
Consent Recording Requirements · September 28, 2026 · GrowthPros
What does prior express consent mean?
Learn what prior express consent means under the TCPA, what courts require, and how to keep consent records that protect your business from $500–$1,500 ...

Key Facts
- TCPA statutory damages run $500–$1,500 per violation, per consumer — no proof of actual injury required, per BCLP's TCPA team.
- A defective consent trail on 2,000 purchased leads could mean up to $3 million in statutory exposure, according to Cooley's FCC analysis.
- The Eleventh Circuit vacated the FCC's One-to-One Consent Rule on January 24, 2025 — one day before its effective date, per Pierce Atwood.
- The Fifth Circuit now permits oral consent, meaning the same lead can be legal in one state and a liability in another, as Holland & Knight notes.
- Under TCPA opt-out rules effective April 11, 2025, businesses have just 10 business days to stop all contact after a revocation request, per BCLP.
- Even telling a cashier or leaving a voicemail counts as a valid opt-out, carrying a rebuttable presumption of reasonableness, BCLP explains.
- Nixon Peabody defines express consent as "positive, direct, unequivocal" — requiring no inference or implication to supply its meaning, per their Fifth Circuit analysis.
Why Prior Express Consent Keeps Lead Buyers Up at Night
One bad lead list can cost more than every lead you've ever bought. Under the TCPA, statutory damages run $500–$1,500 per violation, per consumer — and the consumer doesn't have to prove a single dollar of actual injury, according to BCLP's TCPA team. Multiply that across a class of thousands of contacts, and you can see why lead buyers lie awake.
Here's the structural problem. Every call or text you place to a US consumer rests legally on one foundation: prior express consent. The Eleventh Circuit has characterized it as consent that is "clearly and unmistakably granted" before the call or text — not implied, not assumed, not buried in fine print, per Pierce Atwood's analysis. If that foundation is vague or undocumented, everything built on top of it becomes exposure.
The math is what makes it scary. If a lead vendor sold you 2,000 contacts and the consent trail is defective, you're not facing one claim — you're facing up to $1,500 multiplied by 2,000. Cooley's analysis of the FCC's lead-generation rules confirms consumers can recover up to $1,500 in statutory damages for most violating calls or texts. No injury. No proof of harm. Just the violation itself.
And the legal ground is shifting underneath you, which makes undocumented consent even riskier. Recent court decisions have split on what consent even requires — the Fifth Circuit now permits oral consent, while other jurisdictions may still demand written consent, meaning the same lead can be legal in one state and a liability in another, as Holland & Knight notes. That's why vague consent is the single biggest liability risk in lead buying.
What defensible consent actually looks like in practice:
- A clear and conspicuous disclosure shown to the consumer *before* consent was captured
- A timestamp proving consent came before the first call or text
- The named party authorized to contact them — not a vague "our partners"
- Records retained for at least four years, matching the TCPA's statute of limitations
This is exactly why GrowthPros attaches a consent record — disclosure text, timestamp, IP address, and the named contacting party — to every lead delivered. If a plaintiff's attorney comes asking, the answer exists in writing. Because in TCPA litigation, the business carries the burden of proving consent existed, and "the vendor said it was fine" is not a defense.
The Plain-English Definition: Clear, Direct and Unequivocal
Strip away the legalese, and "prior express consent" means something simple: the person told you — clearly, before you called or texted — that they want to hear from you. The hard part is proving it.
The strongest judicial interpretation comes from the Eleventh Circuit, which in its unanimous January 2025 ruling described prior express consent as consent that is "clearly and unmistakably granted" before the call or text message. BCLP's TCPA team echoes that standard: the consumer must "clearly and unmistakably state, before receiving the robocall, that he is willing to receive the robocall."
Nixon Peabody's analysis sharpens the definition further, describing express consent as "positive, direct, unequivocal consent, requiring no inference or implication to supply its meaning." That last phrase is where most businesses get into trouble. If a judge has to connect dots to conclude the consumer agreed, the consent fails.
What valid consent looks like in practice
The Fifth Circuit's Bradford v. Sovereign Pest Control ruling offers a concrete fact pattern: a consumer provided a cell-phone number on a service agreement, stated the number was given so the company could reach him, verbally confirmed during later calls that the company could call, and never objected across four service renewals. That is knowing, direct, and voluntary — the gold standard.
In practice, valid prior express consent typically includes:
- A consumer knowingly providing their phone number specifically to receive telemarketing contact, after a clear disclosure of what they are agreeing to
- Consent given before the first call or text — never after the fact
- Language a reasonable person would understand, not buried in fine print or bundled into unrelated terms
- Documentation — timestamps, disclosure text, and evidence of how the number was provided — that survives scrutiny years later
What courts reject
Implied consent is the most common failure point. A consumer entering a sweepstakes, completing a general inquiry form, or listing a number on a business card has not necessarily agreed to telemarketing calls. Consent that requires a court to infer intent from circumstances — rather than reading it directly from the consumer's words or a signed form — rarely survives a motion for summary judgment.
The stakes explain why precision matters. The TCPA carries statutory damages of $500–$1,500 per violation, per consumer, with no proof of actual injury required. Holland & Knight attorneys advise that even where oral consent is permitted, it must be "carefully documented and independently verifiable to withstand future scrutiny."
This is why lead buyers should demand a consent trail with every lead. At GrowthPros, each lead carries a consent record — disclosure text, timestamp, IP address, and the named contacting party — so the "clear and unmistakable" standard is demonstrable, not assumed. If your lead vendor cannot produce that record, you are carrying their compliance risk on your books.
The Shifting Legal Landscape: Written vs. Oral, and the One-to-One Consent Fight
The legal definition of prior express consent is in constant flux, creating uncertainty for businesses relying on outbound communication. Recent rulings have reshaped expectations, with courts and regulators offering conflicting interpretations of what constitutes valid consent under the TCPA.
In February 2026, the Fifth Circuit ruled in Bradford v. Sovereign Pest Control of TX, Inc. that prior express consent includes both oral and written forms, directly rejecting the FCC’s longstanding requirement for written consent in telemarketing calls according to Holland & Knight. This decision overturned the FCC’s 2012 rule and emphasized that the TCPA contains no textual basis for distinguishing consent requirements based on call content. As a result, businesses operating within the Fifth Circuit’s jurisdiction may rely on oral consent — provided it is clearly and directly given — though proving such consent remains legally demanding.
However, this permissive stance does not apply nationwide. The Eleventh Circuit vacated the FCC’s One-to-One Consent Rule on January 24, 2025, finding it exceeded statutory authority by redefining “prior express consent” to require separate authorization for each seller per Pierce Atwood. The court affirmed that prior express consent merely requires consent that is “clearly and unmistakably granted” before a call or text, allowing consumers to authorize multiple callers under a single agreement. This interpretation aligns with BCLP’s view that the FCC’s rule impermissibly altered the statute’s ordinary meaning as noted in their analysis.
Despite these judicial limitations, the FCC’s December 2023 order still defines prior express written consent as a signed agreement that clearly authorizes one identified seller to deliver telemarketing messages via autodialer or prerecorded voice per Cooley LLP. It mandates that consent follow a “clear and conspicuous” disclosure and include specific language about telemarketing authorization — requirements that remain influential in jurisdictions outside the Fifth Circuit.
Given this patchwork of rulings, the safest compliance strategy is to obtain written, documented consent that satisfies the strictest standard. For companies like GrowthPros, which delivers consent-recorded leads with disclosure text, timestamp, IP address, and the named contacting party, this approach ensures readiness regardless of jurisdiction as advised by legal experts. Maintaining such records not only supports defensibility but also aligns with the TCPA’s four-year record retention requirement and the practical need to demonstrate “clear, direct and unequivocal consent” in any forum.
- Statutory damages under the TCPA range from $500 to $1,500 per violation, per consumer, without requiring proof of actual injury.
- The Eleventh Circuit vacated the FCC’s One-to-One Consent Rule on January 24, 2025, one day before its scheduled effective date.
- The FCC’s December 2023 order requires written consent to include a signature and clear authorization for one identified seller.
What a Defensible Consent Record Actually Contains
What a Defensible Consent Record Actually Contains
A defensible consent record under the TCPA isn't just a formality—it's your legal shield. To withstand scrutiny, every record must include four core elements: the exact disclosure text shown to the consumer before consent, a precise timestamp of when consent was given, the consumer's IP address at the moment of agreement, and the specific named party authorized to contact them. This level of detail transforms consent from a vague assertion into verifiable proof, directly addressing the Eleventh Circuit's requirement that consent be "clearly and unmistakably granted" before any communication occurs. The Eleventh Circuit emphasized this standard, rejecting mechanisms that leave room for interpretation about who received permission or for what purpose.
Beyond capturing consent, your system must honor revocation with equal rigor. Under the TCPA's updated opt-out rules effective April 11, 2025, businesses have just 10 business days to cease all contact after receiving a withdrawal request—whether via SMS, voice, email, or even informal methods like telling a cashier or leaving a voicemail. BCLP notes that even non-prescribed opt-out methods carry a rebuttable presumption of reasonableness, shifting the burden to you to prove why a particular method was unreasonable if challenged. This means your opt-out process must be accessible, documented, and consistently applied across all channels to avoid costly missteps.
Finally, retention is non-negotiable. Given the TCPA's four-year statute of limitations, you must preserve every consent record—and every opt-out request—for at least that duration. Statutory damages range from $500 to $1,500 per violation, per consumer, with no requirement to prove actual injury, making thorough record-keeping your most effective defense. At GrowthPros, this standard is embedded in every lead we deliver: each includes a timestamped consent trail showing the disclosure presented, the exact moment of agreement, the IP address, and the authorized contacting party—ensuring you’re not just buying leads, but acquiring legally defensible opportunities.
How to Buy Leads Without Inheriting Someone Else's TCPA Problem
Buying leads shouldn't mean buying someone else's TCPA lawsuit. The statutory damages of $500–$1,500 per violation make every undocumented consent record a potential liability bomb, and opt-out requests must be honored within 10 business days across every channel — no exceptions.
Demand these non-negotiables from any lead vendor before the first lead hits your CRM:
- A complete consent trail attached to every lead — disclosure text, timestamp, IP address, and the named contacting party
- DNC-scrubbed lists verified before any outbound contact
- Opt-outs honored immediately and permanently across SMS, voice, and email
- Reactivation that targets only pre-existing, opted-in relationships — never cold lists
Capped-shared beats marketplace-shared for both compliance and conversion. Marketplace models like Angi or HomeAdvisor routinely sell the same lead to five or more buyers, diluting consent specificity and destroying contact rates. GrowthPros caps shared leads at a hard maximum of two buyers — each lead qualified, time-stamped, and consent-recorded before delivery.
A 15-minute qualification call is all it takes to audit whether your current lead sources would survive scrutiny. We'll review your consent documentation, DNC processes, and opt-out workflows against the Eleventh Circuit's "clearly and unmistakably granted" standard and the Fifth Circuit's requirement for independently verifiable records — no commitment, just a clear picture of where you stand.
Book the 15-minute qualification call and get exclusive leads by niche, followed up in minutes — including the leads you already paid for.
Frequently Asked Questions
What does prior express consent actually mean under the TCPA?
It means the consumer clearly and unmistakably told you — before you called or texted — that they agree to be contacted. The Eleventh Circuit described it as consent "clearly and unmistakably granted" before the call or text, and Nixon Peabody defines it as "positive, direct, unequivocal consent, requiring no inference or implication." If a judge has to connect dots to conclude the consumer agreed, the consent fails.
Does prior express consent have to be in writing?
It depends on where you operate. The Fifth Circuit's February 2026 ruling in Bradford v. Sovereign Pest Control held the TCPA doesn't require written consent — oral consent counts — but other jurisdictions may still demand written consent under the FCC's framework. The safest strategy is written, documented consent that satisfies the strictest standard, since the same lead can be legal in one state and a liability in another.
How much can a TCPA violation actually cost my business?
Statutory damages run $500–$1,500 per violation, per consumer — and the consumer doesn't have to prove a single dollar of actual injury. If a vendor sold you 2,000 contacts with a defective consent trail, you're facing up to $1,500 multiplied by 2,000. That's why undocumented consent is the single biggest liability risk in lead buying.
What does a defensible consent record need to include?
Four core elements: the exact disclosure text shown to the consumer before consent, a precise timestamp proving consent came before the first call or text, the consumer's IP address at the moment of agreement, and the specific named party authorized to contact them. Holland & Knight advise that even oral consent must be "carefully documented and independently verifiable to withstand future scrutiny." Records should be retained for at least four years to match the TCPA's statute of limitations.
Is implied consent enough if someone gave me their phone number?
No — implied consent is the most common failure point. A consumer entering a sweepstakes, completing a general inquiry form, or listing a number on a business card has not necessarily agreed to telemarketing calls, and consent that requires a court to infer intent rarely survives summary judgment. Valid consent must be knowing and direct, like the fact pattern in Bradford v. Sovereign Pest Control, where the consumer provided his cell number specifically so the company could reach him and verbally confirmed consent across four renewals.
What happened to the FCC's One-to-One Consent Rule?
The Eleventh Circuit vacated it on January 24, 2025 — one day before its scheduled effective date — finding it exceeded statutory authority by redefining "prior express consent" to require separate authorization for each seller. The court affirmed that consumers can authorize multiple callers under a single agreement, per Pierce Atwood's analysis. However, the FCC's December 2023 order still defines written consent as authorizing one identified seller, so requirements remain influential in jurisdictions outside the Fifth Circuit.
Consent You Can Prove — Or Risk You Can't Afford
Prior express consent isn't a legal technicality — it's the foundation every call and text you place legally rests on. Courts now demand consent that is "clearly and unmistakably granted" before contact, and with statutory damages of $500–$1,500 per violation, per consumer — no proof of injury required — a single defective lead list can outweigh every lead you've ever bought. The shifting circuit split on oral versus written consent only raises the stakes: the safest strategy is documented, timestamped, written consent that satisfies the strictest standard in any jurisdiction. Your next step is an audit. Ask your lead vendor to produce the disclosure text, timestamp, IP address, and named contacting party behind every contact they've sold you — if they can't, that risk sits on your books. GrowthPros attaches that consent record to every lead delivered, so defensibility is built in rather than assumed. Book the 15-minute qualification call, and we'll review your current lead sources against the toughest consent standards — no commitment, just a clear picture of where you stand.
This article is general information, not legal or financial advice. Benchmark figures are directional industry data, not guarantees of results.