Why travel creator campaigns UK regulations catch brands out

What to take away

Where the duty sits

A tourism board books six creators for a coastal campaign. Each posts a hotel stay that was free. The audience sees a holiday recommendation, not an advert, unless the label makes the arrangement clear.

That gap is where most enforcement starts. The rules apply to brands, agencies and creators together, and the brand that commissioned the work carries much of the responsibility.

The advertising codes in practice

Paid, gifted and affiliate content is advertising when the brand controls the message. The CAP Code, the UK Code of Non-broadcast Advertising and Direct & Promotional Marketing, requires ads to be obviously identifiable, and the ASA's Influencer's Guide sets out what a clear label looks like in practice. The ASA treats a label near the start of a post as the baseline.

Vague hashtags are a recurring problem. A tag like #collab tells a viewer little. Plain wording such as "ad" or "paid partnership" does the job.

The same codes cover claims. A creator who calls a hotel "the best in Cornwall" needs evidence for that claim, because the brand is treated as the advertiser.

Tourism campaigns often involve free stays, discounted travel and affiliate booking links. Each arrangement changes what the label must say. Our guide to the travel creator campaigns UK rules and compliance guide walks through the disclosure wording for each type.

The label has to match the arrangement. A free stay or press trip needs plain wording such as "Ad — gifted stay" or "Paid partnership", placed in the first line of the caption rather than buried at the end. Discounted travel and affiliate booking links need the same clarity, because the creator earns from the booking.

Consumer law and the CMA

Advertising codes are not the whole picture. The Consumer Protection from Unfair Trading Regulations 2008 ban using editorial content to promote something a trader has paid for without making that clear, and the Digital Markets, Competition and Consumers Act 2024 updates that framework with stronger enforcement powers for the Competition and Markets Authority. A trip that reads as a personal recommendation while the brand paid for it is exactly what that rule is aimed at.

The Competition and Markets Authority enforces that side of the law and has published joint guidance with the ASA on influencer advertising. Enforcement can mean undertakings, court action or a required change to the campaign, and the CMA works with the ASA where a case spans both regimes.

The ASA's own sanctions are reputational and practical. When it upholds a complaint it publishes the ruling, naming the advertiser, and requires the ad to be changed or withdrawn. Persistent non-compliance can be referred on to Trading Standards.

Platform rules on top

Advertising codes are not the only layer. Paid placements that run through a platform's ad system must also meet that platform's content standards. Google's policy on advertising content standards sets out misrepresentation rules, including requirements that ads be clear and not misleading about the advertiser. Meta's advertising standards, TikTok's advertising policies and YouTube's ad policies take a similar line: no misleading claims, accurate pricing and a clear advertiser identity.

A creator post boosted as a paid ad therefore faces two tests: the UK advertising codes and the platform policy. A campaign can pass one and fail the other.

Practical checks before a boost include accurate destination claims, correct pricing in the creative and a visible advertiser identity. Tourism offers with "from" prices are a common failure point when the fare disappears by the time the ad runs.

Data duties behind the scenes

Campaign work generates personal data. Creator contracts hold bank details and contact records. Audience data arrives through competition entries, newsletter sign-ups and tracking pixels.

All of it falls under the Data Protection Act 2018, which sits alongside the UK GDPR and is overseen by the Information Commissioner's Office. Lawful basis, retention periods and subject access requests all apply to creator and audience records just as they do elsewhere.

Competition mechanics deserve particular care. A tourism board running a prize draw collects names, emails and sometimes travel preferences. Those details need a stated purpose and a deletion date. Our explainer on travel creator campaigns data protection covers consent wording and retention schedules for exactly this scenario.

The Information Commissioner's Office is the regulator for that side of a campaign. It can act on complaints from the public, require an organisation to change how it handles data and, in serious cases, impose monetary penalties.

Before and after a compliance review

The shift is rarely dramatic. Most fixes cost nothing beyond a briefing note and a second pair of eyes.

Common questions

Does a gifted stay count as advertising?

Yes, where the brand has control over the content or the creator received something of value in exchange for coverage. The ASA expects a clear label in those cases, and gifting alone does not remove the duty.

Who is liable if a creator hides the label?

The brand that commissioned the campaign can be held responsible alongside the creator and any agency involved. Written briefs that require a visible label give the brand a record of the instruction.

Do platform rules replace the UK advertising codes?

No. Both apply. A campaign must satisfy the advertising codes and the relevant platform's advertising policy, and meeting one does not excuse a failure against the other.

What data rules apply to creator contracts?

Creator bank details, contact records and audience data collected during the campaign are personal data under the Data Protection Act 2018. Keep records for a stated period and delete them when that period ends.

Individual campaigns turn on their own facts, so take advice from a qualified adviser before signing contracts or launching a boosted ad.