Foundations
Part of Sizing England's paid social agency opportunity ahead of 2027
Paid social agencies market entry checklist
A paid social agencies market entry checklist to help you decide proceed, repair or stop before committing to a pilot, with evidence gates and named reviewers.
A paid social agencies market entry checklist should end with a clear proceed, repair or stop decision. It is not a badge of compliance. Complete it for one English buyer segment and one tightly specified offer before hiring staff or committing media.
What to take away
- Complete the checklist for one English buyer segment and one tightly specified offer before hiring staff or committing media.
- Test platform permissions with a non-production account and stop if the buyer cannot recover access without the agency.
- A named UK advertising-law or CAP Code reviewer must sign off the actual advert, not a working note.
- Entry is ready only when evidence exists for every applicable gate and a pilot has an owner and tested exit.
Confirm the addressable account
- Define England by head office, operating site or procurement authority.
- Select enterprises or local units, never both in one denominator.
- Record industry, size, service need and exclusion reason for each researched account.
- Obtain direct evidence of a decision owner, timetable and buying route.
Direct evidence of a decision owner is a named contact whose role covers the media budget, confirmed in writing. Keep the written reply, the call note or the signed scope that records who approves spend.
The ONS business activity dataset, published as UK business: activity, size and location, explains the difference between enterprises and local units and supplies English regional tables. It does not identify advertisers. Stop if the proposed market is still a national total multiplied by an assumed adoption percentage.
Specify the service and money flow
- Name the paid-social platforms, such as Meta (Facebook and Instagram), TikTok, LinkedIn, Pinterest, Snapchat and X, plus campaign period, deliverables and approval rights.
- Separate agency fees, media, production, software, tax and client labour.
- State who contracts with and pays each platform.
- Document rebates, credits or other possible conflicts.
- Define termination notice, asset handover and outstanding spend liability.
For every proposed platform, test permissions with a non-production account. Google's client-account ownership page shows that manager ownership and ordinary linking are not the same configuration. For paid-social platforms, check the platform's own account ownership documentation, such as Meta Business Help Centre, TikTok Ads Manager, LinkedIn Campaign Manager, Pinterest Ads Manager, Snapchat Ads Manager and X Ads. Acceptable evidence is a dated screenshot of the platform account page showing the buyer as owner, with the account identifier visible.
Stop if the buyer cannot identify its account owner or recover access without the agency.
Make claims reviewable
- Create a register linking every objective claim to current evidence.
- Capture qualifications in the creative, not in an unseen working note.
- Record how users will recognise the material as advertising.
- Route restricted products or audiences to the appropriate specialist review, such as the Financial Conduct Authority (FCA) for financial promotions and the Gambling Commission for gambling advertising.
A usable register row names the claim, links the current evidence and records the date checked and the reviewer.
CAP Code Section 2 addresses recognition of marketing communications, while Section 3 covers misleading claims and substantiation. The Advertising Standards Authority (ASA) enforces the CAP Code. A named UK advertising-law or CAP Code reviewer must sign off the actual advert. Stop when evidence is absent or the qualification changes the likely impression.
Approve the data route
- Diagram pixels, tags, audience uploads, platform events and report exports.
- Assign controller, joint-controller or processor responsibilities from facts.
- Record purpose, lawful basis, transparency, retention and rights handling.
- Test consent and withdrawal propagation where PECR applies.
The ICO's storage and access technology guidance, titled Guidance on the use of storage and access technologies, includes advertising scripts and tracking pixels within the technologies that may engage PECR. A named UK data-protection and PECR professional must review the implemented flow. Stop if the diagram and deployed tags do not match.
Define what measurement can say
- Name each event, value, currency, counting rule and attribution period.
- Keep platform-attributed activity separate from causal effect.
- Reconcile platform, analytics and finance records on a stated timetable.
- Set a pause rule for missing, duplicated or implausible events.
Do not promise an outcome because a dashboard records conversions. Require a measurement specialist to approve whether the evidence can answer the stated decision.
Pass security, accessibility and consumer gates
- Use named accounts, least privilege, strong authentication and an access log.
- Agree incident notification, export, deletion and recovery procedures.
- Test captions, contrast, alt text and the destination journey with users.
- Review price presentation and material information for consumer fairness.
The NCSC's supplier assurance questions cover governance, incidents, data and contractual matters. Cabinet Office inclusive communication guidance provides a current public-sector reference for accessible formats and suppliers, useful beyond government but not a universal certification rule.
Entry is ready only when evidence exists for every applicable gate, named qualified reviewers are assigned and a pilot has an owner, review date and tested exit. Any failed non-compensating gate means repair or stop.
Before you act
Run the six sections in order and record the outcome of each before any commitment. A gate without dated evidence is an open item, not a pass.
Common questions
What should happen if the proposed market is an assumed share of a national total?
Stop. The ONS dataset UK business: activity, size and location explains enterprises and local units and supplies English regional tables, but it does not identify advertisers.
When can a paid social agency market entry be considered ready?
Only once every applicable gate has supporting evidence, qualified reviewers are named, and a pilot has an owner, a review date and a tested exit.
Who must review the implemented data flow and what happens if tags do not match the diagram?
A qualified UK data-protection and PECR specialist must check the live flow. If the deployed tags differ from the diagram, stop.
