
TCPA and Telemarketing Rules · September 28, 2026 · GrowthPros
What are the key standards for telemarketing?
Learn the 5 telemarketing standards that matter: consent records, DNC scrubbing, opt-outs, calling hours, and audit trails. Avoid $50,000+ per-call pena...

Key Facts
- ["A single illegal call can cost $51,744 to $53,088 per violation under federal DNC penalties", "https://blog.clickpointsoftware.com/scrub-leads-against-federal-and-state-dnc-lists"], ["Florida imposes up to $10,000 per illegal call, tripled for willful violations under state DNC law", "https://blog.clickpointsoftware.com/scrub-leads-against-federal-and-state-dnc-lists"], ["Over 258 million active phone numbers are on the National Do Not Call Registry", "https://www.possiblenow.com/resources/do-not-call-solutions/dnc-scrubbing-how-it-can-help/"], ["TCPA violations carry statutory damages of $500 to $1,500 per violation, per class member", "https://www.bclplaw.com/en-US/events-insights-news/the-tcpas-new-opt-out-rules-take-effect-on-april-11-2025-what-does-this-mean-for-businesses.html"], ["Documentation of opt-out requests must be retained for at least four years under TCPA statute of limitations", "https://www.bclplaw.com/en-US/events-insights-news/the-tcpas-new-opt-out-rules-take-effect-on-april-11-2025-what-does-this-mean-for-businesses.html"], ["Internal DNC lists must be maintained for at least five years under federal rules", "https://www.possiblenow.com/resources/do-not-call-solutions/dnc-scrubbing-how-it-can-help/"], ["Texas SB 140 expands telephone solicitation to include text/SMS and graphic messages effective September 1, 2025", "https://blog.clickpointsoftware.com/scrub-leads-against-federal-and-state-dnc-lists"]]
The Compliance Stakes: Why Telemarketing Standards Now Decide Who Survives
A single illegal call to a number on the Do Not Call Registry can cost more than most companies spend on an entire quarter of lead generation — and regulators are not in a forgiving mood. At the federal level, TCPA violations carry statutory damages of $500 to $1,500 per violation, per class member, with no requirement for the consumer to prove actual injury, according to legal analysis from BCLP. Do Not Call violations are steeper still: federal penalty data shows $51,744 to $53,088 per illegal call, meaning 1,000 non-compliant calls could exceed $52 million in exposure.
State regulators stack their own penalties on top. Florida allows up to $10,000 per call — tripled for willful violations — while Texas imposes civil penalties of $1,000 per call and Pennsylvania adds $1,000 per call, rising to $3,000 when the recipient is over 60. State lists carry independent penalties even when a number is not on the federal registry, and defense costs of $400–$800 per hour make even winning cases expensive.
Here is the part most dialing teams miss: this is not a problem you can solve with better tactics on the phones. As ClickPoint Software's compliance analysis puts it, DNC compliance is a system design decision, not a dialing tactic — one that determines whether outbound marketing remains viable at scale. Operations that rely on periodic or manual scrubbing often believe they are compliant until a single missed number cascades into six-figure exposure.
The liability question extends beyond who places the call. When a lead arrives without proof of consent, ActiveProspect's guidance is blunt: a lead without proof is a potential liability for both parties. The buyer who works that lead inherits the risk, not just the seller who sourced it. That is why documentation standards matter as much as scrubbing:
- Who is authorized to contact the consumer, and by what methods
- What the consumer actually saw and agreed to at the point of consent
- When and where consent occurred — timestamp and IP address
- How the consent trail can be audited later, ideally retained at least four years
The most expensive TCPA damages rarely come from malicious actors. They come from unclear disclosures, missing documentation, and operational gaps in how leads are generated, sold, and worked. Compliance, in other words, is not a claim — it is a record.
This is the standard GrowthPros builds to: every lead is DNC-scrubbed before delivery and carries its consent record — disclosure text, timestamp, IP, and the named contacting party — so the buyer inherits proof, not risk. In a market where penalties now exceed $50,000 per call, the question for any lead buyer is simple: does your lead come with evidence, or just a phone number?
The Five Standards That Matter: Consent, DNC Scrubbing, Opt-Outs, Hours, and Documentation
Telemarketing compliance isn’t optional—it’s the foundation of sustainable lead generation. With penalties exceeding $50,000 per illegal call, businesses must treat every standard as a non-negotiable part of their process.
Clear and unmistakable consent disclosure is now the operative standard following the vacatur of the FCC’s one-to-one consent rule. This means leads must include documentation showing consumers received information that they may receive robocalls from various possible sellers, not just one specific entity. GrowthPros ensures every lead carries a consent record with disclosure text, timestamp, IP address, and the named contacting party, creating an auditable trail from first contact onward.
Do Not Call (DNC) scrubbing must occur against federal, state, and internal lists at least every 31 days—or in real time—to avoid cascading liability. With over 258 million active numbers on the National DNC Registry and state-specific penalties reaching $10,000 per call in Florida, automated suppression at point of contact is critical. GrowthPros scrubs all leads before delivery and maintains internal DNC lists for a minimum of five years, aligning with federal requirements and state rules that may extend retention to ten years.
The FCC’s Opt-Out Rule, effective April 11, 2025, requires businesses to honor consumer revocation requests through any reasonable method—such as texting “STOP,” calling, or emailing—within ten business days. Only one non-marketing clarification message may be sent within five minutes of the request, and it must require an affirmative consumer response to avoid further contact. Documentation of all opt-outs must be retained for at least four years due to the TCPA’s statute of limitations. GrowthPros implements systems to capture and honor these requests immediately and permanently across SMS, voice, and email channels.
Calling hour restrictions vary significantly by state, requiring localized compliance. Florida limits calls to 8 AM–8 PM, Pennsylvania allows 8 AM–9 PM, and Oklahoma restricts to 9 AM–9 PM, while Texas follows federal TSR hours (generally 8 AM–9 PM recipient’s local time). GrowthPros adjusts outreach timing based on the recipient’s local time and state-specific rules to ensure compliance across all jurisdictions.
Finally, compliant telemarketing isn’t a claim—it’s a record. Maintaining a detailed audit trail with timestamps, sources checked, and rules applied creates defensible records that support safe harbor protections and help investigate complaints. For GrowthPros, this means every delivered lead includes its full consent and compliance history, turning documentation into a core part of the product rather than an afterthought. TCPA compliance is not a box to check—it’s a requirement that protects your ability to operate at scale.
How GrowthPros Meets Each Standard — Compliance Built Into the Product
Compliance isn't a checklist — it's the infrastructure that keeps outbound viable at scale. Industry experts warn that organizations relying on periodic scrubbing often believe they're compliant until a single missed number cascades into six-figure exposure, with federal penalties now exceeding $50,000 per illegal call.
Every GrowthPros lead ships with a complete consent record: the exact disclosure text the consumer saw, timestamp, IP address, and the named contacting party. This isn't metadata — it's the audit trail that proves who authorized contact, what methods were permitted, what was agreed to, when and where consent happened, and how to verify it later. As ActiveProspect notes, "a lead without proof is a potential liability for both parties."
- Lists are DNC-scrubbed against federal, state, and internal registries before any outbound contact — not after, not periodically
- Opt-outs are honored immediately and permanently across SMS, voice, and email through any reasonable method, with documentation retained for four years per the TCPA statute of limitations
- Reactivation targets only pre-existing, opted-in relationships — never cold lists
- One-to-one consent direction is built in from day one, even after the Eleventh Circuit vacated the FCC's rule
The FCC's Opt-Out Rule taking effect April 11, 2025 requires businesses to honor revocation requests within ten business days and places the burden on the caller to disprove the reasonableness of the consumer's chosen method. Legal analysts emphasize that this burden shift makes systematic opt-out handling a survival requirement, not a best practice. GrowthPros processes every revocation in real time across all channels — no manual queues, no delayed suppression.
Your Compliance Action Plan: What to Demand From Any Lead Vendor
Buying leads without demanding proof of compliance is how TCPA lawsuits start. As ActiveProspect puts it, "a lead without proof is a potential liability for both parties" — and the buyer often holds the bag.
Start your vendor vetting with the five questions every TCPA-compliant lead must answer: who is authorized to contact the consumer, how they can be contacted, what was agreed to, when and where consent occurred, and how it can be audited later. If a seller can't show you where traffic comes from, what the consumer actually saw, and how consent is documented, you're not buying leads — you're buying risk. Documentation of opt-out records should be retained for at least four years, matching the TCPA's statute of limitations, according to BCLP's legal analysis.
Next, verify DNC scrubbing is real-time, not periodic. The FTC's Telemarketing Sales Rule only requires scrubbing against the National Registry every 31 days, but compliance experts warn that organizations relying on periodic manual scrubbing "believe they are compliant until a single missed number cascades into a six-figure exposure." With penalties exceeding $50,000 per illegal call and over 258 million numbers on the National Registry, suppression must run at the point of contact — before any dialer touches the lead.
Opt-out handling is the next gate. The FCC's Opt-Out Rule, effective April 11, 2025, lets consumers revoke consent through any reasonable method — text "STOP," a call, an email, even voicemail — and places the burden on the business to disprove reasonableness. Your vendor must honor revocations within ten business days across every channel, with only one non-marketing clarification message allowed within five minutes.
Finally, fold state rules into your vendor checklist:
- Texas SB 140 (effective September 1, 2025) expands "telephone solicitation" to include text/SMS and graphic messages
- Florida caps calling hours at 8 AM–8 PM, tighter than the standard 8 AM–9 PM window
- State DNC lists carry independent penalties even when a number isn't federally listed — Florida up to $10,000 per call
- Internal DNC lists must be kept at least five years federally, longer in some states
Compliance is a system design decision, not a dialing tactic — treat it that way when choosing vendors. At GrowthPros, every lead ships with its consent trail attached — disclosure text, timestamp, IP address, and the named contacting party — because "compliant" isn't a claim, it's a record. Book the 15-minute qualification call to see what documented, DNC-scrubbed leads look like for your niche. It's free, honest about fit, and commits you to nothing.
Frequently Asked Questions
What are the penalties for calling a number on the Do Not Call Registry?
Federal penalties for Do Not Call violations range from $51,744 to $53,088 per illegal call, meaning 1,000 non-compliant calls could exceed $52 million in exposure. State penalties can be even higher, with Florida allowing up to $10,000 per call—tripled for willful violations.Federal penalty data
How often should I scrub my lead lists against Do Not Call registries to stay compliant?
Do Not Call scrubbing must occur against federal, state, and internal lists at least every 31 days—or in real time—to avoid cascading liability. Experts warn that relying on periodic or manual scrubbing often creates a false sense of compliance until a single missed number results in six-figure exposure.ClickPoint Software's compliance analysis
What documentation do I need to keep for telemarketing leads to avoid liability?
Every lead must include a consent record showing who is authorized to contact the consumer, what methods are permitted, what was agreed to, when and where consent occurred (timestamp and IP address), and how it can be audited later—ideally retained for at least four years. Without this documentation, a lead is a potential liability for both buyer and seller.ActiveProspect's guidance
How do the new FCC Opt-Out Rule changes affect how I handle consumer requests to stop calling?
Effective April 11, 2025, the FCC’s Opt-Out Rule requires businesses to honor consumer revocation requests through any reasonable method—such as texting 'STOP,' calling, or emailing—within ten business days. Only one non-marketing clarification message may be sent within five minutes of the request, and it must require an affirmative consumer response to avoid further contact.BCLP's legal analysis
Do calling hour restrictions vary by state, and how do I comply with them?
Yes, calling hour restrictions vary significantly by state: Florida limits calls to 8 AM–8 PM, Pennsylvania allows 8 AM–9 PM, Oklahoma restricts to 9 AM–9 PM, and Texas follows federal TSR hours (generally 8 AM–9 PM recipient’s local time). To remain compliant, businesses must adjust outreach timing based on the recipient’s local time and state-specific rules.State-specific hour restrictions
Is it enough to rely on a lead vendor’s word that their leads are TCPA-compliant?
No—buying leads without demanding proof of compliance is how TCPA lawsuits start. As ActiveProspect states, 'a lead without proof is a potential liability for both parties,' and the buyer often inherits the risk. You must verify documentation of consent, DNC scrubbing, and opt-out handling before purchasing.You're not buying leads—you're buying risk
The Cost of Guessing Wrong
Telemarketing compliance has shifted from a regulatory checkbox to a balance-sheet survival issue. The FCC's Opt-Out Rule taking effect April 11, 2025, places the burden on businesses to disprove the reasonableness of any consumer revocation method — text, call, email, or voicemail — within ten business days. DNC scrubbing must happen at the point of contact, not every 31 days, because a single missed number against a registry of over 258 million active numbers can cascade into six-figure exposure. State penalties stack independently: Florida up to $10,000 per call, Pennsylvania $3,000 for recipients over 60, Texas expanding solicitation definitions to include SMS. Consent documentation — disclosure text, timestamp, IP, named contacting party — is now the product, not the paperwork. GrowthPros builds every lead with that record attached, scrubbed against federal, state, and internal lists before delivery, with opt-outs honored in real time across every channel. If your current vendor can't show you the consent trail, you're not buying leads — you're buying risk. Book the 15-minute qualification call to see what documented, DNC-scrubbed leads look like for your niche. It's free, honest about fit, and commits you to nothing.
This article is general information, not legal or financial advice. Benchmark figures are directional industry data, not guarantees of results.