Email marketing for pharma: permission first, prescribing information one click away, and a regulatory filing for every new send

How pharmaceutical companies email doctors and patients inside the FDA, CAN-SPAM and ABPI Code rules, which emails earn a reply, and what to measure.

Published by AI Knows Us · Updated 21 October 2026

Email marketing for pharma works when every send is built around three things: the recipient's permission, the approved claims and safety information that must travel with any product message, and the regulatory record each new piece creates. In the US, a promotional email about a prescription drug is reviewed like other promotional labeling, must keep fair balance between benefit and risk, and is submitted to FDA with Form FDA 2253 when it is first sent. The CAN-SPAM Act adds an opt-out, a postal address and a 10 business day deadline to honour unsubscribes. In the UK, the ABPI Code says promotional email needs the recipient's prior permission and must give the prescribing information as text or as a direct, single click link. Inside those rules, email works well, because a doctor who asked to hear from you reads a short, useful message.

Two audiences, two rulebooks

Treat the two lists as separate programmes with separate content, review paths and consent records.

AudienceTypical emailsWhat shapes the work
Healthcare professionals (HCPs)New data, congress follow ups, rep follow ups, access updatesPromotional review, fair balance, prescribing information, consent, local industry codes
Patients and caregivers who opted inSupport programme onboarding, savings reminders, disease educationPlain language, risk information, privacy law, and in many countries a ban on promoting prescription medicines to the public

Unbranded disease education names no product, so it can reach a wider audience; our guide to pharma SEO and unbranded pages covers how that content is planned. Doctors' offices and hospitals emailing their own patients follow different rules again, which our page on email marketing for healthcare explains.

What the FDA rules mean for a single email in the US

FDA's regulation on prescription drug advertising lists the materials it treats as labeling, and the list includes "mailing pieces", "letters", "bulletins" and "similar pieces of printed, audio, or visual matter descriptive of a drug" (21 CFR 202.1(l)(2)). Regulatory teams therefore review a branded promotional email the way they review a printed mailer.

Fair balance in the body, not only in the footer

Under 21 CFR 202.1(e)(6), promotion is false or misleading if it fails to present a fair balance between effectiveness and side effects and contraindications. In an email, that means the risk information has to carry real weight in the message the reader sees. A bold efficacy headline followed by safety text in tiny grey type at the bottom is the classic problem.

Adequate information for use

Labeling that gives information for use must also carry adequate information for use, including indications, dosages, warnings, contraindications and side effects (21 CFR 201.100(d)). Brands usually meet this by attaching or linking the full prescribing information. Your regulatory team decides which, and the link has to work for as long as the email can be opened.

The reminder exception is narrow

A reminder piece may carry the product name without risk information only if it says nothing about what the drug is for or how to dose it (21 CFR 202.1(e)(2)(i)). One line about the indication makes it a full promotional piece. Reminder pieces are also not permitted for a drug whose labeling carries a boxed warning about a serious hazard, so check the label before planning one.

Every new piece is filed

The holder of an approved application must submit specimens of promotional labeling to FDA at the time of initial dissemination, with a completed Form FDA 2253 and the current professional labeling (21 CFR 314.81(b)(3)(i)). FDA's June 2019 final guidance on providing these submissions in electronic and non-electronic format (Federal Register document 2019-13350) sets out the formats, including eCTD. Build the filing into the send calendar.

CAN-SPAM still applies to every commercial email

The FDA rules sit on top of the general US email law, not in place of it. The CAN-SPAM Act (15 USC 7704) requires a commercial email to:

  • Carry a working way to opt out that keeps working for at least 30 days after the send.
  • Stop further commercial email within 10 business days of an opt-out request.
  • Show a valid physical postal address for the sender.
  • Identify itself as an advertisement, unless the recipient gave prior affirmative consent.
  • Use honest subject lines and headers.

The FTC's rule adds that you cannot charge a fee, ask for more than an email address and preferences, or demand more than a reply or a visit to a single web page to opt out (16 CFR 316.5). An email mixing a transactional message with promotion is treated as commercial if the subject line reads as promotional or the transactional part is not at the top (16 CFR 316.3).

In the UK: the ABPI Code sets the bar

The 2024 ABPI Code of Practice, administered by the PMCPA, governs promotion of medicines to UK health professionals. Three clauses shape email directly.

  • Clause 15.5: email and other digital communications "must not be used for promotional purposes, except with the prior permission of the recipient". The supplementary information adds that each one should say how to unsubscribe, and that an unsolicited enquiry may be answered by email.
  • Clause 12: in digital material a recipient opens on their own device, such as an email, the prescribing information must be included as text or given by "a clear and prominent, direct, single click link".
  • Clause 26.1: prescription only medicines must not be advertised to the public, so a UK patient email cannot promote a prescription product.

Other countries have their own codes and laws, and many follow the same pattern: permission for the HCP list, prescribing information with every product message, and no prescription drug promotion to patients. Each market's medical, legal and regulatory reviewers sign off their own sends.

Building an HCP list you are allowed to use

The consent record is what makes a list usable. Practical sources:

  • The HCP website sign up. A professional portal with a clear choice of topics and frequency, and a record of the date and wording the doctor agreed to.
  • Congress stands. Capture permission with the same wording, not a business card in a bowl.
  • Field force capture. Representatives ask for permission during a call and log it in the CRM, which then drives rep triggered email.

Store when, where and with what wording each person agreed. When anyone asks why a doctor received an email, that record is the answer.

The pharma emails that earn a reply

  1. Rep triggered follow ups. After a visit, the representative sends a pre approved template with the data the doctor asked about.
  2. New indication or label update. Short, factual, with the change in one sentence and the full prescribing information one click away.
  3. Congress follow up. The posters or data summaries a doctor asked for at the stand, sent within days.
  4. Access and formulary news. Where a product is now covered, and how to start a patient.
  5. Patient support onboarding. For enrolled patients, a short welcome series on how the programme works and who to call.

Every one of these should include the adverse event reporting route your safety team specifies. If a reply to any email reports a side effect, it goes to pharmacovigilance on the same timelines as a phone call. For how email fits beside the rep, the website and events around each prescriber, see our guide to omnichannel pharma marketing.

What to measure

Track permissioned reach first: how many target prescribers you can lawfully email, by specialty and territory, because that number limits everything else. Then clicks to clinical content rather than opens, replies and rep requests per email, opt-out rate by email type, and review cycle time, since a slow cycle kills timely sends.

Questions about email marketing for pharma

Can a pharmaceutical company email doctors in the US without consent?

CAN-SPAM does not require prior consent, but it does require an opt-out, a postal address and honest headers, and FDA promotional rules still apply. Building a permission based HCP list is still the better route, because permissioned lists are read and the same list can then be used in markets that do require consent.

Do pharma emails need to be submitted to FDA?

Promotional labeling for a prescription drug is submitted at the time of initial dissemination with Form FDA 2253 and the current professional labeling (21 CFR 314.81(b)(3)(i)). Regulatory teams treat branded promotional email this way.

Can pharma companies send marketing emails to patients?

In the US, branded patient email is allowed if it follows FDA rules and CAN-SPAM, and it works best sent only to people who opted in. In the UK, prescription only medicines must not be advertised to the public, so patient emails stay unbranded or limited to the support programme the patient joined.

What is a rep triggered email?

An email a representative sends from templates that medical, legal and regulatory reviewers already approved. The rep picks the template and recipient but cannot change the content.

The prescriber who checks an assistant before opening your email

A doctor who reads your email about a new indication may also ask ChatGPT or Gemini how the drug compares with the alternatives. The answer draws on public sources: journals, guidelines, your HCP site and the press. If those are thin or dated, the assistant fills the gap with older material, and that answer sits beside your carefully reviewed email. Checking what the main assistants say about a product and its condition is a new step for pharma brand teams, and AI Knows Us is one service that reports which sources those answers rely on, so medical and brand teams can see where an outdated picture comes from.

Read next

Simon-Kucher pricing strategy, what the firm publishes about its own method and what a Singapore buyer should ask before briefing itThe firm publishes its approach, its scale and four named service lines, and publishes no fee, so the useful work before any call is reading what it claims and deciding which decision you are buying.International pricing strategies for a Singapore company, and the corridor that stops one market undercutting anotherA converted home price is the one answer that is almost always wrong, so set a price per market and keep the gaps narrower than the cost of moving a unit between them.Premium pricing strategy for a Singapore business, and the fence that makes the higher number holdCharging permanently more than the credible alternatives works when the buyer can name what the extra money buys, and the published Singapore writing ladder shows exactly how that is built.Red Antler publishes no price, so here is what its own site does publish and how to cost the same scope from SingaporeRead on 29 October 2026, three pages of redantler.com carry a complete deliverable list, three business stages and not one figure about what any of it costs.Hiring a full service content agency, the five stages a retainer has to cover and the two handoffs where the money leaksMost content retainers buy production and quietly leave strategy and distribution with you, so price the stages rather than the word count.Hiring a branding agency for a Singapore financial services firm, and the three registers to search before you fall in love with a nameIdentity work for a licensed firm starts with a clearance search rather than a mood board, and two of the three registers are free to read in a browser today.

Or browse the whole archive.

See what AI says about you.

The first scan is free, it needs no account, and it asks the questions your buyers ask.

Free. No card. We ask 5 real buyer questions on 2 AI apps.

Already sure you want this? Start free. No card needed, and the free plan stays free. Pay only when you want the work done. Or talk to a person if you have a question first. Or read how we fix what it finds.