What are the four types of consent?

Why Consent Confusion Is Costing Lead Generators Thousands

Few areas of lead generation law have whiplashed harder than consent. In under two years, the FCC's signature "one-to-one" consent rule was proposed, scheduled to take effect, vacated by a federal appeals court, and then formally killed in a final rule — leaving lead generators to guess what standard actually applies today.

The confusion started with good intentions. The FCC proposed the one-to-one rule on December 13, 2023, aiming to close what regulators saw as the "lead generator loophole" — bundled, generic consent sold to dozens of unknown sellers. The rule was set to take effect January 27, 2025, but the Eleventh Circuit Court of Appeals vacated it that same month, finding the FCC had exceeded its statutory authority under the TCPA. The FCC declined to appeal in April 2025, and by September 2025 it issued a final rule eliminating the one-to-one requirement altogether.

That sounds like a win for lead generators, but it isn't. The Supreme Court's Loper Bright decision has reduced judicial deference to FCC interpretations, which means litigation risk is rising even as formal rules loosen. Meanwhile, the core requirements that survive — clear and conspicuous disclosures, topically related content, and recordkeeping — still define what "valid" consent looks like in practice.

The financial stakes make the uncertainty expensive. TCPA violations carry statutory damages of $500 to $1,500 per call or text, and plaintiffs don't need to prove actual injury to collect. With a four-year statute of limitations, every lead contacted under a shaky consent model today remains a live liability for years.

For lead generators and the businesses buying from them, the practical exposure concentrates in a few places:

• Consent records must include the disclosure language, timestamp, IP address, submission platform, and form field data — and the burden of proof falls entirely on the caller.
• Records must be retained for at least five years under FTC Telemarketing Sales Rule requirements.
• Opt-out requests must be honored within 10 business days, effective April 11, 2025.
• Contact content must be logically related to the original inquiry — a mortgage lead can't be pitched car loans without fresh consent.

This is why GrowthPros treats consent recording as part of the product, not an afterthought. Every lead carries a consent trail — disclosure text, timestamp, IP address, and the named contacting party — attached before it ever reaches a client's CRM. When the regulatory target keeps moving, the only defensible position is documentation that works under the strictest standard on the table, not the loosest.

Outdated consent models — bundled permissions, missing timestamps, orphaned disclosure language — don't just risk one fine. At $500 to $1,500 per contact, a single campaign run against a poorly documented list can erase the margin on months of lead spend. The lead generators losing thousands aren't the ones who misread the rules; they're the ones who never recorded the proof.

The TCPA’s Three Core Consent Types That Still Govern Lead Communications

Most businesses assume consent is binary — you have it or you don't. The TCPA sees three distinct tiers, and confusing them is the fastest way to a class-action lawsuit. Understanding which tier applies to your outreach method isn't optional; it's the difference between a qualified lead and a $1,500-per-violation liability.

Prior Express Written Consent (PEWC) is the gold standard — and the only valid consent for autodialed or prerecorded marketing calls and texts. It must be in writing, signed (electronic signatures count), and include a clear disclosure that consent isn't a condition of purchase. If your AI voice agent calls a mortgage lead to pitch refinancing, you need PEWC. TCPA violations here carry penalties of $500 to $1,500 per call or text, with a four-year statute of limitations.

Prior Express Consent (PEC) covers informational and transactional messages — appointment reminders, fraud alerts, payment confirmations. No written formality required; a consumer voluntarily providing their phone number for a specific purpose often satisfies this. A home-services contractor texting "Your technician arrives in 30 minutes" operates under PEC. But cross the line into upselling, and you've stepped into PEWC territory without the paperwork.

Prior Express Invitation or Permission (PEIP) applies to manually dialed sales calls and texts — no autodialer, no prerecorded voice. The consumer must voluntarily and knowingly agree to be contacted, but no written record is legally mandated. A loan officer personally calling a referral fits here. The catch: you bear the burden of proving that invitation existed, and consent records must be retained for at least five years per FTC Telemarketing Sales Rule requirements.

• Auto dealership BDC: AI voice follow-up on a trade-in inquiry = PEWC required
• HVAC contractor: SMS appointment confirmation = PEC sufficient
• Mortgage broker: Manual dial to a referred borrower = PEIP applies
• Finance agent: Prerecorded rate-alert blast = PEWC mandatory

GrowthPros builds consent recording into every lead delivery — disclosure text, timestamp, IP address, and the named contacting party — because the regulatory burden of proof always falls on the caller. Whether you're buying exclusive leads or reactivating a dormant CRM list, the consent tier determines the compliance infrastructure you need.

How FCC Lead Generation Rules Redefine Valid Consent in Practice

Consent that looked valid yesterday can be worthless tomorrow — that's the practical reality the FCC's lead generation rules created when they took aim at bundled, vague, and undocumented consent. Even amid ongoing legal challenges, these four requirements now function as the working definition of what "valid consent" means in lead generation, and they dictate exactly how leads must be captured, validated, and maintained.

One-to-one consent is the headline requirement: consumers must give explicit prior express written consent to each specific seller, not a blanket authorization covering a roster of unknown buyers. The rule was proposed on December 13, 2023, with an effective date of January 27, 2025, before the Eleventh Circuit vacated it in January 2025 for exceeding FCC authority — and the FCC issued a final rule eliminating the requirement in September 2025. Yet as compliance analysts note, the directional pressure toward individualized consent persists, and treating it as optional is a legal gamble.

The remaining three requirements define consent quality. Clear and conspicuous disclosures require consumers to know upfront that they'll receive calls or texts from a named seller. Topically related content demands that outreach be logically related to the original inquiry — a mortgage-quote lead cannot be contacted about car loans without fresh consent, per Bradley's legal analysis. Recordkeeping shifts the burden of proof entirely onto the caller, with records retained at least five years under FTC Telemarketing Sales Rule requirements.

For lead buyers, these standards translate into four operational checks:

• Consent names the specific buyer — no generic "trusted partners" language
• Disclosure text, timestamp, IP address, and submission details travel with every lead
• Lead topic matches the consumer's original request exactly
• Records survive audits — because TCPA violations carry $500 to $1,500 per call or text in statutory damages

These standards matter most in shared-lead and reactivation scenarios. GrowthPros caps shared leads at two buyers, which keeps consent trails specific and defensible rather than diluted across a marketplace of five. Reactivation campaigns target only pre-existing, opted-in relationships, with each consent record — disclosure text, timestamp, IP, and named contacting party — attached before any outbound contact. Opt-outs are honored immediately across SMS, voice, and email, ahead of the 10-business-day revocation window effective April 11, 2025.

The regulatory landscape will keep shifting — but consent that is specific, disclosed, topically relevant, and documented remains valid under any framework the courts ultimately allow.

Building a TCPA-Compliant Lead Flow: Documentation, Topical Relevance, and Opt-Out Honor

Consent that lives only in a form field is consent you can't prove—and under the TCPA, the burden of proof falls entirely on the caller or sender. With statutory damages of $500 to $1,500 per call or text and a four-year statute of limitations, sloppy documentation is the most expensive shortcut in lead generation.

Building a compliant lead flow comes down to four operational habits. First, capture consent at the individual seller level. Rather than bundling consent into one generic checkbox, use checkbox lists or clickthrough links that let consumers explicitly select which sellers they want to hear from—a practice regulators have pushed for even as specific rules shifted through 2025.

Second, screen for topical alignment. The FCC requires that contact content be logically related to the consumer's original inquiry, meaning a mortgage-quote lead cannot be contacted about car loans without fresh consent. Build this screening into your lead routing so every follow-up matches what the consumer actually asked about.

Third, document everything and keep it for five years. The FTC Telemarketing Sales Rule requires consent records to be retained for at least five years, and a defensible record should include:

• The complete consent language shown to the consumer
• A timestamp and the submission URL or platform
• The consumer's IP address and form field data
• The named contacting party

This is the standard GrowthPros builds into every lead it delivers—each one arrives with its consent trail attached, so buyers inherit proof, not liability.

Fourth, honor opt-outs immediately and permanently across every channel. Since April 11, 2025, revocation requests must be honored within 10 business days, and the TCPA requires honoring opt-outs via any reasonable method. A unified opt-out system that suppresses a contact across SMS, voice, and email simultaneously is the only safe architecture—one channel removed and two still dialing is a lawsuit waiting to happen.

The regulatory landscape remains fluid: the FCC's one-to-one consent rule was vacated by the Eleventh Circuit in January 2025, and its final rule in September 2025 eliminated the one-to-one requirement while preserving the core definition of prior express written consent. But the four habits above remain stable requirements regardless of how the rules swing. Whether leads are freshly sourced or pulled from a dormant opted-in list, consent-recorded, DNC-scrubbed delivery followed up within minutes isn't just faster—it's the difference between a pipeline that compounds and one that collapses under a single TCPA claim.