The Legal Reality: Why AI Voice Calls Are Not Exempt from TCPA

The FCC's February 2024 Declaratory Ruling settled the question: AI-generated voices are legally treated as "artificial or prerecorded voice" under the TCPA, regardless of how human they sound. This means every outbound AI call requires prior express consent from the recipient, with no exceptions for how realistic the voice may seem. The ruling explicitly rejected any carve-out for technologies mimicking live agents, placing AI voice calls squarely under the same regulatory framework as traditional robocalls.

For reactivation businesses, one of the most costly misconceptions is that an Established Business Relationship (EBR) permits AI calls to past customers. The FCC and legal experts confirm that while EBR exempts manual calls from Do-Not-Call list restrictions, it does nothing to override the consent requirement triggered by artificial voice technology. A live agent can call a 16-month-old customer on the DNC list; an AI agent cannot contact the same person without separate, documented consent.

This distinction carries serious financial risk. TCPA violations incur statutory damages of $500–$1,500 per call, with no aggregate cap. A modest 10,000-call reactivation campaign therefore exposes a business to $5 million to $15 million in potential liability before any court evaluates actual harm. Recent class-action settlements in the $5 million to $20 million range underscore how quickly non-compliance can threaten business viability.

CallMyCustomers builds its reactivation model around this reality, requiring documented consent and owner approval for every message to ensure compliance is baked into the process from the start.

• Verify prior express consent for every number before dialing, linked to the specific contact
• Classify each call as marketing (requiring written consent) or informational (allowing oral consent) based on purpose
• Honor opt-outs within ten business days across all channels, recognizing any reasonable manner of revocation
• Maintain queryable consent records with four-year retention to match the TCPA statute of limitations
• Scrub against the National DNC Registry every 31 days and disclose AI use proactively

Matching Consent to Campaign Purpose: Marketing vs. Informational Calls

Hooking the reader with the core challenge: knowing when a call needs written consent versus oral consent can mean the difference between a compliant campaign and millions in liability. The FCC rulings and court decisions have clarified that purpose—not script—determines consent requirements, creating a two-tier framework that reactivation businesses must navigate carefully. Marketing calls, defined by their intent to promote a product or service, require prior express written consent (PEWC) in 47 states, while informational or transactional calls, such as appointment reminders or service updates, need only prior express consent (PEC), which can be oral. This distinction is critical because an “account check-in” that pivots to an upsell qualifies as marketing, regardless of how the call begins. For CallMyCustomers, whose campaigns range from seasonal reminders to upsell pivots, this means every outreach initiative must be classified by purpose before dialing, with consent records matching the required tier. A Fifth Circuit carve-out in Bradford v. Sovereign Pest Control allows oral consent for marketing AI calls in Texas, Louisiana, and Mississippi, but the other 47 states still enforce the FCC’s written-consent rule, and state law follows the consumer’s location. Non-compliance carries steep risks: TCPA statutory damages range from $500 to $1,500 per call with no aggregate cap, meaning a 10,000-call campaign could face $5 million to $15 million in exposure. To stay compliant, businesses must match consent to campaign purpose, maintain queryable per-number consent records, and honor revocations within ten business days across all channels—practices CallMyCustomers embeds into its process from list review to booking follow-up.

• Classify every campaign as marketing (PEWC required) or informational/transactional (PEC, possibly oral) before dialing
• Remember that purpose, not opening sentence, determines consent tier—an “account check-in” pivoting to an offer is marketing
• In Texas, Louisiana, and Mississippi, oral consent may suffice for marketing AI calls due to the Fifth Circuit carve-out; other 47 states require written consent
• Honor consent revocations within ten business days, recognizing any reasonable manner of opt-out across calls and texts
• Maintain real-time, queryable consent records linked to the specific number dialed, retained for at least four years

Building a Compliant Reactivation Workflow: From List to Booking

Reactivating a dormant customer list sounds simple until the dialer hits a number that shouldn't be called — and the FCC's February 2024 ruling made clear that AI-generated voices trigger the same consent rules as robocalls, regardless of how human they sound. The stakes are concrete: a non-compliant 10,000-call campaign carries $5 million to $15 million in statutory exposure before any court weighs actual harm. For a done-for-you reactivation service, that risk isn't abstract — it's the difference between a booked appointment and a class-action filing.

• Real-time DNC scrubbing at call initiation, not nightly batches, because numbers join the National DNC Registry daily and batch cycles miss new registrations
• Queryable consent records tied to each specific phone number, retained for the four-year TCPA statute of limitations
• Immediate opt-out honoring across all channels — calls, texts, and emails — exceeding the ten-business-day federal floor effective April 11, 2025
• Explicit consent collection in the booking flow, with AI disclosure baked in before the first dial

The infrastructure mirrors what the research demands: consent must be verifiable at the moment of dialing, linked to the exact number called, and documented with enough granularity to survive a four-year lookback. CallMyCustomers operationalizes this by working only from lists of real customers the business already serves, running every script and offer past the owner for approval before outreach begins, and routing replies directly into the client's booking process where fresh consent is captured. For dental, med spa, and clinic clients, the same workflow operates under BAA/HIPAA agreements with A2P 10DLC registration — consent, disclosure, and opt-out mechanics all aligned to clinical standards. The result is a reactivation engine that treats compliance as infrastructure, not an afterthought.