CampaignsHow It WorksIndustriesResultsInsightsPlan My Campaign
Consent Verification Process

What are the three rules of consent?

Back to InsightsWhat are the three rules of consent?

What are the three rules of consent?

Key Facts

Understanding the Three Types of Express Consent Required by TCPA

Many businesses assume consent is a one-size-fits-all requirement, but the TCPA actually defines three distinct types of express consent that apply based on communication method and technology. Prior Express Written Consent (PEWC) is required for marketing communications using autodialers, prerecorded messages, or texts and must be written, clear, and include specific disclosures such as consent not being a condition of purchase. Prior Express Consent (PEC) covers informational or transactional messages like appointment reminders and can be obtained verbally or through voluntary provision of a phone number. Prior Express Invitation or Permission (PEIP) applies to non-autodialed, manually dialed calls or texts for sales or marketing, where verbal consent or voluntary contact info submission is sufficient.

Using the wrong consent type can trigger TCPA liability, with penalties ranging from $500 to $1,500 per violation and no cap on total damages—highlighted by the $925 million in TCPA damages ever awarded. My AI Call Center prevents this risk by conducting a thorough list and consent review before any campaign launches, verifying that the consent on file matches the communication type and technology being used. This proactive check ensures compliance whether the campaign uses AI-powered calls (treated as artificial voices under the TCPA) or manual outreach.

  • PEWC is required for marketing via autodialed calls, prerecorded messages, or texts and must be written and conspicuous.
  • PEC applies to informational/transactional messages and can be obtained verbally or by voluntary number provision.
  • PEIP covers non-autodialed, manually dialed sales or marketing calls/texts where verbal consent suffices.

By aligning consent verification with the specific use case—whether confirming appointments, qualifying leads, or sending reminders—My AI Call Center ensures that every outbound interaction meets the legal standard for express consent, reducing exposure to costly violations while maintaining campaign effectiveness.

The most expensive consent mistake a caller can make is assuming someone else already checked the list. Under the TCPA, the compliance burden falls on the caller, not the lead generator — the business making the call is liable if consent is invalid, regardless of who sold the list (compliance guidance for credit unions makes this explicit, and ActiveProspect's TCPA analysis confirms it).

That reality shapes how My AI Call Center handles every campaign. Before any calls go out, the list and consent review step examines three things: where the list came from, what consent records exist, and whether the calling windows fit the campaign type. Bought lists without clear permission records are flagged, and in most cases declined. Clients are told plainly, before spending anything, if a list will not support the campaign.

The stakes justify the discipline. TCPA penalties run $500–$1,500 per violation, with no requirement to prove actual injury (attorney-authored analysis from BCLP), and there is no cap on total damages — the largest TCPA award ever reached $925 million (Drips' rule overview). Class actions are permitted, so one non-compliant call can pull millions of consumers into litigation.

List discipline at launch covers several specific checks:

  • Consent type matched to call purpose — marketing requires prior express written consent, while informational calls like appointment reminders need prior express consent (DNC.com's consent breakdown)
  • Reassigned-number risk, since consent attaches to the called party, not the phone number
  • Record retention, because the TCPA's four-year statute of limitations demands long-term consent documentation

Consent records also matter after launch. The FCC's opt-out rules, effective April 11, 2025 (per the FCC itself), require honoring revocation requests within 10 business days — down from 30 (Tratta notes). Opt-outs are logged and honored immediately, keyword requests like STOP and REVOKE are recognized, and DNC requests carry across all campaigns into client records.

The rules keep shifting, too. The one-to-one consent rule was vacated in early 2025 (ActiveProspect reports), and a universal opt-out rule is delayed until April 2026. That flux is why clients are advised to obtain appropriate legal guidance before launch — a disclaimer that reflects how much the ground can move under a compliant campaign.

Verified lists, structured campaigns, and honest reporting — managed outbound calling from 9¢ per connected minute. Plan your campaign at myaicallcenter.app.

Opt-Out Handling and Ongoing Compliance: Honoring Revocation in Any Reasonable Manner

The FCC's "any reasonable manner" standard shifts the burden squarely onto the caller: if a consumer uses a non-prescribed method to opt out, the business must demonstrate why that method was unreasonable, not the other way around. BCLP's analysis of the opt-out rules effective April 11, 2025 confirms this rebuttable presumption applies to every revocation request, whether it arrives as "STOP," "no more calls," or "I'm not Mary." My AI Call Center treats every inbound signal — keyword triggers like STOP and REVOKE, verbal requests on live calls, and written DNC notices — as an immediate revocation event logged at the moment of receipt, not queued for batch processing.

  • Keyword opt-outs (STOP, REVOKE) captured in real time and written to the campaign DNC log
  • Verbal revocations on AI-assisted calls honored instantly with AI disclosure and escalation path
  • Client DNC records updated across all active and future campaigns
  • Opt-out and DNC logs retained for the TCPA's four-year statute of limitations

The 10-business-day honoring window — reduced from the prior 30-day standard — means delay is no longer an option. A recent compliance analysis notes that revocation requests must now be honored within 10 business days, and the FCC permits only a single clarification message sent within five minutes containing no marketing content. My AI Call Center's managed service model routes every opt-out into the dispositioned contact list delivered at campaign close, giving clients a complete audit trail: disposition codes, per-call notes, and a dated opt-out log that aligns with BCLP's recommendation to retain records for at least four years. The compliance burden falls on the caller, not the lead generator, which is why list and consent review happens before any campaign launches — bought lists without clear permission records are flagged and in most cases declined.

Frequently Asked Questions

What are the three types of express consent required by the TCPA?
The TCPA defines three types of express consent: Prior Express Written Consent (PEWC) for marketing via autodialed calls, prerecorded messages, or texts; Prior Express Consent (PEC) for informational or transactional messages like appointment reminders; and Prior Express Invitation or Permission (PEIP) for non-autodialed, manually dialed sales or marketing calls or texts. Each type depends on the communication method and technology used, with PEWC requiring written consent and specific disclosures.
What happens if I use the wrong type of consent for my calling campaign?
Using the wrong consent type can trigger TCPA liability with penalties ranging from $500 to $1,500 per violation, and there is no cap on total damages—highlighted by the $925 million in TCPA damages ever awarded. My AI Call Center prevents this risk by conducting a thorough list and consent review before any campaign launches to ensure the consent on file matches the communication type and technology being used.
How does My AI Call Center verify consent before launching a campaign?
My AI Call Center conducts a list and consent review that examines where the list came from, what consent records exist, and whether the calling windows fit the campaign type. Bought lists without clear permission records are flagged and in most cases declined, and clients are told plainly before spending anything if a list will not support the campaign.
What are the FCC's opt-out rules that took effect April 11, 2025?
The FCC's opt-out rules effective April 11, 2025 require businesses to allow consumers to revoke consent in 'any reasonable manner,' honor revocation requests within 10 business days, and permit only a single clarification message sent within five minutes containing no marketing content. My AI Call Center honors keyword opt-outs like STOP and REVOKE in real time and logs them immediately to comply with these requirements.
Who is liable if consent is invalid—the business making the call or the lead generator?
Under the TCPA, the compliance burden falls on the caller, not the lead generator—the business making the call is liable if consent is invalid, regardless of who sold the list. This is why My AI Call Center conducts its own list and consent review before any campaign launches, rather than relying on third-party lists.
How long must consent and opt-out records be retained under the TCPA?
The TCPA has a four-year statute of limitations, requiring long-term consent documentation and opt-out logs to be retained for at least four years. My AI Call Center retains opt-out and DNC logs for this period to provide a complete audit trail and support compliance with record retention requirements.

Consent Done Right Is a Competitive Advantage

The three types of TCPA consent — prior express written consent for marketing, prior express consent for informational calls, and prior express invitation or permission for manually dialed outreach — are not interchangeable, and using the wrong one can cost $500 to $1,500 per violation with no cap on total damages. The rules also keep moving: the FCC's opt-out rules now require honoring revocations within 10 business days, and the one-to-one consent rule was vacated in early 2025. Before your next campaign, audit your lists against these standards: Where did each contact come from? What consent records exist? Does the consent type match the call purpose? Remember that the compliance burden falls on the caller, not the lead generator — so a bought list without clear permission records is a liability, not an asset. My AI Call Center runs this review before every campaign launch, flagging or declining lists that won't support the work, and tells you plainly before you spend anything. If you want structured outbound calling on approved, permissioned lists — from 9¢ per connected minute — plan your campaign at myaicallcenter.app.

Get campaign planning tips