The Consent Confusion: Why Written and Informed Consent Are Not the Same

The Consent Confusion: Why Written and Informed Consent Are Not the Same

Many businesses assume that having a signed form means they’re fully compliant when making automated calls. This misunderstanding can lead to costly violations, as the TCPA draws a clear line between what’s required for marketing versus informational outreach.

For marketing calls using AI or automated systems, the FCC mandates "prior express written consent," which includes nine specific disclosures and a separate signature requirement regarding the scope of authorization. Informational calls, such as appointment reminders or service updates, only require "prior express consent"—a verbal or written agreement that does not need to meet the FCC’s written consent standards.

This distinction has become legally contentious. The Fifth Circuit Court recently ruled in Bradford v. Sovereign Pest Control that the TCPA statute itself only requires "prior express consent" for automated calls to wireless numbers, without distinguishing between written and oral forms challenging the FCC’s written requirement as exceeding its authority. As a result, businesses operating across state lines face a patchwork of enforcement standards.

Penalties for noncompliance remain severe, with TCPA violations carrying fines of $500 to $1,500 per call, per class member and willful violations reaching up to $1,500 per call. These risks underscore why My AI Call Center emphasizes rigorous consent verification during list review—ensuring that permission aligns with both the call’s purpose and the recipient’s jurisdiction before any campaign launches. Violations can also trigger class action exposure under the TCPA’s four-year statute of limitations, making documentation critical.

To navigate this complexity, businesses should maintain detailed consent records that capture how, when, and what scope of communication was authorized—practices that support compliance whether written or oral consent is legally sufficient in a given jurisdiction. Consent can now be revoked through any reasonable means, and businesses must honor these requests within ten business days with only one clarification message permitted within five minutes of revocation. This evolving landscape demands ongoing vigilance, particularly as courts continue to reassess the boundaries of FCC authority under the TCPA.

How Call Purpose Changes the Consent Standard You Need

The phone number you're dialing matters less than the reason you're dialing it. Under the TCPA, consent requirements are use-case specific, as TCPA attorney Eric J. Troutman explains — the law sets different consent levels depending on what the call is trying to accomplish (ActiveProspect's TCPA analysis).

Marketing calls sit on the strict side. Lead qualification, renewal upsell, and win-back or reactivation campaigns all count as telemarketing, so they demand prior express written consent — authorization that, per the FCC's standard, must clearly permit delivery of advertising or telemarketing messages via automated systems, be conspicuously disclosed, and be separately signed (FCC guidance).

Informational calls face a lighter standard. Appointment reminders, payment notices, and health check-ins require only prior express consent, which can be oral or written (TCPA attorney commentary). That's why My AI Call Center reviews list source and consent records before launch — a reminder campaign and an upsell campaign place very different documentation demands on the same contact list.

The stakes justify the paperwork. TCPA violations run $500 to $1,500 per call, and AI voice technology amplifies the exposure because it enables calling at scale (compliance experts warn). Attorney John Henson's benchmark for audit trails is exact: know who consented, at which number, on what date, through which channel, and to what.

Two frameworks can ease the burden for established relationships:

• Inquiry-based EBR: a customer inquiry opens a 90-day window for related follow-up calls (EBR guidance).
• Transaction-based EBR: a completed transaction extends that window to 18 months.
• State overlays: New York requires an opt-out opportunity within three seconds of the call's start (state TCPA rules).
• Revocation rules: since April 11, 2025, consumers may revoke consent through any reasonable means, honored within ten business days (BCLP's analysis).

One caveat for multi-state operations: the Fifth Circuit's Bradford v. Sovereign Pest Control ruling held the statute requires only prior express consent, without a written formality — but that holding doesn't bind other circuits. Until the split resolves, the safest posture is documenting consent thoroughly regardless of jurisdiction, and retaining opt-out records for at least four years to match the TCPA's statute of limitations (legal analysts recommend).

The Circuit Split: Why Your List's Geography Determines Your Risk

The Circuit Split: Why Your List's Geography Determines Your Risk

For businesses running multi-state calling campaigns, consent requirements can vary dramatically depending on where the recipient is located. This judicial fracture creates real compliance complexity that directly impacts campaign planning and execution.

The Fifth Circuit Court of Appeals, covering Texas, Louisiana, and Mississippi, recently rejected the FCC's written consent mandate in Bradford v. Sovereign Pest Control, ruling that the TCPA requires only "prior express consent" for automated calls to wireless numbers without distinguishing between written and oral forms. This decision directly challenges nearly 15 years of uniform application of the written consent standard for marketing calls. Other circuits may still enforce the FCC's stricter requirement, creating a patchwork of legal standards across the United States.

For My AI Call Center clients operating across state lines, this means consent verification must meet the strictest applicable standard to ensure compliance everywhere. A list containing Texas residents might not require written documentation under Fifth Circuit precedent, while the same list with New York or California contacts could still trigger liability if only oral consent was obtained. This geographic variability transforms list management from a simple checklist into a nuanced risk assessment.

Despite relaxed standards in some jurisdictions, courts consistently advise thorough documentation regardless of location. The Bradford ruling explicitly noted that "callers should continue to document consent thoroughly, since lack of clear consent evidence may lead to unpredictable jury trials." This guidance reflects a pragmatic approach: even where written consent isn't legally required, robust records protect against evidentiary challenges in litigation.

• Document how consent was obtained (website form, verbal agreement, etc.)
• Record what specific communications the consumer agreed to receive
• Note the exact date and time of consent
• Maintain records for at least four years to align with TCPA's statute of limitations
• Ensure consent language clearly authorizes automated or prerecorded calls

This approach transforms consent from a jurisdictional gamble into a defensible business practice. By implementing uniform documentation standards that exceed minimum requirements in any single jurisdiction, companies reduce litigation risk while maintaining operational efficiency across their entire calling footprint. The cost of thorough documentation remains negligible compared to potential TCPA penalties, which can reach $500 to $1,500 per violation. These penalties underscore why proactive compliance represents sound business strategy rather than mere regulatory checkbox-ticking.

New Revocation Rules: Consent Can Be Withdrawn Any Reasonable Way

The April 11, 2025 FCC opt-out rule fundamentally changed how consumers can withdraw consent, making it easier than ever to say no. Effective that date, individuals can revoke prior express consent through any reasonable means—including texting keywords like STOP or REVOKE, using interactive voice response systems, sending emails, leaving voicemails, or contacting businesses via their website. This shift eliminates rigid opt-out requirements and aligns with growing consumer expectations for control over communications.

Businesses now face stricter obligations to act quickly and accurately when a revocation request is received. Companies must honor opt-out requests within ten business days of receipt, ensuring no further calls or texts are made to the consumer after that point. Additionally, organizations are permitted to send only one clarification message following a revocation request, and it must be delivered within five minutes—such as confirming the opt-out was processed or asking if the consumer meant to unsubscribe from all communications. These tight timelines demand real-time monitoring and automated response capabilities.

To remain compliant, campaign operators must implement cross-channel opt-out logging that captures requests regardless of how they come in—whether via SMS, email, phone, or web form. This unified tracking prevents accidental re-contact and provides a clear audit trail. Furthermore, documentation of all opt-out requests must be retained for at least four years, directly aligning with the TCPA’s statute of limitations and protecting businesses in the event of disputes or class actions. For My AI Call Center, this means every opt-out is immediately logged, honored across all active campaigns, and preserved in client records for the full retention period—reinforcing list discipline as a core compliance safeguard.

How My AI Call Center Verifies Consent Before Every Campaign Launch

Before any campaign launches, My AI Call Center conducts a managed-service consent review process that begins with a list source audit to verify where contacts originated and whether permission records exist. This is followed by consent record validation, where we check for clear, documented authorization matching the intended call purpose—whether informational or marketing—and confirm the timing and scope of consent. We then perform calling window checks to ensure outreach aligns with TCPA-regulated hours and state-specific quiet periods, and finally, campaign-type matching to confirm that the consent level supports the planned use case, such as prior express written consent for marketing calls to cell phones or prior express consent for informational outreach. Industry research shows that consent requirements are use-case specific under TCPA, making this layered validation essential for compliance.

Bought lists without clear permission records are automatically flagged during review and, in most cases, declined to prevent TCPA exposure—we tell you plainly if the list will not support the campaign before you spend anything. Opt-outs received during or after a campaign are routed immediately to the client’s DNC records and honored across all future outreach, ensuring revocation requests are processed within the required ten business days as mandated by the FCC’s Opt-Out Rule effective April 11, 2025. Recent regulatory changes emphasize that consumers can revoke consent through any reasonable means, and businesses must act swiftly to remain compliant.

To help clients catch consent gaps early, the first campaign review is always free—no setup fees, no minimums, just a clear assessment of list quality and consent validity before any spend occurs. This upfront check includes verifying EBR durations (where a completed transaction creates an 18-month EBR and an inquiry creates a 90-day EBR), confirming AI disclosure scripts are built into the call flow, and ensuring keyword opt-outs like STOP and REVOKE trigger immediate suppression. Experts note that robust audit trails are critical, especially when AI-generated voices are treated as artificial voices under the TCPA, requiring prior express consent for all automated calls. By embedding consent verification into our pre-launch process, we help multi-location organizations run more useful calls without building a bigger call center—backed by list discipline, not guesswork.