TCPA Consent: The Audit Trail Agents Need When a Complaint Hits

What Is TCPA Consent?

TCPA consent is the permission a consumer gives that lets a business make calls the Telephone Consumer Protection Act (47 U.S.C. 227) and the FCC's rules (47 CFR 64.1200) would otherwise restrict. For telemarketing, the FCC's rule uses a specific, stricter form: prior express written consent.

Under 47 CFR 64.1200(a)(2), a telemarketing call to a wireless number that uses an automatic telephone dialing system or an artificial or prerecorded voice requires the called party's prior express written consent. Under 64.1200(a)(3), a telemarketing call to a residential line using an artificial or prerecorded voice requires it too. Separately, calling a number on the National Do Not Call Registry needs an exception, such as a signed, written agreement in which the consumer agrees to be contacted by that seller (47 CFR 64.1200(c)(2)(ii)).

This article is about the other half of consent: proving it. When a consumer complaint, a carrier inquiry or a TCPA claim arrives, the question is rarely "did you have a policy?" It is "show me the record for this number."

Who Has to Prove TCPA Consent?

In several places, the federal rules put the burden on the business that made or benefited from the call, not on the consumer.

• Written consent for telemarketing. When the FCC adopted the prior express written consent requirement in its 2012 order (FCC 12-21), it said that should any question about consent arise, the seller will bear the burden of demonstrating that a clear and conspicuous disclosure was provided and that unambiguous consent was obtained (77 FR 34233, June 11, 2012, paragraph 16).
• Reassigned numbers. The FCC's safe harbor for calling a number that has been reassigned requires the caller, "bearing the burden of proof and persuasion," to show it checked the FCC's reassigned numbers database and got an erroneous result (47 CFR 64.1200(m)).
• Do-not-call claims. In a private do-not-call lawsuit, the statute gives the defendant an affirmative defense if it shows it had established and implemented, with due care, reasonable practices and procedures to effectively prevent violating telephone solicitations (47 U.S.C. 227(c)(5)). An affirmative defense is something the defendant has to prove.

How these rules apply to a particular claim is a question for counsel. The practical point is consistent: if the records don't exist, the defenses are hard to use.

What Does TCPA Express Written Consent Need to Include?

The FCC's definition in 47 CFR 64.1200(f)(9) sets the elements. A consent record that meets the TCPA express written consent standard is:

1. An agreement in writing, bearing the signature of the person called.
2. One that clearly authorizes the seller to deliver, or cause to be delivered, advertisements or telemarketing messages using an automatic telephone dialing system or an artificial or prerecorded voice.
3. Tied to the telephone number the signer authorizes those messages to be delivered to.
4. Accompanied by a clear and conspicuous disclosure telling the signer that, by signing, they authorize those calls, and that they are not required to sign (directly or indirectly) as a condition of purchasing any property, goods or services.

The signature can be electronic or digital where federal law or state contract law recognizes it as valid (47 CFR 64.1200(f)(9)(ii)). In its 2012 order, the FCC said consent obtained in compliance with the E-SIGN Act satisfies the rule, including permission obtained via an email, website form, text message, telephone keypress or voice recording (77 FR 34233, paragraph 17).

A note on "one-to-one" consent: a 2023 FCC order would have required consent to each seller separately and limited consent to calls logically and topically related to the website where it was given. On January 24, 2025, the U.S. Court of Appeals for the Eleventh Circuit vacated both restrictions, holding the FCC exceeded its authority under the TCPA (Insurance Marketing Coalition Ltd. v. FCC, No. 24-10277). The rule text that remains still requires the consent to authorize the seller making the calls, so the seller's name on the disclosure still matters.

What Records Make Up a TCPA Compliance Audit Trail?

No single document proves compliance. A recording proves what was said on a call; it does not prove the consumer consented before the call was made. A consent record proves permission; it does not prove you honored a later stop request. The table below lists the records that, together, answer the questions a complaint usually raises.

The FTC's Telemarketing Sales Rule (TSR) has its own recordkeeping section. It requires sellers and telemarketers to keep records including call detail records, consent and authorization records, do-not-call requests and the registry version used, generally for five years from the date the record is produced (16 CFR 310.5(a)). Whether the TSR reaches a given insurance call depends on the FTC's limited jurisdiction over the business of insurance: under 15 U.S.C. 1012(b), the FTC Act applies to insurance only to the extent that business is not regulated by state law. Ask counsel how this applies to you.

None of the federal rules cited in this article requires recording final expense sales calls. Even so, a recording is often the only evidence of what was said on a call. For more on recording consent by state, see our guide to call recording consent for insurance agents.

How Long Should You Keep TCPA Consent Records?

Section 227 does not state a deadline for private lawsuits. A general federal statute, 28 U.S.C. 1658(a), says a civil action arising under an Act of Congress enacted after that section was enacted may not be commenced later than four years after the cause of action accrues, unless another law provides otherwise. The TCPA was enacted in 1991. Where the TSR applies, its recordkeeping period is five years (16 CFR 310.5(a)), and the FCC rule requires do-not-call requests to be honored for five years (47 CFR 64.1200(d)(6)).

A retention period that outlasts the longest of these windows, measured from the last call to the number rather than from the date of consent, is a common-sense starting point. Confirm the period with counsel, since state laws can add their own.

What Changes for Revoked Consent on November 25, 2026?

The FCC adopted a Report and Order (FCC 26-67) on September 30, 2026 that revises its consent revocation rule. It was published in the Federal Register on October 26, 2026 (91 FR 67214) and takes effect November 25, 2026.

• Revocation still covers calls and texts under 47 CFR 64.1200(a)(1) through (3) and (c)(2), and requests must still be honored within a reasonable time not to exceed ten business days.
• A caller may designate one or more exclusive revocation methods: an automated interactive voice or key-press opt-out during a call, specified standardized reply words to a text, or a designated website or phone number. The caller must clearly and conspicuously disclose the method it designates.
• For calls or texts that contain an advertisement or telemarketing, a revocation covers all future such calls and texts from that caller.
• A caller that does not designate an exclusive method must process revocation requests made by any reasonable means.

Until the new text takes effect, the current rule says callers may not designate an exclusive means of revocation. For the audit trail, this adds two records worth keeping: the revocation disclosure you used and when you started using it, and a log showing each request and the date it was honored.

What Should You Do When a TCPA Complaint Arrives?

1. Contact counsel before responding to the consumer or the complaint.
2. Preserve every record tied to the phone number: consent, lead source, scrub records, call logs, recordings and notes.
3. Pull the consent record and check it against the four elements of 47 CFR 64.1200(f)(9), including whether it authorizes your agency as the seller.
4. Trace the lead's chain of custody back to the website or publisher where consent was captured.
5. Pull the Do Not Call Registry version and date used for the calling campaign.
6. Check the internal do-not-call list and revocation log for any request from that number, and the date it was honored.
7. Collect your written do-not-call procedures and the training records in effect at the time of the calls.
8. List every call or text to the number, with dates, times and the system used to place them.

Where Do Inbound Calls Fit?

Most of the consent rules above are written around calls a seller places. A call the consumer places to you creates a different set of records, and how the federal rules treat it is covered in our guide to inbound vs outbound leads. For the penalties behind these rules, see TCPA violations and fines. To see how CallX works with final expense agents and agencies, visit the agents and agencies pages.

Frequently Asked Questions

What Is TCPA Consent?

It is the consumer's permission to receive calls the TCPA would otherwise restrict. For autodialed or prerecorded telemarketing calls to wireless numbers, and prerecorded telemarketing calls to residential lines, the FCC requires prior express written consent as defined in 47 CFR 64.1200(f)(9).

Is a Checkbox on a Lead Form Enough for TCPA Express Written Consent?

The FCC has said an electronic signature that complies with the E-SIGN Act, including a website form, can satisfy the written consent rule. The form still needs the required disclosures, the seller authorized to call, and the phone number. Whether a specific form qualifies is a question for counsel.

Does a Call Recording Prove Consent?

A recording proves what was said on that call. It does not show that the consumer gave written consent before an autodialed or prerecorded telemarketing call was placed. You need both the consent record and the call record.

Is the FCC's One-to-One Consent Rule in Effect?

No. The Eleventh Circuit vacated the one-to-one and "logically and topically related" restrictions on January 24, 2025. The remaining definition still requires the consent to authorize the seller that makes the calls.

Who Has to Prove TCPA Consent: The Agent or the Consumer?

The FCC said in its 2012 order that the seller bears the burden of demonstrating clear and conspicuous disclosure and unambiguous consent. Agents and agencies that act as the seller should keep records that can carry that burden.

This article is general education, not legal advice. It summarizes federal regulations as published in the eCFR in October 2026, the U.S. Code, FCC orders and a federal appeals court decision; state laws can add requirements. Confirm your consent and recordkeeping practices with counsel or your compliance team.

Sources

• 47 CFR 64.1200, TCPA delivery restrictions (FCC, eCFR, current as of October 2026)
• 47 U.S.C. 227, Telephone Consumer Protection Act (U.S. Code, 2022 edition, govinfo.gov)
• FCC 12-21, Telephone Consumer Protection Act of 1991 Report and Order, 77 FR 34233 (Federal Register, June 11, 2012)
• FCC 26-67, consent revocation Report and Order, 91 FR 67214 (Federal Register, October 26, 2026)
• Insurance Marketing Coalition Ltd. v. FCC, No. 24-10277 (11th Cir., January 24, 2025)
• 16 CFR 310.5, Telemarketing Sales Rule recordkeeping (FTC, eCFR, current as of October 2026)
• 28 U.S.C. 1658, Time limitations on the commencement of civil actions (U.S. Code, 2024 edition, govinfo.gov)
• 15 U.S.C. 1012, McCarran-Ferguson Act (U.S. Code, 2022 edition, govinfo.gov)
• "Follow the Lead" Workshop: Staff Perspective (FTC, September 2016)