
What are the four types of consent?
Key Facts
- TCPA statutory damages run $500–$1,500 per call with no aggregate cap per industry tracking.
- TCPA filings jumped 95% year over year, with aggregate verdicts exceeding $925 million according to the same analysis.
- The FCC's February 2024 ruling confirmed AI-generated voices count as artificial or prerecorded voice under the TCPA per its compliance playbook.
- Roughly 100,000 mobile numbers are reassigned by carriers daily, invalidating prior consent per compliance research.
- Opt-outs must be honored within 10 business days across all channels, including email and text per best-practice research.
- Marketing calls require Prior Express Written Consent, while reminders and notifications need only Prior Express Consent per consent experts.
- The National DNC Registry holds 240 million numbers, about 80% of U.S. phone numbers according to compliance data.
Why Consent Is the First Question Before Any Call Campaign
Every call your organization dials starts with a legal question most teams never ask out loud: what kind of consent do I actually have for this number, for this purpose, on this technology? Answer it wrong, and the consequences are not a slap on the wrist. The Telephone Consumer Protection Act carries statutory damages of $500 to $1,500 per call with no aggregate cap, and recent industry tracking shows TCPA filings up 95% year over year, with aggregate verdicts exceeding $925 million.
The stakes climbed higher in February 2024. The FCC's Declaratory Ruling settled that AI-generated voices count as "artificial or prerecorded voice" under the TCPA — what matters legally is how the voice is produced, not how human it sounds, per the same analysis. That means AI voice campaigns now demand the strictest consent standard for marketing purposes, and an existing customer relationship does not save you: the Established Business Relationship exemption covers live-agent calls only. As one compliance analysis puts it, "the voice is what the law cares about."
Liability also lands where many brands do not expect it. Courts have held that the entity on whose behalf calls are made bears liability, regardless of which vendor pressed dial. Buying a third-party list does not shift the risk to the seller, and consent experts advise verifying independent proof of consent before using purchased leads.
This is why consent verification has to come before list building, scripting, or dialing — a discipline My AI Call Center builds into every campaign, reviewing list source and consent records before launch and flagging bought lists that lack clear permission documentation. Before any list gets dialed, you need to know:
- What purpose the consent covers — consent for appointment reminders does not extend to marketing new services.
- Whether it is documented — the record, not the memory of it, is what wins litigation.
- Whether the number is still attached to the person who consented, given that roughly 100,000 mobile numbers are reassigned daily.
- Whether the call uses AI or prerecorded voice, which triggers the strictest standard regardless of the relationship.
So before you ask what your campaign should say, ask what kind of consent you have. The four categories below map that answer to the calls you can legally run.
The Four Consent Types, Mapped to Call Purposes
The complexity of telemarketing compliance hinges on understanding how consent aligns with call purposes. Industry research confirms that while no single source defines four consent types, a synthesized framework maps standards to use cases. This approach ensures clarity amid evolving regulations and conflicting interpretations.
Marketing calls demand the strictest standard: Prior Express Written Consent (PEWC). This applies to AI-generated voices, autodialed messages, and promotional content, as regulatory guidance emphasizes. Informational or transactional calls—such as appointment reminders or payment alerts—require Prior Express Consent (PEC), a lower threshold but still legally binding.
Manually dialed, non-autodialed calls, like those in manual outreach, fall under Prior Express Invitation or Permission (PEIP). Verbal agreement or providing contact details suffices here. Exempt categories include healthcare, debt collection, and nonprofit messaging, alongside a regional oral-consent carve-out in Texas, Louisiana, and Mississippi.
- Marketing calls require PEWC due to AI voice regulations
- PEC governs transactional interactions like appointment reminders
- PEIP applies to manually dialed calls with verbal consent
- Exempt categories include healthcare, debt collection, and regional exceptions
Consent is inherently tied to purpose: PEC for one use does not extend to unrelated marketing. Legal precedents stress that reassigning numbers invalidates prior consent, demanding fresh verification. My AI Call Center’s list review process prioritizes this rigor, flagging bought lists without clear permission records to avoid compliance risks.
With 52.5 billion robocalls made in 2025 and 240 million numbers on the National DNC Registry, adherence to these frameworks is critical. Best practices now mandate documented consent, real-time opt-out handling, and cross-channel compliance—principles central to My AI Call Center’s managed service model.
The Rules That Move: Revocation, Reassignment, and Regulatory Shifts
Even valid consent expires faster than most teams expect. A number that was permissioned yesterday can be legally untouchable tomorrow — and the rules that govern that shift keep moving.
Revocation breaks consent first. Consumers can revoke consent at any time, by any reasonable method — a text reply, a phone call, or an email — according to ActiveProspect's TCPA guide. And revocation now travels across channels: compliance research notes that opt-outs must be honored within 10 business days across all channels, meaning a verbal "stop calling" also kills your email and text permission. This is why structured opt-out handling — like keyword triggers and DNC logs that carry across every campaign — matters operationally, not just on paper.
Reassignment breaks it second. Roughly 100,000 mobile numbers are reassigned by carriers every day. Consent attaches to the person, not the number, so a reassigned number invalidates prior permission entirely — a point DNC.com's consent analysis makes explicit. Aging lists need scrubbing before every campaign, not just the first one.
A third trap: assuming an Established Business Relationship (EBR) covers AI calls. It does not. Per the Retell AI compliance playbook, EBR exempts live-agent calls from DNC registry restrictions only — "the voice is what the law cares about." An AI-dialed call to a current customer still needs the right consent tier.
Then there is the One-to-One Consent Rule, and here the sources genuinely conflict:
- Call Force Global states the rule is effective in 2026 and requires consent granted to one specific seller at a time.
- ActiveProspect reports the Eleventh Circuit vacated the rule in January 2025, days before it took effect, leaving the prior broader standard in place.
- We present both positions because we do not invent certainty. Verify the rule's current status with counsel before relying on either reading.
The practical takeaway: treat consent as perishable. My AI Call Center reviews list source and consent records before any campaign launches and tells you plainly if a list will not support the campaign — because in a shifting regulatory landscape, the record is the defense.
How to Verify Consent Before You Dial: A Practical Checklist
Knowing the four consent tiers is only half the battle — the other half is proving you honored them before the first call went out. With TCPA filings up 95% year over year and statutory damages of $500–$1,500 per call with no aggregate cap, the record you keep before dialing is the record that saves you in court.
A four-layer verification discipline gives you a practical sequence: check number validity, review consent and DNC governance, authenticate caller ID, and confirm call-purpose compliance. Run every list through all four layers before launch — not after the first complaint.
Document every consent event with full evidence. Capture the exact consent language, timestamp, URL or form, and signature or human-interaction proof. ActiveProspect's guidance is blunt: no pre-checked boxes, no bot-generated leads, and reject any lead you cannot independently verify. Because the TCPA statute of limitations runs four years, retain records at least that long — most defense counsel recommend seven.
Remember that liability sits with the calling brand, not the vendor. In Lamb v. Mortgage One Funding, the court held that the entity on whose behalf calls are made bears liability, regardless of which downstream vendor pressed dial. This is exactly why My AI Call Center reviews list source and consent records before any campaign launches, and declines bought lists without clear permission records.
Your pre-launch checklist should cover:
- Map each campaign to its consent tier — reminders, notifications, and check-ins need Prior Express Consent; qualification, win-back, and upsell calls require Prior Express Written Consent.
- Scrub numbers against the DNC Registry — roughly 240 million numbers are on it, about 80% of U.S. phone numbers.
- Account for reassignment risk — carriers reassign roughly 100,000 mobile numbers daily, and consent attaches to the person, not the number.
- Log opt-outs immediately and honor them across all channels within 10 business days, since revocation kills consent by any reasonable method.
- Confirm AI disclosure and script compliance — AI voices are artificial voices under the TCPA, so the script must disclose, offer a human, and accept STOP and REVOKE.
One caution: verify the current status of the FCC's One-to-One Consent Rule before launch. Sources conflict — one reports it takes effect in 2026, while another reports the Eleventh Circuit vacated it in January 2025. Treat any list you cannot verify through this checklist as unverified, because in a TCPA lawsuit, the record is the defense.
Running Compliant Campaigns on Approved, Permissioned Lists
Running compliant campaigns is essential for any business engaging in outbound calling. At My AI Call Center, we ensure that every campaign adheres to strict consent verification processes. Our approach begins with a meticulous review of contact lists, where we check the source and permission records before any campaign launches. This diligence is crucial because it protects both the caller and the recipient from potential legal issues. According to industry compliance experts, AI-generated voices are treated as artificial or prerecorded voices under the TCPA, requiring explicit prior consent for marketing calls.
Our consent verification process involves several critical steps. First, we review the list source and permission records to ensure that all contacts have given explicit consent to be called. Bought lists without clear permission records are flagged or declined to prevent any violations of the Telephone Consumer Protection Act (TCPA). This practice is supported by legal opinions that emphasize the necessity of documented, verifiable consent.
Additionally, every script used in our campaigns includes an AI disclosure and STOP/REVOKE opt-out handling mechanisms. This ensures that recipients can easily opt out of future communications. We also maintain detailed opt-out and Do Not Call (DNC) logs that are carried across all campaigns. This is particularly important because current regulations require opt-outs to be honored within 10 business days across all channels.
To further ensure compliance, we categorize contact lists based on the type of consent required for different call purposes:
- Marketing/promotional calls: **Prior Express Written Consent (PEWC)**
- Informational/transactional calls: **Prior Express Consent (PEC)**
- Manually dialed, non-autodialed calls: **Prior Express Invitation or Permission (PEIP)**
- Exempt/limited-standard categories: **debt collection, healthcare, emergency, nonprofit/utility/school messages, and regional oral-consent carve-outs**
These categories help us tailor our approach to each campaign, ensuring that we meet the necessary legal standards. For instance, our lead qualification calls and win-back campaigns require PEWC, while appointment reminders and event notifications run on PEC. This structured approach allows us to run campaigns that are both effective and compliant.
It's important to note that regulatory volatility remains high, and sources often contradict each other on key issues. For example, while some sources indicate that the FCC One-to-One Consent Rule is effective in 2026, others report that it was vacated in January 2025. This underscores the need for businesses to stay informed and obtain appropriate legal guidance before launching any campaign. At My AI Call Center, we provide a free campaign review to help our clients navigate these complexities.
In summary, running compliant campaigns requires a thorough review of consent and permission records, adherence to regulatory standards, and a commitment to transparency. By following these best practices, businesses can avoid hefty penalties and ensure that their outbound calling efforts are both effective and ethical. To get started with a compliant campaign review, contact us today.
Frequently Asked Questions
What are the four types of consent for outbound calls?
Do I need written consent if I'm using an AI voice instead of a recording?
Does having an existing customer relationship let me call them with AI?
How much can a consent mistake actually cost my business?
If I buy a lead list, isn't consent the seller's problem?
How long does consent last once someone agrees to be called?
Consent First, Calls Second: Where to Go From Here
The four consent types — PEWC for marketing, PEC for transactional calls, PEIP for manually dialed outreach, and the exempt categories — all come down to one discipline: match the consent you can actually prove to the call you want to make, before anything dials. With TCPA filings up 95% year over year and statutory damages of $500–$1,500 per call with no cap, the record you keep before launch is the record that protects you in court, as industry compliance tracking makes clear. Your next steps are practical: audit each list's consent tier, scrub against the DNC Registry, plan for revocation and reassignment, and verify the current status of the One-to-One Consent Rule with counsel. If you would rather not carry that burden alone, My AI Call Center reviews list source and consent records before any campaign launches — and tells you plainly if a list will not support the campaign. Start with a free campaign review at myaicallcenter.app/campaigns.