TCPA Compliance 2026: Complete Guide for Call Centers
Because protecting your business means protecting your team, your clients, and the future you’re building together
The Cost of Non-Compliance: A Real Story
Picture this:
Your call center makes 10,000 calls per day. Everything seems to be working fine. Agents are motivated, leads are coming in, sales are closing.
Then a letter arrives. A class action lawsuit.
1.8 million calls × $500 per violation = $925 million.
This isn’t fiction. It’s the largest TCPA verdict in history, affirmed by an appeals court in 2025.
And here’s the scariest part: the company didn’t know they were violating the law.
Why TCPA Compliance 2026 Is Different
The regulatory landscape has changed dramatically. What worked in 2023 could destroy your business in 2026.
The Numbers You Need to Know
| Metric | 2024 | 2025 | Change |
|---|---|---|---|
| TCPA class actions | 539 (first half) | 1,052 (first half) | +95% |
| October 2024 | Historic record | 161 lawsuits in one month | — |
| Average fine per violation | $500-$1,500 | $500-$1,500 | No change |
| Statute of limitations | 4 years | 4 years | No change |
Largest Settlements in History
| Company | Amount | Year | Violation |
|---|---|---|---|
| ViSalus | $925 million | 2025 | 1.8M calls without consent |
| Dish Network | $280 million | 2017 | Calls to DNC numbers |
| Caribbean Cruise Line | $76 million | 2016 | Robocalls without consent |
| Capital One | $75.5 million | 2015 | Autodialer to cell phones |
| AT&T | $45 million | 2014 | Automated calls |
| Citibank | $29.5 million | 2024 | Robocalls to non-customers |
| Momentum Solar | $30 million | 2025 | Telemarketing without consent |
| Assurance IQ | $21.875 million | 2024 | Consent violations |
Clear message: No company is too big to fall. And none is too small to be sued.
What Is TCPA? Fundamental
Definition
The Telephone Consumer Protection Act (TCPA) is the U.S. federal law that regulates commercial telephone communications. It was created in 1991 and is administered by the FCC (Federal Communications Commission).
What It Regulates
- ✅ Telemarketing calls
- ✅ Commercial text messages (SMS)
- ✅ Calls with automatic dialers (ATDS)
- ✅ Prerecorded voice messages
- ✅ Commercial faxes
- ✅ NEW 2024: AI-generated voices
Penalties Per Violation
| Violation Type | Base Fine | Aggravated Fine (Willful) |
|---|---|---|
| Basic violation | $500/call | $1,500/call |
| DNC violation | $500/call | $1,500/call |
| Additional state violation | Varies | Stackable with federal |
Important: Fines are per call or message, not per campaign. 10,000 calls = potentially $5-15 million in exposure.
Regulatory Changes 2025-2026: What You Need to Know
Timeline of Key Changes
| Date | Change | Status |
|---|---|---|
| January 2025 | One-to-One Consent Rule (original) | ⏸️ Postponed |
| January 2025 | Rule vacated by 11th Circuit Court of Appeals | ✅ In effect |
| April 2025 | Opt-out processing in 10 days (previously 30) | ✅ In effect |
| April 2025 | Revocation-all requirement (original) | ⏸️ Postponed |
| January 2026 | One-to-One Consent Rule (new tentative date) | 📅 Pending |
| April 2026 | Revocation-all requirement (new date) | ⏸️ Postponed |
| January 2027 | Revocation-all requirement (current date) | 📅 Pending |
1. One-to-One Consent Rule (Postponed but Prepare)
What is it? Originally required consent to be obtained for ONE seller at a time, eliminating “bulk consent” from lead generators.
Current status: Vacated by the 11th Circuit Court of Appeals before implementation. However, the FCC may issue new rules.
Recommendation: Although postponed, implementing individual consent practices is where regulation is headed.
2. 10-Day Revocation Rule (In Effect)
Before: 30 days to process opt-outs Now (April 2025): 10 business days to process opt-outs
Impact: Your systems must update suppression lists much faster.
3. AI Voices = Artificial Voices (In Effect February 2024)
FCC Declaration: AI-generated voices qualify as “artificial voices” under the law.
Requirements:
- Same prior express consent as traditional robocalls
- Mandatory disclosure
- Opt-out mechanisms
- All TCPA restrictions apply
4. Revocation-All Requirement (Postponed to 2027)
What will it be? An opt-out for one type of message will apply to ALL messages from that sender.
Status: Postponed until January 31, 2027 to give businesses time.
The Two Types of TCPA Consent
1. Prior Express Consent
Sufficient for:
- Informational calls (non-marketing)
- Appointment reminders
- Account alerts
- Service notifications
How to obtain:
- Can be verbal or written
- Consumer voluntarily provides their number
- There’s a relationship to the call subject
2. Prior Express Written Consent (PEWC)
Required for:
- Telemarketing calls with autodialer
- Commercial/marketing text messages
- Prerecorded marketing messages
- Any advertising using automated technology
PEWC Requirements:
| Element | Requirement |
|---|---|
| Format | Written (includes electronic) |
| Signature | Consumer signature (includes e-signature) |
| Clear disclosure | That they’ll receive automated calls/texts |
| Seller identification | Specific company name |
| Not conditioned | Cannot be requirement to purchase |
| Related topic | Logically connected to the interaction |
Example of Correct Consent Language
✅ CORRECT:
"By checking this box and providing my phone number,
I give my express written consent to receive calls
and text messages from [EXACT COMPANY NAME] about
[SPECIFIC TOPIC], including calls made with automatic
dialing systems and prerecorded messages. I understand
this consent is not a condition of purchase. Message
and data rates may apply. I can revoke my consent at
any time by replying STOP."
☐ I agree to receive communications❌ INCORRECT:
"By submitting this form, you agree to be contacted
by us and our partners."
[Button: Submit]Do Not Call (DNC): Critical Rules
National Do Not Call Registry
Administered by: FTC (Federal Trade Commission)
Key rules:
| Requirement | Detail |
|---|---|
| List update | Every 31 days minimum |
| Time before calling | Check against DNC before each campaign |
| EBR Exception (Transaction) | 18 months from last transaction |
| EBR Exception (Inquiry) | 90 days from last inquiry |
| Violation | 2+ calls in 12 months |
| Federal DNC fine | Up to $43,792 per violation |
Internal Do Not Call List
Obligation: Every company must maintain its own internal list of people who have asked not to be called.
Requirements:
- Record date and time of request
- Record name and number
- Honor request within 10 business days (new 2025)
- Maintain records for 5 years
- Train employees on the process
DNC Exceptions
| Exception | Conditions |
|---|---|
| Established Business Relationship (EBR) | Transaction in last 18 months OR inquiry in last 90 days |
| Prior Express Invitation | Consumer specifically invited the call |
| Tax-exempt nonprofits | Non-profit organizations |
| Surveys (no-sales) | Surveys that don’t sell anything |
| B2B calls | To business lines (with limitations) |
ATDS: The Most Litigated Area
What Is an ATDS?
Automatic Telephone Dialing System – A system that can:
- Store or produce phone numbers using a random or sequential generator
- Dial those numbers automatically
The Legal Controversy
The ATDS definition has been the most active legal battlefield in TCPA.
Facebook v. Duguid (2021): The Supreme Court limited the definition. A system must have the capacity to randomly generate numbers, not just dial from a list.
Practical implication: Systems that dial from predetermined lists (like most modern CRMs) may not qualify as ATDS under this interpretation.
BUT BE CAREFUL:
- Different courts interpret differently
- State laws may be stricter
- The FCC may issue new definitions
- Don’t assume you’re exempt
Conservative Recommendation
Obtain PEWC for any campaign that uses:
- Predictive dialing
- Progressive dialing
- Power dialing
- Any dialing automation
- Mass text messaging
Text Messages (SMS): Specific Rules
Texts Are “Calls” Under TCPA
The FCC has determined that text messages qualify as “calls” for TCPA purposes.
Requirements for SMS Marketing
| Element | Requirement |
|---|---|
| Consent | PEWC mandatory |
| Identification | Company name in each message |
| Opt-out | Clear instructions (e.g.: “Reply STOP to unsubscribe”) |
| Schedule | 8am – 9pm recipient’s local time |
| Frequency | Disclose expected frequency |
| Rates | Warn about possible data charges |
Recognized Opt-Out Words
Your system must automatically recognize and process these responses:
- STOP
- UNSUBSCRIBE
- CANCEL
- END
- QUIT
- OPTOUT
- OPT OUT
- REMOVE
- And any reasonable variation
New 2025: You must process any revocation request made by “any reasonable method” – not just standard keywords.
Calling Hours: Federal and State Restrictions
Federal TCPA Schedule
Permitted: 8:00 AM – 9:00 PM recipient’s local time
State Schedules (More Restrictive)
| State | Permitted Hours | Notes |
|---|---|---|
| Florida | 8am – 8pm | More restrictive |
| California | 8am – 9pm | Same as federal |
| Texas | 8am – 9pm | Same as federal |
| New York | 8am – 9pm | Same as federal |
| Oklahoma | 8am – 8pm | More restrictive |
| Georgia | 8am – 8pm | More restrictive |
| Massachusetts | 8am – 8pm | More restrictive |
Golden rule: Always apply the most restrictive schedule between federal and state.
State Laws: Additional Compliance Layer
States with TCPA-Style Laws
Many states have implemented their own versions of TCPA, often stricter:
| State | Law | Special Characteristics |
|---|---|---|
| Florida | FTSA (Florida Telephone Solicitation Act) | Additional restrictions, own fines |
| California | CCPA + telemarketing laws | Data privacy + telemarketing |
| Washington | WCPA | Strict consent regulations |
| New York | GBL + telemarketing laws | Registration requirements |
| Illinois | BIPA + telemarketing | Biometrics + calls |
| Maryland | Telemarketing Act | Required licenses |
| Michigan | MCPA | Additional consent |
| Pennsylvania | Telemarketer Registration Act | Mandatory registration |
Florida: Special Focus (FTSA)
Since many call centers operate in or toward Florida:
Florida Telephone Solicitation Act (FTSA) – Updated 2021:
| Requirement | Detail |
|---|---|
| Schedule | 8am – 8pm (more restrictive than federal) |
| Written consent | Required for automated calls |
| Private right of action | Individuals can sue |
| Fines | $500 first violation, $1,500 subsequent |
| Registration | Telemarketers must register with the state |
Practical Compliance: Call Center Checklist
Before Each Campaign
- Verify consent – Do we have documented PEWC for each number?
- Scrub against DNC – National list updated in last 31 days
- Scrub internal list – Check against internal DNC
- Verify schedules – Configure according to recipient’s time zone
- Review scripts – Include identification and opt-out
- Document everything – Consent records accessible
During Operations
- Record calls – With appropriate notice per state
- Process opt-outs immediately – Maximum 10 business days
- Monitor complaints – Escalate unusual patterns
- Update lists – In real time when possible
- Train continuously – Agents must know rules
Required Documentation
| Document | Retention | Purpose |
|---|---|---|
| Consent records | 5+ years | PEWC proof |
| Internal DNC list | 5 years | Opt-out compliance |
| Call recordings | Per state | Legal defense |
| Campaign logs | 4+ years | Statute of limitations |
| Training records | Indefinite | Due diligence proof |
| Vendor contracts | Contract life + 5 years | Shared liability |
Vicarious Liability: Watch Your Third Parties
You’re Responsible for Your Vendors
Under TCPA, a company can be liable for the actions of:
- Contracted call centers
- Lead generators
- Marketing agencies
- Referral partners
- Any third party calling on your behalf
Essential Contract Clauses
Every contract with third parties handling calls must include:
- Compliance representations – Vendor affirms TCPA compliance
- Consent obligation – Must obtain and document PEWC
- Audit rights – You can review their practices
- Indemnification – They protect you if they cause violation
- Termination for breach – You can cancel if they violate
- Regular reports – Must report opt-outs and complaints
Due Diligence with Purchased Leads
If you buy leads:
| Verification | Why |
|---|---|
| Consent certificate | Proof that lead consented |
| Consent timestamp | When it was obtained |
| Exact language shown | What consumer accepted |
| Lead source | Where it came from |
| IP address / identifiers | Consent authenticity |
| Vendor policy | Their compliance practices |
Compliance Technology: Essential Tool
Recommended Tech Stack
| Category | Tool/Function | Purpose |
|---|---|---|
| DNC Scrubbing | DNC.com, Gryphon, Contact Center Compliance | Clean lists against DNC registries |
| Consent Management | TrustedForm, Jornaya, ActiveProspect | Document and verify consent |
| Dialer Compliance | TCN, Five9, NICE inContact | Schedule and frequency controls |
| Recording | All modern platforms | Call documentation |
| Opt-out Processing | Integrated CRM | Automatic revocation processing |
| Reassigned Numbers Database | FCC RND | Verify reassigned numbers |
Reassigned Numbers Database (RND)
What is it? FCC database that identifies phone numbers that have been reassigned to new users.
Why it matters: Calling a reassigned number means you don’t have the new user’s consent.
Safe harbor: Checking against RND before calling can provide legal defense.
What to Do If You Receive a Lawsuit
Step 1: Don’t Panic (But Act Fast)
- DON’T ignore – Deadlines are critical
- DON’T contact the plaintiff – Everything through lawyers
- DON’T destroy evidence – Preserve all records
Step 2: Contact Specialized TCPA Attorney
Not just any lawyer. You need someone with specific TCPA defense experience.
Step 3: Evidence Preservation
Immediately preserve:
- Plaintiff’s consent records
- Call logs
- Recordings
- Policies and procedures
- Training records
- Vendor contracts
Step 4: Evaluate Exposure
Your attorney will calculate:
- Potential number of violations
- Financial exposure
- Case strengths and weaknesses
- Settlement vs litigation options
Typical Defense Costs
| Stage | Estimated Cost |
|---|---|
| Initial response | $10,000 – $50,000 |
| Discovery | $50,000 – $200,000 |
| Class certification | $100,000 – $500,000 |
| Trial | $500,000+ |
| Total potential | $500,000 – $2M+ |
And that’s just defense, not counting settlement or verdict.
Best Practices: Executive Summary
The 10 Commandments of TCPA Compliance 2026
- Get WRITTEN consent before calling/texting for any marketing purpose
- One seller = one consent – Prepare for the future even though rule is postponed
- Update your DNC every 31 days – No exceptions
- Process opt-outs within 10 days – New standard since April 2025
- Document EVERYTHING – If it’s not documented, it doesn’t exist
- Vet your vendors – Their non-compliance is your problem
- Respect schedules – 8am-9pm federal, check state
- Include identification and opt-out in every communication
- Train constantly – Agents are your first line of defense
- Audit regularly – What you don’t measure you can’t improve
The Emotional Perspective: Why Compliance Matters
It’s Not Just About Avoiding Fines
When you protect your business with TCPA compliance, you’re protecting:
Your team:
- Their jobs depend on the company surviving
- Million-dollar lawsuits can shut down operations
- Legal uncertainty affects everyone
Your reputation:
- A public settlement damages the brand
- Customers lose trust
- Partners reconsider the relationship
Your customers:
- Compliance means respecting their preferences
- Honoring opt-outs demonstrates integrity
- Transparency builds trust
Your future:
- A lawsuit can destroy years of work
- Compliance is investment, not expense
- Ethical companies survive and thrive
Insurance Says:
“I care about this business’s future. I care about this team’s security. I care that years of work don’t disappear because of an avoidable lawsuit. I value what we’ve built enough to protect it properly.”
Conclusion: Compliance Is Caring
TCPA is not an obstacle. It’s a guide.
Regulations exist because there were abuses. And companies that respect consumers—that obtain real consent, that honor opt-outs, that call at reasonable hours—those companies build lasting relationships.
TCPA Compliance 2026 isn’t about avoiding fines (though that’s important). It’s about operating with integrity. About treating consumers as you’d like to be treated. About building a business that can exist for decades, not just until the next lawsuit.
Because true success in telemarketing isn’t measured only in sales. It’s measured in the trust you build and protect every day.
📞 Need Compliance Help?
Our services include:
- TCPA compliance audits
- Call center team training
- Script and process review
- Best practices implementation
- Ongoing consulting
Protect your investment. Protect your team. Protect your future.
Disclaimer: This article is informational and does not constitute legal advice. Consult with a TCPA-specialized attorney for your specific business situations.


