Email & delivery / FIELD GUIDE

What is a Suppression list?

A suppression list records identifiers that should be excluded from a particular action, such as marketing outreach, audience activation or prospecting, with a reason and scope for the exclusion.

Key takeaways

  • Suppression prevents a defined action for an identifier under a specific reason and scope.
  • An opt-out, invalid address and existing-customer exclusion should remain distinguishable.
  • Check current suppression at delivery time so imports and queued jobs cannot bypass it.

Overview

Suppression can reflect an opt-out, invalid address, existing customer, competitor or another business rule. Those reasons are not interchangeable: an email opt-out may have different scope from an account-level prospecting exclusion. Apply suppression before external delivery and keep it synchronized across relevant systems. Retain only the information necessary to honor the restriction under applicable requirements.

How it works

  1. Record the identifier, reason, scope and effective date of the restriction.

  2. Check the appropriate suppression rules before each delivery or activation.

  3. Synchronize changes and audit attempts to reintroduce excluded records.

Record what is excluded and why

A contact may opt out of marketing email while still needing service notifications. An account may be excluded from prospecting because it is an existing customer or competitor. A mailbox may be suppressed after a confirmed permanent failure. These states have different meanings and should not be reduced to one unexplained do-not-contact flag.

Store the relevant identifier, reason, scope, source and effective time. The correct scope depends on the request and applicable requirements. Keep the minimum information necessary to enforce the restriction and distinguish it from a full profile retained for unrelated purposes. Any authorized exception should apply only to its intended reason and action.

Illustrative suppression reasons
ReasonPossible scopeImportant distinction
Marketing opt-outThe relevant person and communication purposeMust not be cleared by a new enrichment result
Permanent address failureA particular address or channelDifferent from a preference about all contact
Existing customerA defined prospecting campaign or account motionMay have a separate customer-success owner
Competitor exclusionAn account-level business ruleNot the same as an individual’s opt-out request

Enforce exclusions at the last responsible moment

Check suppression during selection to avoid wasted work and again before external delivery when a list can wait in a queue. A contact’s preference can change between those stages. A background job should consult current restriction state rather than relying only on the snapshot captured when the job was created.

Apply the same checks to manual exports, API delivery, integrations and AI tools. Hiding a contact in one screen is not enough if another route can still activate it. Preserve stable identifiers across deduplication and employment changes so a new record or address does not unintentionally erase a person-level restriction.

Test reimports, duplicates and delayed jobs

An illustrative test opts out a contact, imports the same person from another source and then runs a previously queued campaign. The contact should remain excluded under the relevant rule. Also test a merge between suppressed and unsuppressed duplicates, because simplistic survivorship can accidentally keep the less restrictive state.

Monitor blocked delivery attempts and synchronization failures. A blocked attempt can show that the control worked while revealing an upstream list-selection problem. Review retention and correction procedures under the applicable requirements, and make it possible to explain why a record was excluded without exposing unnecessary personal history in every operational log.

ILLUSTRATIVE EXAMPLE

What this looks like in practice

A person opts out of marketing email. A later enrichment import finds the same address, but the send workflow still excludes it because suppression is checked against a stable identifier before delivery.

Examples explain the concept; they are not reported customer results.

What to check

Test reimports, address changes, duplicate contacts and delayed synchronization. Confirm that an enrichment job cannot silently clear a valid suppression flag.

Common mistake

Deleting an opted-out contact and then reimporting them later because no minimal suppression record remains to honor the request.

Suppression list vs. Data deduplication

Deduplication manages repeated records. Suppression prevents a defined action. A unique and accurate contact can still need suppression, so dedupe does not replace exclusion checks.

Read the Data deduplication definition →

Questions answered

What is a Suppression list?

A suppression list records identifiers that should be excluded from a particular action, such as marketing outreach, audience activation or prospecting, with a reason and scope for the exclusion.

Should customers and opt-outs use the same reason?

No. Preserve distinct reasons and scopes so a workflow can apply the correct rule and authorized exceptions do not accidentally clear an opt-out.

When should suppression be checked?

At selection and again before consequential delivery when lists can sit or change. A check performed days earlier may miss a recent opt-out.

Should an opted-out contact simply be deleted?

Deletion without a minimal exclusion record can allow the same identifier to be reimported and contacted again. The appropriate retention depends on the request and applicable requirements. Keep only what is needed to honor the restriction and apply clear access and lifecycle rules.

Should suppression be shared across all workspaces?

Use the scope required by the request, organization model and applicable rules. Some exclusions may be organization-wide; others belong to one campaign or business unit. Define the boundary explicitly and ensure one workspace cannot clear a restriction it does not own or expose another workspace’s unrelated contact data.

References and further reading

Primary documentation and source material for this topic. Sources checked September 14, 2026; provider requirements can change.

  1. Direct marketing guidanceUK Information Commissioner’s Office

    UK-specific guidance updated April 2026; requirements vary by jurisdiction and channel.

  2. RFC 8058: One-click unsubscribeIETF / RFC Editor
  3. Data minimisationUK Information Commissioner’s Office

    UK-specific guidance. The ICO flags this page as under review following legislative changes.

Continue reading on the blog

Explore all articles and guides →

Put the concept to work.

Explore the relevant AstroFabric workflow and see how the pieces connect.

Help keep this guide useful. Suggest a correction or browse the full glossary.