
Consent Recording Requirements · September 28, 2026 · GrowthPros
What must be included for consent to be considered informed?
Learn the 5 elements of informed consent under TCPA: written signature, clear disclosure, one seller, topical match, and phone number. Audit your lead s...

Key Facts
- TCPA violations cost $500 per call or text, and up to $1,500 when willful, according to ActiveProspect's compliance analysis.
- The Eleventh Circuit vacated the FCC's one-to-one consent rule on January 24, 2025, ruling the FCC exceeded its statutory authority.
- The FCC reinstated the 2012 prior express written consent standard on August 29, 2025, per regulatory tracking.
- Valid TCPA consent must name no more than one identified seller under 47 C.F.R. § 64.1200(f)(9), per America's Credit Unions.
- Since April 11, 2025, businesses must honor consent revocation requests within 10 business days, per FCC rules.
- Consent gathered on a car loan site cannot be used for debt consolidation calls, per Honigman's analysis.
- Businesses must retain TCPA consent records for at least five years and bear the burden of proof, under the Telemarketing Sales Rule.
The Compliance Minefield: Why "They Filled Out a Form" Isn't Enough
Buying or generating leads without documented, informed consent exposes your business to TCPA penalties of $500–$1,500 per call or text, turning what seemed like a qualified opportunity into a costly liability. The legal landscape has whipsawed dramatically — the FCC's one-to-one consent rule was vacated by the Eleventh Circuit on January 24, 2025, and the prior express written consent standard was reinstated on August 29, 2025 — leaving many buyers uncertain which standard actually applies to their leads today.
For consent to be considered informed under the current TCPA framework, it must meet specific, non-negotiable requirements. First, consent must be in writing and bear the consumer’s signature, which can be digital under the E-SIGN Act, as confirmed by regulatory guidance and court rulings. Second, it must include clear and conspicuous disclosures that explicitly state the consumer will receive robocalls or robotexts using an autodialer or artificial/prerecorded voice. Third, the consent must identify no more than one specific seller and be logically and topically associated with the interaction that prompted it — meaning consent given on a car loan site cannot be used for debt consolidation calls. Finally, the telephone number to which messages are authorized must be clearly identified in the consent record.
- Written agreement with consumer signature (digital under E-SIGN Act)
- Clear disclosure of robocall/robotext authorization
- Identification of one specific seller
- Logical/topical association between consent context and communication
- Authorized telephone number specified
Businesses must also honor consumer revocation requests through any reasonable means within 10 business days, a requirement effective April 11, 2025, and retain all TCPA consent records for at least five years from the date of consent and outreach. GrowthPros builds these elements into every lead we deliver, ensuring each includes disclosure text, timestamp, IP address, and the named contacting party — so you’re not just buying a lead, but a compliant, actionable opportunity backed by a verifiable consent trail.
The Five Elements of Valid Informed Consent Under the TCPA
A consent form that looks airtight can still fail legally if it is missing even one required element. Under the TCPA's prior express written consent standard — which the FCC formally reinstated on August 29, 2025 — "informed" consent has a precise, five-part definition, and each part matters.
1. A written agreement bearing the consumer's signature. The consent must exist in writing and carry the consumer's signature — and per ActiveProspect's compliance analysis, digital signatures qualify under the E-SIGN Act. A verbal "yes" on a form fill or a checked box alone does not satisfy the written-consent standard for autodialed or prerecorded marketing calls and texts.
2. Clear and conspicuous disclosure. The consumer must clearly and unmistakably understand that they are agreeing to receive robocalls or robotexts. The Eleventh Circuit held that consent requires a "clear and unmistakably" stated willingness to receive the robocall — buried fine print does not meet that bar.
3. Authorization naming no more than one identified seller. The regulatory text codified at 47 C.F.R. § 64.1200(f)(9) requires that consent authorize no more than one identified seller. Blanket consent to "marketing partners" or unnamed third parties is not informed consent.
4. Logical and topical association. Communications must relate to the interaction that prompted the consent. As Honigman's analysis illustrates, consent gathered on a car loan site cannot be used for loan consolidation calls. Context mismatch invalidates the consent.
5. Identification of the specific telephone number. The written agreement must identify the exact phone number the consumer authorizes messages to. Consent attached to a name without a number leaves sellers unable to prove authorization.
Why this matters commercially: TCPA violations carry penalties of $500 per violation, or up to $1,500 per violation when willful or knowing — and businesses bear the burden of proof if consent is challenged. That is why record retention is not optional:
- Retain consent records for at least five years from the date of consent and outreach under the Telemarketing Sales Rule
- Capture the disclosure text, timestamp, IP address, and named contacting party for every lead
- Honor revocation requests within 10 business days, effective April 11, 2025
- Allow consumers to revoke consent through any reasonable means
This is why GrowthPros attaches a full consent trail — disclosure text, timestamp, IP address, and the named contacting party — to every lead delivered. Consent that cannot be proven is consent that does not exist, and the five elements above are the minimum proof standard for any lead you buy.
Consent Doesn't End at Capture: Revocation and Record-Keeping Obligations
Most businesses treat consent as a checkbox at form submission. In reality, that's only the beginning of the obligation — what happens after capture is where TCPA compliance is won or lost.
Under FCC rules, consumers may revoke consent through any reasonable means — a reply text, an email, a phone call, even a comment to an agent. Since April 11, 2025, businesses must honor those revocation requests within 10 business days for both informational and marketing communications, according to compliance tracking from ActiveProspect. There's no requirement that consumers use a specific channel or magic words.
That flexibility cuts both ways. If a lead texts "stop" to one number but your team keeps dialing from another, you're exposed. TCPA violations carry penalties of $500 per violation — or actual damages, whichever is greater — and willful or knowing violations can reach $1,500 per violation. At volume, those numbers compound fast.
Then there's the record-keeping burden. Under the Telemarketing Sales Rule, businesses must retain TCPA consent records for at least five years from the date of consent and outreach — and they bear the burden of proof if consent is later challenged. In a dispute, "the lead form said so" is not a defense. A defensible consent trail needs specifics:
- The exact disclosure text the consumer saw, including that autodialed or prerecorded messages would follow
- A timestamp tying consent to the moment it was given
- The consumer's IP address or equivalent capture evidence
- The named party authorized to make contact
- The telephone number to which messages are authorized
The regulatory backdrop here has been turbulent. The FCC's "one-to-one" consent rule was vacated by the Eleventh Circuit on January 24, 2025, and the prior express written consent standard from 2012 remains in effect — but the revocation and record-keeping duties above are not optional, and the FCC continues to refine them. The firm Nelson Mullins notes that consumers must be allowed to revoke through any reasonable means regardless of how the broader rulemaking resolved.
This is why consent architecture matters at the point of purchase. Every lead GrowthPros delivers arrives with its consent trail attached — disclosure text, timestamp, IP address, and named contacting party — and opt-outs are honored immediately and permanently across SMS, voice, and email. When you buy leads from a marketplace that can't show you that trail, you inherit their compliance risk along with the contact.
If your current lead source can't produce a timestamped consent record for every name it sells you, it's worth a 15-minute qualification call to see what a consent-recorded alternative looks like.
How to Audit Your Lead Supply: A Practical Checklist
Buying leads without verifying the consent trail is like wiring money to a stranger — you have no proof the transaction is legitimate. The Eleventh Circuit vacated the FCC's one-to-one consent rule on January 24, 2025, but the 2012 prior express written consent standard remains fully in force, requiring written agreement, clear disclosures, and identification of a single seller. Court precedent confirms that consumers need only "clearly and unmistakably" state willingness to receive robocalls, yet the burden of proof sits entirely on the caller.
Every lead you purchase should arrive with a complete consent record attached. Regulatory guidance mandates retaining these records for at least five years from the date of consent and outreach, and violations carry penalties of $500 per call — up to $1,500 for willful breaches. GrowthPros embeds this documentation directly into each delivery so buyers can answer the only question that matters in court: can you prove this person agreed to hear from you?
Use this checklist before you dial or text a single number:
- Disclosure text, timestamp, IP address, and the named contacting party on every lead record
- Confirmation that the list was DNC-scrubbed before any outbound attempt
- Proof that opt-outs are honored immediately and permanently across SMS, voice, and email
- A vendor who can articulate exactly how they would defend consent in court
As of April 11, 2025, businesses must process revocation requests within 10 business days through any reasonable means the consumer chooses. The FCC's reinstated standard also requires that calls be logically and topically associated with the interaction that prompted consent — a car-loan inquiry cannot legitimately spawn debt-consolidation pitches. If your vendor cannot produce this evidence on demand, the lead is a liability, not an asset.
Get exclusive, consent-recorded leads followed up in minutes
Where to Get Consent-Recorded Leads Without the Legal Guesswork
Knowing what makes consent legally informed only matters if the leads you buy actually come with it. Most lead vendors sell you a name and a number; when a TCPA claim lands on your desk, the consent trail is your problem, not theirs.
The stakes are real. TCPA violations carry penalties of $500 per call or text, and willful or knowing violations can reach $1,500 per violation — numbers that turn one bad lead list into a five-figure liability fast. And because the buyer bears the burden of proof when consent is challenged, you need records you can actually produce, not a vendor's verbal assurance that "the leads are compliant."
That's why consent quality belongs on your vendor-selection checklist right next to price and speed. When you evaluate a lead source, ask what arrives with each lead. At minimum, you should see:
- The disclosure text the consumer actually saw at the point of consent
- A timestamp and IP address proving when and where consent occurred
- The named contacting party the consumer agreed to hear from
These aren't extras — they map directly to what regulators expect. Under the Telemarketing Sales Rule, businesses must retain TCPA consent records for at least five years from the date of consent and outreach. And as of April 11, 2025, you must honor revocation requests within 10 business days, with consumers able to revoke consent through any reasonable means. A vendor that can't hand you the paper trail makes both obligations impossible to meet.
GrowthPros treats the consent record as part of the product, not an afterthought. Every lead we deliver — exclusive or capped-shared — arrives with the disclosure text, timestamp, IP address, and named contacting party attached, DNC-scrubbed before any outbound contact, with opt-outs honored immediately and permanently across SMS, voice, and email. Reactivation campaigns touch only pre-existing, opted-in relationships, never cold lists.
Speed matters too, but only after consent is clean. Every lead gets AI voice, SMS, and email follow-up inside a five-minute window, 24/7 — because the fastest response usually wins the customer, and the cleanest consent record protects the sale. The promise is the process: qualified, consent-recorded leads, followed up inside the promised window, landing in your CRM with the full consent trail intact.
If you want to see what consent-recorded leads look like for your niche — auto, finance, real estate, or home services — book the free 15-minute qualification call. It's honest about fit, commits you to nothing, and sets real numbers for your market. You can also submit the get-started funnel and get a same-business-day review.
Frequently Asked Questions
What are the five elements that make consent legally informed under the TCPA?
Informed consent requires a written agreement bearing the consumer's signature (digital signatures qualify under the E-SIGN Act), clear and conspicuous disclosure that the consumer will receive robocalls or robotexts, authorization naming no more than one identified seller, logical and topical association with the interaction that prompted consent, and identification of the specific telephone number authorized. The exact regulatory text is codified at 47 C.F.R. § 64.1200(f)(9).
Does a checked box or verbal "yes" count as valid written consent?
No. A verbal "yes" or a checked box alone does not satisfy the written-consent standard for autodialed or prerecorded marketing calls and texts — the consent must be in writing with the consumer's signature, which can be digital under the E-SIGN Act per ActiveProspect's compliance analysis.
Is the FCC's one-to-one consent rule still in effect after the court ruling?
No. The Eleventh Circuit vacated the FCC's one-to-one consent rule on January 24, 2025, finding the FCC exceeded its statutory authority, and the FCC formally reinstated the 2012 prior express written consent standard on August 29, 2025. The court held that one need only "clearly and unmistakably" state willingness to receive the robocall — but the written-consent, disclosure, and single-seller requirements remain fully in force.
How much can a TCPA violation actually cost my business?
TCPA violations carry penalties of $500 per call or text (or actual damages, whichever is greater), and willful or knowing violations can reach $1,500 per violation — numbers that turn one bad lead list into a five-figure liability fast. The burden of proof sits entirely on the caller if consent is challenged.
Can I use consent gathered on one type of website for a different offer?
No — communications must be logically and topically associated with the interaction that prompted the consent. As Honigman's analysis illustrates, consent gathered on a car loan site cannot be used for loan consolidation calls; context mismatch invalidates the consent.
How long do I need to keep consent records, and how fast must I honor opt-outs?
Under the Telemarketing Sales Rule, you must retain TCPA consent records for at least five years from the date of consent and outreach, and as of April 11, 2025 you must honor revocation requests within 10 business days — with consumers able to revoke through any reasonable means, such as a reply text, email, or comment to an agent. GrowthPros attaches the full consent trail — disclosure text, timestamp, IP address, and named contacting party — to every lead delivered so buyers can meet both obligations.
Consent You Can Prove — or a $1,500 Call You Can't Take Back
Informed consent under the TCPA isn't a vibe — it's a five-part standard: a signed written agreement, clear and conspicuous disclosure of robocall authorization, one identified seller, a logically related context, and a specified phone number. Miss any element, and that lead becomes a liability at $500 per violation — or up to $1,500 when willful — with the burden of proof resting entirely on you. The obligations don't stop at capture, either: revocation must be honored within 10 business days through any reasonable means, and consent records must be retained for five years. Your next step is simple: ask your current lead vendor to produce the disclosure text, timestamp, IP address, and named contacting party for a handful of recent leads. If they can't, you're carrying their risk. GrowthPros attaches that consent trail to every lead delivered — so the record arrives with the opportunity. Book the free 15-minute qualification call to see what consent-recorded leads look like for your niche. It's honest about fit and commits you to nothing.
This article is general information, not legal or financial advice. Benchmark figures are directional industry data, not guarantees of results.