My boss wants me to send an introduction email to try and secure more business from a list of emails the sales team have given him but I have told him we cannot send an email campaign without getting proven opt in from them. Am I correct?
As often happens when interpretation comes, it depends on the mailing list provided to you from the sales team.
You need to consider that GDPR applies only to personal data, so, first of all, you need to evaluate if the email list your boss provided can be considered personal data. If the email address does not contain any personal data (i.e. firstname.lastname@example.org, email@example.com, etc.) it can be used to send a campaign because GDPR will not apply.
On the contrary, if the email addresses provided to you are firstname.lastname@example.org or with personal information (name, surname, initials, and anything referring to an individual), you will need to have proven opt-in from them.
You can find more information about how GDPR impacts on marketing in our articles: