Introduction

The Telemarketing Sales Rule (TSR) has been the FTC's primary federal lever for policing outbound calling since 1995, and it has tightened considerably in the last two years. If your business places or manages telemarketing calls, the rule now governs not just what you say, but how you document that anyone wanted to hear it in the first place.

The TSR, codified at 16 CFR Part 310, implements the 1994 Telemarketing and Consumer Fraud and Abuse Prevention Act and has been amended five times: in 2003 (Do Not Call Registry), 2008 (prerecorded messages), 2010 (debt relief), 2015 (payment mechanisms), and 2024 (recordkeeping and B2B deception), according to the Federal Register's final rule publication. The 2024 amendments, effective May 16, 2024, represent the most significant shift in consent documentation to date.

Three developments have reshaped what compliance looks like in practice:

• Recordkeeping retention extended from two years to five years, with a new dedicated "Records of Consent" category under § 310.5(a)(6)
• B2B telemarketing lost its blanket exemption; material misrepresentations to businesses are now prohibited
• AI-generated voices classified as artificial or prerecorded voices under the TCPA via the FCC's February 8, 2024 Declaratory Ruling, triggering prior express written consent requirements

The direction of travel is unmistakable. Consent has become a documented, auditable artifact rather than a moment in time. The FTC itself noted that "evolutions in technology and the marketplace have made it more difficult for regulators to enforce the TSR, particularly provisions relating to the DNC Registry," per the 2024 amendment notice. That gap is what the new recordkeeping rules are designed to close.

For any organization running outbound calling campaigns, this shift raises the stakes quickly. TCPA statutory damages run $500–$1,500 per violation, per consumer, with no requirement to show actual injury. A list without documented consent isn't a marketing asset; it's a liability waiting to compound.

This is why list discipline has become the practical foundation of compliant calling. Before any campaign launches, the questions that matter are: Where did these contacts come from? What did they actually agree to? Can you produce that agreement if a regulator asks? Operations like My AI Call Center have built their process around exactly this checkpoint, reviewing list source and consent records before launch and declining bought lists without clear permission records. The TSR's 2024 amendments effectively formalized what disciplined operators were already doing.

The sections ahead break down each piece of the rule, what changed in 2024, and how the consent requirements apply to real outbound campaigns.

Key Concepts

The Telemarketing Sales Rule sets the floor for how telemarketing works in the United States, and it reaches further than most people expect. If your campaign calls across state lines or targets U.S. consumers, you're covered, even if the dialing happens from outside the country.

What the TSR actually requires

The TSR is codified at 16 CFR Part 310 and implements the 1994 Telemarketing and Consumer Fraud and Abuse Prevention Act. It has been amended five times since 1995, most recently in 2024, and each round has pulled consent tighter.

At its core, the rule does five things you need to build campaigns around:

• Requires material disclosures up front, and prohibits misrepresentations in every call.
• Restricts calling hours. Calls before 8 a.m. or after 9 p.m. in the consumer's local time count as abusive.
• Enforces Do Not Call provisions, including the National DNC Registry and entity-specific suppression lists.
• Mandates express informed consent in every telemarketing transaction, with special rules for prerecorded messages.
• Requires recordkeeping that lets regulators verify compliance and identify affected consumers.

Consent is now a documented artifact

The 2024 amendments (effective May 16, 2024) created a dedicated "Records of Consent" category under Section 310.5(a)(6) and extended retention from two years to five. That's the practical shift: consent is no longer just a moment in time. It's a file you keep and can produce on demand.

The FTC's stated rationale is straightforward. Recordkeeping exists to "ascertain whether sellers and telemarketers are complying with the TSR, identify persons who are involved in any challenged practices, and identify customers who may have been injured," per the 2024 final rule. New required records include call detail records and copies of unique prerecorded messages.

AI voices and opt-out rules

On February 8, 2024, the FCC voted unanimously to classify AI-generated voices as "artificial or pre-recorded" under the TCPA. That means AI-assisted marketing calls need prior express written consent, the same bar as a robocall. Separately, the FCC's February 2024 Report and Order requires businesses to honor reasonable opt-out requests within 10 business days and bars them from dictating a single revocation method. Per se reasonable keywords include "stop," "quit," "end," "revoke," "opt out," "cancel," and "unsubscribe."

Where things stand on 1:1 consent

The FCC's one-to-one consent rule, which would have required consent tied to a single seller and topically related to the collection context, was struck down by the 11th Circuit on February 14, 2025. The court held the FCC exceeded its statutory authority. But don't treat that as a green light for bundled lead-generator consent. State "mini-TCPA" laws continue to impose their own consent and disclosure requirements, and Maryland, Georgia, and Maine all tightened their rules in 2024.

The regulatory direction is clear: documented, seller-specific, revocable consent with multi-year records. At My AI Call Center, we build every campaign on approved, permissioned, or reviewed lists and check consent records before launch, which maps directly to what the TSR now expects.

Campaign requirements vary by location, industry, contact type, consent status, and technology. Clients are responsible for obtaining appropriate legal guidance before launch.

Best Practices

Staying compliant with the Telemarketing Sales Rule comes down to a handful of disciplined habits, and most of them cost nothing but attention. The rules have shifted enough since 2024 that even well-run calling programs need to revisit their basics.

Start with consent records. The 2024 TSR amendments created a dedicated "Records of Consent" category under Section 310.5(a)(6), and retention jumped from two years to five years. That means consent is no longer just a moment in time. It's a documented, auditable artifact you keep on file for every contact you call. Before any campaign launches, check the list source, confirm the consent records exist, and store what you find.

Treat AI-generated voices carefully. In February 2024, the FCC unanimously ruled that AI voices count as "an artificial or pre-recorded voice" under the TCPA, which means marketing calls using them need prior express written consent. If your calls use AI assistance, disclose it on every call and give recipients a clear way to opt out. The FCC recognizes "stop," "quit," "end," "revoke," "opt out," "cancel," and "unsubscribe" as reasonable opt-out keywords, and you must honor those requests within 10 business days. Logging them immediately, as we do at My AI Call Center, is a stricter internal standard worth keeping.

Be skeptical of bundled consent. The FCC's one-to-one consent rule was struck down by the 11th Circuit in February 2025, but that doesn't make bundled lead-generator consent safe. State "mini-TCPA" laws keep multiplying, and legal analysts expect states to fill the gaps left by the federal ruling. Maryland already requires prior express written consent for autodialed solicitations. The practical takeaway: bought lists without clear permission records rarely support a defensible campaign, and declining them is usually the right call.

A few other habits matter:

• Scrub your lists against the National Do Not Call Registry and keep records of which version you used. Maine now also requires checking the FCC's reassigned number database before dialing.
• Respect calling windows. Calls before 8 a.m. or after 9 p.m. local time are considered abusive under the TSR, and several states impose stricter quiet hours.
• Keep call detail records and copies of any prerecorded messages. These are now explicitly required under the amended rule.
• Don't assume B2B calls are exempt. The 2024 amendments prohibit misrepresentations in business-to-business telemarketing too.

One more thing worth knowing: the TSR reaches across borders. Calls made from outside the United States to U.S. consumers still fall under the rule, so offshore dialing doesn't buy you an exemption.

The direction of travel here is clear: documented, seller-specific, revocable consent with multi-year recordkeeping. Build your calling program around that standard and the rule changes become manageable instead of disruptive.

Implementation

Knowing the rules is only half the battle. The real challenge is building a workflow that proves compliance before a single call goes out. The 2024 amendments to the Telemarketing Sales Rule changed this from a "check the box" exercise to a continuous documentation requirement. You can no longer rely on verbal assurances or vague memory of when a customer agreed to be contacted.

Regulators now expect you to treat consent as a permanent, auditable artifact. The FTC extended the record retention window from two years to five years under the updated rules. This shift acknowledges that technology makes enforcement harder, requiring businesses to keep detailed records that prove their actions were lawful. If you cannot produce the specific record of consent for a particular contact, you have no defense.

This reality forces a strict discipline in how you handle your contact lists. You must verify the source of every number and ensure the consent matches the specific call you intend to make. For operations using AI voices, this is critical. The FCC now classifies AI-generated voices as artificial or pre-recorded, triggering strict prior express written consent requirements. A general permission to receive marketing calls is not enough if the voice is synthetic.

To implement this effectively, your internal processes must mirror the legal requirements. Here is what that looks like in practice:

• Create a dedicated "Records of Consent" file for every contact, stored for the full five-year retention period.
• Verify that consent is specific to the seller and the topic, avoiding the pitfalls of broad lead-generator permissions.
• Scrub lists against the Do Not Call Registry and state-specific reassigned number databases before launch.
• Log opt-outs immediately, honoring the federal requirement to respect requests within 10 business days.

My AI Call Center approaches this by reviewing list sources and consent records before any campaign begins. We do not launch calls against lists that lack clear permission documentation. This upfront verification protects you from the liability of calling someone who never actually agreed to speak with you.

The penalty for getting this wrong is steep. TCPA violations carry statutory damages of $500 to $1,500 per violation, per consumer. With no requirement to prove actual injury, a single bad list can trigger significant financial exposure. By treating consent records as a core operational asset rather than a legal afterthought, you build a system that withstands regulatory scrutiny.

You should also be aware of the shifting landscape regarding "bundled" consent. Although the federal one-to-one consent rule was struck down in early 2025, state laws are filling the gap. Many states now require consent to be limited to a single seller. Relying on old, broad permissions is a risky strategy that could leave you vulnerable to class-action lawsuits.

Finally, remember that the rules apply regardless of where your call center is located. If you are calling consumers in the United States, the TSR applies to you. The FTC has been clear that extraterritorial reach is not a loophole. Compliance is a non-negotiable baseline for any outbound operation that wants to survive in the current legal environment.

Conclusion

The Telemarketing Sales Rule has shifted from a static disclosure checklist into a live, consent-first compliance regime, and the direction of travel is unmistakable: documented, seller-specific, revocable consent with multi-year recordkeeping. For any organization placing outbound calls, the practical question is no longer whether the TSR applies, but whether your list, your scripts, and your records can survive a five-year audit window.

The regulatory floor keeps moving. The 2024 amendments created a dedicated "Records of Consent" category under § 310.5(a)(6) and extended retention from two years to five. The FCC's February 2024 Declaratory Ruling now classifies AI-generated voices as artificial or prerecorded, which means prior express written consent is required for any AI-assisted marketing call. And even after the 11th Circuit vacated the FCC's 1:1 consent rule in February 2025, state "mini-TCPA" laws are filling the gap with their own consent and disclosure requirements.

Here is what a defensible posture looks like in practice:

• Retain consent records for five years per contact, not two, and store them as auditable artifacts rather than informal review notes.
• Treat AI-generated voices as prerecorded for consent purposes and confirm a written agreement is on file before any campaign that uses them.
• Honor opt-outs immediately and recognize the full FCC per se keyword set (stop, quit, end, revoke, opt out, cancel, unsubscribe), not a narrower internal list.
• Decline bundled lead-generator consent and require single-seller, topically related permission before any list goes into rotation.
• Scrub against the FCC Reassigned Numbers Database and apply per-state quiet hours before launch.

The penalty math makes the discipline worth it. TCPA statutory damages run $500 to $1,500 per violation, per consumer, with a private right of action and no requirement to show actual injury. A single misfire on a 10,000-record campaign can dwarf the cost of getting consent right the first time.

If you are evaluating an outbound calling partner, the right questions to ask are not about dialer speed or cost per minute. Ask how they document consent, how long they retain the records, and what happens when someone says "stop." My AI Call Center reviews list source and consent records before any campaign launches, declines bought lists without clear permission, logs opt-outs immediately, and applies AI disclosure on every call. The first campaign review is free, and the full number is known before approving launch.

For a deeper walkthrough of the 2024 amendments, the FCC AI-voice ruling, and the state-level patchwork now in force, the My AI Call Center Insights hub covers each trend in detail. When you are ready to scope a specific campaign, the Plan My Campaign booking flow captures goal, list volume, consent status, and any regulated-area flags so the quote reflects what the list can actually support.