The Registry Isn't a Blanket Ban: Why Exemptions Matter to Your Business

More than 221 million phone numbers now sit on the National Do Not Call Registry — yet if you've picked up your phone lately, you know plenty of calls still come through legally. That apparent contradiction confuses business owners every day, and misunderstanding it can be expensive.

The Registry, operational since 2003, was never designed to silence all callers. According to the FTC, it exists to stop unwanted sales calls — while explicitly preserving room for legitimate outreach. Political calls, charitable solicitations, surveys, and calls to customers you already have a relationship with all remain permissible under specific conditions.

The stakes for getting this wrong are serious. Violations of the Telemarketing Sales Rule can cost up to $53,088 per call, per FTC guidance. Separately, the Telephone Consumer Protection Act carries statutory damages of $500 to $1,500 per call or text — and unlike TSR penalties, TCPA damages can be pursued through private lawsuits by the consumers themselves, as compliance analyses note.

Enforcement isn't theoretical. The 7th Circuit's ruling in U.S. v. DISH Network held the company liable for roughly 66 million marketing calls made by third parties, per Davis Wright Tremaine's case analysis. And in fiscal year 2023 alone, the FTC collected more than 1.2 million DNC complaints through its Consumer Sentinel Network.

Why does this matter so much for service businesses? Because the campaigns most likely to drive repeat revenue — reactivation, renewal, and reminder outreach — operate right at the edge of these rules. The FTC's established business relationship exemption allows calls to past customers for 18 months after their last transaction, but that clock can start earlier than you think. After the DISH Network ruling, the 18-month window may be measured from the customer's last payment — a distinction that hits businesses with prepaid or advance-payment models hardest.

Before you dial a single past customer, you need clarity on three things:

• Which exemption actually covers the call you're making — EBR, prior express written consent, or something else
• When your exemption window opened and when it closes, based on payment dates rather than assumptions
• Whether any exemption survives a customer's direct opt-out request — because none do

As compliance experts put it, exemptions exist to preserve legitimate business outreach — but only when applied with precision and documentation. Treating them as blanket permissions is exactly how violations happen. That's why CallMyCustomers works exclusively from lists of real customers with every message approved before it goes out: the exemption is real, but only if you can prove it applies.

The Six Exemptions: Political, Charitable, Survey, B2B, Consent, and Established Business Relationship

The National Do Not Call Registry holds more than 221 million numbers, yet millions of perfectly legal calls reach those numbers every day. The reason is simple: federal law carves out six exemptions that let certain callers through — but each one comes with sharp edges that catch unprepared businesses.

Political calls sit outside the Telemarketing Sales Rule entirely. As the FTC's official guidance explains, political solicitations are not covered by the TSR because they fall outside its definition of "telemarketing." That's why campaign season floods your phone regardless of your registry status.

Charitable calls are exempt when the charity calls on its own behalf. But this exemption is narrower than it looks. The FTC cautions that an organization recognized by the IRS as tax-exempt is not necessarily an exempt organization for registry purposes, and it has challenged groups that merely generate leads for for-profit partners. A charitable call that slides into a sales pitch loses its protection.

Survey calls remain permissible, provided the survey is genuinely a survey. The moment questions pivot toward selling a product or service, the call becomes telemarketing and the registry rules apply in full.

B2B calls selling to another business are generally exempt — though the FTC proposed revisiting this exception in 2022, citing remote-work shifts and deceptive marketing aimed at small businesses. Note that calls to employees about personal purchases are still consumer calls.

Prior express written consent and the established business relationship (EBR) matter most to service businesses. The EBR window runs 18 months from the last purchase or payment, and 3 months from an inquiry or application. The 7th Circuit's 2020 DISH Network ruling tightened this further: the 18-month clock starts at the consumer's last payment, not the purchase or delivery date.

The key limits to remember:

• No exemption overrides an entity-specific opt-out — a customer who asks you to stop must be honored immediately.
• Violations carry fines up to $53,088 per call.
• Exemptions require documentation, not assumptions — compliance experts warn they're where programs fail.

This is why CallMyCustomers works exclusively from lists of real customers with documented relationships, tracks recency by payment date, and honors every opt-out the moment it arrives. For a home services company or clinic reactivating past clients, the EBR exemption is the entire legal foundation — and precision is what keeps it intact.

The EBR Window Is Where Compliance Programs Fail: The DISH Network Lesson

The established business relationship (EBR) exemption looks simple on paper — 18 months of permission after a transaction — but it is the exemption most likely to sink a compliance program. The reason: most businesses measure the clock from the wrong starting point.

In 2020, the Seventh Circuit ruled in U.S. v. DISH Network that the 18-month EBR window runs from the consumer's last payment — not the purchase date and not the delivery date. The case, which involved roughly 66 million marketing calls made by third parties, reshaped how companies must calculate the exemption. The trial court's $280 million award was vacated and remanded, but the EBR interpretation stands.

Legal analysts at Davis Wright Tremaine flagged the operational fallout immediately: "Ratcheting back to date of last payment could be operationally disruptive" for businesses like newspaper or magazine publishers, or health club or other membership services — which may be paid in advance — because the paid-for period can extend far into or beyond the 18-month EBR window, greatly limiting renewal and win-back calls to former customers on the registry.

For service businesses paid in advance — memberships, clinics with prepaid treatment plans, annual service agreements — this ruling cuts both ways:

• A customer who prepaid a 12-month membership in January has an EBR running from that payment date, not from their last visit.
• A prepaid service plan extends the calling window only if the payment itself is recent enough — the delivery of later services does not restart the clock.
• Businesses relying on "last service date" records may be calling outside the exemption without knowing it.
• Segmenting lists by payment date, not activity date, is the only defensible approach.

Two related rules sharpen the picture. The FCC clarified that for financial agreements, the EBR lasts for the life of the agreement plus 18 months after it ends. But a third-party intermediary, such as a mortgage or insurance broker, gets no such extended window — only 18 months after the transaction is completed.

The stakes are real: TSR violations carry penalties of up to more than $53,000 per call. As compliance experts at PossibleNOW put it, "Exceptions are where compliance programs fail because they require evidence and consistency" — document why the exemption applies, and enforce opt-outs without exception.

This is why any reactivation program worth running — whether handled in-house or through a done-for-you service like CallMyCustomers — should start by segmenting the customer list by payment recency, so every call sits comfortably inside the window.

Exemptions Have Limits: Entity-Specific Opt-Outs and Documentation Requirements

Here's the uncomfortable truth about DNC exemptions: none of them are absolute. Even if a call fits neatly into an exempt category, two rules can still make it illegal — and businesses that forget this account for a meaningful share of the more than 1.2 million DNC complaints filed through the Consumer Sentinel Network in fiscal year 2023.

The first override is the entity-specific opt-out request. A consumer can ask any specific business — even one calling under a valid exemption — to stop calling, and that request must be honored immediately. No exemption status changes this. As compliance experts at PossibleNOW put it, organizations must "keep opt-out rules enforced without exceptions," regardless of which exemption the call relies on.

The second override is documentation. Exemptions don't work on faith — they require proof. A business claiming the established business relationship (EBR) exemption needs transaction dates, inquiry timestamps, and consent records on hand. And the EBR clock has teeth: under the 7th Circuit's 2020 ruling in U.S. v. DISH Network, the 18-month window must be measured from the consumer's last payment date, not the purchase or delivery date. That distinction matters enormously for businesses paid in advance, like membership services and clinics, where the paid-for service period can stretch well past the 18-month mark and quietly eliminate the ability to make renewal or win-back calls.

The B2B exemption carries its own trap. While calls selling to another business are generally exempt, calls to employees about personal purchases remain consumer telemarketing — even at a workplace number. The FTC has also signaled growing scrutiny here, proposing in 2022 to reconsider the B2B exception amid remote-work shifts and concerns about deceptive marketing to small businesses.

What this means in practice:

• Log the transaction date, inquiry date, and any consent documentation for every exemption claim
• Measure EBR windows from the last payment, per the DISH Network ruling
• Treat any "stop calling" request as immediate and final, no matter the exemption
• Never assume B2B status covers calls about an employee's personal purchase

The stakes for getting this wrong are steep: TSR violations can cost up to $53,088 per call, and TCPA statutory damages run $500 to $1,500 per call or text, according to compliance research. The same experts warn that "without centralized controls, organizations risk treating exemptions as blanket permissions, and that is exactly how violations occur."

This is why permission-based outreach matters. At CallMyCustomers, every reactivation campaign works only from real customer lists, with opt-outs honored immediately and every script approved before anything goes out — because legitimate outreach to known customers only works when it's applied with precision.

Running Compliant Reactivation Campaigns: A Practical Checklist

Running Compliant Reactivation Campaigns: A Practical Checklist

Reactivating past customers requires more than a good offer—it demands strict adherence to do-not-call exemptions to avoid costly violations. The National Do Not Call Registry now contains over 221 million registered numbers, and each non-compliant contact can trigger fines exceeding $53,000 under TCPA and TSR rules. For repeat-cycle businesses, compliance starts with working only from verified customer lists where an established business relationship (EBR) applies.

Measure the 18-month EBR window from the customer’s last payment, not the service date or invoice, as clarified by the 7th Circuit ruling in U.S. v. DISH Network. This prevents premature cutoff for businesses with advance payment models like memberships or seasonal service contracts. Always collect explicit consent at booking—whether via phone, text, or email—to strengthen your legal foundation beyond EBR alone. Honor every opt-out request immediately, regardless of exemption status, since no exemption overrides a consumer’s direct request to a specific business.

Document every exemption claim with transaction dates, inquiry timestamps, and consent records to support your position if questioned. Before launching any campaign, run a free list review to see what portion of your customer base can legally be contacted—this step ensures you’re not spending on outreach that could violate regulations. CallMyCustomers handles this compliance layer by working only from real customer data, using owner-approved scripts, and honoring opt-outs in real time, so your reactivation efforts stay both effective and lawful.