Consent Recording Requirements · September 28, 2026 · GrowthPros

What qualifies as consent?

Learn the FCC's reinstated prior express written consent (PEWC) requirements for 2025. Avoid $500-$1,500 TCPA violations with compliant, documented leads.

Flat illustration of a signed consent form with a green approval seal, phone, and shield symbolizing compliant TCPA consent documentation.

Key Facts

  • The FCC reinstated the prior express written consent standard on August 29, 2025, making it the enforceable baseline for telemarketing calls and texts according to current regulatory analysis
  • TCPA violations carry penalties of $500 per violation, climbing to $1,500 per violation when willful, with a private right of action exposing businesses to statutory damages on every call or text per Cooley's telecom attorneys
  • Under the reinstated standard, valid consent must include written consent with a signature from the consumer — text messages are regulated the same as voice calls under the TCPA per current regulatory analysis
  • The burden of proof sits entirely with the caller or sender, who must maintain consent records on file before any robocall or robotext is made per Gryphon.ai
  • The FTC's Telemarketing Sales Rule requires retaining consent records for at least five years from the date of consent and outreach per industry compliance guidance
  • GrowthPros caps 'capped-shared' leads at a hard maximum of two buyers — never five, as with shared marketplaces — limiting how many parties touch one consumer's data per ActiveProspect
  • Opt-outs are honored immediately and permanently across SMS, voice, and email — ahead of the 10-business-day legal minimum that took effect April 11, 2025 per ActiveProspect

If you spent 2024 preparing for the FCC's one-to-one consent rule, 2025 had a plot twist: the rule you prepared for no longer exists. Here's what actually governs consent now — and what it takes to stay on the right side of it.

The one-to-one consent rule, adopted December 13, 2023 and originally set to take effect January 27, 2025, was vacated by the Eleventh Circuit Court in early 2025 after the court found the FCC had exceeded its authority. The FCC then reinstated the prior express written consent (PEWC) standard on August 29, 2025, making it the enforceable baseline for telemarketing calls and texts, according to current regulatory analysis.

Don't mistake the rollback for a relaxation. PEWC still demands a lot, and the stakes are real: TCPA violations carry penalties of $500 per violation, climbing to $1,500 per violation when willful, with a private right of action exposing businesses to statutory damages on every call or text, as Cooley's telecom attorneys note. Under the reinstated standard, valid consent must include:

  • Written consent with a signature from the consumer — text messages are regulated the same as voice calls under the TCPA.
  • Clear and conspicuous disclosure that the consumer will receive robocalls or robotexts from a designated seller, presented before consent is obtained.
  • A specific, named seller — the FCC prohibits burying "partner companies" or "marketing partners" in small print or behind a hyperlink.
  • Topical limits — communications must be logically related to the context where consent was given; a car-loan comparison shopper hasn't consented to loan-consolidation texts.

The burden of proof sits entirely with the caller or sender, who must maintain consent records on file before any robocall or robotext is made. The FTC's Telemarketing Sales Rule requires retaining those records for at least five years from the date of consent and outreach, per industry compliance guidance.

This is why documentation separates defensible lead programs from liabilities. As one compliance analysis puts it, if a seller can't show where traffic came from, what the consumer saw, and how consent is documented, "you're not buying leads, you're buying risk." GrowthPros attaches a full consent trail to every delivered lead — disclosure text, timestamp, IP address, and the named contacting party — precisely because the most expensive TCPA damages come not from malicious actors but from unclear disclosures and missing documentation.

The PEWC standard isn't a lower bar; it's the bar that survived. Manatt partner Alexandra Krasovec's advice still holds: obtain the full laundry list of PEWC elements, and that consent is "as good as gold."

Here's the uncomfortable truth about TCPA disputes: the person making the call has to prove consent existed — not the consumer who claims it didn't. As Gryphon.ai puts it, the burden of proof falls on the caller or sender, who must maintain consent records on file before any robocall or robotext goes out.

That burden carries real financial weight. TCPA violations run $500 per call or text, climbing to $1,500 when the violation is willful or knowing — and consumers hold a private right of action to collect those damages directly, according to Cooley LLP's legal analysis. A lead list without documentation isn't a marketing asset; it's a liability ledger waiting to be tallied.

The biggest risk isn't malicious behavior. ActiveProspect observes that the most expensive TCPA damages come from unclear disclosures, missing documentation, and operational gaps — not bad actors. The phrase that should keep compliance teams up at night is "we have consent but can't prove it."

So what does provable consent actually look like? Compliance means answering, with evidence:

  • The exact disclosure text the consumer saw
  • A timestamp showing when consent occurred
  • The IP address tying the consent event to a device and moment
  • The named contacting party the consumer agreed to hear from

Documentation also has a shelf life. The FTC's Telemarketing Sales Rule requires records to be retained for at least five years from the date of consent and outreach, per industry regulatory analysis. A screenshot in a shared folder doesn't survive that window — an auditable, timestamped record attached to the lead itself does.

This is why GrowthPros attaches a full consent trail — disclosure text, timestamp, IP address, and named contacting party — to every lead it delivers, rather than treating documentation as the buyer's problem. As attorney Alexandra Krasovec of Manatt, Phelps & Phillips noted in a compliance webinar, properly obtained prior express written consent is "as good as gold."

If your lead source can't show where traffic came from, what the consumer saw, and how consent is documented, you're not buying leads — you're buying risk.

Most lead buyers don't lose TCPA cases because they lacked consent — they lose because they can't prove it. As one compliance analysis puts it, "If the seller can't show you where traffic comes from, what the consumer saw, and how consent is documented — you're not buying leads, you're buying risk" (ActiveProspect).

That's the gap consent-recorded leads are built to close. With the FCC reinstating the prior express written consent standard on August 29, 2025 — requiring written consent, a signature, and clear disclosures (per current regulatory analysis) — the burden of proof falls squarely on the caller or sender, who must maintain consent records before any robocall or robotext (Gryphon.ai).

Every lead GrowthPros delivers arrives with its full consent trail attached: the disclosure text the consumer saw, the timestamp, the IP address, and the named contacting party. That record answers the exact questions compliance teams ask in a dispute — who is authorized to contact, how, what the consumer agreed to, and when (ActiveProspect). With TCPA penalties running $500 per violation and up to $1,500 if willful (per statutory damages rules), and a five-year record retention requirement under the FTC's Telemarketing Sales Rule, documentation isn't paperwork — it's the whole defense.

The structural advantage compounds when you compare lead types:

  • Exclusive leads are simpler to keep compliant, while shared leads raise the bar for clear seller authorization and increase complaint exposure (ActiveProspect).
  • GrowthPros caps "capped-shared" leads at a hard maximum of two buyers — never five, as with shared marketplaces — limiting how many parties touch one consumer's data.
  • Lists are DNC-scrubbed before any outbound contact, matching the FCC's extension of DNC Registry protections to marketing texts (Cooley LLP).
  • Opt-outs are honored immediately and permanently across SMS, voice, and email — ahead of the 10-business-day legal minimum that took effect April 11, 2025 (ActiveProspect).

The most expensive TCPA damages don't come from bad actors, but from unclear disclosures, missing documentation, and misaligned expectations between buyer and seller (ActiveProspect). Consent-recorded leads eliminate those operational gaps at the source. One attorney summarized it plainly: properly obtained prior express written consent is "as good as gold" (ActiveProspect webinar). For lead buyers, the practical takeaway is simple — demand the consent trail before you dial, because in a dispute, the record is the only thing that speaks for you.

Frequently Asked Questions

What happened to the FCC's one-to-one consent rule that was supposed to take effect in 2025?
The FCC's one-to-one consent rule, adopted in December 2023 and originally set to take effect January 27, 2025, was vacated by the Eleventh Circuit Court in early 2025 after the court found the FCC had exceeded its authority. The FCC then reinstated the prior express written consent (PEWC) standard on August 29, 2025, making it the current enforceable baseline for telemarketing calls and texts.
What does prior express written consent (PEWC) require under the current TCPA standard?
Under the reinstated PEWC standard, valid consent must include written consent with a consumer signature, clear and conspicuous disclosure before consent is obtained that the consumer will receive robocalls or robotexts from a designated seller, a specific named seller (not buried 'partner companies'), and topical limits ensuring communications are logically related to the context where consent was given. Text messages are regulated the same as voice calls under the TCPA.
Who bears the burden of proof in a TCPA consent dispute, and what must they demonstrate?
The burden of proof sits entirely with the caller or sender, who must maintain consent records on file before any robocall or robotext is made. Compliance means being able to show, with evidence, the exact disclosure text the consumer saw, a timestamp of consent, the IP address tying the consent to a device and moment, and the named contacting party the consumer agreed to hear from.
What are the financial risks of TCPA violations, and how do they increase for willful violations?
TCPA violations carry penalties of $500 per violation, climbing to $1,500 per violation when the violation is willful or knowing. Consumers also hold a private right of action to collect those damages directly, meaning businesses face statutory damages on every non-compliant call or text.
How long must businesses retain TCPA consent records, and why is this important for lead buyers?
The FTC's Telemarketing Sales Rule requires businesses to retain consent records for at least five years from the date of consent and outreach. This long retention period means that documentation like screenshots in shared folders won't suffice—only auditable, timestamped records attached to the lead itself can survive regulatory scrutiny and protect buyers from liability.
What changed about TCPA opt-out rules in April 2025, and how should businesses respond?
As of April 11, 2025, businesses must honor consumer revocation of consent within 10 business days and allow revocation through any reasonable means—including 'STOP,' verbal requests, email, or voicemail. A one-time non-promotional confirmation text is permitted, sent within 5 minutes of the opt-out request.

The Bar That Survived: Make Your Consent Provable, Not Just Present

The one-to-one consent rule may be gone, but the lesson from 2025 is clear: regulatory whiplash doesn't lower the bar — it raises the cost of guessing. The reinstated prior express written consent standard still demands written, signed consent, clear disclosures, a named seller, and topical limits, with the burden of proof resting entirely on the caller. At $500 per violation — up to $1,500 when willful — and a five-year record retention requirement under the FTC's Telemarketing Sales Rule, the risk isn't theoretical (per current regulatory analysis). The most expensive TCPA damages don't come from bad actors; they come from unclear disclosures and missing documentation. So audit your lead sources now: can you show the exact disclosure text, timestamp, IP address, and named contacting party for every lead you dial? If not, you're buying risk, not leads. GrowthPros attaches that full consent trail to every lead it delivers — DNC-scrubbed, capped at two buyers maximum, with opt-outs honored immediately. Book the free 15-minute qualification call and see what provable consent looks like on real leads — no commitment, just clarity.

This article is general information, not legal or financial advice. Benchmark figures are directional industry data, not guarantees of results.

Start

More booked calls. Not more form fills.

Tell us your niche and your goal. We will show you realistic volume, exclusivity options, and what follow-up looks like on a live call — no pressure, no 40-page deck.