Understanding When Prior Express Written Consent Is Legally Required

One wrong dial can cost your business $500 to $1,500 per call — and the line between which calls require written consent versus a simple verbal "yes" trips up even seasoned marketers. Understanding where that line sits is the foundation of any compliant outbound campaign.

Under the TCPA, prior express written consent (PEWC) applies specifically to telemarketing or promotional communications — calls or texts that advertise or market a product or service. Per compliance guidance from ActiveProspect, PEWC is the highest standard of TCPA consent and is triggered when marketing content is delivered to a cell phone using an automatic telephone dialing system (ATDS), a prerecorded voice, or an artificial voice. If your campaign combines promotional content with automated dialing technology, written consent is the baseline requirement.

Not every automated call, however, crosses that threshold. Informational and transactional messages — appointment reminders, delivery notifications, account alerts — generally require only prior express consent (PEC), which may be verbal, according to the same ActiveProspect analysis. This distinction matters enormously for service businesses running customer outreach, where a renewal reminder may be informational while a promotional win-back offer is not.

The calls that trigger the PEWC requirement share common characteristics:

• Marketing or advertising content delivered via autodialer to a consumer's cell phone
• Prerecorded or artificial voice messages with a promotional purpose
• Texts marketing goods or services, where the message content must be "logically and topically associated" with the interaction that generated the consent, per Nelson Mullins
• Outreach built on purchased or third-party leads, where the calling business — not the lead seller — bears liability for invalid consent

The regulatory picture has shifted recently. The FCC's "one-to-one consent" rule, effective January 27, 2025, was vacated by the Eleventh Circuit, and the FCC later formally removed the requirement. Then, in February 2026, the Fifth Circuit ruled that the TCPA does not require written consent at all for automated calls — but only within that circuit, creating a jurisdictional patchwork.

For businesses like CallMyCustomers, which runs reactivation campaigns only for known customers with documented consent, this distinction between promotional and informational content shapes how every script is classified and approved. Because the TCPA's statute of limitations stretches back four years, businesses should retain consent records — timestamp, platform, and consumer interaction evidence — well beyond the campaign itself. When the content is promotional and the technology is automated, the safest answer is always: get it in writing.

Navigating Legal Uncertainty and Jurisdictional Variations in TCPA Enforcement

Just when businesses thought they understood TCPA consent rules, the courts upended the playbook. Between a vacated FCC rule and a circuit split on whether written consent is even required, the safest strategy is also the simplest: get clear, documented consent every time.

The FCC's "one-to-one consent" rule — which would have required separate written consent for each individual seller — was set to take effect January 27, 2025. But the Eleventh Circuit vacated it in January 2025, reinstating the broader standard where consent can cover multiple sellers if disclosures are clear, as compliance analysts noted. The FCC later issued a final rule formally removing the requirement after declining to appeal, meaning plaintiffs' attorneys now face significant challenges arguing one-to-one consent is mandatory.

Then the landscape shifted again. In February 2026, the Fifth Circuit ruled that the TCPA does not require prior express written consent at all for automated calls, holding that "prior express consent" encompasses both oral and written forms, according to Holland & Knight's analysis. That sounds like relief for marketers — but the ruling applies only within the Fifth Circuit, creating a jurisdictional patchwork where other federal circuits and state telemarketing statutes may still demand written consent.

Why does this matter practically? Because the stakes remain unchanged regardless of which court wins the argument:

• TCPA violations carry penalties of $500 to $1,500 per call, rising to the higher figure for willful violations
• The statute of limitations runs four years, so consent records must be retained 4+ years to survive litigation
• The business making the call — not the lead seller — bears liability for invalid consent
• Opt-out requests must be honored within 10 business days, with opt-out instructions required in every marketing text

The practical takeaway: legal uncertainty is not a compliance exemption. Consent must still be obtained via a "clear and conspicuous disclosure," and the content of each call must be "logically and topically associated" with the interaction that generated the consent, per FCC guidance. Businesses dialing across state lines cannot know which circuit's standard a plaintiff will invoke.

This is why disciplined operators treat documented consent as non-negotiable. CallMyCustomers, for example, works only from lists of real customers, honors opt-outs immediately, and collects explicit consent in its booking flow — a posture that holds up no matter how courts interpret the statute next. In a shifting legal environment, the businesses that thrive are the ones that plan for the strictest applicable standard, not the most permissive one.

Practical Steps to Obtain and Maintain Compliant Consent for Reactivation Campaigns

A single invalid consent record can cost $500 to $1,500 per call — and plaintiffs can reach back four years under the TCPA's statute of limitations, according to compliance experts at ActiveProspect. That makes how you collect and document consent just as important as whether you collect it at all.

Start with clear, conspicuous disclosures. The FCC requires that consent be obtained through a "clear and conspicuous disclosure" that explains exactly what the consumer is agreeing to receive, as Nelson Mullins notes. Your consent language should state that the customer agrees to receive marketing calls, texts, or emails — and the content of those messages must be "logically and topically associated" with the interaction that generated the consent.

Match consent to the campaign, not just the relationship. A blanket "we may contact you about anything" checkbox is weaker than consent tied to a specific purpose. For reactivation outreach, that means consent language connected to the actual relationship — a past service, an old quote, a membership renewal — so every campaign has a defensible reason to exist.

Then document everything. If a dispute arises, the business making the call bears the burden of proving consent is valid — not whoever collected it. Your records should include:

• Timestamps showing exactly when consent was captured
• The platform or channel where the consumer agreed (booking form, website, point of sale)
• The specific disclosure language the customer saw at that moment
• Retention for at least four years — tools like TrustedForm store certificates for up to five years to cover the full limitations window

Honoring opt-outs is where many businesses stumble. The FCC's revocation rules require opt-out instructions in every marketing text and honoring internal do-not-call requests within 10 business days, with provisions effective April 11, 2025. Consumers can revoke consent through any reasonable channel — a text reply, phone call, or email — and businesses must honor it across all of them.

This is where an approval-based, done-for-you model helps. CallMyCustomers works only from lists of real customers, honors opt-outs immediately, and routes every script and offer through the owner's sign-off before anything goes out. Because the client approves each message and the campaign has a documented reason to reconnect — a seasonal reminder, a renewal window, an old quote — the consent story and the outreach story stay aligned.

Finally, stay alert to the shifting legal landscape. With conflicting rulings from the Eleventh and Fifth Circuits and the FCC's withdrawal of the one-to-one consent requirement, the safest path is to build to the most stringent applicable standard: documented, campaign-specific, promptly revocable consent.