names and superlatives
Person must decide
- Absolute or unqualified claims
- Whether the claim is substantiated
- Promotional pricing
- Whether the price was available for the stated period
- Testimonials and endorsements
- Whether consent exists and the quote is genuine
- Comparative claims
- Whether the comparison is fair and verifiable
Map the tool to the CAP Code before the demo
The Committee of Advertising Practice writes the codes the Advertising Standards Authority enforces, and the Advertising codes page sets out the editions in force. Ask a vendor which edition its rules track and which clauses it covers.
Vetting CAP Code coverage
- Ask which CAP Code edition the rules track
- List which clauses the tool covers
- Read ASA rulings for your own sector
- Check shortlist covers clauses in those rulings
- Scrutinise any all-UK-rules coverage claim
A tool that flags absolute wording but ignores promotional pricing rules will miss the failures that produce most upheld rulings. Read the ASA's published rulings for your own sector, then check the shortlist covers the clauses that appear there. A working map of UK advertising and privacy rules helps you see which rule sets overlap before you compare vendors.
Coverage claims deserve scrutiny. A tool that says it checks all UK advertising rules is usually checking a short list of wording patterns across the CAP Code, not sector rules that sit with other regulators.
Where UK GDPR duties land in the creative workflow
Creative work carries personal data more often than teams expect: a customer photograph, a named testimonial, a lookalike list exported for retargeting. The UK GDPR as retained in UK law requires a lawful basis before that processing starts, and transparency about what happens to the data afterwards.
A checker that reads your asset library is processing that data too. Ask where the files sit, how long they are kept and who can see them.
If the tool writes copy or images, or trains on your assets, the ICO's guidance on artificial intelligence sets out the risk assessment and the information you owe people. Get the training-data answer in writing before you sign.
The approval record is what survives scrutiny
A flag nobody acted on proves nothing. Record who reviewed each variant, what they changed, which rule triggered the change and when the variant went live.
The record also has to survive staff turnover. If the approver has left, the file speaks for them, so the fields you keep matter more than the volume. Keep the decision, the date and the person, and drop the rest. This is general guidance rather than legal advice, and a specific campaign needs a qualified adviser.
A five-step vetting sequence
- Write down the ten creative failures your team has actually had in the past year.
- Ask each vendor to show how its rules would catch those ten.
- Run the tool over your live asset library and count the false positives.
- Read the data processing terms, including any clause on model training.
- Set a review date and a named owner for the rule set.
Teams that already run ad approvals software that UK agencies use usually find the compliance layer is a rules pack on top of the workflow they have, not a separate system. Budget for reviewing the rule set each quarter, because the codes and the platform policies both move.
Common questions
Does compliance software make an advert compliant?
No. It reduces the chance of an obvious breach, but approval sits with the advertiser. The CAP Code applies to the brand that runs the advert, whichever tool produced it.
How do we test a vendor's rule set?
Take ten of your own creatives: five that ran without complaint and five that were pulled or amended. Ask the vendor to run them through the tool and explain each result. If it misses your known failures, it is not ready.
What should the contract say about our data?
Confirm whether your creative is used to train shared models, how long it is retained, and who can access it. Treat an unclear answer as a data protection risk rather than a discount.
