
What are the three rules of consent?
Key Facts
- The TCPA defines three consent types—PEWC, PEC, and PEIP—each tied to the communication method used, according to ActiveProspect.
- TCPA violations cost $500–$1,500 per call with no damages cap, per attorney-authored analysis from BCLP.
- The largest TCPA damages award ever reached $925 million, Drips' FCC rule overview confirms.
- Consent revocation requests must now be honored within 10 business days, down from 30, a recent compliance analysis notes.
- The FCC's opt-out rules took effect April 11, 2025, per the FCC itself.
- The compliance burden falls on the caller, not the lead generator, compliance guidance for credit unions makes explicit.
- Consent attaches to the called party, not the phone number, so reassigned numbers invalidate prior consent, DNC.com's consent breakdown explains.
Understanding the Three Types of Express Consent Required by TCPA
Understanding the Three Types of Express Consent Required by TCPA
Many businesses assume consent is a one-size-fits-all requirement, but the TCPA actually defines three distinct types of express consent that apply based on communication method and technology. Prior Express Written Consent (PEWC) is required for marketing communications using autodialers, prerecorded messages, or texts and must be written, clear, and include specific disclosures such as consent not being a condition of purchase. Prior Express Consent (PEC) covers informational or transactional messages like appointment reminders and can be obtained verbally or through voluntary provision of a phone number. Prior Express Invitation or Permission (PEIP) applies to non-autodialed, manually dialed calls or texts for sales or marketing, where verbal consent or voluntary contact info submission is sufficient.
Using the wrong consent type can trigger TCPA liability, with penalties ranging from $500 to $1,500 per violation and no cap on total damages—highlighted by the $925 million in TCPA damages ever awarded. My AI Call Center prevents this risk by conducting a thorough list and consent review before any campaign launches, verifying that the consent on file matches the communication type and technology being used. This proactive check ensures compliance whether the campaign uses AI-powered calls (treated as artificial voices under the TCPA) or manual outreach.
- PEWC is required for marketing via autodialed calls, prerecorded messages, or texts and must be written and conspicuous.
- PEC applies to informational/transactional messages and can be obtained verbally or by voluntary number provision.
- PEIP covers non-autodialed, manually dialed sales or marketing calls/texts where verbal consent suffices.
By aligning consent verification with the specific use case—whether confirming appointments, qualifying leads, or sending reminders—My AI Call Center ensures that every outbound interaction meets the legal standard for express consent, reducing exposure to costly violations while maintaining campaign effectiveness.
How My AI Call Center Enforces Consent Through List Discipline and Pre-Launch Verification
The most expensive consent mistake a caller can make is assuming someone else already checked the list. Under the TCPA, the compliance burden falls on the caller, not the lead generator — the business making the call is liable if consent is invalid, regardless of who sold the list (compliance guidance for credit unions makes this explicit, and ActiveProspect's TCPA analysis confirms it).
That reality shapes how My AI Call Center handles every campaign. Before any calls go out, the list and consent review step examines three things: where the list came from, what consent records exist, and whether the calling windows fit the campaign type. Bought lists without clear permission records are flagged, and in most cases declined. Clients are told plainly, before spending anything, if a list will not support the campaign.
The stakes justify the discipline. TCPA penalties run $500–$1,500 per violation, with no requirement to prove actual injury (attorney-authored analysis from BCLP), and there is no cap on total damages — the largest TCPA award ever reached $925 million (Drips' rule overview). Class actions are permitted, so one non-compliant call can pull millions of consumers into litigation.
List discipline at launch covers several specific checks:
- Consent type matched to call purpose — marketing requires prior express written consent, while informational calls like appointment reminders need prior express consent (DNC.com's consent breakdown)
- Reassigned-number risk, since consent attaches to the called party, not the phone number
- Record retention, because the TCPA's four-year statute of limitations demands long-term consent documentation
Consent records also matter after launch. The FCC's opt-out rules, effective April 11, 2025 (per the FCC itself), require honoring revocation requests within 10 business days — down from 30 (Tratta notes). Opt-outs are logged and honored immediately, keyword requests like STOP and REVOKE are recognized, and DNC requests carry across all campaigns into client records.
The rules keep shifting, too. The one-to-one consent rule was vacated in early 2025 (ActiveProspect reports), and a universal opt-out rule is delayed until April 2026. That flux is why clients are advised to obtain appropriate legal guidance before launch — a disclaimer that reflects how much the ground can move under a compliant campaign.
Verified lists, structured campaigns, and honest reporting — managed outbound calling from 9¢ per connected minute. Plan your campaign at myaicallcenter.app.
Opt-Out Handling and Ongoing Compliance: Honoring Revocation in Any Reasonable Manner
The FCC's "any reasonable manner" standard shifts the burden squarely onto the caller: if a consumer uses a non-prescribed method to opt out, the business must demonstrate why that method was unreasonable, not the other way around. BCLP's analysis of the opt-out rules effective April 11, 2025 confirms this rebuttable presumption applies to every revocation request, whether it arrives as "STOP," "no more calls," or "I'm not Mary." My AI Call Center treats every inbound signal — keyword triggers like STOP and REVOKE, verbal requests on live calls, and written DNC notices — as an immediate revocation event logged at the moment of receipt, not queued for batch processing.
- Keyword opt-outs (STOP, REVOKE) captured in real time and written to the campaign DNC log
- Verbal revocations on AI-assisted calls honored instantly with AI disclosure and escalation path
- Client DNC records updated across all active and future campaigns
- Opt-out and DNC logs retained for the TCPA's four-year statute of limitations
The 10-business-day honoring window — reduced from the prior 30-day standard — means delay is no longer an option. A recent compliance analysis notes that revocation requests must now be honored within 10 business days, and the FCC permits only a single clarification message sent within five minutes containing no marketing content. My AI Call Center's managed service model routes every opt-out into the dispositioned contact list delivered at campaign close, giving clients a complete audit trail: disposition codes, per-call notes, and a dated opt-out log that aligns with BCLP's recommendation to retain records for at least four years. The compliance burden falls on the caller, not the lead generator, which is why list and consent review happens before any campaign launches — bought lists without clear permission records are flagged and in most cases declined.
Frequently Asked Questions
What are the three types of express consent required by the TCPA?
What happens if I use the wrong type of consent for my calling campaign?
How does My AI Call Center verify consent before launching a campaign?
What are the FCC's opt-out rules that took effect April 11, 2025?
Who is liable if consent is invalid—the business making the call or the lead generator?
How long must consent and opt-out records be retained under the TCPA?
Consent Done Right Is a Competitive Advantage
The three types of TCPA consent — prior express written consent for marketing, prior express consent for informational calls, and prior express invitation or permission for manually dialed outreach — are not interchangeable, and using the wrong one can cost $500 to $1,500 per violation with no cap on total damages. The rules also keep moving: the FCC's opt-out rules now require honoring revocations within 10 business days, and the one-to-one consent rule was vacated in early 2025. Before your next campaign, audit your lists against these standards: Where did each contact come from? What consent records exist? Does the consent type match the call purpose? Remember that the compliance burden falls on the caller, not the lead generator — so a bought list without clear permission records is a liability, not an asset. My AI Call Center runs this review before every campaign launch, flagging or declining lists that won't support the work, and tells you plainly before you spend anything. If you want structured outbound calling on approved, permissioned lists — from 9¢ per connected minute — plan your campaign at myaicallcenter.app.