Automated Phone Calls and TCPA/DNC Compliance: A Practical Guide

🔑 Key Takeaways:

  • TCPA violations carry statutory damages of $500–$1,500 per call—a 10,000-call campaign with a compliance failure can mean $5–15 million in potential liability
  • The National DNC Registry must be scrubbed against at least every 31 days for any telemarketing campaign
  • Express written consent for cell phone calls is not implied—it must be obtained through a clear, affirmative action by the consumer

TCPA litigation has become one of the most active areas of consumer law. Class action settlements averaging $10–$100 million have become common enough that no business running automated calling campaigns can treat compliance as optional. The framework isn't complicated, but the details are where businesses get into trouble.

This guide covers the essential rules and what they mean in practice for typical automated calling and SMS campaigns.

TCPA Basics: What the Law Actually Says

The Telephone Consumer Protection Act (47 U.S.C. § 227) prohibits:

  • Using an ATDS (automated telephone dialing system) to call or text a cell phone without prior express consent
  • Using an artificial or prerecorded voice to call a residential phone without prior express consent (with specific exceptions)
  • Calling any number on the National Do Not Call Registry for commercial purposes
  • Calling before 8 AM or after 9 PM (recipient's local time)
  • Failing to identify the caller in automated messages

The penalties are severe by design: $500 per violation (per call), trebled to $1,500 for willful violations. Private right of action means any individual can sue without regulatory involvement.

The Two Types of Consent (and Why the Distinction Matters)

Consent Type What It Covers How to Obtain Not Sufficient For
Prior Express Consent Informational calls/texts to cell phones; calls related to an existing relationship Customer provides phone number with reasonable expectation of receiving calls (e.g., checkout, intake form) Marketing/solicitation calls to cell phones
Prior Express Written Consent Marketing/solicitation calls and texts to cell phones using an ATDS or prerecorded voice Clear written disclosure + affirmative opt-in checkbox. Cannot be condition of purchase. Must include what they're consenting to. Nothing—this is the highest standard

DNC Registry: The Operational Requirements

For telemarketing calls to residential numbers, the National Do Not Call Registry creates hard obligations:

DNC Registry Compliance Checklist

  • âś… Registration: Obtain a subscription to access the DNC registry (free for small companies making fewer than 5,000 calls)
  • âś… Scrubbing frequency: Download and compare your calling list against the registry at minimum every 31 days
  • âś… Safe harbor: The registry maintains a 30-day grace period for numbers newly added—registering a scrub date documents your compliance
  • âś… Internal DNC list: Maintain your own company-specific DNC list for people who have asked not to be called. This must be honored indefinitely, not just for one campaign.
  • âś… Wireless numbers: Most cell phones are registered on the DNC, but DNC registration is separate from TCPA consent requirements. Both apply.

State Laws That Go Further Than Federal TCPA

Several states have enacted calling laws that are stricter than federal TCPA. If you're calling into these states, federal compliance is the floor—not the ceiling:

🏛️ Key State Variations
  • Florida: FTSA (2021) created a state ATDS definition potentially broader than federal; $500/call for violations
  • California: CCPA adds privacy framework around calling data; specific calling hours and disclosure requirements
  • New York: Additional consent requirements for certain call types
  • Oklahoma, Washington: State-level DNC registries with additional obligations
⚠️ Multi-State Operations

If you call recipients in multiple states, you must comply with the stricter state law for each recipient's location. Build your compliance framework to the strictest applicable standard, or maintain state-specific rules in your campaign configuration.

Building a Compliant Automated Calling Operation

The operational basics that serious compliance programs have in place:

  1. Consent documentation: Store proof of consent with timestamp, IP address, and exact consent language for every number you call
  2. DNC scrubbing workflow: Automated DNC scrub before every campaign launch, documented with date and version of registry used
  3. Opt-out processing: Immediate addition to internal DNC list when any opt-out is received (verbal, text, or written)
  4. Call time enforcement: System-level enforcement of 8 AM–9 PM local time, not just policy guidance
  5. Call logs: Complete records of every call attempted, with outcome and timestamp, retained per your state's record retention requirements
  6. Regular audits: Quarterly review of consent collection processes, especially for any new lead sources added since the last audit

Learn more about operating automated calls legally and ethically in our guide on when it's okay to make automated phone calls.

Run Compliant Automated Calling Campaigns

Robotalker includes built-in DNC scrubbing, calling time enforcement, and complete call logs to support your compliance program.

  • ✔️ Time-zone aware call scheduling with legal hour enforcement
  • ✔️ Built-in opt-out processing
  • ✔️ Detailed call logs for compliance documentation
Start Free Trial →

FAQ: TCPA and DNC Compliance

B2B calls generally have more flexibility under TCPA, but it's not a blanket exemption. The key distinction is whether you're calling a business number (more TCPA flexibility) versus an individual's cell phone that happens to be used for business (full TCPA protections apply). Many B2B calls go to cell phones—treat those with the same consent care you'd apply to consumer calls.

The FCC has not specified a retention period for TCPA consent records, but standard practice among compliance attorneys is 4 years—matching the TCPA statute of limitations. For cell phone calling campaigns, retain consent records as long as you maintain the ability to call that number, plus 4 years after the last contact.

Related Articles