TCPA Compliance for Call Centers: A Practical Guide

TCPA compliance for call centers: consent rules, the Telemarketing Sales Rule, the Do Not Call Registry, calling hours and STIR/SHAKEN for outbound programs.

What is TCPA compliance for a call center?

TCPA compliance for a call center means running outbound calls and texts within the Telephone Consumer Protection Act and the rules built around it. In practice that means holding the right consent before using automated dialing, prerecorded voices or marketing texts, honoring Do Not Call requests and registries, calling only within permitted hours, and identifying the caller honestly.

The TCPA is a US federal law, enforced by the Federal Communications Commission and through private lawsuits. It sits alongside the Telemarketing Sales Rule, which the Federal Trade Commission enforces, and alongside state laws that sometimes go further. A compliant outbound program has to satisfy all of them at once. This guide sets out the general rules as a working checklist. It is not legal advice, the rules are interpreted by regulators and courts over time, and every program should confirm its specific obligations with counsel before dialing.

The guide is written for anyone running outbound work: telemarketing services, lead follow-up, appointment setting, renewals or collections. For how the calls themselves are structured, see cold calling scripts.

What consent does the TCPA require?

The TCPA requires consent that depends on the type of call, the technology used and the type of phone reached. The general structure is below; the definitions behind each term, such as what counts as an automatic telephone dialing system, have been argued over in court, so treat this as a map rather than a ruling.

• Prior express written consent. Generally required for telemarketing calls or texts to a mobile phone using an autodialer or an artificial or prerecorded voice, and for prerecorded telemarketing calls to residential lines. It must be a signed agreement, electronic signatures included, that clearly authorizes the seller to make such calls to a specific number.
• Prior express consent. Generally enough for non-marketing calls or texts to a mobile phone using an autodialer or prerecorded voice, such as account notices, and can often be given orally or by providing the number for that purpose.
• Manually dialed calls. Live, manually placed telemarketing calls do not trigger the autodialer consent rules, but they remain subject to Do Not Call rules, calling hours and identification requirements.
• Revocation. A person may withdraw consent by any reasonable means, and the withdrawal must be honored promptly across every channel and vendor.

Consent belongs to the number and the seller, not to the call center. Keep a record of when, where and how each consent was captured, including the exact wording shown to the person. Numbers also change hands, so check them against the FCC's reassigned numbers database before calling on old consent.

What does the Telemarketing Sales Rule add?

The Telemarketing Sales Rule adds requirements on what is said during sales calls and how calls are placed, on top of the TCPA's consent rules. It applies to most interstate telemarketing to consumers, and it covers both sellers and the telemarketers who call for them.

• Prompt disclosures. At the start of an outbound sales call, the caller must identify the seller, state that the purpose is to sell, and describe what is being sold.
• Material terms. Before the customer pays, the caller must disclose costs, conditions and refund or cancellation policies that apply.
• No misrepresentation. Misleading statements about the product, its terms or the seller are prohibited.
• Caller ID transmission. Telemarketers must transmit a caller ID number, and a name where available, that the person can call back.
• Abandoned calls. Predictive dialers must connect answered calls to a live agent promptly, and abandonment must stay within the limits the rule sets.
• Prerecorded messages. Prerecorded sales messages generally require the person's prior written agreement and an automated opt-out.
• Recordkeeping. Sellers and telemarketers must keep specified records, such as scripts, call details and consents, for the period the rule sets.

Call recordings help prove what was disclosed, and they carry their own consent rules. See call recording compliance for the general approach.

How does the National Do Not Call Registry work for call centers?

The National Do Not Call Registry is a federal list of phone numbers whose owners have asked not to receive telemarketing calls, and call centers must remove registered numbers from sales campaigns unless an exemption applies. Sellers access the registry, pay for the area codes they call, and scrub their lists against it on the schedule the rules set.

Three related obligations sit alongside the national registry. First, each seller must keep its own internal Do Not Call list and honor requests made directly to it, even from people not on the national registry. Second, many states keep their own registries or set stricter rules, so a national scrub may not be enough. Third, there are limited exemptions, such as an established business relationship or a person's written permission, but they are narrow, they expire, and they do not override the autodialer consent rules for mobile phones.

Not every call is covered. Calls that are not telemarketing, such as purely informational account calls, are generally outside the Do Not Call rules, though they may still need TCPA consent if made with an autodialer or prerecorded voice. Political, charitable and survey calls have their own treatment.

What calling hours apply to telemarketing?

Federal rules allow telemarketing calls to residential consumers only between 8 a.m. and 9 p.m. in the called person's local time. The time is set by where the person is, not where the call center is, so dialing systems need to apply the correct time zone to every number.

Several states set narrower windows, restrict calls on weekends or certain holidays, or limit how many times the same person may be called in a period. Area codes are not a reliable guide to location, because mobile numbers travel with their owners. Many programs use the stricter of the area code and the known address, and restrict calling to the hours that are permitted in both.

What is STIR/SHAKEN and why does it matter?

STIR/SHAKEN is a caller ID authentication framework that US phone carriers use to digitally sign calls, so the receiving carrier can verify that the calling number has not been spoofed. It matters to call centers because calls with weak or missing authentication are more likely to be labeled as suspected spam or blocked, which cuts answer rates.

• Full attestation. The originating carrier knows the customer and confirms the customer is authorized to use the calling number.
• Partial attestation. The carrier knows the customer but cannot confirm the right to use that specific number.
• Gateway attestation. The carrier is passing the call along and cannot vouch for its origin.

To protect call delivery, use numbers you own or are clearly authorized to use, register them with the analytics services carriers rely on, keep call volume per number reasonable, and work with carriers that sign your calls with full attestation. Never alter caller ID to mislead; the Truth in Caller ID Act prohibits spoofing with intent to defraud or cause harm.

How do you build a TCPA-compliant outbound program?

Build a TCPA-compliant outbound program by turning the rules into controls that run before every dial, not reviews that happen afterwards. The checklist below is a general method; have counsel review it against your campaigns, states and channels.

• Consent records. Store the source, wording, date and number for every consent, and suppress any number without valid consent for the call type.
• List scrubbing. Scrub against the national registry, relevant state lists, the internal Do Not Call list and reassigned number data before every campaign.
• Time-zone rules. Enforce calling windows in the dialer, using the stricter applicable rule.
• Scripts. Build the required disclosures into every sales script and review recordings for them.
• Opt-outs. Capture opt-out requests on any channel and apply them across every list and vendor quickly.
• Vendor oversight. Sellers can be held liable for calls made on their behalf, so audit any team calling for you.

The service side is covered on outbound call center services and telemarketing outsourcing, and the broader context on BPO services. If you want an outbound team that works to these controls, request a proposal with your campaign type and calling regions.

Sources and References

The laws, standards and certifications this page refers to, linked to their official text or publisher.

1. TCPA (Telephone Consumer Protection Act), 47 U.S.C. § 227, Legal Information Institute, Cornell Law School: consent rules for autodialed, prerecorded and text outreach.
2. Telemarketing Sales Rule, 16 CFR Part 310, Electronic Code of Federal Regulations: disclosures, calling hours and abandoned-call limits for telemarketing.
3. National Do Not Call Registry, Federal Trade Commission: numbers that telemarketers may not call.
4. STIR/SHAKEN caller ID authentication, Federal Communications Commission: caller ID authentication on voice networks.