TCPA Compliance 2026: Complete Guide for Call Centers

TCPA Compliance 2026

TCPA Compliance 2026: Complete Guide for Call Centers

Because protecting your business means protecting your team, your clients, and the future you’re building together

The Cost of Non-Compliance: A Real Story

Picture this:

Your call center makes 10,000 calls per day. Everything seems to be working fine. Agents are motivated, leads are coming in, sales are closing.

Then a letter arrives. A class action lawsuit.

1.8 million calls × $500 per violation = $925 million.

This isn’t fiction. It’s the largest TCPA verdict in history, affirmed by an appeals court in 2025.

And here’s the scariest part: the company didn’t know they were violating the law.

Why TCPA Compliance 2026 Is Different

The regulatory landscape has changed dramatically. What worked in 2023 could destroy your business in 2026.

The Numbers You Need to Know

Metric20242025Change
TCPA class actions539 (first half)1,052 (first half)+95%
October 2024Historic record161 lawsuits in one month
Average fine per violation$500-$1,500$500-$1,500No change
Statute of limitations4 years4 yearsNo change

Largest Settlements in History

CompanyAmountYearViolation
ViSalus$925 million20251.8M calls without consent
Dish Network$280 million2017Calls to DNC numbers
Caribbean Cruise Line$76 million2016Robocalls without consent
Capital One$75.5 million2015Autodialer to cell phones
AT&T$45 million2014Automated calls
Citibank$29.5 million2024Robocalls to non-customers
Momentum Solar$30 million2025Telemarketing without consent
Assurance IQ$21.875 million2024Consent violations

Clear message: No company is too big to fall. And none is too small to be sued.

What Is TCPA? Fundamental

Definition

The Telephone Consumer Protection Act (TCPA) is the U.S. federal law that regulates commercial telephone communications. It was created in 1991 and is administered by the FCC (Federal Communications Commission).

What It Regulates

  • ✅ Telemarketing calls
  • ✅ Commercial text messages (SMS)
  • ✅ Calls with automatic dialers (ATDS)
  • ✅ Prerecorded voice messages
  • ✅ Commercial faxes
  • ✅ NEW 2024: AI-generated voices

Penalties Per Violation

Violation TypeBase FineAggravated Fine (Willful)
Basic violation$500/call$1,500/call
DNC violation$500/call$1,500/call
Additional state violationVariesStackable with federal

Important: Fines are per call or message, not per campaign. 10,000 calls = potentially $5-15 million in exposure.

Regulatory Changes 2025-2026: What You Need to Know

Timeline of Key Changes

DateChangeStatus
January 2025One-to-One Consent Rule (original)⏸️ Postponed
January 2025Rule vacated by 11th Circuit Court of Appeals✅ In effect
April 2025Opt-out processing in 10 days (previously 30)✅ In effect
April 2025Revocation-all requirement (original)⏸️ Postponed
January 2026One-to-One Consent Rule (new tentative date)📅 Pending
April 2026Revocation-all requirement (new date)⏸️ Postponed
January 2027Revocation-all requirement (current date)📅 Pending

1. One-to-One Consent Rule (Postponed but Prepare)

What is it? Originally required consent to be obtained for ONE seller at a time, eliminating “bulk consent” from lead generators.

Current status: Vacated by the 11th Circuit Court of Appeals before implementation. However, the FCC may issue new rules.

Recommendation: Although postponed, implementing individual consent practices is where regulation is headed.

2. 10-Day Revocation Rule (In Effect)

Before: 30 days to process opt-outs Now (April 2025): 10 business days to process opt-outs

Impact: Your systems must update suppression lists much faster.

3. AI Voices = Artificial Voices (In Effect February 2024)

FCC Declaration: AI-generated voices qualify as “artificial voices” under the law.

Requirements:

  • Same prior express consent as traditional robocalls
  • Mandatory disclosure
  • Opt-out mechanisms
  • All TCPA restrictions apply

4. Revocation-All Requirement (Postponed to 2027)

What will it be? An opt-out for one type of message will apply to ALL messages from that sender.

Status: Postponed until January 31, 2027 to give businesses time.

The Two Types of TCPA Consent

1. Prior Express Consent

Sufficient for:

  • Informational calls (non-marketing)
  • Appointment reminders
  • Account alerts
  • Service notifications

How to obtain:

  • Can be verbal or written
  • Consumer voluntarily provides their number
  • There’s a relationship to the call subject

2. Prior Express Written Consent (PEWC)

Required for:

  • Telemarketing calls with autodialer
  • Commercial/marketing text messages
  • Prerecorded marketing messages
  • Any advertising using automated technology

PEWC Requirements:

ElementRequirement
FormatWritten (includes electronic)
SignatureConsumer signature (includes e-signature)
Clear disclosureThat they’ll receive automated calls/texts
Seller identificationSpecific company name
Not conditionedCannot be requirement to purchase
Related topicLogically connected to the interaction

Example of Correct Consent Language

✅ CORRECT:

"By checking this box and providing my phone number, 
I give my express written consent to receive calls 
and text messages from [EXACT COMPANY NAME] about 
[SPECIFIC TOPIC], including calls made with automatic 
dialing systems and prerecorded messages. I understand 
this consent is not a condition of purchase. Message 
and data rates may apply. I can revoke my consent at 
any time by replying STOP."

☐ I agree to receive communications
❌ INCORRECT:

"By submitting this form, you agree to be contacted 
by us and our partners."

[Button: Submit]

Do Not Call (DNC): Critical Rules

National Do Not Call Registry

Administered by: FTC (Federal Trade Commission)

Key rules:

RequirementDetail
List updateEvery 31 days minimum
Time before callingCheck against DNC before each campaign
EBR Exception (Transaction)18 months from last transaction
EBR Exception (Inquiry)90 days from last inquiry
Violation2+ calls in 12 months
Federal DNC fineUp to $43,792 per violation

Internal Do Not Call List

Obligation: Every company must maintain its own internal list of people who have asked not to be called.

Requirements:

  • Record date and time of request
  • Record name and number
  • Honor request within 10 business days (new 2025)
  • Maintain records for 5 years
  • Train employees on the process

DNC Exceptions

ExceptionConditions
Established Business Relationship (EBR)Transaction in last 18 months OR inquiry in last 90 days
Prior Express InvitationConsumer specifically invited the call
Tax-exempt nonprofitsNon-profit organizations
Surveys (no-sales)Surveys that don’t sell anything
B2B callsTo business lines (with limitations)

ATDS: The Most Litigated Area

What Is an ATDS?

Automatic Telephone Dialing System – A system that can:

  • Store or produce phone numbers using a random or sequential generator
  • Dial those numbers automatically

The Legal Controversy

The ATDS definition has been the most active legal battlefield in TCPA.

Facebook v. Duguid (2021): The Supreme Court limited the definition. A system must have the capacity to randomly generate numbers, not just dial from a list.

Practical implication: Systems that dial from predetermined lists (like most modern CRMs) may not qualify as ATDS under this interpretation.

BUT BE CAREFUL:

  • Different courts interpret differently
  • State laws may be stricter
  • The FCC may issue new definitions
  • Don’t assume you’re exempt

Conservative Recommendation

Obtain PEWC for any campaign that uses:

  • Predictive dialing
  • Progressive dialing
  • Power dialing
  • Any dialing automation
  • Mass text messaging

Text Messages (SMS): Specific Rules

Texts Are “Calls” Under TCPA

The FCC has determined that text messages qualify as “calls” for TCPA purposes.

Requirements for SMS Marketing

ElementRequirement
ConsentPEWC mandatory
IdentificationCompany name in each message
Opt-outClear instructions (e.g.: “Reply STOP to unsubscribe”)
Schedule8am – 9pm recipient’s local time
FrequencyDisclose expected frequency
RatesWarn about possible data charges

Recognized Opt-Out Words

Your system must automatically recognize and process these responses:

  • STOP
  • UNSUBSCRIBE
  • CANCEL
  • END
  • QUIT
  • OPTOUT
  • OPT OUT
  • REMOVE
  • And any reasonable variation

New 2025: You must process any revocation request made by “any reasonable method” – not just standard keywords.

Calling Hours: Federal and State Restrictions

Federal TCPA Schedule

Permitted: 8:00 AM – 9:00 PM recipient’s local time

State Schedules (More Restrictive)

StatePermitted HoursNotes
Florida8am – 8pmMore restrictive
California8am – 9pmSame as federal
Texas8am – 9pmSame as federal
New York8am – 9pmSame as federal
Oklahoma8am – 8pmMore restrictive
Georgia8am – 8pmMore restrictive
Massachusetts8am – 8pmMore restrictive

Golden rule: Always apply the most restrictive schedule between federal and state.

State Laws: Additional Compliance Layer

States with TCPA-Style Laws

Many states have implemented their own versions of TCPA, often stricter:

StateLawSpecial Characteristics
FloridaFTSA (Florida Telephone Solicitation Act)Additional restrictions, own fines
CaliforniaCCPA + telemarketing lawsData privacy + telemarketing
WashingtonWCPAStrict consent regulations
New YorkGBL + telemarketing lawsRegistration requirements
IllinoisBIPA + telemarketingBiometrics + calls
MarylandTelemarketing ActRequired licenses
MichiganMCPAAdditional consent
PennsylvaniaTelemarketer Registration ActMandatory registration

Florida: Special Focus (FTSA)

Since many call centers operate in or toward Florida:

Florida Telephone Solicitation Act (FTSA) – Updated 2021:

RequirementDetail
Schedule8am – 8pm (more restrictive than federal)
Written consentRequired for automated calls
Private right of actionIndividuals can sue
Fines$500 first violation, $1,500 subsequent
RegistrationTelemarketers must register with the state

Practical Compliance: Call Center Checklist

Before Each Campaign

  •  Verify consent – Do we have documented PEWC for each number?
  •  Scrub against DNC – National list updated in last 31 days
  •  Scrub internal list – Check against internal DNC
  •  Verify schedules – Configure according to recipient’s time zone
  •  Review scripts – Include identification and opt-out
  •  Document everything – Consent records accessible

During Operations

  •  Record calls – With appropriate notice per state
  •  Process opt-outs immediately – Maximum 10 business days
  •  Monitor complaints – Escalate unusual patterns
  •  Update lists – In real time when possible
  •  Train continuously – Agents must know rules

Required Documentation

DocumentRetentionPurpose
Consent records5+ yearsPEWC proof
Internal DNC list5 yearsOpt-out compliance
Call recordingsPer stateLegal defense
Campaign logs4+ yearsStatute of limitations
Training recordsIndefiniteDue diligence proof
Vendor contractsContract life + 5 yearsShared liability

Vicarious Liability: Watch Your Third Parties

You’re Responsible for Your Vendors

Under TCPA, a company can be liable for the actions of:

  • Contracted call centers
  • Lead generators
  • Marketing agencies
  • Referral partners
  • Any third party calling on your behalf

Essential Contract Clauses

Every contract with third parties handling calls must include:

  1. Compliance representations – Vendor affirms TCPA compliance
  2. Consent obligation – Must obtain and document PEWC
  3. Audit rights – You can review their practices
  4. Indemnification – They protect you if they cause violation
  5. Termination for breach – You can cancel if they violate
  6. Regular reports – Must report opt-outs and complaints

Due Diligence with Purchased Leads

If you buy leads:

VerificationWhy
Consent certificateProof that lead consented
Consent timestampWhen it was obtained
Exact language shownWhat consumer accepted
Lead sourceWhere it came from
IP address / identifiersConsent authenticity
Vendor policyTheir compliance practices

Compliance Technology: Essential Tool

Recommended Tech Stack

CategoryTool/FunctionPurpose
DNC ScrubbingDNC.com, Gryphon, Contact Center ComplianceClean lists against DNC registries
Consent ManagementTrustedForm, Jornaya, ActiveProspectDocument and verify consent
Dialer ComplianceTCN, Five9, NICE inContactSchedule and frequency controls
RecordingAll modern platformsCall documentation
Opt-out ProcessingIntegrated CRMAutomatic revocation processing
Reassigned Numbers DatabaseFCC RNDVerify reassigned numbers

Reassigned Numbers Database (RND)

What is it? FCC database that identifies phone numbers that have been reassigned to new users.

Why it matters: Calling a reassigned number means you don’t have the new user’s consent.

Safe harbor: Checking against RND before calling can provide legal defense.

What to Do If You Receive a Lawsuit

Step 1: Don’t Panic (But Act Fast)

  • DON’T ignore – Deadlines are critical
  • DON’T contact the plaintiff – Everything through lawyers
  • DON’T destroy evidence – Preserve all records

Step 2: Contact Specialized TCPA Attorney

Not just any lawyer. You need someone with specific TCPA defense experience.

Step 3: Evidence Preservation

Immediately preserve:

  • Plaintiff’s consent records
  • Call logs
  • Recordings
  • Policies and procedures
  • Training records
  • Vendor contracts

Step 4: Evaluate Exposure

Your attorney will calculate:

  • Potential number of violations
  • Financial exposure
  • Case strengths and weaknesses
  • Settlement vs litigation options

Typical Defense Costs

StageEstimated Cost
Initial response$10,000 – $50,000
Discovery$50,000 – $200,000
Class certification$100,000 – $500,000
Trial$500,000+
Total potential$500,000 – $2M+

And that’s just defense, not counting settlement or verdict.

Best Practices: Executive Summary

The 10 Commandments of TCPA Compliance 2026

  1. Get WRITTEN consent before calling/texting for any marketing purpose
  2. One seller = one consent – Prepare for the future even though rule is postponed
  3. Update your DNC every 31 days – No exceptions
  4. Process opt-outs within 10 days – New standard since April 2025
  5. Document EVERYTHING – If it’s not documented, it doesn’t exist
  6. Vet your vendors – Their non-compliance is your problem
  7. Respect schedules – 8am-9pm federal, check state
  8. Include identification and opt-out in every communication
  9. Train constantly – Agents are your first line of defense
  10. Audit regularly – What you don’t measure you can’t improve

The Emotional Perspective: Why Compliance Matters

It’s Not Just About Avoiding Fines

When you protect your business with TCPA compliance, you’re protecting:

Your team:

  • Their jobs depend on the company surviving
  • Million-dollar lawsuits can shut down operations
  • Legal uncertainty affects everyone

Your reputation:

  • A public settlement damages the brand
  • Customers lose trust
  • Partners reconsider the relationship

Your customers:

  • Compliance means respecting their preferences
  • Honoring opt-outs demonstrates integrity
  • Transparency builds trust

Your future:

  • A lawsuit can destroy years of work
  • Compliance is investment, not expense
  • Ethical companies survive and thrive

Insurance Says:

“I care about this business’s future. I care about this team’s security. I care that years of work don’t disappear because of an avoidable lawsuit. I value what we’ve built enough to protect it properly.”

Conclusion: Compliance Is Caring

TCPA is not an obstacle. It’s a guide.

Regulations exist because there were abuses. And companies that respect consumers—that obtain real consent, that honor opt-outs, that call at reasonable hours—those companies build lasting relationships.

TCPA Compliance 2026 isn’t about avoiding fines (though that’s important). It’s about operating with integrity. About treating consumers as you’d like to be treated. About building a business that can exist for decades, not just until the next lawsuit.

Because true success in telemarketing isn’t measured only in sales. It’s measured in the trust you build and protect every day.

📞 Need Compliance Help?

Our services include:

  • TCPA compliance audits
  • Call center team training
  • Script and process review
  • Best practices implementation
  • Ongoing consulting

Protect your investment. Protect your team. Protect your future.


Disclaimer: This article is informational and does not constitute legal advice. Consult with a TCPA-specialized attorney for your specific business situations.

Share the Post: