The Legal Reality: AI Calls Require Prior Express Consent

The Legal Reality: AI Calls Require Prior Express Consent

Automated calls using AI-generated voices are not exempt from the Telephone Consumer Protection Act (TCPA) — they are explicitly treated as artificial or prerecorded voices requiring prior express consent. The FCC’s 2024 Declaratory Ruling confirmed that AI technologies generating human voices fall squarely under TCPA’s definition of an artificial voice, eliminating any ambiguity about their regulatory status. This means businesses cannot bypass consent requirements by labeling calls as “AI-assisted” or assuming technological novelty provides a legal loophole.

Consent requirements vary significantly based on call purpose and jurisdiction. For marketing calls to wireless numbers, prior express written consent is typically required in 47 states, while informational calls — such as appointment reminders or service updates — may only need prior express consent, which can be oral. However, three states — Texas, Louisiana, and Mississippi — now permit oral consent for marketing AI calls following the Bradford v. Sovereign Pest ruling in February 2026, creating important regional exceptions that multi-state callers must track. Crucially, an Established Business Relationship does not override these requirements; even past customers must provide fresh consent before receiving AI-powered automated calls.

Violating these rules carries substantial financial risk. TCPA violations incur statutory damages of $500 to $1,500 per call, with no aggregate cap, and recent class-action settlements have reached into the millions — including a $9.95 million agreement by Gen Digital in January 2026 for prerecorded voice calls to non-customers. Industry data shows TCPA filings have increased 95% year over year, reflecting heightened regulatory scrutiny and consumer litigation. For organizations using managed calling services like My AI Call Center, this underscores the necessity of verifying consent records before campaign launch and maintaining audit-ready documentation for at least seven years, given the TCPA’s four-year statute of limitations.

• Confirm whether each contact has provided prior express consent appropriate to the call type (marketing vs. informational)
• Document consent source, timing, and scope to ensure it matches the campaign’s purpose
• Check state-specific rules — especially in Texas, Louisiana, and Mississippi where oral consent may suffice for marketing AI calls
• Never assume an existing relationship eliminates the need for fresh consent
• Retain consent records for seven years to defend against potential TCPA claims

Why Consent Is Fragile and Jurisdiction Matters

Consent is not a permanent asset. It does not survive number reassignment, and an established business relationship does not exempt AI-generated calls from TCPA requirements. The FCC has confirmed that artificial voices — including AI — trigger consent obligations even when a prior relationship exists, and courts have held that liability extends to the entity on whose behalf calls are made.

Industry compliance analysis shows that TCPA filings have risen 95% year over year, with aggregate class-action verdicts exceeding $925 million. Violations carry statutory damages of $500 to $1,500 per call with no aggregate cap. Consent must be specific and contextual: permission for a transactional follow-up does not cover unrelated marketing outreach, which requires separate prior express written consent in most jurisdictions.

State law adds another layer of complexity. Texas, Louisiana, and Mississippi allow oral consent for marketing AI calls following the Bradford v. Sovereign Pest ruling, while the remaining states require written consent. More than 20 states enforce calling-hour windows stricter than the federal 8 AM–9 PM standard, and several — including Texas, California, Florida, Colorado, Illinois, and Utah — mandate in-call AI disclosure within specific timeframes. A pending federal rulemaking may impose nationwide disclosure requirements within 12–24 months.

• Consent does not transfer when a phone number is reassigned
• Established Business Relationship does not override AI consent rules
• Oral consent for marketing AI calls is valid only in Texas, Louisiana, and Mississippi
• 20+ states restrict calling hours beyond the federal window
• Mandatory AI disclosure timing varies by state

My AI Call Center reviews list source, consent records, and jurisdictional rules before any campaign launches. We run structured, permissioned campaigns — confirm, qualify, remind, survey, retain, connect — on approved lists only, with opt-outs honored immediately and outcomes routed back to your systems.

How to Comply: Disclosures, Opt-Outs, and Documentation

Compliance isn’t just about avoiding fines—it’s about building trust. For AI-powered outbound calls, that means clear disclosures, immediate opt-out handling, and meticulous recordkeeping to meet legal standards and protect your organization.

Every call using an AI-generated voice must include a mandatory disclosure at the start, stating the use of artificial or prerecorded voice technology, as required by the FCC’s Declaratory Ruling confirming TCPA applicability to AI technologies here. This disclosure allows recipients to ask if the call is AI-assisted, request a human agent, or opt out immediately—requirements My AI Call Center builds into every campaign script during the approval process.

Real-time opt-out handling is non-negotiable. Keywords like “STOP” and “REVOKE” must trigger immediate cessation of calls and addition to your internal DNC list, a practice aligned with FCC proposals to shorten the opt-out honor period from 30 days to 24 hours here. My AI Call Center logs and honors these requests instantly, routing outcomes back to your CRM with disposition codes like “opted out” for full traceability.

To defend against potential TCPA claims, retain all consent records, call logs, and opt-out documentation for at least seven years. While the TCPA’s statute of limitations is four years, defense counsel commonly recommend seven-year retention to cover discovery windows and litigation delays here. This documentation proves prior express consent was obtained and honored—critical whether calls are informational or marketing in nature. Legal experts stress that liability extends to the entity on whose behalf calls are made, making thorough records a shared responsibility. For My AI Call Center clients, this means campaign-specific logs—including consent sources, timestamps, and follow-up requests—are delivered post-launch as part of the completion report, ensuring audit readiness without extra work on your end.