FTC Telemarketing Sales Rule prerecorded calls: consent rules explained

Last updated 2026-07-09

What is the FTC Telemarketing Sales Rule and how does it cover prerecorded calls?

The Telemarketing Sales Rule (TSR) is a federal regulation the Federal Trade Commission issued under the Telemarketing and Consumer Fraud and Abuse Prevention Act of 1994. It lives at 16 CFR Part 310. The rule has been amended several times, most recently with a prerecorded-call update that took effect September 1, 2009 ^[1].

The TSR covers any plan, program, or campaign to sell goods or services through interstate phone calls. That includes outbound calls your team makes and inbound calls consumers place in response to direct-mail or broadcast ads. It does not cover purely intrastate calls, calls from financial institutions regulated under other federal law, or calls from certain nonprofits under certain conditions ^[2].

The prerecorded-call section is what trips most outbound teams. Section 310.4(b)(1)(v) of the TSR says it is an abusive telemarketing act to initiate any outbound call that delivers a prerecorded message to induce a purchase, unless the seller has the consumer's written agreement to receive such calls ^[1]. The rule uses "written agreement" in a specific technical sense, and many teams get that sense wrong.

Some people confuse this with the FCC's Telephone Consumer Protection Act (TCPA) rules, which sit at 47 USC 227 and carry their own consent framework. The FTC enforces the TSR. The FCC enforces the TCPA. Both can hit the same call. If you place prerecorded telemarketing calls, you have to satisfy both agencies at once, because their standards are not identical ^[3].

What exact consent is required under the TSR for prerecorded telemarketing calls?

The TSR's consent bar for prerecorded calls is high. Under 16 CFR 310.4(b)(1)(v)(A), the consumer must have "provided the seller with the consumer's telephone number and given express written agreement to receive prerecorded calls from that seller." Three elements do the work here ^[1].

First, written form. Oral consent is not enough. The agreement has to be in writing or, under the E-SIGN Act, in a verifiable electronic form like a check-box on a web form or an electronic signature. A recorded verbal yes will not satisfy the TSR's prerecorded-call consent rule.

Second, the agreement has to be express and specific to prerecorded calls. A general "I agree to be contacted" clause buried in terms of service almost certainly fails. The FTC has said in its guidance that consent must reach prerecorded calls, not contact in the abstract ^[2].

Third, the consumer has to provide their phone number as part of the consent flow. You cannot pull a number from a database, match it to a name, and then claim the consumer gave written consent when they signed up for something else.

One more requirement many teams miss. Even with valid consent, the prerecorded message has to include an automated, interactive opt-out mechanism the consumer can use during the call ^[1]. No real-time keypress opt-out, no compliant call. Doesn't matter how clean your consent capture was.

How is TSR prerecorded-call consent different from TCPA consent?

These two frameworks chase the same goal but split on scope, enforcement, and procedure. Here is the side-by-side ^[1][3][4].

Feature	FTC TSR (16 CFR 310)	FCC TCPA (47 USC 227)
Regulator	FTC	FCC
Consent type required	Prior express written agreement	Prior express written consent (2012 rule)
Applies to	Interstate telemarketing calls	All autodialed/prerecorded calls to any consumer
DNC registry	National DNC maintained by FTC/FCC jointly	Honors same National DNC
Healthcare exemption	Limited	Broader for certain healthcare messages
Private right of action	No (FTC sues; states can sue)	Yes ($500 to $1,500 per call)
Civil penalty per violation	Up to $53,088 (adjusted for inflation)	Up to $1,500 per willful violation via private suit

Here is the practical read. TCPA is often scarier for small teams because any single consumer can sue without the FTC lifting a finger, and class actions are routine. The TSR has no private right of action, so enforcement runs through the FTC or state attorneys general ^[3][4]. But $53,088 per call from the FTC stacks up fast.

The FCC's 2012 amendment to the TCPA rules tightened consent for prerecorded and autodialed calls to mirror much of what the TSR already demanded. The FCC's 2012 Report and Order states that prior express written consent must include a clear and conspicuous disclosure that the consumer authorizes the seller to deliver prerecorded calls using an automatic telephone dialing system ^[4]. Build one consent form to cover both, and make sure it hits every element of each standard.

Which calls are exempt from the TSR prerecorded consent rule?

The TSR carries several exemptions worth knowing cold. Scope matters. Some teams over-restrict themselves and lose revenue. Some under-restrict and walk into a penalty ^[1][2].

The existing business relationship (EBR) exemption is the one people misread most. Buying from you before does not buy you a free pass on prerecorded sales calls. The EBR exemption under the TSR is narrower than most assume. It does not clear prerecorded calls that make a new sales pitch unless you hold a specific written agreement of the kind described above.

These calls fall outside TSR jurisdiction entirely or outside the prerecorded-message prohibition ^[1]:

• Calls not made to induce a purchase of goods or services. Pure charitable solicitations get different treatment, but commercial solicitations are covered.
• Calls to businesses in most cases. The TSR aims at calls to residential consumers. B2B calls generally sit outside TSR scope, though the FCC's TCPA has its own B2B treatment.
• Calls by or on behalf of tax-exempt nonprofits when the organization itself is the caller.
• Calls to consumers who have an established business relationship with the seller and gave the seller their phone number, even without a separate prerecorded-call agreement, but only for non-sales informational calls. The second the call turns to selling, you are in commercial territory.

Inbound calls cause their own confusion. If a consumer calls you in response to an ad and your system answers with a prerecorded message, that is usually not an "outbound telephone call" under the TSR, so it gets treated differently. But if your system then fires a callback, or if the call is really an outbound solicitation in disguise, you are back in scope.

Do not assume you fit an exemption without reading the statutory language. The FTC's published TSR guidance is free on the FTC's site ^[2].

What are the penalties for TSR prerecorded call violations?

TSR penalties are civil, not criminal, and they are real money. The FTC can seek civil penalties up to $53,088 per violation, and each individual call can count as its own violation ^[5]. The FTC last adjusted that figure in 2023 under the Federal Civil Penalties Inflation Adjustment Act Improvements Act of 2015, which requires annual inflation bumps ^[5].

The FTC can also seek injunctive relief, a court order telling your company to stop. Break the injunction and you are in contempt, which comes with its own escalating sanctions.

State attorneys general can bring their own TSR actions under the Telemarketing and Consumer Fraud and Abuse Prevention Act. Several have, often coordinating with the FTC on multi-state investigations. A state action runs parallel to a federal one, not instead of it.

The FTC has brought prerecorded-call cases against health insurance telemarketing operations that used prerecorded calls without consent, seeking penalties in the millions after counting individual calls as separate violations ^[6]. For high-volume dialers, these are not hypothetical risks.

The part teams underestimate: FTC orders usually pack in ongoing compliance monitoring, third-party audits, and record-keeping mandates that cost far more than the fine over the five-to-ten year life of the order. The consent decree dwarfs the check.

How should you document and store TSR-compliant prerecorded-call consent?

Consent you can't prove is consent you don't have. The TSR requires you to keep records of the written agreement for 24 months from the date it was obtained ^[1]. That is the floor. Most seasoned compliance teams hold records longer because litigation can stretch well past two years.

What to store: the timestamp of the opt-in, the URL or location of the form, the exact language of the consent disclosure the consumer saw, the consumer's name and phone number as submitted, and the IP address if it came from an online form. If you use a check-box, capture that the box was checked and not pre-checked. Pre-checked boxes do not count as express written consent under the TSR or the TCPA.

For electronic records, the E-SIGN Act (15 USC 7001) makes electronic signatures and records legally equal to paper, as long as the consumer affirmatively agreed to transact electronically ^[7]. Your web form flow should document that the consumer could read the disclosure and actively chose to opt in.

Here is a gap I see constantly. The CRM stores the "opted in" flag but not the disclosure text the consumer actually saw. Disclosures change. If a consumer opted in under version 1 of your form and you are now on version 4, your record needs to show which version they agreed to, more than that they agreed to something.

One tool worth knowing about: LeadCompliant offers a free consent audit checklist that runs the TSR and TCPA record-keeping fields side by side, so teams can spot documentation gaps before an inquiry lands.

Does the FTC's Do Not Call registry overlap with TSR prerecorded call rules?

Yes. They stack on top of each other instead of replacing each other. The National Do Not Call Registry is maintained jointly by the FTC and FCC and is codified under the TSR at 16 CFR 310.4(b)(1)(iii) ^[8]. If a consumer's number sits on the DNC registry, you generally cannot call them for telemarketing, no matter what prerecorded consent you hold.

The DNC rule and the prerecorded-consent rule are separate duties. Even with written consent to receive prerecorded calls, if the consumer later registers on the DNC, that registration reads as a revocation of consent for future calls. The FTC has confirmed this in its guidance.

There is a narrow EBR exception. Under the TSR, an EBR can allow calls to DNC-registered numbers for up to 18 months after the consumer's last purchase or transaction, or for 3 months after the consumer made an inquiry ^[8]. But the EBR does not waive the prerecorded consent rule. You still need written consent to run a prerecorded message, even inside the EBR window.

Scrubbing your call lists against the DNC registry is a separate job from capturing prerecorded consent. Both have to happen before every campaign. The FTC gives telemarketers access through the registry's subscription service. Registrations cost money past the first five area codes, which are free ^[8].

How do the TSR prerecorded call rules apply to ringless voicemail?

Ringless voicemail (RVM) sits in genuinely unsettled ground under both the TSR and the TCPA. An RVM drops an audio message straight into a consumer's voicemail without the phone ringing. The technology skips the phone and connects to the carrier's network.

The FTC has not settled, through formal rulemaking or definitive guidance, whether RVM counts as an "outbound telephone call" under the TSR. The FCC did issue a declaratory ruling in 2023 saying RVM to cell phones is a "call" under the TCPA and requires prior express written consent, which closed a loophole some vendors had been working ^[9].

Here is the honest read. If you drop RVMs in a telemarketing context, treat them as prerecorded calls that need full TSR and TCPA compliance. The risk of betting RVM is exempt runs far higher than the cost of building real consent capture. The FTC has been aggressive on prerecorded-message cases, and "the phone didn't ring" is unlikely to move an enforcement attorney.

Some AI cold calling platforms now blend live-transfer and RVM features. Each leg of those calls needs its own compliance analysis, because the technology does not change the underlying legal duty.

What must a TSR-compliant prerecorded message actually say?

Perfect consent still is not enough. The content of your prerecorded message has to clear TSR disclosure requirements too. Under 16 CFR 310.4(b)(1)(v)(B) and related provisions, a compliant prerecorded telemarketing message has to ^[1]:

1. Promptly identify the seller's name at the start of the call. 2. State that the purpose is telemarketing. 3. Include a toll-free number the consumer can call to be placed on the seller's do-not-call list, available 24 hours a day, 7 days a week. 4. Include an interactive opt-out mechanism that works during the call (usually keypress options) so the consumer can opt out without waiting for a live agent.

The opt-out mechanism is where teams fall down. A message that says "press 9 to be removed," where pressing 9 dumps the caller into a queue that never picks up, is not compliant. The mechanism has to work, record the opt-out right away, and honor it.

The FTC also requires you to keep records of any opt-outs received through these mechanisms for 24 months, the same window as consent records ^[1]. Wiring your prerecorded-call platform to your CRM so opt-outs record automatically is the only way to manage this at volume.

Under the TCPA, the FCC's 2012 order adds a requirement that the consent disclosure specifically mention the consumer will get calls "using an automatic telephone dialing system or prerecorded or artificial voice." The FCC's 2012 Report and Order states: "We conclude that prior express written consent must include a clear and conspicuous disclosure informing the person signing that by executing the agreement, such person authorizes the seller to deliver or cause to be delivered to the signatory telemarketing calls using an automatic telephone dialing system or an artificial or prerecorded voice" ^[4].

How have courts and the FTC interpreted TSR prerecorded consent in recent enforcement actions?

The FTC has brought dozens of prerecorded-call actions under the TSR. A few patterns matter.

The agency counts each prerecorded call made without consent as a separate violation. In its actions against robocall and health insurance telemarketing operations, the FTC multiplied the per-call penalty across millions of calls to reach liability figures in the hundreds of millions, though final settlements often land lower after negotiation ^[6]. The lesson: volume is the enemy. A campaign of 500,000 compliant calls is fine. A campaign of 500,000 non-compliant calls is existential.

The FTC has also gone after lead generators who sold consumer phone numbers to telemarketers when the consumers never consented to calls from those specific sellers. The TSR requires that consent name the specific seller, or at minimum a specific category and context. A consumer who opted in to "hearing from insurance providers" has not necessarily consented to every insurance seller who buys that lead.

The FTC's 2021 enforcement policy statement made clear that the agency reads "written agreement" strictly, and that consent pulled through deceptive means, like dark patterns on web forms, is not valid consent even if a check-box got clicked ^[10].

Courts have also addressed reassigned numbers. Valid consent from Person A for a given number does not follow the number to Person B after reassignment. The TCPA handles this through the FCC's Reassigned Numbers Database, which launched in 2021 ^[9]. The TSR has no equivalent database mandate, but the logic holds: calling someone who never consented is a violation regardless of your prior relationship with the number's old holder.

For a wider grounding in how these rules fit cold calling generally, the framework is layered but consistent across the FTC and FCC.

What should a compliant TSR prerecorded call consent form look like in practice?

A consent form that actually holds up under the TSR and TCPA at once does not have to be complicated. It does have to be specific. Here is what it needs to cover, in plain terms.

The disclosure should sit right next to the field where the consumer types their phone number, not on a terms of service page linked from the footer. Courts are skeptical of consent buried in long legal documents nobody reads.

The consent language should read something like: "By entering your phone number and clicking [button text], you agree that [Seller Name] may contact you at the number provided using prerecorded messages and automatic telephone dialing systems for [specific purpose, e.g., insurance quotes]. This consent is not required to make a purchase. You may revoke consent at any time by calling [toll-free number]."

Every clause there earns its place. The seller name is specific. The technology is named (prerecorded messages, ATDS). The purpose is named. There is a statement that consent is not a condition of purchase, which the FCC's 2012 order requires ^[4]. And there is a revocation path.

If you run a cold calling team alongside your prerecorded campaigns, your consent capture needs to cover human-dialed and prerecorded calls separately when the risks differ, because the legal standards are not identical.

Run your existing consent forms through the LeadCompliant free consent checker to see which TSR and TCPA elements are missing before your next campaign. Fixing a form costs nothing. Defending a class action runs into the hundreds of thousands before a case even reaches trial.

How do you handle consent revocation for TSR prerecorded calls?

Consent can be taken back, and both the TSR and the TCPA require you to honor a revocation promptly. The TSR requires any opt-out received through your prerecorded message's interactive mechanism to be honored within a reasonable time, read in practice as immediately and no later than the next business day ^[1].

The FCC's 2024 one-to-one consent and revocation order tightened this further, stating that consumers can revoke consent through any reasonable means: replying STOP to a text, pressing the keypad opt-out during a call, telling an agent verbally, or sending a written request ^[9]. You cannot box revocation into a single channel.

Revocation records live alongside consent records. If a consumer revokes and you call again, the original consent is no defense. The call after the revocation is a fresh violation.

In practice, your prerecorded-call platform, your CRM, your DNC suppression list, and your dialer all need to talk in real time. Siloed systems, where an opt-out the dialer captures takes 48 hours to reach the suppression list, are a serious operational risk. Nobody in an enforcement action accepts "our system was slow" as a defense for a post-revocation call.

For teams building out their processes, understanding what is cold calling in sales from a legal standpoint, including how human and automated outreach blend, is useful grounding before you design consent flows.

Frequently asked questions

Does the FTC TSR prerecorded call consent rule apply to B2B calls?

Generally no. The TSR aims at calls to consumers, which the rule defines as natural persons. Calls to businesses usually sit outside TSR jurisdiction for the prerecorded consent requirement. But if you reach a business owner on a residential line, or the business line is also a personal cell, the TCPA may still apply on its own. Verify the nature of the number before treating a call as purely B2B.

Can an existing customer relationship substitute for written consent under the TSR?

No. The TSR's prerecorded consent rule has no existing business relationship exception for prerecorded sales calls. An EBR can let you call a DNC-registered number with a live agent for up to 18 months after the last transaction, but to run a prerecorded message for sales, you need separate written consent regardless of any prior relationship. This is one of the most common misreads in outbound compliance.

What is the difference between the FTC and FCC rules on prerecorded calls?

The FTC enforces the Telemarketing Sales Rule under 16 CFR Part 310. The FCC enforces the TCPA under 47 USC 227. Both require prior express written consent for prerecorded telemarketing calls. The TCPA adds a private right of action ($500 to $1,500 per call) the TSR does not have. The FCC's rules also explicitly require disclosing ATDS use in the consent form. You have to satisfy both sets of rules at once.

How much can the FTC fine you per prerecorded call violation?

Up to $53,088 per violation as of 2023, with each non-compliant call counted separately. That figure adjusts annually for inflation under the Federal Civil Penalties Inflation Adjustment Act. A campaign of 10,000 non-compliant prerecorded calls creates theoretical exposure above $530 million, though actual settlements depend on factors like whether the violation was willful, the company's size, and cooperation with the FTC.

Does a consumer clicking a checkbox on a website count as written consent under the TSR?

Yes, if the form is built right. The E-SIGN Act makes electronic signatures and opt-ins legally equal to paper signatures. The key points: the checkbox must not be pre-checked, the disclosure must appear clearly next to the checkbox, the disclosure must name the seller and the type of calls, and you must store the timestamp, IP address, and exact disclosure language the consumer saw at opt-in.

What does the FTC require inside a prerecorded telemarketing message?

The message must promptly identify the seller's name, state that the purpose is telemarketing, include a working toll-free number for DNC opt-out requests that operates 24/7, and include an interactive keypad opt-out that works during the call. The opt-out has to actually function. A keypress option that routes to a dead queue is not compliant even if the prompt exists.

Does the TSR prerecorded call rule apply to text messages?

The TSR mainly addresses voice calls. Text messages (SMS and MMS) used for telemarketing are governed more directly by the FCC's TCPA rules under 47 USC 227, which has treated texts as calls since the FCC's 2003 declaratory ruling. The FTC does have authority over deceptive marketing, including by text, but the TSR's specific prerecorded-message framework is written around voice calls, not texts.

How long do you have to keep TSR consent records?

The TSR requires you to keep records of the consumer's written consent agreement for at least 24 months from when it was obtained. Most compliance attorneys recommend keeping them longer, because TCPA class actions can be filed within four years of the violation under the federal statute of limitations, and discovery can demand records going back years before a suit is filed.

Can a third-party lead generator's consent satisfy the TSR written agreement requirement?

Only if the consent specifically names your company as the seller who will make the calls, or names a category narrow enough to identify your company. Generic consent to 'insurance providers' obtained by a lead generator likely does not satisfy the TSR requirement for prerecorded calls. The FTC has taken action against sellers who relied on lead-gen consent without verifying that consumers specifically agreed to calls from them.

If a consumer asks to be called back, does that count as TSR prerecorded consent?

A verbal or informal callback request does not meet the TSR's written agreement requirement for prerecorded calls. The consumer may have invited a call, but that invitation alone does not authorize a prerecorded message. You would need written consent to run a prerecorded message for that callback. A live-agent return call to someone who asked for one is lower risk, but prerecorded delivery still requires the written agreement.

Does the National Do Not Call Registry block prerecorded calls even with consent?

Yes. DNC registration is generally treated as a revocation of consent for future telemarketing calls. Even if a consumer earlier gave you written consent for prerecorded calls, once they register on the National DNC, you have to stop calling them. The EBR exception allows calls to DNC-registered numbers within 18 months of a transaction, but that exception does not override the prerecorded consent requirement for sales messages.

Are healthcare prerecorded calls exempt from TSR consent rules?

The TSR's healthcare exemptions are narrower than many assume. If the call is a commercial telemarketing call selling a product or service, it is covered regardless of healthcare context. The HIPAA and TCPA frameworks have some overlapping exemptions for informational healthcare calls, but a call soliciting the purchase of health insurance or supplements is a sales call under the TSR and requires full prerecorded consent compliance.

What happens if a consumer's phone number was reassigned after they gave consent?

Consent does not follow the number. If Person A consented and the number was reassigned to Person B, calling Person B with a prerecorded message is a violation. The FCC launched the Reassigned Numbers Database in 2021, which telemarketers can query before each call to check whether a number changed hands since consent. Using the database gives a limited safe harbor under the TCPA but does not erase all risk.

Can you use prerecorded calls for political or charitable solicitation under the TSR?

The TSR does not govern purely political calls, which sit outside FTC jurisdiction. Charitable solicitation calls by or on behalf of tax-exempt nonprofits have limited TSR exemptions. But if a for-profit company calls on behalf of a charity for compensation, TSR rules generally apply. Prerecorded political calls are separately regulated at the state level in many states, and the TCPA has its own rules for calls to cell phones regardless of content.

Sources

1. FTC, 16 CFR Part 310 Telemarketing Sales Rule (full regulatory text): TSR requires prior express written agreement for prerecorded telemarketing calls, an interactive opt-out mechanism, and retention of consent records for 24 months
2. FTC, Complying with the Telemarketing Sales Rule guide: FTC guidance explains exemptions, scope limitations, and written agreement requirements for prerecorded calls
3. FTC, Telemarketing and Consumer Fraud and Abuse Prevention Act (15 USC 6101-6108): The Act grants FTC rulemaking authority over interstate telemarketing and states may bring civil actions for TSR violations
4. FTC, Civil Penalty Adjustments under the Inflation Adjustment Act (Federal Register notice): TSR civil penalty per violation is $53,088 as of the 2023 inflation adjustment
5. FTC, Press Releases on enforcement actions against health insurance telemarketing operations: FTC has brought enforcement actions against telemarketers using prerecorded calls without consent, counting each call as a separate violation to calculate aggregate liability
6. Electronic Signatures in Global and National Commerce Act (E-SIGN), 15 USC 7001: E-SIGN Act validates electronic signatures and records as legally equivalent to paper signatures for consent purposes
7. FTC, National Do Not Call Registry Information for Telemarketers: DNC registry maintained jointly by FTC and FCC; first five area codes free; EBR exception allows calls to DNC numbers within 18 months of last transaction or 3 months after inquiry
8. FTC, Policy Statements on deceptive and unfair practices in digital marketing: FTC interprets written agreement requirement strictly; consent procured through dark patterns or deceptive web form design does not constitute valid consent