
Does the TCPA require prior express consent for telemarketing calls that use an autodialer?
Key Facts
- TCPA statutory damages are $500 per violation, up to $1,500 for willful or knowing violations according to compliance analysis
- Each individual text can count as a separate TCPA violation, scaling exposure with list size as noted in TCPA guidance
- Lawsuits can reach back four years, creating long-tail liability for businesses per TCPA compliance resources
- Written consent must include a signed agreement, specific seller name, authorized phone number, and disclosure that consent is not a condition of purchase per regulatory guidance
- Dual-purpose messages combining marketing and informational content are treated as telemarketing, requiring written consent per legal practitioners
- Consumers may revoke consent by any reasonable method, with opt-outs required to be honored within ten business days per FCC revocation rules
- Telemarketing calls are prohibited between 9:00 p.m. and 8:00 a.m. in the recipient's local time zone per compliance attorneys
The Short Answer: Written Consent Is Required for Autodialed Telemarketing
Yes — and the bar is higher than most business owners expect. If you want to market to customers using an autodialer or prerecorded voice, the TCPA doesn't just ask for consent; it demands prior express written consent, as defined in 47 CFR 64.1200(f)(9). That standard applies to any call or text whose purpose is marketing, and it's the strictest consent tier the TCPA recognizes.
The rules tier consent by the purpose of the message, not the sender or the channel. Consent guidance draws the line clearly: a hospital's appointment reminder needs only prior express consent, while the same hospital's promotional text requires written consent. And be careful with blended messages — Hunton's regulatory attorneys note that dual-purpose messages combining marketing and informational content are treated as telemarketing, triggering the written-consent requirement.
Two common assumptions trip businesses up. First, verbal consent doesn't rescue you. For autodialed marketing, prior express invitation or permission applies only to manually dialed calls — a customer saying "sure, call me sometime" doesn't satisfy the written, signed agreement the regulation requires. Second, the established business relationship (EBR) exception doesn't apply when an autodialer or prerecorded message is involved, even though it permits some manual calls for 3 to 18 months under the FTC's rules, as compliance analysis explains.
Valid written consent must include these elements:
- A signed agreement — electronic signatures count under the E-SIGN Act
- Clear authorization naming the specific seller and the exact phone number to be contacted
- Disclosure that consent is not a condition of purchase — no pre-checked boxes or buried terms
- Documentation: the exact consent language, timestamp, collection method, and authorized number, retained for at least the four-year statute of limitations
The stakes justify the paperwork. TCPA statutory damages run $500 per violation, up to $1,500 for willful or knowing violations, and each individual text can count as a separate violation — so exposure scales with list size. Hunton's attorneys also report a "dramatic increase in TCPA litigation" overall.
This is why documentation matters as much as collection. Many organizations collect written consent up front for the entire relationship, since it covers both informational and marketing outreach. At CallMyCustomers, that principle shapes how reactivation campaigns are built: outreach runs only from lists of real customers, consent is captured explicitly in the booking flow, and every script and message is approved by the owner before anything is sent. The goal isn't just compliance on paper — it's a defensible record of permission that stands up if a campaign is ever questioned.
What Valid Written Consent Actually Requires (and What It Costs to Get Wrong)
What Valid Written Consent Actually Requires (and What It Costs to Get Wrong)
A signed agreement is the foundation of valid written consent under the TCPA, and electronic signatures are legally valid under the E-SIGN Act. This consent must clearly name the specific seller, authorize calls to a particular phone number, and disclose that consent is not a condition of purchase. Without these elements, even a signed document fails to meet the legal standard for prior express written consent.
The "clear and conspicuous" test determines whether a reasonable consumer would understand exactly what they’re agreeing to before taking action. This means no pre-checked boxes, buried terms in fine print, or vague language that obscures the nature of the authorization. Regulators and courts apply this standard rigorously, especially in telemarketing contexts where autodialers are used.
Violations carry steep financial risks: statutory damages range from $500 to $1,500 per call or text, with willful or knowing violations triggering the higher end of that range. Each individual communication can be treated as a separate violation, meaning exposure scales quickly with list size. Lawsuits can also reach back four years, creating long-tail liability for businesses that fail to maintain proper documentation.
- Retain the exact consent language, timestamp, collection method, and authorized phone number
- Preserve records for at least the four-year statute of limitations (4+ years recommended)
- Use tools like TrustedForm to store documentation for up to five years
For a reactivation service like CallMyCustomers, this means ensuring the booking flow captures all required consent elements when collecting phone numbers for future outreach. The business making the call — not a lead seller — bears full liability if consent is invalid, making accurate documentation not just a compliance task but a critical risk management practice. Getting this wrong isn’t just costly; it’s preventable with the right process in place.
Documenting Consent: Your Compliance Linchpin
Unrecorded consent is indefensible. When a plaintiff's attorney asks for proof that a customer agreed to receive marketing calls, a verbal assurance or a missing spreadsheet row will not hold up — courts and regulators treat missing documentation as missing consent. The TCPA's four-year statute of limitations means your records must survive at least that long, and practitioners recommend retaining them for 4+ years to cover the full exposure window.
Every consent record should capture five immutable elements: the exact disclosure language the consumer saw, the timestamp of agreement, the collection method (web form, paper, IVR, in-person), the specific phone number authorized, and the version history of the disclosure text itself. FRANSiS notes that organizations unable to produce any record of how a number was obtained are in a materially weaker position than those with even a basic timestamped log. Tools such as TrustedForm Retain store this evidence for up to five years, aligning with the recommended retention horizon.
- Exact consent language presented to the consumer
- Timestamp and collection method (form, paper, IVR, in-person)
- Authorized phone number and disclosure version ID
- Signed agreement (electronic signatures valid under the E-SIGN Act)
- Clear statement that consent is not a condition of purchase
Revocation rules tightened in 2024. Consumers may revoke by any reasonable method — callers cannot designate an exclusive opt-out channel — and a text "STOP" must also stop calls. The FCC's final rule requires honoring revocations within ten business days and identifies seven per se revocation keywords: "stop," "quit," "end," "revoke," "opt out," "cancel," and "unsubscribe." A one-time confirmation text sent within five minutes is presumed valid so long as it contains no marketing content.
At CallMyCustomers, the booking flow collects explicit consent with all required elements before any outreach begins, and our done-for-you campaigns honor opt-outs immediately across every channel — calls, texts, and emails — because reactivation only works when permission is real, documented, and respected.
Classifying Your Messages and Keeping Your Lists Clean
Before you hit send on any reactivation outreach, pause and classify the message by its dominant purpose — a mixed reminder-plus-offer text is treated as telemarketing and demands written consent, while a pure appointment reminder needs only prior express consent. The FCC and courts apply this tiered framework consistently: marketing messages sent via autodialer require prior express written consent under 47 CFR 64.1200(f)(9), whereas informational calls need only the lower standard. Regulatory guidance confirms that dual-purpose messages default to the stricter tier, so a seasonal tune-up reminder bundled with a discount offer crosses the line into telemarketing territory. Legal practitioners advise classifying every campaign before it launches, because misclassification is one of the most common — and expensive — compliance gaps.
List hygiene is the second pillar. Scrub every list against the National Do Not Call Registry and the Reassigned Numbers Database before each wave, maintain an internal do-not-call list that honors opt-outs immediately, and restrict telemarketing calls to the 8 a.m.–9 p.m. window in the recipient's local time zone. Compliance attorneys emphasize that these steps are non-negotiable: the TCPA's four-year statute of limitations and statutory damages of $500–$1,500 per violation mean a single dirty list can trigger exposure that scales with volume. Industry data shows lawsuits can reach back four years, so retention of consent records for at least that period is essential.
- Classify every message by dominant purpose before sending — mixed content defaults to telemarketing
- Scrub against the National DNC Registry and Reassigned Numbers Database before each campaign
- Maintain an internal do-not-call list and honor opt-outs across all channels immediately
- Restrict telemarketing calls to 8 a.m.–9 p.m. in the recipient's local time zone
- Retain signed consent language, timestamps, and authorized numbers for 4+ years
CallMyCustomers builds these checks into every reactivation campaign — list review, message classification, and consent verification happen before the first call is placed, so outreach stays compliant and conversations stay productive.
Running Compliant Reactivation Campaigns Without the Compliance Headache
Reactivating a past customer should be the easiest revenue you ever earn — until you realize one wrong text could cost $500. With TCPA statutory damages running $500 to $1,500 per violation and lawsuits reaching back four years, many service businesses simply let their list go cold rather than risk it.
That's a shame, because the compliance framework is manageable when someone builds it into the process from the start. A done-for-you reactivation service like CallMyCustomers handles the heavy lifting: consent collected explicitly in the booking flow, every message classified before it's sent, and documentation retained so there's a defensible record if questions ever arise.
The first piece is consent. Because reactivation outreach blends reminders with offers, dual-purpose messages are treated as telemarketing under the FCC's classification rules — meaning the strictest consent standard applies. Collecting that consent during booking, when the customer is already engaged, captures the signed agreement, the authorized number, and the required disclosures in one clean step.
The second piece is classification and approval. Every campaign message — script, offer, and follow-up — is reviewed and classified by purpose before anything goes out, and the business owner signs off on all of it. This matters legally and practically: it ensures mixed reminder-plus-offer messages carry the right consent level, and it keeps the outreach sounding like your business, not a call center.
The third piece is honoring opt-outs, immediately. Under the FCC's 2024 revocation rules, consumers can revoke consent by any reasonable method — a text saying "stop" stops everything, including calls. A compliant campaign process treats those keywords as instant, permanent exits across every channel.
A properly run reactivation campaign covers the essentials:
- Explicit consent language captured in the booking flow, with timestamps and the exact disclosure text retained
- Every message classified as marketing or informational before sending, with owner approval of each script and offer
- Opt-out keywords honored immediately across calls, texts, and emails
- Calling restricted to 8:00 a.m.–9:00 p.m. in the recipient's local time
Documentation ties it all together. As compliance practitioners note, auditable proof of when, where, and how consent was obtained is what defends against a claim — records should be kept for at least the four-year statute of limitations. Businesses that can't produce a timestamped log of how a number was collected are in a far weaker position than those who can.
The result is outreach that feels like what it is: a useful reminder from a business the customer already knows. Permissioned, documented, owner-approved reactivation isn't just the safe legal path — it's the one that turns dormant lists into booked work, campaign after campaign.
Frequently Asked Questions
Do I need written consent to use an autodialer for telemarketing calls or texts?
Can I rely on verbal consent or an established business relationship when using an autodialer for marketing?
What makes written consent valid under the TCPA for autodialed telemarketing?
What are the financial risks if I send autodialed telemarketing without proper written consent?
How long must I keep records of consumer consent for telemarketing calls?
How do I handle opt-outs under the TCPA's 2024 revocation rules?
Permission Is the Engine, Documentation Is the Shield
The TCPA draws a bright line: autodialed telemarketing demands prior express written consent — signed, specific, and documented — while informational messages need only the lower tier. Verbal agreements and established business relationships don't bridge the gap, and dual-purpose messages default to the stricter standard. With statutory damages of $500 to $1,500 per call or text and a four-year lookback window, the cost of a messy list or missing timestamp scales fast. The fix is practical: collect the strictest consent up front in the booking flow, classify every message before it sends, honor opt-outs instantly across every channel, and retain the exact disclosure language, timestamp, and authorized number for at least four years. CallMyCustomers builds those steps into every reactivation campaign so outreach stays compliant and conversations stay productive. If your customer list has gone cold because the compliance overhead felt too heavy, start with a free list review — you'll see the rate, the setup, and what your list can produce before spending a dollar.