ServicesHow It WorksIndustriesResultsInsightsBuild My Plan
TCPA and Do Not Call Rules

What does the TCPA require to disclose?

Back to InsightsWhat does the TCPA require to disclose?

What does the TCPA require to disclose?

Key Facts

  • A single batch of 50,000 texts could equal $75 million in exposure according to research.
  • Statutory damages range $500–$1,500 per call/text, with each message counted separately per legal experts.
  • The four-element consent disclosure must name the seller, describe message types, reference the number, and state consent isn't a purchase condition industry research shows.
  • Font sizes below 12pt risk invalidating consent as 'not clear and conspicuous' courts have flagged.
  • AI-voice calls require identification, callback numbers, and opt-out within 2 seconds of the message FCC guidelines mandate.
  • Opt-outs must be honored within 10 business days, with only one post-revocation clarification message allowed April 2025 rules state.
  • Businesses must retain consent records for 4 years, including timestamps, IP addresses, and opt-out events compliance standards require.

Understanding TCPA Disclosure Challenges

Understanding TCPA disclosure challenges is crucial for businesses to ensure compliance and avoid hefty fines. The TCPA requires a set of disclosures across three moments: at the point of consent collection, at the start of a call or within the message itself, and in opt-out mechanics. According to industry research, the core consent disclosure must be "clear and conspicuous," naming the specific seller, describing the message type, referencing the specific phone number, and stating that consent is not a condition of purchase.

For prerecorded and AI-voice calls, the caller must identify the responsible entity and individual at the start of the call, provide a callback number, and offer an automated opt-out mechanism within 2 seconds of the message, as stated in a recent study. This is particularly important, as statutory damages can run $500-$1,500 per call or text, with each message counted as a separate violation, according to legal experts. In fact, a single batch of 50,000 texts can equal $75 million in exposure, with each message sent after a STOP reply treated as a separate willful violation at $1,500 each.

Some key challenges businesses face in ensuring TCPA compliance include:

  • Building AI-voice call scripts with in-call identification and opt-out mechanisms
  • Honoring opt-outs immediately and across channels
  • Keeping version-controlled consent records for at least four years

It's essential for businesses to prioritize transparency and clarity in their disclosure statements, as clear and conspicuous consent is a critical factor in determining compliance. By understanding the complexities of TCPA disclosure requirements, businesses like CallMyLeads can help their clients navigate these challenges and ensure they're meeting the necessary standards. With the stakes high, it's crucial for businesses to get it right and avoid the risks associated with non-compliance.

TCPA Disclosure Solutions and Best Practices

A single missing sentence on a lead form can turn a compliant campaign into a class action. With statutory damages of $500 per call or text — trebled to $1,500 for willful violations, and each message counted separately — disclosure isn't paperwork; it's risk management.

The four-element consent disclosure is the foundation. Every lead form needs language that names the specific seller, describes the message type (autodialed texts, prerecorded calls, or both), references the exact phone number, and states that consent is not a condition of purchase. Miss any one element and the consent is legally worthless. A workable model: "By checking this box, I consent to receive telemarketing calls and text messages from [Company Name] at the phone number I provided, including calls made using an autodialer or prerecorded voice. I understand my consent is not a condition of any purchase."

Presentation matters as much as wording. The FCC requires disclosures to be clear and conspicuous — legible, visually distinct, and placed next to an unchecked-by-default checkbox. Courts have flagged font sizes below 12pt as a factor against validity. The blunt test: if a consumer could sign up without their eyes ever crossing the consent language, the form is exposed.

For prerecorded and AI-voice calls, in-call duties apply. The FCC's 2024 ruling confirmed AI-generated voices count as artificial voice, so callers must identify the responsible entity and individual at the start, provide a callback number, and offer an automated opt-out within 2 seconds of the message. Notably, the FCC has stated these requirements do not extend to technologies used to answer inbound calls — but disclosing AI status anyway aligns with the direction of the proposed FCC rule and state bot-disclosure laws. CallMyLeads builds this into its call handling: callers always know they're talking to AI and can always reach a human.

Opt-out mechanics tightened in April 2025. Businesses must now honor revocation made "in any reasonable manner" within ten business days, with recognized keywords including STOP, QUIT, END, REVOKE, OPT-OUT, CANCEL, and UNSUBSCRIBE. Only one post-revocation clarification message is allowed, within five minutes, with no marketing content.

Best practices that hold up in court:

  • Publish the four-element disclosure on every lead form, with version-controlled text.
  • Keep consent records — timestamps, IP address, phone number, opt-out events — for at least four years, matching the statute of limitations.
  • Honor opt-outs immediately and across channels; texting STOP stops both texts and automated voice calls.
  • Remember that named-seller consent does not travel — buying a lead book doesn't transfer consent to your company.

As one compliance guide puts it, if you can't prove you had consent and read the disclosures, you effectively didn't. Build the proof into your systems from day one — this is general information, not legal advice, so confirm current rules with counsel as they shift.

Implementing TCPA Compliance in Your Business

Getting TCPA compliance right isn't about one disclosure form — it's about building a system where consent, identification, and opt-outs work together at every touchpoint. The stakes justify the effort: statutory damages run $500 per violating call or text, trebled to $1,500 for willful violations, and courts treat each message as a separate violation (recordinglaw.com).

Start with your lead forms. Every consent disclosure needs four elements: the specific seller's name, the message types covered (autodialed texts, prerecorded calls, or both), the phone number being consented, and a statement that consent is not a condition of purchase. Miss any one element and your consent is, as compliance researchers put it, "legally worthless" (leadcompliant.com).

Placement matters as much as wording. Disclosures must be "clear and conspicuous" — visible without extra clicks, next to an unchecked checkbox, in readable type (courts have flagged fonts below 12pt as a factor against validity). The blunt test: if a consumer could sign up without their eyes ever crossing the consent language, your form is exposed (econsent.org).

If you make outbound prerecorded or AI-voice calls, build identification and opt-out into the script itself. The caller must state who is calling and on whose behalf, provide a callback number, and offer an automated opt-out within 2 seconds of the initial message (henson-legal.com). The TCPA doesn't yet require disclosing that a caller is AI, but a proposed FCC rule would — which is why CallMyLeads always tells callers they're speaking with AI upfront. Clear disclosure is a feature, not something to hide behind.

Opt-outs deserve equal rigor. Since April 11, 2025, businesses must honor consent revocation made "in any reasonable manner" within ten business days, and only one clarification message — no marketing content — is permitted within five minutes (bclplaw.com). FCC-endorsed keywords include STOP, QUIT, END, REVOKE, OPT-OUT, CANCEL, and UNSUBSCRIBE. CallMyLeads honors opt-outs immediately and automatically, exceeding that ten-day window.

Finally, keep records you can defend. The burden of proof sits entirely with the caller, so store:

  • The exact consent disclosure text, version-controlled
  • Opt-in timestamp in UTC, plus IP address and phone number submitted
  • Every opt-out event with timestamps
  • All records kept at least four years, matching the TCPA statute of limitations

As one compliance guide puts it: "If you can't prove you had consent and read the disclosures, you effectively didn't" (pyai.com). One caution: rules shift quickly — the FCC's one-to-one consent rule was vacated by the Eleventh Circuit in January 2025, so confirm current requirements before building forms around them (cooley.com). This article is informational, not legal advice — consult qualified counsel for your specific situation.

If lead response is eating your team's time while compliance risk piles up, stop paying for leads you never get to talk to. CallMyLeads answers every new lead in seconds, 24/7/365, with consent collected explicitly at booking and opt-outs honored instantly.

Frequently Asked Questions

What exactly does the TCPA require my business to disclose on a lead form?
Your consent disclosure needs four elements: the specific seller's name, the message types covered (autodialed texts, prerecorded calls, or both), the exact phone number being consented, and a statement that consent is not a condition of purchase. Miss any one element and your consent is legally worthless.
Do I have to tell people when they're talking to an AI on a call?
Not yet under the TCPA itself — a proposed FCC rule would require AI disclosure, but it isn't final. However, AI-generated voices already count as "artificial voice," so outbound AI calls must identify the responsible entity and caller at the start and offer an automated opt-out within 2 seconds of the message, per the FCC's 2024 ruling. CallMyLeads discloses AI status upfront anyway, since state bot-disclosure laws and the proposed rule point that direction.
How much can a TCPA violation actually cost me?
Statutory damages run $500 per call or text, trebled to $1,500 for willful violations, with each message counted as a separate violation — a single batch of 50,000 texts can equal $75 million in exposure. Every text sent after a STOP reply is treated as a separate willful violation at $1,500 each.
Does a pre-checked consent box on my form count as valid disclosure?
No — pre-checked boxes are never valid. The FCC requires disclosures to be "clear and conspicuous": legible, visually distinct, placed next to an unchecked-by-default checkbox, and visible without extra clicks, with courts flagging fonts below 12pt as a factor against validity. The blunt test: if a consumer could sign up without their eyes ever crossing the consent language, your form is exposed.
If someone texts STOP, how quickly do I have to stop contacting them?
Since April 11, 2025, businesses must honor revocation made "in any reasonable manner" within ten business days, and texting STOP stops both texts and automated voice calls. Only one post-revocation clarification message is allowed, within five minutes and with no marketing content, under the FCC's Opt-Out Rule.
If I buy leads from a vendor, does their consent carry over to my company?
No — named-seller consent does not travel. If the original form named another company, that consent doesn't transfer to you, and "the vendor said it was consented" is not a defense. The burden of proof sits entirely with the caller, so keep version-controlled consent records — timestamps, IP address, phone number, and opt-out events — for at least four years, since if you can't prove you had consent and read the disclosures, you effectively didn't.

Mastering TCPA Compliance: Your Roadmap to Risk-Free Communication

Understanding and adhering to TCPA disclosure requirements is critical for businesses to avoid hefty fines and legal repercussions. The TCPA mandates clear and conspicuous disclosures at key moments, including consent collection, the start of calls or messages, and opt-out mechanisms. For prerecorded and AI-voice calls, the caller must identify the responsible entity, provide a callback number, and offer an automated opt-out within 2 seconds. With statutory damages ranging from $500 to $1,500 per call or text, compliance is not just a legal necessity but a strategic advantage. CallMyLeads helps businesses navigate these complexities by ensuring every lead gets a fast response and explicit consent at booking, with opt-outs honored instantly. By building a system where consent, identification, and opt-outs work together at every touchpoint, businesses can mitigate risks and focus on what they do best. To start safeguarding your communications and ensuring compliance, contact CallMyLeads today for a free scoping call and discover how our AI-driven solutions can transform your lead response strategy. A single missing disclosure can lead to significant penalties, so let's make sure you're protected.

Build My Lead Response Plan

Get lead response tips that actually work