Does TCPA apply to business to business calls?

The TCPA Doesn’t Exempt Business Calls — Here’s Why That Matters

If your sales team assumes the TCPA only protects consumers answering their home phones, that assumption could cost you six figures. The statute draws no line between a consumer's cell phone and a business's front desk when the call is telemarketing delivered by autodialer or prerecorded voice.

The TCPA's core prohibitions target the technology and content of a call, not the identity of the recipient. Nothing in the statute or in FCC regulations carves out an exemption for calls placed to a business, according to legal analysis from Cooley LLP. If you're using an automatic telephone dialing system or an artificial voice to pitch a product or service, the consent requirements apply — whether the person on the other end is a homeowner or a purchasing manager.

Why does the "consumer protection law" label persist? Because enforcement and class action activity have historically concentrated on consumer-facing calls. But as Cooley notes, the TCPA is already a major source of class action litigation, and new rules give "an aggressive plaintiffs' bar" fresh ammunition for pressure-testing the marketplace. A business line with a human answering it is a viable plaintiff.

The financial exposure is real, not theoretical:

• $500–$1,500 in statutory damages per unauthorized call or text, with no requirement to prove actual injury, per BCLP's analysis of TCPA penalties.
• Keller Williams faced fines as high as $40 million over TCPA violations tied to lead-generation practices.
• Final Expense Direct paid hundreds of thousands in penalties plus a $100,000 lawsuit — because a lead agency's compliance failures became the buyer's problem.

That last point deserves emphasis for anyone buying leads: TCPA liability follows the call, not the vendor. When a lead supplier cuts corners on consent, the business making the call absorbs the risk. This is why consent documentation matters as much as lead quality — a position GrowthPros takes seriously, attaching a consent record with disclosure text, timestamp, IP address, and the named contacting party to every lead delivered.

The regulatory landscape is also shifting under everyone's feet. The FCC's December 2023 order moved to close the "lead generator loophole" by requiring consent one seller at a time, and extended National DNC Registry protections to marketing text messages, as compliance analysis for credit unions explains. Meanwhile, the Eleventh Circuit vacated portions of that order in January 2025, creating genuine regulatory uncertainty.

For B2B callers, the safest reading is also the simplest: treat every telemarketing call — consumer or business recipient — as subject to the TCPA. The cost of over-compliance is a consent form. The cost of under-compliance is a class action.

How Recent TCPA Rule Changes Impact Your B2B Lead Generation

The rules didn't just get stricter — they got more specific, and lead buyers are the ones holding the liability. If your B2B outreach uses autodialers or prerecorded voices, three recent FCC changes now land squarely on your lead generation pipeline.

First, the one-to-one consent requirement. Adopted in December 2023, the FCC's rule amending the definition of "prior express written consent" was designed to close what the agency called the "lead generator loophole," requiring consent to be obtained one seller at a time rather than through blanket consent covering dozens of marketing partners. The rule technically took effect January 27, 2025 — but the regulatory picture is complicated: the Eleventh Circuit vacated key portions of the FCC's order in January 2025, finding the agency exceeded its statutory authority. That uncertainty is exactly why prudent lead buyers treat one-to-one consent as the operating standard anyway.

Second, DNC registry protections now explicitly cover text messages. The FCC codified that National DNC Registry protections apply to texts as "calls" under the TCPA, meaning texters must have the recipient's prior express invitation or permission before sending marketing messages to numbers on the registry. If your SMS follow-up sequences aren't DNC-scrubbed, every message is a potential violation.

Third, opt-out timelines are now hard deadlines. Under rules effective April 11, 2025, businesses must honor consent revocation within ten business days of the request — and if you send a clarification message, it must go out within five minutes of the revocation. Records of opt-out requests should be retained for at least four years to match the TCPA statute of limitations.

For lead buyers, the practical checklist looks like this:

• Demand a documented consent trail for every lead — disclosure text, timestamp, and the named seller the consent covers.
• Scrub outbound lists against the DNC Registry before any call or text, not after.
• Build opt-out handling that honors revocation immediately and permanently across every channel.
• Keep marketing and informational communications clearly separated — only the latter can proceed without prior express written consent.

The stakes explain the urgency. TCPA statutory damages run $500 to $1,500 per violation with no requirement to prove actual injury, and plaintiffs' attorneys are, as one law firm put it, constantly pressure testing the marketplace for new targets. Keller Williams has faced fines as high as $40 million, and Final Expense Direct paid hundreds of thousands in penalties because of a lead agency's TCPA failures — proof that liability follows the lead, not just the generator.

This is why GrowthPros attaches a consent record to every lead we deliver and honors opt-outs immediately and permanently. In the current environment, compliance isn't a legal footnote — it's part of the product.

Actionable Steps to Stay Compliant When Buying or Using B2B Leads

Buying B2B leads without a compliance framework is a fast way to invite a class action — statutory damages run $500–$1,500 per violation with no requirement to prove actual injury, and plaintiffs' firms have extracted settlements as high as $40 million from companies that skipped the basics. The TCPA's core prohibitions on autodialed or prerecorded telemarketing calls apply regardless of whether the recipient is a consumer or a business, and the FCC has explicitly extended DNC Registry protections to marketing text messages, requiring prior express invitation or permission before texting any number on the list.

• Verify every lead carries a consent record: disclosure text, timestamp, IP address, and the named contacting party — the FCC's one-to-one consent direction requires consent tied to a single identified seller, not a blanket authorization.
• Scrub against the National DNC Registry before any outbound contact, across voice, SMS, and email, and honor opt-outs immediately and permanently.
• Limit reactivation campaigns to pre-existing, opted-in relationships; never feed cold lists into an autodialer.
• Document every revocation and retain opt-out requests for at least four years — the TCPA statute of limitations — with systems that process revocations within ten business days.

GrowthPros builds these safeguards into the delivery pipeline: leads are DNC-scrubbed, consent-recorded, and qualified before they ever reach a CRM, and the AI follow-up — voice, SMS, and email — fires within five minutes so speed-to-lead never comes at the cost of compliance. The same consent trail travels with the lead into Salesforce, HubSpot, Follow Up Boss, ServiceTitan, or a provisioned CRM ready the same day. Reactivation campaigns run 30–90 days on opted-in databases only, typically re-engaging 8–15% of dormant contacts while keeping every touchpoint inside the regulatory lines.