What Counts as “Prior Express Consent” Under the TCPA Today?

March 17, 2026
Andrew Cove

Executive Summary: The TCPA restricts marketing calls and texts unless you have “prior express consent,” and in many cases, prior express written consent. The rules vary depending on whether you’re using regulated technology like autodialers or contacting numbers on the DNC list. Written consent must meet specific legal criteria and be documented. Businesses should regularly review their lead capture, call practices, and opt-out procedures to avoid exposure to fines or lawsuits.

The Telephone Consumer Protection Act (TCPA) has become one of the most common tools regulators and class-action lawyers use to go after telemarketers. And while the law is broad, there’s one thing that cuts through all of it: prior express consent. If you have it and can prove it, many TCPA claims fall apart. If you don’t, even one phone call or text can lead to fines or lawsuits.

But not all consent is created equal. Under today’s TCPA standards, what counts as “prior express consent” depends on what kind of communication you’re sending and what type of technology you’re using. The details matter. And assuming a contact form or checkbox is “good enough” can land you in trouble.

The Three Main TCPA Triggers to Understand

There are several ways to violate the TCPA, but most claims fall into one of three buckets:

  1. Calling numbers on the National Do Not Call (DNC) Registry: If someone adds their number to the national DNC list, you’re not allowed to call them for marketing purposes unless you have prior express written consent. To comply, businesses must buy the registry and scrub their call lists at least every 31 days. There’s a one-call “safe harbor” if you accidentally call a registered number, but a second call opens you up to litigation.
  2. Using regulated technology without consent: This includes autodialers, prerecorded voice messages, ringless voicemail drops, AI-generated voice, and similar tools. There’s no safe harbor here. Using this tech without prior express written consent is a violation from the first contact.
  3. Ignoring opt-out or do-not-call requests: If someone says “stop calling me” or “stop texting me,” you’re now required to honor that request within 10 business days (down from the previous 30). If you don’t, the clock starts ticking on a potential enforcement action.

Each of these triggers can lead to individual or class action lawsuits. That’s why having solid, documented consent matters more than ever.

What Counts as Prior Express Consent and What Doesn’t

Consent needs to be clear, documented, and obtained before the first call or message. And the type of consent required changes depending on what you’re doing:

  • For non-sales calls or texts (e.g., informational alerts), prior express consent is generally enough. That can be verbal or written.
  • For sales calls or texts using regulated technology (like autodialers or prerecorded voice), the law requires prior express written consent under 47 C.F.R. § 64.1200(f)(9).

That written consent must include:

  • A clear agreement to receive autodialed/prerecorded marketing messages
  • A signature (which can be digital)
  • A statement that the person is not required to provide consent as a condition of purchase

Pre-checked boxes, vague language, or implied consent aren’t enough. Regulators and courts look for specific wording. If it’s missing, the consent doesn’t count.

Why You Need to Track and Store Consent Records

Even if you collected proper consent, you still need to prove it. If a complaint or class action comes your way, it’s not enough to say “they signed up.” You need to show exactly when, how, and what they agreed to.

That means:

  • Retaining screenshots or archived versions of web forms
  • Keeping IP address and timestamp logs
  • Making sure your lead vendors are providing documented proof of consent

If your vendor’s lead was obtained improperly, you’re still liable. The burden is on the caller.

Don’t Rely on “Good Enough” Consent

With TCPA enforcement on the rise, the best protection is to make sure your consent process is airtight. That means reviewing your intake forms, scripting, lead generation methods, and outbound tools to confirm everything lines up with current regulations.

When in doubt, err on the side of over-documenting. Having a clear paper trail is your best defense.

If you want a second look at your consent practices or need help updating your compliance process, Cove Law, PA can help. We’ve worked with companies across the country to review consent language, vet third-party vendors, and reduce TCPA risk before the lawsuits show up. Let’s talk.

FAQs

1. What is the difference between prior express consent and prior express written consent?

Prior express consent can be verbal or written and typically applies to non-marketing communications. Prior express written consent is required for marketing calls/texts using autodialers, prerecorded messages, or other regulated technologies.

2. Do I need consent to call a business number?

Yes. If you’re using regulated technology or the number is on the National DNC list and you’re calling for marketing purposes, you may still need consent.

3. Is a pre-checked box on a website enough for consent?

No. TCPA regulations require active, clear consent. Pre-checked boxes or vague language do not meet the standard for prior express written consent.

4. How often do I need to scrub my calling lists?

You must scrub your calling lists against the National DNC Registry every 31 days to qualify for safe harbor protections.

5. What happens if I get it wrong?

Violating the TCPA can result in fines of $500–$1,500 per call or text. Multiple violations can lead to class action lawsuits with significant financial exposure.

Andrew Cove
Latest posts by Andrew Cove (see all)