Understanding the Shrinking Landscape of TCPA Exemptions

The days of broad, unconditional TCPA exemptions are gone. Before December 2020, non-marketing prerecorded calls to residential landlines were categorically exempt; today, the FCC caps those same calls at three per 30-day period and requires every exempt call to include an opt-out mechanism per the FCC's 2020 Report and Order. The TRACED Act forced this shift, mandating that the FCC codify exemptions with clear call limits and consumer protections rather than leaving them open-ended as Wiley's analysis details.

For service businesses running reactivation campaigns, this means the playbook has changed. The established business relationship (EBR) window still permits calls to DNC-listed numbers within 18 months of a transaction or three months of an inquiry according to Gryphon's compliance guide, and consent may be presumed when a customer knowingly provides their number in the normal course of business as MSLaw Group notes from the FCC's 1992 guidance. But even these pathways now carry conditions: company-specific opt-out requests override the EBR entirely, and the April 2025 Opt-Out Rule requires businesses to honor revocations within ten business days per BCLP's breakdown.

• Non-commercial and non-telemarketing calls to residences: three calls per 30 days with opt-out required
• Healthcare/HIPAA calls to landlines: one per day, up to three per week, opt-out required
• Tax-exempt nonprofit charitable solicitations: three calls per 30 days, DNC scrubbing mandatory
• Emergency-purpose calls: fully exempt from consent and opt-out requirements

At CallMyCustomers, we structure every reactivation campaign around documented prior express consent and the EBR window — never on exemption claims alone. The cost of getting it wrong is steep: statutory damages of $500–$1,500 per violation with no cap, plus potential FCC enforcement actions reaching $16,000 per violation as BCLP outlines. State-level mini-TCPA laws in Florida, Maryland, Oklahoma, and eleven states with their own DNC registries add another layer of complexity that ActiveProspect's analysis highlights. The safest reactivation strategy is also the simplest: call people who already know you, with messages they've agreed to receive, and stop the moment they say so.

Key Exemptions Relevant to Customer Reactivation Campaigns

For service businesses looking to reconnect with past customers, understanding which TCPA exemptions apply is essential for lawful outreach. The most relevant exemptions for customer reactivation campaigns are the Established Business Relationship (EBR), implied consent, and healthcare/HIPAA-related calls—each with specific limits and conditions that must be followed to avoid violations.

The EBR exemption permits calls to numbers on the National Do Not Call Registry if the call is made within 18 months of a purchase, transaction, or payment, or within 3 months of an inquiry or application according to Gryphon.ai and MSLaw Group. This window is particularly valuable for home service providers, automotive shops, and wellness clinics seeking to re-engage customers after a service visit or quote. However, this exemption does not override company-specific do-not-call requests, which must be honored indefinitely per MSLaw Group.

Implied consent applies when a customer knowingly provides their phone number during the normal course of business, such as when scheduling an appointment or completing a service transaction as noted by DNC.com and supported by MSLaw Group citing FCC guidance. This form of consent is not explicitly defined in TCPA but has been upheld in limited non-marketing contexts, making it suitable for service reminders or post-visit follow-ups when the call is closely related to the original interaction.

For dental, med spa, and clinic clients, healthcare/HIPAA-related calls are exempt under strict limits: no more than one prerecorded call per day and up to three calls per week to residential landlines per Wiley Law and per ActiveProspect. These calls must pertain strictly to treatment, appointments, or health information—marketing offers do not qualify for this exemption. All exempt calls to residences must include a clear opt-out mechanism, except for emergency-purpose calls as required by the FCC’s 2020 ruling.

• EBR allows calls within 18 months of a transaction or 3 months of an inquiry
• Implied consent applies when a customer knowingly shares their number in business interactions
• Healthcare calls are limited to 1 per day, 3 per week, with opt-out required
• All exempt residential calls must honor opt-outs within 10 business days effective April 11, 2025
• Company-specific DNC requests override EBR and implied consent

CallMyCustomers helps service businesses navigate these exemptions by ensuring every reactivation campaign is built on documented customer relationships, timely outreach within EBR windows, and strict adherence to call limits and opt-out requirements—turning past customers into booked work without regulatory risk.

Practical Compliance Steps for Safe and Effective Reactivation Outreach

Practical Compliance Steps for Safe and Effective Reactivation Outreach

To keep reactivation campaigns both effective and compliant, businesses must move beyond assumptions and build processes that reflect current TCPA realities. Start by scrubbing your customer list against the National Do Not Call Registry every 31 days, as required by federal law, to avoid calling numbers that have opted out of telemarketing. This step is non-negotiable, even for customers with whom you have an established business relationship, because company-specific DNC requests override all other permissions and must be honored immediately and indefinitely. Honoring opt-outs promptly is not just courteous — it’s a legal necessity under rules that now require businesses to act within ten business days of a revocation request, down from the previous 30-day window.

Next, classify every outreach attempt as either marketing or informational, and document that distinction clearly. Under the FCC’s Opt-Out Rule effective April 11, 2025, a consumer’s revocation of consent in response to an informational message — such as a service reminder or appointment confirmation — terminates all future non-emergency contact, while a revocation to a marketing message only stops further marketing efforts. This distinction has real consequences for reactivation campaigns that blend service reminders with special offers, making accurate message tracking essential to avoid unintended communication bans. Misclassifying message types could result in losing the ability to re-engage a customer entirely, even if the original outreach was well-intentioned.

Finally, maintain thorough consent documentation for at least four years, aligning with the TCPA’s statute of limitations, and verify state-specific rules before launching any campaign. Eleven states — including Florida, Texas, and Pennsylvania — operate their own DNC registries, and states like Florida have autodialer definitions so broad they may encompass standard CRM or outreach tools, potentially bringing otherwise exempt calls under state-level TCPA-like statutes. Checking state law is especially critical for businesses using automated workflows, as what complies federally may still violate stricter mini-TCPA rules at the state level. By integrating these steps — DNC scrubbing, message type tracking, consent retention, and state law checks — CallMyCustomers helps ensure reactivation outreach remains permission-based, respectful, and legally sound while maximizing the chance to reconnect with past customers.