Why Express Consent Is Confusing Right Now

The TCPA consent landscape is undergoing rapid, conflicting changes, leaving businesses grappling with unclear standards. The FCC’s 2025 elimination of the “one-to-one consent” rule allowed broader consent for telemarketing calls, but a Fifth Circuit ruling further complicated matters by affirming that oral consent suffices for automated calls. These shifts have created a fragmented regulatory environment, with businesses unsure which rules apply.

Statutory damages of $500–$1,500 per call without proper consent amplify the stakes, making compliance critical. The Eleventh Circuit’s 2025 vacating of the 2023 rule added another layer of uncertainty, as it challenged the FCC’s authority to mandate single-seller consent. Meanwhile, the Fifth Circuit’s 2026 decision explicitly stated that “prior express consent” includes oral agreements, contradicting the FCC’s emphasis on written records.

Businesses must now navigate these contradictions while adhering to evolving requirements. The FCC’s “global revocation” rule, effective 2027, mandates honoring opt-out requests within 10 days and sending a single clarification message. Key challenges include:

• Documenting oral consent verifiably to avoid disputes
• Differentiating between marketing and informational messages
• Ensuring cross-departmental coordination for opt-out tracking

For organizations like My AI Call Center, maintaining compliance requires rigorous list verification and adherence to FCC-defined “prior express written consent” standards. As regulations continue to shift, proactive strategies—such as structured campaigns and approved contact lists—remain essential to mitigate risks.

What Express Consent Actually Means

Consent is the line between a legal call and a $500 to $1,500 statutory penalty — per violation. That is why understanding what "express consent" actually means matters more than almost any other TCPA concept.

Under the FCC's standards, prior express written consent means a written agreement with a signature, a clear disclosure of the types of calls the consumer is agreeing to receive, and a statement that consent is not a condition of purchasing goods or services, according to the agency's official guidance. In other words, a checked box buried in terms and conditions does not count.

The FCC's 2025 final rule also eliminated the 2023 "one-to-one consent" requirement, which had required consent to be obtained for each seller individually — a rule the Eleventh Circuit vacated as regulatory overreach. Consumers can now grant consent covering multiple sellers, as legal analyses of the final rule explain.

Here the law gets unsettled. The FCC's framework emphasizes written consent, but the Fifth Circuit held in 2026 that the TCPA does not require it, ruling that "prior express consent" encompasses both oral and written consent — a split that creates real uncertainty for businesses, as Nixon Peabody's analysis notes. Practical guidance from Holland & Knight is blunt: document oral consent verifiably, because a verbal "sure, call me" is hard to prove when a dispute arises.

For AI-powered calling, the stakes are even higher. AI-generated voices are treated as artificial voices under the TCPA, which means prior express consent is required before any AI-placed call launches. This is the single most important rule for any organization running structured outbound campaigns — and it is why My AI Call Center reviews list source and consent records before any campaign runs, declining bought lists without clear permission records.

A compliant consent record should show:

• A written agreement with a signature (electronic signatures count)
• Clear disclosure of the types of calls the person agreed to receive
• A statement that consent is not tied to any purchase

Remember, too, that consent can be revoked. The FCC's "global revocation" rule, effective January 31, 2027, requires businesses to honor opt-out requests within ten business days and permits only one post-revocation clarification message, sent within five minutes and free of marketing content, per BCLP's breakdown of the opt-out rules. Consent is not a one-time checkbox — it is an ongoing record you must be able to produce.

How Consent Rules Are Changing: Opt-Outs and Revocation

Getting consent right is only half the job. What happens after a customer says "stop" is now just as regulated — and just as expensive to get wrong, with TCPA statutory damages running $500 to $1,500 per violation for calls made without proper consent, according to legal analysis of the FCC's opt-out rules.

The 10-business-day revocation deadline is the first requirement businesses must internalize. When a consumer revokes consent, the FCC's rules require that the opt-out be honored no more than ten business days after receipt. That clock starts the moment the request arrives, not when someone on your team gets around to processing it. Manual spreadsheets and fragmented systems make this deadline a real risk.

There is one narrow exception: the clarification message. Businesses may send a single post-revocation message, but the rules are strict. It must go out within 5 minutes of the revocation, and it cannot contain any marketing content — only confirmation or clarification of the opt-out itself. Anything more, and you have made a nonconsensual call.

The bigger change arrives January 31, 2027, when the FCC's global revocation rule takes effect. Under this framework, revoking consent for one message type may block all future communications from that business — meaning a customer who opts out of marketing texts may also be opting out of appointment reminders, renewal calls, and everything else. Experts warn businesses must track opt-out methods, differentiate message types, and coordinate across departments to avoid cutting off communications the customer actually wants.

Preparing for these rules comes down to operational discipline:

• Log every opt-out immediately, with a timestamp that proves when revocation occurred
• Distinguish marketing from informational message types before the 2027 global revocation deadline
• Suppress revoked numbers across all campaigns, not just the one that triggered the opt-out
• Route clarification messages automatically within the 5-minute window

This is why consent verification and opt-out handling belong at the center of any outbound calling operation. At My AI Call Center, opt-outs are logged and honored immediately, keyword opt-outs like STOP and REVOKE are recognized on every call, and DNC requests carry across all campaigns into client records — so a revocation on one campaign never resurfaces on another. Revocation is not the end of the relationship; it is a compliance event your systems must handle automatically.

How to Verify and Document Consent Before You Call

The difference between a compliant outbound campaign and a costly TCPA violation is usually settled before the first call connects. Verifying consent records upfront protects your budget, your reputation, and your right to reach the people who actually want to hear from you.

The financial stakes are concrete. Every call placed without prior express consent exposes you to statutory damages of $500 to $1,500 per violation, according to BCLP's analysis of the TCPA's new opt-out rules. A single campaign reaching thousands of unverified numbers can create exposure that dwarfs the campaign's expected return.

Start by confirming that each contact's consent record meets the FCC's standard for prior express written consent: a signed written agreement, a clear disclosure of the types of calls you will make, and a statement that consent is not tied to a purchase. The FCC's final rule on consent eliminated the one-to-one consent requirement, so a single consent can now cover multiple sellers — but only if the record clearly says so.

Oral consent requires extra care. The Fifth Circuit's TCPA reset ruling held that prior express consent can be oral or written, creating flexibility for phone-originated permissions. But oral consent is only as strong as your documentation: record the call, log the date and time, note exactly what the contact agreed to, and store the recording where you can retrieve it if challenged.

Before launch, run every list through a consent verification checklist:

• Confirm the list source and the date consent was captured
• Verify the scope of consent covers the call type and campaign goal
• Check for existing opt-outs or revocation requests
• Flag any record with unclear, missing, or expired permission history
• Separate marketing contacts from informational-only contacts

The distinction between marketing and informational calls matters more than ever. The FCC's global revocation rule, effective January 31, 2027, requires businesses to honor opt-outs within ten business days and send only a single clarification message afterward, per Holland & Knight's compliance summary. Your records must show which category each contact falls into, because revoking consent for one message type can block all future communications.

Bought lists deserve special scrutiny. A purchased list with no documented permission history is a liability, not an asset. At My AI Call Center, we review list source and consent records before any campaign launches, and we decline lists without clear permission records before a single dollar is spent. We tell you plainly if the list will not support the campaign — because the cheapest violation is the one you never make.

Building a Consent-Ready Calling Operation

Knowing what express consent means is only half the battle. The other half is building a calling operation that proves it — every call, every campaign, every time.

The stakes are real. TCPA violations carry statutory damages of $500 to $1,500 per call made without prior express consent, according to legal analysis of the new opt-out rules. And the rules keep moving: the FCC's "global revocation" rule, effective January 31, 2027, will require businesses to honor opt-out requests across all affiliated channels — not just the one where the consumer complained, as one recent court summary explains.

The law gives you ten business days to honor a revocation — but good operations don't wait. The best practice is immediate. Here is the operational checklist that keeps a consent-based calling program defensible:

• Keyword opt-outs honored immediately. When a recipient says STOP or REVOKE, the system logs it and suppresses the number on the spot — no batch processing, no lag. The FCC permits only one post-revocation clarification message, sent within five minutes and free of marketing content, per the 2025 opt-out rules.
• AI disclosure on every call. Recipients can ask whether a call is AI-assisted, request a human, or opt out — and get a straight answer.
• DNC records carried across campaigns. A do-not-call request from a March reminder campaign must still suppress that number in a June renewal campaign. Consent records travel with the contact, not the campaign.
• Approved calling windows only. State-specific quiet hours and day restrictions are enforced before dialing starts — after-hours leads queue for the next business day rather than getting called at 9 PM.
• Opt-out logs in every campaign report. If you cannot show when a request came in and when it was honored, you cannot prove compliance. Every report should include opt-out and DNC logs alongside disposition codes.

Documentation matters just as much as behavior. The FCC's standard for prior express written consent requires a signed agreement with clear disclosure of call types, and the Fifth Circuit has held that "prior express consent" can be oral or written — which makes verifiable records of either form essential when a dispute arises. As compliance counsel advise, businesses must track opt-out methods, differentiate message types, and coordinate across departments to avoid penalties.

This is exactly why My AI Call Center reviews list source and consent records before any campaign launches — and tells you plainly if a list will not support the campaign, before you spend anything. The free Plan My Campaign review walks through your goal, list volume and relationship, and consent records, so you know your list is ready before the first call goes out. Book yours today and launch your next campaign on solid ground.