Email signatures and compliance: what you need to know
The email signature is not just a visual element. It contains personal data, may carry legal notices and engages the company's legal image. Here are the points to check.
Personal data in the signature
Name, job title, business phone number, photo: this information is personal data within the meaning of GDPR. Its processing must rest on a legal basis, generally the employer's legitimate interest for professional information. The photo deserves particular attention: favor the employee's consent and allow them to withdraw it.
Legal notices
Depending on your legal form and sector, certain information may be expected in business communications: company name, legal form, registration number. Check your obligations with your advisor and include them in the template rather than letting everyone add them by hand.
Confidentiality clauses
Confidentiality disclaimers at the bottom of emails have limited legal scope, but they remind the recipient of the nature of the information exchanged. If you use them, keep them short and identical for everyone.
Click tracking
Measuring clicks on a banner is useful, but must remain proportionate:
- Measure aggregated clicks, not the individual behavior of recipients.
- State in your privacy policy that tracking links exist.
- Avoid hidden open-tracking pixels.
Access security
Centralizing signatures also means centralizing power: the power to change what appears in every company email. Protect that power with distinct roles (administrator, editor, approver), a validation workflow and a change history.
Quick checklist
- Legal basis identified for signature data.
- Legal notices built into the common template.
- Photo optional and withdrawable.
- Aggregated, documented click tracking.
- Administration rights limited and logged.
