The TCPA Now Covers Every Outbound AI Call — No Exceptions

The FCC's February 2024 Declaratory Ruling made clear that AI-generated voices are regulated as artificial or prerecorded voice under the TCPA, eliminating any technology-based carve-outs. This means all existing TCPA requirements for outbound artificial/prerecorded voice calls now apply to AI technologies generating human voices, including obtaining prior express consent, providing identification disclosures, and presenting opt-out options. The ruling explicitly stated that the statute "does not allow for any carve out of technologies that purport to provide the equivalent of a live agent," closing loopholes some vendors once claimed.

Liability under the TCPA extends to the entity on whose behalf calls are made, so businesses using third-party AI calling services cannot shift compliance risk to vendors. As noted in the Lamb v. Mortgage One Funding case, businesses purchasing AI calling from third parties remain liable for violations committed by those vendors on their behalf. This aligns with broader TCPA principles that hold organizations responsible for telemarketing practices conducted through their agents or service providers, regardless of where the call originates.

For My AI Call Center clients, this reinforces the importance of list eligibility verification before any campaign launches. The company reviews consent records, checks DNC compliance, validates calling windows, and ensures proper AI disclosure on every call — steps that directly address the FCC’s expanded scope. By confirming that lists are approved, permissioned, or reviewed, and never indiscriminately cold-called, My AI Call Center helps clients meet their TCPA obligations in an environment where AI voice calls face the same scrutiny as traditional robocalls.

• Statutory damages under the TCPA range from $500 to $1,500 per call, with no aggregate cap.
• Recent settlements in the $5M–$20M range reflect the financial stakes of noncompliance.
• TCPA class-action filings have increased 95% year over year, with aggregate verdicts exceeding $925 million.

Who Is Covered — And Who Isn't

Many businesses assume their size, industry, or location shields them from TCPA requirements—this is not the case. The law applies to any organization contacting U.S. phone numbers for business purposes, whether a small local shop, a national franchise, a B2B sales team, or an outsourced call center operating from abroad. Even nonprofits are only exempt when making charitable solicitation calls; all other outreach, including event promotion or service updates, remains subject to TCPA rules.

Text messages are legally treated as calls under the TCPA, meaning the same consent and calling time restrictions apply to SMS outreach as to voice calls. This broad coverage ensures that any outbound communication to U.S. numbers—whether voice or text—triggers compliance obligations if it serves a business purpose. My AI Call Center reflects this understanding by verifying list eligibility before any campaign launches, ensuring only permissioned or reviewed contacts are included.

Established Business Relationships (EBR) do not exempt AI-generated calls from consent requirements, a critical distinction many organizations misunderstand. While EBR may allow a live agent to call a past customer on the DNC list, it does not permit an AI voice to do the same without separate consent. The FCC’s February 2024 Declaratory Ruling confirmed that AI-generated voices are regulated as "artificial or prerecorded voice" under the TCPA, eliminating any technology-based loopholes. As a result, businesses using third-party AI calling services cannot shift compliance risk to vendors—liability extends to the entity on whose behalf the calls are made.

• Statutory damages under the TCPA range from $500 to $1,500 per call, with no aggregate cap.
• TCPA class-action filings have increased 95% year over year, with aggregate verdicts exceeding $925 million.
• Recent settlements fall in the $5M–$20M range, including cases like Gen Digital ($9.95M) and QuoteWizard ($19M).

For informational or transactional calls, Prior Express Consent (PEC) may suffice—and can be oral in Texas, Louisiana, and Mississippi—but marketing calls require Prior Express Written Consent (PEWC) in 47 states. Regardless of call type, AI disclosure must occur at the start of every call, and opt-out requests must be honored immediately. My AI Call Center builds these requirements into its pre-launch review process, checking consent records, calling windows, and DNC compliance to ensure every campaign starts on solid legal ground.

Consent Requirements by Call Type and State

Navigating consent requirements under the TCPA isn't just about federal rules—it's a state-by-state matrix that shifts based on call type. For marketing calls, Prior Express Written Consent (PEWC) is mandatory in 47 states, reflecting the strictest standard for promotional outreach. Informational or transactional calls, however, only require Prior Express Consent (PEC), which can be satisfied with oral agreement in just three states: Texas, Louisiana, and Mississippi. This distinction means businesses must tailor their consent collection methods depending on both the purpose of the call and the recipient's location, as a one-size-fits-all approach risks noncompliance.

State-specific laws add further layers of complexity. Texas SB 140, effective September 2024, mandates that AI disclosure occur within the first 30 seconds of a call and explicitly bans voice cloning without consumer consent. Florida takes a different approach, requiring written consent that specifically references the use of AI technology—meaning generic consent forms won't suffice. These nuances underscore why pre-checked boxes never qualify as valid consent under TCPA guidelines; affirmative, opt-in agreement is essential, whether captured verbally in permitted states or documented in writing elsewhere. My AI Call Center verifies these requirements during list review to ensure every campaign aligns with both federal and state-level obligations before a single call is placed.

• Marketing calls require PEWC in 47 states
• Informational calls accept oral PEC only in TX, LA, MS
• Texas SB 140 requires AI disclosure within 30 seconds
• Florida mandates written consent referencing AI use
• Pre-checked boxes do not constitute valid consent

What Non-Compliance Costs — And Why It's Rising

The financial exposure from TCPA violations is severe and growing. Statutory damages range from $500 to $1,500 per call with no aggregate cap, meaning even a modest campaign can trigger liability in the millions. Recent settlements underscore this risk: Gen Digital paid $9.95 million, while QuoteWizard faced a $19 million settlement, both falling within the $5M–$20M range typical for 2025–2026 resolutions. These figures reflect not just isolated errors but systemic failures in consent management and list hygiene.

TCPA litigation is accelerating at an alarming pace. Class-action filings have increased 95% year over year, driving aggregate verdicts beyond $925 million. This surge is fueled by plaintiffs’ attorneys targeting AI-generated voice calls, which the FCC now regulates identically to prerecorded messages under its February 2024 Declaratory Ruling. The absence of technology-based carve-outs means businesses using AI calling services assume full compliance responsibility — a point reinforced by the Lamb v. Mortgage One Funding case, which explicitly holds clients liable for violations committed by their vendors, lead generators, or agents.

For organizations relying on third-party calling services, vendor liability does not transfer risk. As experts note, assuming a third party owns compliance risk is precisely what the Lamb case disproves. My AI Call Center clients retain ultimate accountability for TCPA adherence, making pre-launch list verification not just a best practice but a legal necessity. Without rigorous consent validation, DNC scrubbing, and calling window confirmation, even well-intentioned campaigns expose businesses to catastrophic financial and reputational harm. The cost of non-compliance isn’t rising — it’s already here.

How My AI Call Center Verifies List Eligibility Before Every Campaign

Because liability under the TCPA follows the business on whose behalf a call is made—not just the vendor doing the dialing—verifying a contact list before launch is not optional housekeeping. It is the step that determines whether a campaign is defensible or a liability.

The stakes are real. Statutory damages run from $500 to $1,500 per call, with no aggregate cap, and recent class settlements have landed in the $5M–$20M range. That is why My AI Call Center runs every campaign against approved, permissioned, or reviewed lists only, and checks list source and consent records before anything launches.

The verification starts with consent, matched to call type and jurisdiction. Marketing AI calls require prior express written consent in 47 states, while informational calls may qualify under prior express consent—which can be oral in Texas, Louisiana, and Mississippi. Consent must be an affirmative opt-in; pre-checked boxes do not qualify. Bought lists without clear permission records are flagged, and in most cases declined. As the company puts it plainly: if the list will not support the campaign, clients hear that before they spend anything.

List hygiene continues through the life of the campaign. That includes:

• Scrubbing against the National Do Not Call Registry and internal DNC lists, with nonprofit lists checked every 31 days to maintain their limited charitable-solicitation exemption
• Honoring opt-outs immediately, with STOP and REVOKE keywords recognized and DNC requests carried into client records across all campaigns
• Restricting calls to 8:00 a.m. to 9:00 p.m. in the recipient's local time zone, with verified time zone data
• Providing AI disclosure on every call and keeping Caller ID accurate, since misleading ID information can trigger TCPA complaints

One misconception deserves special attention: an established business relationship does not exempt AI calls from consent requirements. A live agent may be able to call a past customer on the DNC list, but an AI-generated voice cannot dial that same person without separate consent. The voice itself is what triggers the consent requirement—a point compliance experts call the single most expensive misunderstanding in AI outbound calling.

Finally, the paperwork has to outlast the campaign. Recommended consent-record retention is four years based on the TCPA statute of limitations, with defense counsel often recommending seven. My AI Call Center documents list source, consent records, and calling windows during pre-launch review, and keeps opt-out and DNC logs as standard deliverables.

Because liability extends to the entity on whose behalf calls are made, clients retain compliance responsibility even when using a managed service. That responsibility is acknowledged openly in every campaign review, and clients are encouraged to obtain appropriate legal guidance before launch.