
What are the latest updates on the TCPA?
Key Facts
- The FCC's February 2024 ruling confirmed AI-generated voices count as artificial voices under the TCPA, ending any exemption for lifelike synthetic speech per compliance analysis.
- TCPA violations cost $500 to $1,500 per call with no cap on total penalties, and the largest award ever hit $925 million per compliance reporting.
- TCPA filings are up 95% year over year, per industry trackers documented in Revmo's analysis.
- Since April 11, 2025, opt-outs made in any reasonable manner — even "I'm not Mary" — must be honored within 10 business days across every channel under new FCC rules.
- After the Fifth Circuit's Bradford decision in February 2026, only Texas, Louisiana, and Mississippi accept oral consent — 47 states still require written consent for AI marketing calls per legal analysis.
- Texas SB 140 requires AI disclosure within 30 seconds of call start, a standard experts call the emerging baseline for AI calling per compliance trackers.
- Recent TCPA class-action settlements range from $4.75 million to $9.95 million, making class actions a bigger risk than FCC penalties per the compliance playbook.
AI Voice Calls Now Fully Covered Under TCPA: What Changed in 2024
The FCC settled a long-standing ambiguity in February 2024 when it issued a Declaratory Ruling confirming that AI-generated voices fall squarely within the TCPA's definition of "artificial or prerecorded voice." This ruling eliminated any potential exemption for lifelike synthetic speech and established a clear compliance baseline: prior express consent is required for informational calls, while prior express written consent remains the standard for marketing calls in most jurisdictions.
The financial stakes are substantial. Statutory damages range from $500 to $1,500 per violation with no statutory cap on total penalties, and the largest TCPA award to date exceeds $925 million. Class-action settlements in 2025–2026 have ranged from $4.75 million to $9.95 million, while industry trackers report filings up 95% year over year. These figures underscore why compliance must be architected into AI operations from day one rather than bolted on later.
State-level variations add another layer of complexity. Following the Fifth Circuit's Bradford v. Sovereign Pest decision in February 2026, Texas, Louisiana, and Mississippi now permit oral consent for marketing AI calls, yet 47 states still require prior express written consent. Healthcare entities benefit from narrow FCC exemptions for health-related messages, but wellness marketing and service-line promotions demand full written consent compliance.
- Prior express consent for informational AI calls; prior express written consent for marketing AI calls in most states
- Mandatory AI disclosure at call start — Texas requires it within 30 seconds
- Opt-out recognition in "any reasonable manner" effective April 11, 2025, not just keyword-based
- 10-business-day processing window for all revocation requests across every channel
- One-to-one consent rule requiring seller-specific authorization (subject to ongoing litigation)
My AI Call Center builds these requirements into every campaign — consent verification before launch, AI disclosure on every call, and opt-out handling that honors natural language revocations alongside mandated keywords. The regulatory framework is clear: if the voice is artificial, the consent must be real.
New Consent Revocation Rules Effective April 11, 2025: Honor Opt-Outs in Any Reasonable Manner
"Stop texting me." "No more calls." "Take me off your list." Under the FCC's updated rules, every one of those phrases now counts as a valid consent revocation — even when a customer never uses the word "STOP."
Effective April 11, 2025, the FCC's new consent revocation rules require businesses to honor opt-out requests made in "any reasonable manner," not just through prescribed keywords. That means natural language refusals like "no more texts!" or even "I'm not Mary" must be recognized as valid revocations, according to compliance guidance from Drips. If your system only triggers on keyword commands, it is now out of compliance.
The stakes are significant. TCPA violations carry statutory damages of $500 to $1,500 per violation with no cap on total penalties, and industry trackers report TCPA filings are up 95% year over year, per Revmo's compliance analysis. A missed opt-out is no longer a minor operational slip — it is potential litigation exposure.
What the new standard requires:
- Recognize natural language opt-outs as valid revocations, not just keywords
- Honor all revocation requests within 10 business days, across every channel you use
- Continue accepting the seven mandated keywords: Stop, Quit, End, Revoke, Opt out, Cancel, and Unsubscribe
- Send any one-time confirmation text within 5 minutes of the opt-out, with no marketing content
The 10-business-day deadline applies across all channels, which creates a real integration challenge: an opt-out received by text must suppress calls, emails, and any other outreach. Drips warns that relying on keyword prompts alone is risky and recommends outreach technology that can recognize real-world opt-outs on the first try.
For AI-driven calling, the practical implication is that opt-out recognition must be built into the call flow itself. As Henson Legal notes, revocation failures — ignoring STOP requests — are among the three most common violation patterns in AI calling campaigns. A structured campaign operator like My AI Call Center treats opt-out handling as a script and escalation requirement, logging every revocation and carrying it into suppression records before any follow-up call goes out.
The simplest way to prepare: audit how your current systems capture, route, and honor opt-outs. If a spoken "please stop" during a live call does not immediately end the outreach sequence, that gap needs closing — the FCC's new standard leaves little room for systems that only understand keywords.
State-by-State Consent Patchwork: Navigating Oral vs. Written Requirements Post-Bradford
The map of TCPA consent requirements just got harder to read. A single court decision in February 2026 split the country into two compliance zones, and multi-state callers now have to know exactly which zone every contact sits in.
In Bradford v. Sovereign Pest, decided February 25, 2026, the Fifth Circuit held that the TCPA's text only requires "prior express consent," not "prior express written consent," for artificial-voice calls, according to legal analysis of the ruling. That interpretation now governs in Texas, Louisiana, and Mississippi, where oral consent can support marketing calls made with AI-generated voices.
The other 47 states are a different story. Because Bradford did not override state laws, compliance trackers confirm that prior express written consent remains the standard for marketing AI calls nearly everywhere else. A business that treats the Fifth Circuit's reading as a national green light is exposing itself in most of the country.
The financial stakes make the distinction hard to ignore. TCPA violations carry statutory damages of $500 to $1,500 per call, with no cap on total penalties, and the largest damages award ever reached $925 million, as documented in compliance reporting on the TCPA docket. Recent settlements — including $9.95 million from Gen Digital and $4.75 million from Hy Cite Enterprises — show courts and plaintiffs are not easing up.
For multi-state operations, the practical playbook looks like this:
- Map every contact to their state of residence before dialing, not after.
- Apply the strictest standard — prior express written consent — as the default across all 50 states.
- Treat oral consent as valid only for contacts verifiably located in Texas, Louisiana, or Mississippi.
- Document consent source, date, and scope per number, as defense counsel recommend retaining records for seven years.
This is why list discipline matters more than ever. At My AI Call Center, every campaign begins with a review of list source and consent records before a single call is placed — because a list that cannot document where and how consent was captured cannot support a compliant campaign in a patchwork landscape.
The simplest rule for the post-Bradford era: collect written consent everywhere, even where the law technically lets you do less. The states that accept oral consent today could tighten tomorrow, and a written record travels safely across every border.
Practical Compliance Steps for AI Call Campaigns: Disclosure, Documentation, and Monitoring
Practical Compliance Steps for AI Call Campaigns: Disclosure, Documentation, and Monitoring
Building TCPA compliance into AI call operations requires proactive measures that align with evolving federal and state requirements. My AI Call Center integrates these safeguards directly into campaign execution to protect clients and ensure lawful outreach.
Mandatory AI disclosure within the first 30 seconds of a call is required in Texas under SB 140 and aligns with emerging federal guidance, helping recipients immediately identify the nature of the interaction. Texas law specifies this timing to prevent deception and support informed consent, a standard we apply across all campaigns regardless of origin state. This disclosure is woven into the approved script and verified during pre-launch review, ensuring it occurs before any substantive conversation begins.
For lead-sourced lists, enhanced consent verification is critical to address the one-to-one consent rule and prevent attribution gaps. We confirm that consent records explicitly name a single seller and are logically tied to the consumer’s original interaction, whether a web form or inquiry. This step reduces risk associated with bundled or ambiguous consents, particularly as litigation around lead generator practices intensifies. Documentation is retained for the duration of the statute of limitations, with best practices recommending retention for up to seven years to withstand potential challenges.
Real-time monitoring during AI-to-human handoffs prevents consent gaps that could violate TCPA provisions on artificial voice transfers. Our system tracks call progression and flags any transfer where valid consent cannot be confirmed, pausing the campaign until review. Opt-out requests — whether spoken keywords like “Stop” or natural language phrases such as “no more calls!” — are logged and honored within 10 business days across all channels, effective April 11, 2025. This timeline is now enforceable under updated FCC rules, and we build it into our workflow automation to eliminate manual delays. Experts note that failure to honor revocations promptly remains a leading cause of TCPA exposure in AI-driven campaigns.
Frequently Asked Questions
Does the TCPA apply to calls made with AI-generated voices?
How much can a TCPA violation actually cost my business?
Do I still have to honor opt-outs if the customer doesn't say "STOP"?
How quickly do I have to process an opt-out request?
Can I use oral consent for AI marketing calls after the Bradford decision?
Do I have to tell people they're talking to an AI?
Turn TCPA Compliance Into Your Competitive Advantage
The TCPA landscape has shifted dramatically in 2024–2026, with AI voice calls now fully covered under the statute, natural language opt-outs requiring immediate recognition by April 11, 2025, and a state-by-state consent patchbook demanding precision. Violations carry steep risks — statutory damages of $500 to $1,500 per call with no aggregate cap, and settlements regularly reaching multi-million-dollar figures. Yet this complexity also creates opportunity: businesses that build compliance into their AI calling operations from the start avoid costly rework, protect their reputation, and turn regulatory adherence into a trust signal. My AI Call Center helps clients navigate this environment by verifying consent before launch, embedding AI disclosure and opt-out handling into every campaign, and honoring revocations in any reasonable manner across all channels. If you're ready to run AI-powered calls that are both effective and audit-ready, review your current opt-out capture and suppression workflows — especially how they handle phrases like 'no more calls' or 'take me off your list.' Ensuring your system recognizes natural language revocations isn’t just compliance; it’s smarter, more respectful outreach. Learn how we structure campaigns for compliance and performance at myaicallcenter.app/campaigns.