What is express written approval?

The Consent Gap That Triggers TCPA Liability

Most businesses that get hit with TCPA claims never ignored consent — they simply collected the wrong kind. A checkbox on a web form, a verbal "sure, call me," or a buried terms-of-service clause feels like permission. Legally, it isn't.

The Telephone Consumer Protection Act sets a specific bar for telemarketing that uses an autodialer or prerecorded voice: prior express written consent. Per the FCC's definition, that means an agreement in writing, bearing the consumer's signature, that clearly authorizes a named seller to deliver marketing messages — and specifies the exact phone number those messages may go to. Electronic and digital signatures valid under contract law count, but the written agreement itself is non-negotiable.

The stakes explain why the distinction matters so much. Under the TCPA, statutory damages run $500 to $1,500 per violation — per consumer, per call or text, with no proof of actual injury required. A single campaign against a poorly consented lead list can multiply into class-action territory fast. As Cooley's analysis of the 2023 FCC rules warned, aggressive plaintiffs' attorneys constantly pressure-test the marketplace for exactly these gaps.

So what separates express written consent from general consent? The FCC's codified definition requires every element below:

• A written agreement bearing the consumer's signature — wet ink or a valid e-signature.
• Clear authorization naming the seller whose calls or texts the consumer agrees to receive.
• The specific telephone number to which marketing messages may be delivered.
• A clear and conspicuous disclosure that consent is not a condition of purchase.

That last element trips up more businesses than any other. If your form implies a consumer must consent to buy your product, the consent is arguably invalid — and the autodialed or prerecorded calls that follow become statutory violations at $500 apiece.

Why doesn't general consent cover automated telemarketing? Because lesser forms of consent — verbal approval, implied consent from a web inquiry, an established business relationship — may suffice for manual calls or non-marketing messages, but not for autodialer or prerecorded telemarketing. That distinction is exactly why documentation matters: compliance practitioners advise maintaining auditable proof of when, where, and how consent was obtained, since consumers can revoke consent at any time through reasonable channels.

This is why lead buyers increasingly demand a consent trail attached to every lead — disclosure text, timestamp, and the named contacting party — rather than accepting a seller's word that the contact "opted in." GrowthPros attaches exactly that record to every lead it delivers, because in a TCPA dispute, the only consent that counts is the consent you can prove.

The One-to-One Consent Saga: What Changed and What Didn't

The regulatory pendulum swung hard in December 2023 when the FCC adopted a "one-to-one consent" rule requiring seller-specific approval for every lead generated communication — a move the Commission said would close the "lead generation loophole" where consumer data traveled through daisy-chains of unnamed partners. The rule demanded consent for "no more than one identified seller" and gave businesses a 12-month implementation window.

Then the Eleventh Circuit intervened. In Insurance Mktg. Coalition Ltd. v. FCC on January 24, 2025, the court vacated the one-to-one requirement, ruling the FCC "exceeded the scope of its authority because its rule contradicted the ordinary statutory meaning of the TCPA's prior express consent language." The court held valid consent only requires a consumer to "clearly and unmistakably state, before receiving the robocall, that he is willing to receive the robocall." The FCC declined to appeal in April 2025 and issued a final rule in September 2025 codifying a broader consent definition without the seller-specific mandate.

• December 2023: FCC adopts one-to-one consent rule targeting shared lead data
• January 24, 2025: Eleventh Circuit vacates the rule as exceeding statutory authority
• April 2025: FCC declines to challenge the vacatur
• September 2025: Final rule published with broader consent standard

The current standard still requires prior express written consent — a written agreement bearing the consumer's signature (including valid e-signatures) that clearly authorizes a named seller to deliver telemarketing messages via autodialer or prerecorded voice to a specified phone number, with a conspicuous disclosure that consent is not a condition of purchase. TCPA statutory damages remain $500–$1,500 per violation per consumer, with no proof of actual injury required.

Practitioners still advise conservative compliance despite the vacatur. BCLP warns "circumstances change quickly with the TCPA" and recommends aligning outbound calling with the consent forms actually used. Revocation rules effective April 11, 2025 require clear opt-out instructions in every marketing text and honoring internal DNC requests within 10 business days. At GrowthPros, every lead we deliver carries its consent trail — disclosure text, timestamp, IP address, and the named contacting party — because the safest compliance posture is the one that survives whatever comes next.

Documentation Is the Practical Differentiator

When a TCPA class action lands, the first thing plaintiffs' attorneys ask for is your proof of consent — and if you can't produce it, the definition you relied on stops mattering. According to compliance guidance from ActiveProspect, businesses must maintain auditable proof of consent showing when, where, and how it was obtained. That documentation is what separates defensible express written consent from unprovable general consent.

General consent — a vague "I agree to be contacted" checkbox with no record behind it — leaves you exposed. Express written consent, by contrast, carries a paper trail: the exact disclosure text the consumer saw, a timestamp, the IP address of the device used, and the named contacting party. The FCC's consent definition requires a written agreement bearing the consumer's signature, clear authorization naming the seller, the specified phone number, and a conspicuous disclosure that consent is not a condition of purchase, as legal analysis of the September 2025 final rule details.

The stakes make this concrete. TCPA statutory damages run $500 per violation and up to $1,500 if willful or knowing — available per consumer without any proof of actual injury, per BCLP's litigation analysis. Multiply that across a class and an undocumented lead list becomes an existential liability.

The April 2025 revocation provisions raise the documentation bar further. Key rules took effect April 11, 2025 — including clear opt-out instructions in every marketing text and honoring internal DNC requests within 10 business days, per ActiveProspect's breakdown. The "revoke all" requirement — one opt-out stopping all categories across the business — is delayed until January 31, 2027, but experts advise processing revocations broadly across reasonable channels now.

A complete consent trail should include:

• The verbatim disclosure text the consumer agreed to, including the non-conditionality statement
• A timestamp showing exactly when consent was captured
• The IP address and device context proving where consent originated
• The named contacting party or seller the consumer authorized
• Retention long enough to defend claims — services like TrustedForm Retain store documentation for up to five years

This is why lead vendors that attach a consent record to every lead — disclosure text, timestamp, IP address, and named party, the way GrowthPros delivers each lead into a client's CRM — offer structural protection that raw, unverified lists cannot. Even with the one-to-one consent rule vacated, practitioners warn that circumstances change quickly with the TCPA. The only reliable defense is proof of when, where, and how consent was obtained — documented before you ever dial.

How GrowthPros Builds Consent Into Every Lead

Express written approval—legally known as prior express written consent—is a specific, documented agreement required before sending telemarketing calls or texts using automated technology. It differs from general consent by demanding a written agreement with a signature, clear authorization for a named seller, and a disclosure that consent is not a condition of purchase.

At GrowthPros, every lead we deliver includes this exact level of documentation: the disclosure text, timestamp, IP address, and the named contacting party are attached as an auditable consent trail. This ensures compliance with TCPA requirements, which carry statutory damages of $500–$1,500 per violation, per consumer, without proof of actual injury. Our process begins with sourcing exclusive or capped-shared leads that are DNC-scrubbed before any outbound contact and qualified only after consent is recorded at capture.

Reactivation campaigns target only pre-existing, opted-in relationships—never cold lists—and honor opt-outs immediately and permanently across SMS, voice, and email. This aligns with evolving revocation rules, where clear opt-out instructions must be honored within 10 business days, though the “revoke all” requirement remains on hold until January 31, 2027. By embedding consent into every step—from lead generation to delivery and follow-up—we turn compliance into a competitive advantage, ensuring leads are not just qualified but legally defensible.