
Consent Recording Requirements · September 28, 2026 · GrowthPros
What is the definition of express written consent?
Learn the legal definition of express written consent under TCPA, requirements for valid consent, and how GrowthPros ensures compliant leads reduce lega...

Key Facts
- The Eleventh Circuit Court of Appeals vacated the FCC's one-to-one consent rule on January 24, 2025, ruling the agency exceeded its statutory authority under the TCPA.
- https://www.kelleydrye.com/viewpoints/blogs/ad-law-access/eleventh-circuit-vacates-tcpa-11-consent-rule/
- TCPA penalties are $500 per violation, or $1,500 if willful or knowing, per enforcement guidance from multiple legal sources.
- https://activeprospect.com/blog/fcc-one-to-one-consent/
- Businesses must process consumer consent revocations within 10 business days effective April 11, 2025, under new FCC rules.
- https://activeprospect.com/blog/fcc-one-to-one-consent/
- The FTC Telemarketing Sales Rule requires consent records to be retained for at least five years from the date of consent.
- https://activeprospect.com/blog/fcc-one-to-one-consent/
- Bot-generated consent lacking human intent is not legally defensible under TCPA enforcement guidance and compliance best practices.
- https://activeprospect.com/blog/fcc-one-to-one-consent/
- Express written consent under TCPA requires written agreement, consumer signature, and clear disclosure that consent is not a condition of purchase.
- https://www.consumerfinancialserviceslawmonitor.com/2025/09/fccs-final-rule-on-consent-kills-one-to-one-consent-requirement/
- GrowthPros attaches a verifiable consent trail—including disclosure text, timestamp, IP, and named party—to every lead delivered to clients' CRM systems.
- https://growthpros.marketing/insights
The Legal Definition of Express Written Consent Under TCPA
Express written consent under the Telephone Consumer Protection Act (TCPA) has been clearly defined since August 29, 2025, following the vacatur of the FCC's controversial one-to-one consent rule. The current standard requires three specific elements: a written agreement, a consumer signature (including electronic or digital forms), and a clear disclosure that the consumer authorizes telemarketing calls or texts using an autodialer or artificial voice, with explicit notice that consent is not a condition of purchase. This framework was reaffirmed by the Eleventh Circuit Court of Appeals in January 2025, which ruled that the FCC exceeded its statutory authority by imposing additional restrictions beyond the TCPA's language. As a result, lead generators like GrowthPros must ensure their consent practices align with this reinstated standard to avoid significant liability.
Each component of prior express written consent serves a distinct legal purpose. The written agreement requirement is satisfied by electronic or digital signatures recognized under the E-SIGN Act, provided they reflect genuine consumer intent. The signature element confirms the consumer's identity and assent, while the disclosure must be clear and conspicuous, specifying the use of automated technology and the voluntary nature of consent. Experts emphasize that bot-generated submissions lacking human intent do not meet this standard and are not legally defensible, underscoring the need for robust form protection. Maintaining accurate consent records—including disclosure text, timestamp, IP address, and the named contacting party—is critical, as the FTC Telemarketing Sales Rule requires retention for at least five years from the date of consent.
Compliance also demands timely responses to consumer revocations. Effective April 11, 2025, businesses must process consent revocations within 10 business days via any reasonable means, a rule designed to enhance consumer control over telemarketing communications. While a broader "revocation-all" requirement has been delayed until January 31, 2027, the current standard already places significant responsibility on lead generators to honor opt-outs promptly across all channels. GrowthPros integrates these requirements into its lead delivery process by attaching a verifiable consent trail to every lead, ensuring clients receive not just contact information but a compliant, auditable record of consent. This approach supports lawful outreach while preserving the speed and quality essential to effective lead conversion.
Why the FCC's One-to-One Consent Rule Was Vacated and What It Means for You
The Eleventh Circuit Court of Appeals vacated the FCC's controversial 2023 one-to-one consent rule on January 24, 2025, effectively eliminating requirements that consent be tied to a single specific seller or be logically related to the call's purpose. This decision restored the pre-2023 standard for prior express written consent (PEWC) under the TCPA, which had been in place before the FCC attempted to expand the definition in December 2023. The court’s unanimous ruling emphasized that the agency exceeded its statutory authority by imposing additional restrictions beyond what Congress intended in the TCPA.
As a result, lead generators like GrowthPros no longer need to ensure that consumer consent is obtained exclusively for one business or that the consent context matches the subject of subsequent telemarketing outreach. Consent can now be valid even when gathered on websites unrelated to the product or service being promoted, and it may be shared with multiple sellers without violating TCPA rules—provided all other PEWC requirements are met. This clarification reduces compliance complexity for businesses engaged in lead generation, particularly those using capped-shared or reactivation models where consent is previously recorded and reused within defined limits.
Key compliance obligations remain unchanged: consent must still be in writing (including electronic or digital signatures under the E-SIGN Act), include a clear and conspicuous disclosure that the consumer authorizes telemarketing calls or texts using an automatic dialing system or artificial/prerecorded voice, and explicitly state that signing is not a condition of purchase. Businesses must also maintain consent records for at least five years, as required by the FTC Telemarketing Sales Rule, and process consumer revocations within 10 business days—effective April 11, 2025. Failure to comply risks penalties of $500 per violation, or $1,500 if the violation is found to be willful or knowing.
- Maintain current PEWC practices: written consent with signature, clear disclosures, and no condition-of-purchase language.
- Process revocations within 10 business days via any reasonable means, effective April 11, 2025.
- Retain consent records (including disclosure text, timestamp, IP, and named party) for at least five years.
- Implement bot detection to prevent non-human consent submissions, which lack legal defensibility.
- Apply identical TCPA compliance standards to text messages and voice calls.
For GrowthPros, this ruling validates existing compliance practices where every lead includes a detailed consent trail—disclosure text, timestamp, IP address, and the named contacting party—attached upon delivery to a client’s CRM. The decision removes uncertainty around consent sharing and topical relevance, allowing lead generation operations to focus on speed, quality, and proper record-keeping without fear of overreaching federal restrictions. With the one-to-one rule now vacated and unlikely to be revived soon, businesses can proceed with confidence under the reinstated, well-established PEWC standard.
How GrowthPros Ensures Every Lead Meets Express Written Consent Standards
GrowthPros ensures every lead meets express written consent standards through a rigorous, auditable process that begins at the point of capture. Each lead is generated only after a consumer provides clear and conspicuous disclosure, signs electronically or digitally, and explicitly authorizes contact via automatic dialing systems or artificial/prerecorded voice—while affirming that signing is not a condition of purchase. This aligns with the reinstated FCC standard for prior express written consent under the TCPA, which requires written agreement, consumer signature, and specific disclosures about the nature of the telemarketing contact.
Every consent record includes the exact disclosure text presented to the consumer, a precise timestamp, the IP address of the device used, and the named contacting party—elements critical for compliance with the FTC Telemarketing Sales Rule’s five-year retention requirement. These records are attached to each lead upon delivery into the client’s CRM, ensuring a full consent trail travels with the data. GrowthPros further safeguards validity by verifying human intent behind every submission, rejecting bot-generated leads that lack genuine consumer engagement, as such consent is not legally defensible under TCPA enforcement guidance.
Before any outbound contact occurs, all lists undergo DNC scrubbing against the National Do Not Call Registry, and opt-outs are honored immediately and permanently across SMS, voice, and email channels. For reactivation campaigns, GrowthPros only engages pre-existing, opted-in relationships—never cold lists—ensuring compliance with FCC one-to-one consent direction even after its vacatur. This process supports clients in meeting TCPA and FTC requirements while reducing exposure to violations that carry penalties of $500 per incident—or $1,500 if willful or knowing.
- Consent records include disclosure text, timestamp, IP address, and named party for full auditability
- Every lead is verified for human intent—bot-generated consent is rejected as legally indefensible
- Lists are DNC-scrubbed pre-contact and opt-outs processed within 10 business days as required
- Reactivation targets only pre-existing opted-in relationships, never cold lists
- Full consent trail attaches to each lead in the client’s CRM for FTC five-year record retention
By embedding compliance into the lead lifecycle—from capture to delivery—GrowthPros provides businesses with leads that are not only qualified and fast-tracked but also legally sound, reducing risk while improving contact rates and conversion potential. This commitment to consent integrity ensures that every interaction begins on a foundation of transparency and legal adherence, protecting both the consumer and the client.
Frequently Asked Questions
What does express written consent actually require under the TCPA?
Prior express written consent needs three things: a written agreement, a consumer signature (electronic or digital signatures count under the E-SIGN Act), and a clear disclosure that the consumer authorizes telemarketing calls or texts via autodialer or artificial voice — plus explicit notice that signing is not a condition of purchase. The FCC codified this in 47 CFR § 64.1200(f)(9).
Is the FCC's one-to-one consent rule still in effect?
No. The Eleventh Circuit vacated it on January 24, 2025, ruling the FCC exceeded its statutory authority, and the pre-2023 standard was reinstated on August 29, 2025. The court emphasized the TCPA requires "prior express consent" — not "prior express consent plus," per Kelley Drye's analysis.
Can consent be shared with multiple sellers now that the one-to-one rule is gone?
Yes. Consent can be valid even when gathered on websites unrelated to the product being promoted, and it may be shared with multiple sellers — provided all other written-consent requirements are met. The court held consent doesn't need to be logically or topically related to the call, as covered in Consumer Finance Insights' breakdown.
How long do I need to keep consent records, and what should they include?
The FTC Telemarketing Sales Rule requires keeping consent records for at least five years from the date of consent. Each record should include the exact disclosure text, a timestamp, the consumer's IP address, and the named contacting party — which is why GrowthPros attaches this full consent trail to every lead delivered to a client's CRM, per ActiveProspect's compliance guidance.
What happens if a consumer revokes consent — how fast do I have to act?
Since April 11, 2025, businesses must process consent revocations within 10 business days, via any reasonable means the consumer uses. A broader "revocation-all" requirement has been delayed until January 31, 2027, but the 10-business-day rule is already in force, according to ActiveProspect's rule summary.
Does bot-generated consent count as valid written consent?
No — consent requires genuine human intent, so bot-generated submissions that check consent boxes without a real consumer are not legally defensible under TCPA enforcement. That's why robust form protection and bot detection are essential; GrowthPros verifies human intent behind every submission and rejects bot-generated leads outright, a risk highlighted in ActiveProspect's analysis.
Consent, Clarified — and What It Means for Your Next Lead
Express written consent under the TCPA comes down to three things: a written agreement, a consumer signature (electronic or digital counts), and a clear disclosure that the consumer authorizes autodialed or artificial-voice telemarketing — with explicit notice that consent isn't required to buy. With the FCC's one-to-one rule vacated in January 2025 and the prior standard reinstated on August 29, 2025, the compliance picture is finally stable. What hasn't changed is the cost of getting it wrong: $500 per violation, or $1,500 if willful or knowing, per the TCPA enforcement guidelines. Your next steps: audit your consent capture for the three required elements, verify human intent behind every submission, retain records for five years, and process revocations within 10 business days. Or skip the audit entirely — GrowthPros builds all of this into every lead, with a full consent trail attached on delivery. Book the 15-minute qualification call and see what compliant, fast-followed leads look like.
This article is general information, not legal or financial advice. Benchmark figures are directional industry data, not guarantees of results.