The Legal Baseline: When You're Actually Allowed to Call

Most clinics discover the legal answer to "when can we call patients?" only after something goes wrong. The truth is that "appropriate" is a legal question before it's a courtesy question — and the law is more specific than most people expect.

The FTC's Telemarketing Sales Rule sets the national calling window at 8 AM to 9 PM local time — the local time of the person being called, not the caller, according to call center compliance guidance. That nine-hour window looks generous on paper. But it's a ceiling, not a floor, and it shrinks fast once state law enters the picture.

Individual states layer their own restrictions on top of the federal baseline, and several are meaningfully stricter. If your patient list spans state lines, a single campaign window has to satisfy the tightest rule that applies to any number on it.

• Texas: Telemarketing calls are limited to 9 a.m.–9 p.m. on weekdays and 12 p.m.–9 p.m. on Sundays, per TCPA compliance analysis — that Sunday noon start is easy to miss.
• Florida: Calls must stop at 8 p.m., a full hour before the federal cutoff.
• AI voice calls everywhere: The FCC's February 2024 Declaratory Ruling confirmed that TCPA rules apply to AI-generated voices, putting them under robocall restrictions and prior express consent requirements.

The penalties for missing these windows are not theoretical. Telemarketing Sales Rule civil penalties run $51,744 per violation as of 2024, adjusted annually for inflation — and that's per call, according to compliance research. TCPA statutory damages add $500 per violation, up to $1,500 for willful violations, with no cap on class size.

The burden of proof lands squarely on the caller, too. As one compliance expert puts it, consent that can't be retrieved quickly is functionally consent that doesn't exist in litigation. That's why timing discipline and list discipline go hand in hand — a call at the wrong hour is a problem, but a call to someone whose consent you can't prove is worse.

This is exactly why My AI Call Center reviews list source, consent records, and calling windows before any campaign launches, and runs calls only in approved windows. If a list won't support the campaign legally, we say so before you spend anything.

The practical takeaway: build your patient calling window around the strictest applicable state rule, not the federal ceiling. A conservative mid-morning-to-early-evening window keeps you defensible everywhere your patients live.

Why AI Voice Calls Face Stricter Rules Than You Might Think

The federal baseline for outbound calls is 8 a.m. to 9 p.m. local time, but AI voice calls now carry a second layer of risk that many teams overlook. In February 2024, the FCC's Declaratory Ruling (FCC 24-17) confirmed that AI-generated voices fall under the TCPA's definition of "artificial or prerecorded voice," which means every AI patient call requires prior express consent before the first ring. The stakes are immediate: TCPA statutory damages run $500 to $1,500 per call with no cap on class size, and TSR civil penalties sit at $51,744 per violation as of 2024.

• AI voices are regulated like robocalls under the TCPA
• Prior express consent is mandatory for every AI outbound call
• Damages scale per call with no class-size limit
• TSR penalties reach $51,744 per violation

The burden of proving that consent rests entirely on the caller, and a consent record that cannot be retrieved quickly is functionally useless in litigation. This is why My AI Call Center reviews list source, consent records, and calling windows before any campaign launches — bought lists without clear permission records are flagged and in most cases declined. State rules tighten the window further: Texas restricts telemarketing calls to 9 a.m.–9 p.m. on weekdays and 12 p.m.–9 p.m. on Sundays, while Florida imposes an 8 p.m. cutoff. Honoring those overlays isn't optional; it's the difference between a compliant campaign and a liability event.

Consent revocation must be honored within ten business days under federal rule, though immediate opt-out logging and DNC synchronization across all campaigns is the safer standard. AI disclosure on every call, keyword opt-outs (STOP and REVOKE), and recorded consent retrieval per number are not nice-to-haves — they are the minimum defensible posture. When the caller bears the burden of proof, list discipline isn't a feature. It's the entire foundation.

The Real Risk Isn't Just the Clock — It's Your List

Getting the clock right is the easy part. The harder question — and the one that actually decides whether your patient outreach survives legal scrutiny — is whether you can prove every person on your list agreed to be called.

Here is the uncomfortable reality: the burden of proving consent falls on the caller, not the person who was called. As compliance CEO Matt Beucler puts it, "A consent that cannot be retrieved per number within an hour is functionally a consent that does not exist in litigation" (TCPA compliance analysis). A consent record buried in a spreadsheet, an old intake form, or a previous vendor's system is functionally useless when it matters most.

The stakes are not theoretical. TCPA statutory damages run $500 per violation, up to $1,500 for willful violations, with no cap on class size, and Telemarketing Sales Rule civil penalties reached $51,744 per call as of 2024 (per regulatory citations). One weak list can multiply those numbers across thousands of contacts.

The problem is rarely malicious. The single most common real-world failure mode for outbound programs is a consent form that names the wrong entity — the clinic instead of the corporate parent, or vice versa (practitioner observations). Good intentions do not survive that kind of paperwork mismatch.

That is why list discipline and calling hours are inseparable. A defensible patient-calling program needs:

• A documented list source — where every number came from, and on what basis
• Retrievable consent records, timestamped and tied to the correct entity
• Real-time DNC scrubbing against the more than 249 million numbers on the National Do Not Call Registry (registry data)
• Automated quiet-hours enforcement so the 8 AM–9 PM local-time window (set by the FTC's Telemarketing Sales Rule) is never left to individual judgment

This is exactly why My AI Call Center reviews list source and consent records before any campaign launches — and declines bought lists that lack clear permission records. The message to clients is plain: if the list will not support the campaign, you hear it before you spend anything.

Calling at the right time protects you from one category of complaint. Calling the right people, with proof they agreed to be called, protects you from everything else. Treat the two as one discipline, because in litigation, they are.

How to Set a Defensible Calling Window in Practice

Knowing the rules is one thing; building a calling window you can actually defend is another. The safest approach is to treat the legal limits as a ceiling, then run your campaign comfortably below them.

Start with the federal baseline: the Telemarketing Sales Rule permits calls between 8 AM and 9 PM local time of the person being called, according to FTC compliance guidance. But state overlays tighten that ceiling fast. TCPA compliance research shows Texas restricts calls to 9 a.m.–9 p.m. on weekdays and 12 p.m.–9 p.m. on Sundays, while Florida cuts off calling at 8 p.m. A conservative campaign window — roughly mid-morning through early evening — sits safely inside every one of these limits.

Manual enforcement does not scale. State-specific quiet hours and day restrictions need to be enforced automatically, on every outbound contact, because the stakes are steep: TCPA statutory damages run $500 per violation, up to $1,500 for willful violations, with no cap on class size.

Opt-out handling deserves the same discipline. The law gives you ten business days to honor a consent revocation under 47 C.F.R. § 64.1200(a)(10), per the same compliance analysis. The defensible standard is immediate: log the opt-out, honor it on the spot, and carry it into your DNC records across every campaign. Waiting until day ten is legal; acting instantly is what actually protects you.

AI calls add one more layer. The FCC's February 2024 Declaratory Ruling confirmed that AI-generated voices count as artificial voices under the TCPA, which means prior express consent and full disclosure apply. Your calling framework should include:

• A campaign window set inside the strictest applicable state rule, not just the federal one
• Automated quiet-hours enforcement per contact's location, on every dial
• AI disclosure on every call, with the option to reach a human
• Keyword opt-outs like STOP and REVOKE honored immediately and logged permanently

This is exactly how My AI Call Center runs patient campaigns: calls go out only in approved windows, scripts and disclosure language are approved before launch, and opt-outs are logged and honored immediately — not inside the ten-day maximum. List source and consent records are reviewed before anything dials, because the burden of proving consent falls on the caller, and a consent you cannot retrieve quickly is, as one compliance CEO put it, functionally a consent that does not exist in litigation.

Build your window conservatively, enforce it automatically, and treat every opt-out as urgent. That combination is what makes a calling program defensible — and what makes patient outreach something a clinic can run without holding its breath.

What List Discipline Looks Like Before Any Campaign Launches

Before any campaign launches, the legal exposure starts with the list — not the script, not the voice, and certainly not the schedule. The federal Telemarketing Sales Rule sets a baseline calling window of 8 AM – 9 PM local time of the person being called, but state rules tighten it further: Texas restricts telemarketing calls to 9 a.m.–9 p.m. on weekdays and 12 p.m.–9 p.m. on Sundays, while Florida imposes an 8 p.m. cutoff. The FCC's February 2024 Declaratory Ruling confirmed that AI-generated voices fall under TCPA robocall restrictions, meaning prior express consent is required for every AI-powered patient call. The burden of proving that consent rests entirely on the caller, and consent records that cannot be retrieved quickly are functionally useless in litigation.

• Review list source and consent records before spending anything — flag bought lists without clear permission documentation
• Approve scripts, disclosure language, opt-out handling (STOP/REVOKE), and escalation paths before any dialing begins
• Confirm calling windows honor state-specific quiet hours and day restrictions for every contact
• Monitor calls in real time inside approved windows only

My AI Call Center runs this checklist as a managed service: lists are reviewed for source and consent, scripts and escalation paths are approved by the client, and calls execute only inside compliant windows — with opt-outs logged and honored immediately. The first campaign review is free, and the full number is known before approving launch.