What is data enrichment, and why does the B2B/B2C split matter?
Data enrichment is the process of appending missing fields to records you already hold, using a reference database as the source. A CRM full of company names and no direct-dial numbers, or a consumer prospect file with addresses but no email, are both candidates for enrichment.
The B2B versus B2C split is not just a market-segmentation convenience. The two types of enrichment differ in the identifiers used to find a match, the fields that can be appended, the legal basis that justifies holding and using the data, and the pricing logic that determines cost per record. Treating them as variations of the same process is how organisations end up with compliance gaps.
A Manchester-based SaaS firm enriching its CRM with decision-maker mobile numbers is doing something legally and operationally different from a financial-services broker enriching a consumer prospect list with income band and homeowner status. The rules that govern the first transaction do not apply to the second.
How do match keys differ between B2B and B2C?
The match key is the combination of fields used to locate a record in the reference database. Get the match key wrong and you either miss genuine records (reducing match rate) or create false positives (appending the wrong person's data to the wrong record, which is a data-accuracy failure under UK GDPR Article 5(1)(d)).
B2B match keys
Business records are typically matched on one of two key combinations:
- Full name plus company name. The most common B2B match key. Both fields are required: first name, surname, and a clean legal or trading name for the company. Abbreviations, holding-company names, and recent rebrands frequently break the match.
- Business email address plus company name. Where the input CRM holds a corporate email, the domain acts as a strong company signal. Personal-name emails at corporate domains (such as [email protected]) are treated as individual-level identifiers.
A company name alone is rarely sufficient. A search for "Smith & Sons Ltd" will return dozens of Companies House registrations. Adding the individual's name narrows the field to a single record in most cases. For senior executives with a public profile (Finance Directors, CEOs of mid-market firms), LinkedIn URL is increasingly used as a tertiary match anchor because it is unique at the individual level.
B2B match rates typically run between 50% and 85%. The floor reflects the reality that many CRM records contain informal names, outdated job titles, or imprecise company names that prevent a confident match. The ceiling reflects files built from corporate-email-capture lead magnets, where the input data quality is high.
B2C match keys
Consumer enrichment almost always anchors on full name plus current postal address. The reason is straightforward: Royal Mail's Postcode Address File (PAF) covers approximately 31 million UK delivery points with standardised formatting. A correctly formatted address is essentially unique at the individual-household level when combined with a full name.
Email address alone is a weak B2C match key because personal email addresses change (new provider, name change, abandoned inboxes) at a rate that erodes confidence quickly. Some enrichment providers accept email as a supplementary signal but not as a primary match anchor.
Consumer match rates run 60%–90% on clean input files. The upper bound reflects modern records with recently verified postal addresses. Older lifestyle survey data from three or more years ago may match at 65%–70% because residential mobility across the UK averages around 8%–10% per year.
B2B vs B2C enrichment: side-by-side comparison
| Dimension | B2B Enrichment | B2C Enrichment |
|---|---|---|
| Primary match key | Full name + company name | Full name + current postal address |
| Secondary match key | Business email + company domain | Email address (supplementary only) |
| Lawful basis (UK GDPR) | Legitimate interests, Article 6(1)(f) | Consent, Article 6(1)(a) + PECR |
| LIA required? | Yes, buyer must complete an LIA | No LIA; consent documentation required instead |
| Typical appended fields | Direct dial, mobile, business email, job title, seniority, LinkedIn URL, tech stack, SIC 2007 code | Email, telephone, age band, income band, homeowner status, lifestyle interests, family composition |
| Typical match rate | 50%–85% | 60%–90% |
| Cost per matched record (approx.) | £0.30–£1.50 | £0.05–£0.40 |
| Key suppression step | TPS wash for telemarketing; honour opt-out requests | TPS wash (telemarketing), MPS wash (direct mail), channel-preference flags |
| Article 14 notice required? | Yes | Yes |
| Data source (SortedIQ) | Compiled under legitimate interests from publicly available sources, including Companies House and corporate web sources | Fully opt-in consumer file under UK GDPR and PECR consent; 10M+ UK records |
What lawful basis governs each type of enrichment?
This is where the compliance obligations diverge most sharply, and where mistakes are costly.
B2B enrichment and legitimate interests
Under UK GDPR, legitimate interests is a valid lawful basis for B2B enrichment where the controller is appending contact data to existing records for direct marketing to individuals in their professional capacity, provided the controller completes a Legitimate Interests Assessment and respects opt-out requests. The Information Commissioner's Office (ICO) has confirmed this position in its direct marketing guidance.
The LIA has three parts: purpose test (is there a genuine business purpose?), necessity test (is enrichment actually necessary, or could you achieve the goal another way?), and balancing test (do the individual's privacy interests override the business purpose?). In our experience, B2B enrichment generally passes all three for marketing to named role-holders at commercial organisations, but the assessment still needs to be documented and retained.
One further obligation: the Privacy and Electronic Communications Regulations (PECR) layer on top of UK GDPR for electronic marketing. Cold email to a corporate address is subject to PECR and requires either consent or a very specific soft-opt-in condition. If you are enriching to add email addresses for cold outreach, you need both the UK GDPR lawful basis and PECR compliance in place.
B2C enrichment and consent
Consumer enrichment files sourced for marketing purposes must carry consent under Article 6(1)(a) of the UK GDPR and, for electronic channels, PECR consent. The ICO is explicit that legitimate interests is not a reliable basis for unsolicited electronic marketing to consumers. A reputable B2C enrichment provider will hold documented consent for each record, specifying the marketing categories the individual agreed to receive.
When you buy a B2C enrichment file, ask the supplier for the consent statement each individual agreed to. This matters not just for legal compliance but for response quality: consumers who consented to financial-services marketing will outperform, by a significant margin, a general lifestyle audience mailed on a weak legitimate-interests argument.
Lawful-basis mixing risk
A common mistake is running B2C enrichment under the same legitimate-interests workflow used for B2B. The ICO's direct-marketing guidance treats consumer and business contacts differently. Applying a B2B LIA framework to consumer enrichment is not compliant. If your CRM contains a mix of B2B contacts and individual consumers, the two populations need separate lawful-basis documentation.
What fields can be appended, and how do they differ?
B2B append fields
B2B enrichment is primarily about restoring or improving contact-level data within an existing commercial account structure. The most requested appends are:
- Direct-dial telephone number (DDI) and mobile number
- Business email address, including personal-name addresses at corporate domains
- Current job title and seniority band (C-suite, director, manager, etc.)
- LinkedIn URL, useful for account-based marketing sequences
- UK SIC 2007 code for the employer company
- Technology stack data (CRM platform, ERP system, cloud infrastructure) where available
- Company headcount band and turnover band from Companies House and corporate web sources
The hardest fields to match at high rates are mobile numbers and LinkedIn URLs for contacts below director level. Senior decision-makers tend to have more public digital footprints; Operations Managers and Account Executives at SMEs are harder to locate.
B2C append fields
Consumer enrichment typically adds one or more of the following to a name-and-address base:
- Email address (where consented)
- Telephone number, including mobile
- Age band (5-year or 10-year bands, not exact date of birth)
- Income band and financial-pressure indicators
- Homeowner status and property type
- Household composition (number of adults, children-present flags)
- Lifestyle interests (travel, gardening, sport, home improvement, charity giving)
- Vehicle ownership data
- Newspaper or magazine readership segment
The selection of append fields should be driven by the campaign channel. If the campaign is a postal direct-mail piece, email address is not needed and adds cost without value. If the end goal is a telephone campaign, prioritise telephone-number append and TPS suppression.
How does Article 14 of UK GDPR apply to both types of enrichment?
Article 14 of the UK GDPR requires data controllers to inform individuals when their personal data was obtained from a source other than the individual themselves, for example from a data enrichment provider. This obligation applies to both B2B and B2C enrichment with no exemption.
The notice must be provided within a reasonable period, in practice at the latest when you first contact the individual. It should state who you are, what categories of data you hold, where you obtained it, and how the individual can exercise their rights (including the right to object under Article 21).
For B2B cold email or direct mail, a short paragraph at the foot of the first communication satisfies the requirement in most cases. For B2C postal, a paragraph on the reply card or envelope insert works. There is no prescribed wording, but the ICO expects the notice to be genuinely informative rather than a buried legal footnote. A good guide on Article 14 obligations in the bought-data context is available in the Article 14 notice for bought data article on this site.
How does pricing differ, and what drives the gap?
B2B enrichment costs more per record than B2C enrichment. The gap reflects supply and demand: decision-maker contact data is scarcer, harder to verify, and decays faster (job tenure at director level averages around two years). There is also a premium for specialised fields such as direct-dial numbers and tech stack data, which require significant ongoing verification effort.
Typical pricing ranges:
- B2B enrichment: £0.30–£1.50 per successfully matched record, depending on the fields appended and the seniority of contacts. C-suite mobile-number appends sit at the higher end.
- B2C enrichment: £0.05–£0.40 per record, with email and telephone appends on the higher end and single-field lifestyle appends at the lower end.
Most enrichment is priced on a pay-per-match basis, meaning you pay only for records where a confident match was returned. This is the buyer-friendly model and the one to insist on. Some providers charge per record submitted regardless of match outcome; avoid this structure unless you have strong prior confidence in your input data quality. For more detail on the factors affecting what you actually get back from an enrichment run, see the guide on enrichment match rates.
Practical checklist before running an enrichment project
Before submitting records to an enrichment provider, work through these steps regardless of whether the file is B2B or B2C:
- Establish and document your lawful basis. B2B: complete the LIA and store it. B2C: confirm the enrichment file carries adequate consent documentation and request it from your supplier.
- Audit your input file quality. Enrichment match rates are directly correlated with input data quality. Deduplication, name normalisation, and postal cleansing before submission will lift your match rate by 5%–15%.
- Define the minimum append fields. Only append what you will actually use. Holding surplus personal data without a use case creates unnecessary compliance risk under the data-minimisation principle (UK GDPR Article 5(1)(c)).
- Plan suppression before the append, not after. For telemarketing, arrange a Telephone Preference Service (TPS) or Corporate Telephone Preference Service (CTPS) wash. For consumer direct mail, add Mailing Preference Service (MPS) suppression. Do this as part of the enrichment brief, not as an afterthought.
- Prepare your Article 14 notice. Draft the data-source disclosure paragraph before the campaign goes live. It needs to be in the first communication, so it cannot be an afterthought.
- Agree on a data-retention period. Enriched records are not yours to keep indefinitely. Set a retention schedule that reflects the campaign lifecycle and delete or re-verify at the end of it.