TCPA Compliance for AI Cold Calling
Everything B2B sales teams need to run AI cold calling campaigns without getting sued. Consent, DNC rules, state calling windows, AI voice disclosure, and penalties — explained in plain English.
Last updated: April 2026 · Not legal advice — consult your attorney.
The 5-second summary
AI cold calling is legal if you: (1) have prior express written consent OR a valid B2B exemption, (2) scrub against the National DNC Registry + state lists every 31 days, (3) call within legal windows (8am-9pm local), (4) honor opt-out requests within 30 days, and (5) disclose AI nature when asked.
Is B2B AI cold calling TCPA-exempt?
Mostly yes — calls to a business's published landline are exempt. Calls to a decision-maker's personal cell phone are NOT exempt, even if you only want to discuss business. The TCPA was written to protect consumers, but the FCC has interpreted “residential” broadly enough to include cell phones owned by individuals who happen to work at companies.
The practical line for AI cold calling in 2026:
- Exempt: Direct-dial business numbers, switchboards, main lines, IVR receptionists, and numbers published in a company directory.
- Not exempt: Cell phones (even of executives), home offices, and any number the FCC could classify as “residential.”
- Grey area: Mobile numbers listed on LinkedIn, found in Apollo/ZoomInfo, or scraped from public directories. Recent class actions have treated these as residential — assume you need consent.
The April 2026 FTC settlement with Air AI ($28M) was driven primarily by AI dialers hitting unconsented cell phones at scale, not by the AI itself. The Air AI / FTC settlement guide explains what changed and how to stay clear.
What is the TCPA?
The Telephone Consumer Protection Act of 1991 (47 U.S.C. § 227) restricts telemarketing calls, auto-dialed calls, pre-recorded voice messages, text messages, and unsolicited faxes. The FCC enforces it; private plaintiffs can sue for $500-$1,500 per violating call.
In 2024, the FCC clarified that AI-generated voices fall under "artificial or prerecorded voice" — meaning AI calls require the same consent as traditional robocalls.
The 7 rules of AI cold calling compliance
Get prior express written consent (or B2B exemption)
For calls to cell phones, you need a signed form authorizing calls to that specific number. B2B calls to published company lines are generally exempt.
Scrub DNC lists every 31 days
National DNC Registry ($88/area code/year) + state lists. Failure to scrub is strict liability — $500/call minimum.
Call only within legal hours
Federal: 8am-9pm local time. Some states have tighter windows. Use the called party's time zone, not yours.
Identify yourself at the start of the call
Name of the entity making the call + contact info. Required within first 2 minutes.
Honor opt-out requests within 30 days
If someone says 'take me off your list,' stop calling. Maintain an internal DNC list across all your numbers and entities.
Record and retain for 4+ years
Keep call recordings, consent records, and DNC scrub logs. You'll need them if sued. Some states require 5-7 years.
Disclose AI voice when asked
If a prospect asks 'Am I talking to a human?', your AI must answer honestly. FCC 2024 guidance.
State-specific "mini-TCPA" laws
Federal TCPA is the floor. Several states have stricter rules:
Florida
Requires prior express written consent for ALL marketing calls (Florida Telephone Solicitation Act). Penalties up to $500/call + attorneys' fees.
California
Higher consent standards via the California Invasion of Privacy Act (CIPA). Two-party consent for recordings.
Oklahoma
Mini-TCPA requires prior express written consent for telemarketing calls.
Washington
Limits telemarketing and requires disclosure of caller identity at the start of each call.
How ClinchRev handles compliance for you
- ✓ Daily National + state DNC list scrubs
- ✓ State-specific calling window enforcement
- ✓ Consent tracking per lead (upload signed forms)
- ✓ Automatic opt-out detection ("take me off your list")
- ✓ 7-year call recording retention
- ✓ Honest AI disclosure when prospects ask
- ✓ TCPA opinion letter template (reviewed by counsel)
State-by-state AI calling time windows (2026)
Federal law sets 8am–9pm local time as the calling window. Many states have tighter restrictions. ClinchRev enforces these automatically based on prospect area code.
| State | Window | Additional Rules |
|---|---|---|
| California | 8am–9pm | No automated calls to cell phones without prior express written consent (CIPA applies) |
| Florida | 8am–8pm | Florida Telephone Solicitation Act — tighter than federal; prior express written consent required for all marketing calls |
| Texas | 9am–9pm | Federal window applies; no additional state restrictions beyond federal TCPA |
| New York | 8am–9pm | No calls on Sundays before noon; must state purpose of call at outset |
| Pennsylvania | 8am–9pm weekdays | No calls on Sundays at any time; Saturday allowed within window |
| Massachusetts | 8am–8pm | No Sunday calls; stricter than federal on window close time |
| Washington | 9am–8pm | Must state purpose of call immediately; registrar requirements for telephone solicitors |
| Indiana | 9am–9pm | Federal calling window applies; no Sunday restrictions beyond federal |
| Wisconsin | 8am–9pm | No Sunday calls allowed; mirrors Pennsylvania Sunday restriction |
| Ohio | 9am–9pm | Federal window applies; no additional state-specific restrictions |
| Michigan | 9am–9pm | Federal window applies; Michigan Consumer Protection Act may apply to deceptive practices |
| New Jersey | 8am–8pm | Tighter close time than federal; telemarketer registration required |
| Maryland | 8am–9pm | Federal window applies; Maryland Telephone Consumer Protection Act mirrors federal rules |
| Virginia | 8am–9pm | Federal window applies; Virginia Consumer Protection Act covers deceptive telemarketing |
| Illinois | 9am–8pm | No Sunday calls; tighter both open and close than federal |
This table is for reference only. Consult legal counsel for your specific situation. State laws change frequently.
TCPA consent requirements for AI calling
Prior Express Written Consent (PEWC) is the gold standard for AI and autodialed calls to cell phones for marketing purposes. Under the TCPA, a valid PEWC must include a clear written agreement (digital signatures are acceptable) that specifically authorizes calls to the number provided, discloses that the calls may be autodialed or use an artificial or pre-recorded voice (including AI voice), and explicitly states that consent is not a condition of purchase. Without all three elements, the consent does not satisfy TCPA requirements.
Several common consent practices do NOT satisfy PEWC requirements. General website terms of service that include buried consent language are insufficient. Pre-checked consent boxes do not constitute affirmative agreement. Verbal-only consent is not valid for autodialed or AI-voice marketing calls to cell phones — it must be written or digitally documented. The consent must also be specific to the calling entity; consent given to a third party does not automatically transfer. Under TCPA, consent has no set expiration, but best practice is to re-confirm consent every 18 months, particularly for large lists that may include numbers transferred to new owners.
The B2B exemption is frequently misunderstood. Calls to business landlines published for business use — a main company phone number listed on a website — are generally exempt from TCPA consent requirements. However, the personal cell phones of business contacts are NOT exempt, even if those individuals are being called in a business context. If you are dialing the mobile number of a VP of Sales, TCPA consent rules apply regardless of whether the call is a business pitch.
Valid consent examples
- ✓ Signed lead form with explicit AI calling disclosure
- ✓ Digital checkbox (unchecked by default) with clear consent language
- ✓ Event registration form with TCPA disclosure and specific phone number field
- ✓ Text-to-consent (double opt-in via SMS confirmation)
- ✓ Consent not bundled as condition of purchase
Invalid consent examples
- ✗ General website TOS that mentions "communications"
- ✗ Pre-checked consent box on checkout
- ✗ Verbal agreement on a recorded call (not written)
- ✗ Consent to receive emails only (does not cover AI calls)
- ✗ Third-party list where original consent entity differs
Handling a TCPA complaint
If you receive a TCPA complaint — a demand letter, a regulatory inquiry, or a direct message from a prospect claiming you violated their rights — the steps you take in the first 48 hours matter significantly. Here is the recommended response framework:
- 1
Document everything immediately
Preserve all call recordings, consent records, DNC scrub logs, and campaign configuration for the period in question. Do not delete or alter any records. If your records are in a SaaS platform, export and archive them locally.
- 2
Assess class action risk
A single complaint may be opportunistic. Multiple similar complaints — same time period, same campaign, same type of claimant — may indicate an organized class action effort. Elevated risk warrants immediate counsel involvement.
- 3
Check your consent records for the complainant
Pull the specific phone number from your consent database. Verify that you have a valid PEWC record, that the DNC scrub was run within the required 31-day window, and that the call occurred within legal hours. Your records are your primary defense.
- 4
Add the number to your internal DNC list immediately
Regardless of whether you believe the complaint has merit, add the complainant's number to your internal Do Not Call list now. Further contact while a complaint is active will be treated as willful violation ($1,500/call).
- 5
Do not contact the complainant again
Not to apologize. Not to explain. Not to resolve informally. Any contact can be used as evidence of continued violation or as an admission. All further communication should go through legal counsel.
- 6
Consult telemarketing compliance counsel
TCPA litigation is a specialized area. Engage an attorney with specific TCPA defense experience. General business lawyers often underestimate the complexity of class certification risk and statutory damages calculations.
- 7
Let your records be your defense
If a lawsuit is filed, your consent records, DNC scrub logs, and call recordings are your primary evidence. Courts have ruled in favor of defendants who maintained clean, documented consent and scrub processes. 4+ years of retention is the minimum; 7 years is best practice.
ClinchRev note: ClinchRev automatically retains call recordings and DNC scrub logs for 7 years to support your compliance defense. Consent records uploaded to the platform are timestamped and immutable. You can export a full compliance audit package at any time from your dashboard.
The 2024 FCC ruling and what it means for AI calling
In February 2024, the FCC issued a landmark ruling under CG Docket 02-278, clarifying that AI-generated voices constitute "artificial or prerecorded voice" under the TCPA. This ended a legal gray area that some AI calling companies had exploited. From the ruling forward, AI-generated voice calls require the same prior express written consent as traditional robocalls.
The ruling was triggered in part by the use of AI-generated voices in political robocalls — including a fake AI audio impersonating a presidential candidate telling people not to vote. The FCC moved swiftly to close the loophole. The AI voice = robocall standard now applies to all commercial outbound calling.
For B2B sales teams, the practical impact is: if you're calling cell phones (even business cell phones) with AI voice, you need prior express written consent OR a valid B2B exemption (calls to published business lines, not personal cells). Cold outbound to consumer lists without consent is now clearly illegal.
ClinchRev was built after the 2024 FCC ruling, so compliance is baked in from day one — not retrofitted. Built-in DNC scrubs, consent tracking per lead, automatic AI disclosure when asked, and call recordings retained for 7 years.
Frequently asked questions
Is AI cold calling legal under the TCPA?+
Yes, when done correctly. The Telephone Consumer Protection Act (TCPA) regulates pre-recorded and auto-dialed calls, not AI specifically. AI calls are legal when you have (1) prior express written consent for marketing calls to cell phones, OR (2) an established business relationship with valid exemption, AND you scrub against the National Do Not Call Registry and state DNC lists.
What are TCPA penalties for AI calls?+
$500 per negligent violation, $1,500 per willful violation. Penalties apply PER CALL, not per recipient. Class actions have resulted in $10M+ settlements against solar, insurance, and debt collection companies using AI or auto-dialers without consent.
Do I need to disclose that the caller is AI?+
The FCC's 2024 ruling (CG Docket 02-278) treats AI-generated voices as 'artificial voice' under the TCPA. Disclosure is required in most states when using AI voice on outbound marketing calls. Best practice: include 'This call may be recorded' and disclose AI nature when asked.
What counts as 'prior express written consent'?+
A signed form (digital signature ok) that (1) specifically authorizes calls to a provided phone number, (2) discloses that the calls may be autodialed or use pre-recorded/AI voice, and (3) is not a condition of purchase. Checkboxes on a form are acceptable if clearly worded.
What about B2B calls — does TCPA apply?+
TCPA primarily targets consumer calls. Business-to-business calls to company-published numbers (main lines) are generally exempt, but personal cell phones owned by business contacts are protected. If you're calling cell phones — even of business decision-makers — TCPA applies.
How often do I need to scrub DNC lists?+
Minimum every 31 days for the National DNC Registry. State DNC lists may have different requirements. ClinchRev scrubs daily automatically.
What are the calling time windows?+
Federal: 8am-9pm in the called party's local time zone. Many states have tighter windows (e.g., Pennsylvania: no calls on Sundays, Massachusetts: no calls before 8am).
Run compliant AI campaigns from day one
DNC scrubs, consent tracking, and disclosure built in. Free 20 AI minutes to test.
Start Free Today