DNC registry validity: how long registrations last and what they mean for callers

Last updated 2026-07-09

How long does a DNC registry registration actually last?

Forever. A number added to the National Do Not Call Registry in 2003 is still protected today, and it will stay protected until the consumer removes it or the number gets disconnected and reassigned. That permanence came from the Do-Not-Call Improvement Act of 2008 ^[1]. Before that law, registrations expired after five years and consumers had to sign up again. The FTC's rules under 16 CFR Part 310, the Telemarketing Sales Rule, now require no re-registration at all.

The FTC has been plain about the effect. Once a number is registered, it stays registered. If a number gets reassigned to a new subscriber, the new owner inherits the old registration. So a "new" number in your dataset is not automatically a clean number.

Your scrub obligation never goes away. You can't treat old DNC data as stale on the theory that those registrations probably lapsed. They didn't. The list only grows.

As of the FTC's most recent Data Book, more than 249 million phone numbers sit on the National Do Not Call Registry ^[2]. It has grown every year since 2003, and permanent registration is the main reason why. See our overview of the do not call list for the full history.

What is the National DNC Registry and who runs it?

The National Do Not Call Registry is a federal database run by the Federal Trade Commission at donotcall.gov ^[2]. Congress created it through the Do-Not-Call Implementation Act of 2003, and the FTC wrote the rules under the Telemarketing Sales Rule (TSR), 16 CFR Part 310. The FCC enforces a parallel obligation under the TCPA, 47 USC 227, with its own rules at 47 CFR 64.1200.

Two agencies, one list. The FTC handles consumer registrations and telemarketer access to the data. The FCC goes after companies it regulates, including common carriers and anyone making autodialed or prerecorded calls. Both can act against the same caller for the same conduct, though in practice they tend to split cases by industry.

You get into the registry as a telemarketer through the business portal at donotcall.gov. The FTC charges an annual fee per area code of data. Under the current fee schedule, the first five area codes are free, each additional area code costs $69 per year, and access to all area codes is capped at $19,834 ^[2]. Those figures adjust for inflation from time to time.

The FTC do not call list page has current fees and the registration portal for both consumers and businesses.

How often do telemarketers have to scrub against the DNC registry?

Every 31 days. The TSR at 16 CFR 310.4(b)(3)(iv) requires telemarketers to use a version of the registry that is no more than 31 days old when they call ^[3]. This is a rolling window, not a calendar month. If you pulled your data on June 1, you need fresh data by July 2, weekend or billing cycle be damned.

The FCC's TCPA rules match this. 47 CFR 64.1200(c)(2) requires callers to honor DNC registrations using registry data downloaded within the prior 31 days ^[7]. Some older FCC guidance mentioned 30 days, but the operative rule and the FTC's reading line up at 31.

Here's the detail people miss. The obligation attaches to the numbers you're about to call, not the numbers you called last month. Build a new lead list today, scrub it today. The 31-day clock resets each time you pull fresh data, and you need to prove you pulled it. Keep your download receipts or API access logs with timestamps. Regulators ask for exactly those records.

Some teams scrub weekly or daily because list data moves. That's not required. It's reasonable at high volume. For a small team calling a few hundred numbers a day, a documented 31-day scrub is fine.

For the mechanics of pulling the data, see how do I get the do not call list.

What happens if you call a registered number? What are the penalties?

It gets expensive fast. The FTC can seek civil penalties up to $51,744 per violation under the TSR ^[4]. The FCC can impose separate forfeitures under the TCPA. Private plaintiffs can sue for $500 per violation and up to $1,500 per willful violation under 47 USC 227(c)(5) ^[5]. Those penalties stack. One campaign touching thousands of registered numbers can run into the tens of millions.

The FTC's cap adjusts for inflation under the Federal Civil Penalties Inflation Adjustment Act. As of 2024, the TSR civil penalty is up to $51,744 per violation ^[4]. Each call to a registered number counts as a separate violation. A continuing violation can count per day.

The enforcement record shows the scale. In 2023 the FTC obtained a $225 million judgment against a health insurance telemarketer, though collection in cases like that is often partial ^[6]. On the FCC side, penalties for robocall and call-authentication failures have run into the millions, so the two agencies both bring real weight.

Private class actions are the daily threat for small teams. A class of 10,000 people called at $500 each is $5 million in statutory damages before any willfulness multiplier. Courts have certified TSR and TCPA classes where the calling lists were uniform enough.

Safe harbor exists, and it's narrow. Under 16 CFR 310.4(b)(3)(iii), you can avoid TSR liability if you accessed the registry within 31 days, kept written DNC policies, trained your people, and can show the call was an error ^[3]. "I didn't know" is not safe harbor. "I had a documented program and this was an isolated mistake" might be.

Are there any exemptions to the DNC registry that callers can rely on?

Yes, several. Each one is narrower than people assume.

Established business relationship (EBR). Under the TSR and TCPA, a seller can call a registered number if the person bought something within the past 18 months, or made an inquiry within the past three months ^[3]. The window runs from that last purchase or inquiry and does not renew on its own. If the person asks you to stop, the EBR ends that second. And the EBR belongs to the seller, not to a lead generator or marketing partner.

Express written consent. If a consumer gives prior express written consent to receive telemarketing calls from your company, you can call even if they're registered. Under the FCC's rules for autodialed calls, the consent has to name your company specifically ^[7]. A generic "I agree to be contacted by partners" on a web form does not count.

Nonprofits. Tax-exempt nonprofits calling on their own behalf generally sit outside the TSR's DNC provisions. Political calls are similarly exempt at the federal level, though state rules vary.

Surveys. Calls made only to run a survey aren't telemarketing under the TSR, as long as nobody tries to sell on the call.

The EBR is the exemption people abuse most. Lead sellers keep trying to hand EBR credit to a third party, and that fails every time. The FTC and FCC have said it clearly: the EBR belongs to the entity that had the relationship, not to whoever bought the lead.

State lists often set stricter exemption rules. Florida's do not call list, for one, uses different EBR terms than the federal registry.

How soon after registering does a number become protected?

31 days. Consumers who add their number to the National Do Not Call Registry get protection within 31 days of signing up ^[2]. During that first 31-day window, a telemarketer with a valid registry copy won't see the number yet, so calls in that window generally don't create liability.

After those 31 days, the number shows up in registry data. Any telemarketer who downloads a fresh copy after that point will see it. Call it without an exemption, and that's a violation.

The FTC's consumer guidance says registration "usually takes up to 31 days" to go into effect ^[2]. It can happen faster. Don't assume any lag longer than 31 days, and don't assume the lag protects you. Pull fresh data on schedule.

This delay is also why your scrub cadence has to run right before a campaign, not after. Downloading the registry on the day you launch a campaign that took three weeks to build is fine, because what matters is that the data is current at the moment you dial.

Does the DNC registry cover cell phones and text messages?

Yes on cell phones, and text messages get treated as calls. Consumers can register mobile numbers on the National DNC Registry, and millions have. The registry itself doesn't sort landlines from mobile numbers. But the strongest protection for a cell phone runs through the TCPA separately.

The TCPA at 47 USC 227(b) bans autodialed or prerecorded calls to cell phones without prior express consent, whether or not the number is on the registry ^[5]. So mobile numbers carry two layers: registry protection and the autodialing ban. The DNC registry matters most for manually dialed telemarketing to mobile numbers.

Text messages count as calls under the TCPA. An unsolicited marketing text to a registered cell number can break both the autodialing rules and the DNC provisions. The FCC's 2024 rules pushed consent further, requiring one-to-one consent for autodialed marketing texts, which killed the old shared-consent lead model for many senders.

Treat the registry as the floor for mobile compliance, never the ceiling. Scrubbing it is necessary and nowhere near enough for a texting campaign. More on this at mobile phone do not call list.

How do state DNC lists interact with the national registry?

The federal registry overrides weaker state protections but leaves stronger ones in place ^[8]. Several states run their own DNC lists with their own rules, and a seller calling into those states has to satisfy both federal and state requirements at once.

The table below lines up the federal rules against a few state programs:

Jurisdiction	Registry	EBR window	Re-registration required	Penalty per violation
Federal (FTC/FCC)	National DNC Registry	18 months (purchase), 3 months (inquiry)	No (permanent since 2008)	Up to $51,744 (FTC TSR)
Florida	Florida Do Not Call list	18 months	No	Up to $10,000 (state)
Indiana	Indiana No Sales Solicitation list	18 months	No	Up to $10,000 (state)
Pennsylvania	PA Do Not Call list	12 months	No	Up to $1,000 per day
Texas	Texas No-Call list	Separate registration required	No	Up to $10,000 per violation

Sources: FTC ^[2], state AG websites ^[8]. State penalty figures change, so verify against the current state statute before you rely on any number here.

For a national calling program, the practical result is that you may need to scrub against multiple lists. Some data vendors bundle the national registry and all active state lists into one product. That's worth paying for if you call across state lines.

See the Indiana do not call list and do not call list PA pages for state-specific detail.

What records do you need to keep to prove DNC compliance?

Keep four things, for 24 months. The TSR requires sellers and telemarketers to retain records of their registry subscriptions, download dates, internal DNC lists, and calling lists for 24 months ^[3]. The FCC expects similar records under TCPA enforcement. When they investigate, regulators look for proof you subscribed, proof you downloaded on time, proof the number wasn't on the list when you called it, and proof you had written DNC policies.

Written policies are a formal requirement under the TSR safe harbor, not a nice-to-have. The policy has to cover how you honor DNC requests from consumers who call in, how you maintain your internal DNC list, and how you train employees on all of it.

Your internal DNC list carries as much weight as the national scrub. If a consumer tells your agent to never call again, that number goes on your internal list right then. The TSR requires you to honor internal requests within the entity that got the request. Calling that number again, even days later, is a violation whether or not the number sits on the national registry.

A basic compliance stack for an outbound team: a documented scrub schedule, download receipts stored with timestamps, a live internal DNC file agents can add to on the spot, and a quarterly review of policies and training records. LeadCompliant's free compliance kit has template versions of these if you want a starting point.

To report violations you've been hit with, see do not call list report.

How do you register a number on the DNC registry, and can you remove one?

Consumers register at donotcall.gov or by calling 1-888-382-1222 from the number they want listed ^[10]. Registration is free and takes effect within 31 days. You can add up to three numbers per visit on the website, with no cap on total registrations per person.

Removal is possible too. A consumer can pull a number voluntarily at donotcall.gov. Numbers also drop off automatically when they're disconnected and stay inactive long enough to be treated as reassigned. The FTC has never published a precise inactivity threshold for that automatic removal, which leaves callers guessing about numbers they think are dead.

Reassignment is a real liability trap. Call a number that a previous owner registered, before the current owner has removed it, and you've still called a registered number. Some vendors sell reassigned-number databases alongside DNC scrubbing, which helps but doesn't fully close the gap. The FCC set up the Reassigned Numbers Database (RND) and opened subscriptions in 2021 to attack this exact problem ^[7].

You can't register a business number. The registry is for residential lines and personal cell phones used for personal purposes. Commercial numbers aren't eligible.

For more on the do not call list number and how registration works from both sides, that resource covers consumers and businesses.

What is the difference between the national DNC registry and a company's internal DNC list?

They're two separate obligations that work together. The national registry is government-run and covers calls from every telemarketer unless an exemption applies. A company's internal DNC list is self-maintained and covers that one company's calls to people who told it to stop.

Under 47 CFR 64.1200(d) and the TSR's parallel provision, any company making more than one telemarketing call per quarter has to keep a written internal DNC policy and honor requests to go on its internal list ^[7]. The consumer doesn't need to be on the national registry for this to bite. Someone says "stop calling me," you call again, that's a violation regardless of registry status.

The internal-list rule is older than the national registry. It came out of the FCC's 1992 TCPA rulemaking. The national registry showed up in 2003 and added a second layer on top.

For companies buying leads, this gets messy. If a consumer opted out from one company in your corporate family, does the opt-out reach your entity? The FTC's general position is that the opt-out applies at the seller level, not the whole corporate family, but plaintiff attorneys push for the broader reading. When in doubt, honor the opt-out across entities.

A good dnc registry program treats internal DNC maintenance as seriously as the national scrub, because internal-list violations are often easier for plaintiffs to prove than registry violations.

Is the DNC registry permanent protection, or can telemarketers challenge a registration?

It's permanent, and telemarketers can't challenge it. No appeal process, no expiration, no way for a seller to petition to remove a number. A number comes off only if the consumer removes it or it gets reassigned through disconnection.

The Do-Not-Call Improvement Act of 2008 said so directly. The Act told the FTC to end the re-registration requirement and keep numbers on the registry indefinitely ^[1]. Congress pointed to consumer frustration with re-registering as the reason.

Permanence matters for your budget. The list grows and never shrinks in any meaningful way, because new registrations pour in far faster than removals. As of the FTC's 2023 data, the registry holds more than 249 million numbers ^[2]. If you pay per area code and keep expanding your calling territory, your scrub costs trend up over time.

For teams working under the government do not call list framework, permanence also flattens the playing field. No competitor can "wait out" a consumer's registration. Everyone calling that number faces the same wall.

Frequently asked questions

Do DNC registrations expire?

No. Since the Do-Not-Call Improvement Act of 2008, registrations on the National Do Not Call Registry are permanent. The original five-year expiration was eliminated by Congress because re-registration burdened consumers. A number registered in 2003 is still protected today unless the consumer removed it or the number was disconnected and reassigned to a new subscriber.

How long does it take for a new DNC registration to take effect?

Usually 31 days. The FTC says new registrations go into effect within 31 days of the registration date. During those first 31 days, the number may not yet appear in the registry data telemarketers download. After 31 days pass, any telemarketer downloading a current copy will see the number, and calling it without an exemption becomes a violation.

How often do telemarketers have to scrub their lists against the DNC registry?

Every 31 days. Both the FTC's Telemarketing Sales Rule (16 CFR 310.4) and the FCC's TCPA rules (47 CFR 64.1200) require telemarketers to use registry data no older than 31 days when calling. It's a rolling window, not a calendar month. Log your download dates and keep records for 24 months in case of an enforcement inquiry.

What is the fine for calling a number on the DNC registry?

The FTC can seek civil penalties up to $51,744 per violation under the Telemarketing Sales Rule as of 2024. The FCC can impose separate forfeitures under the TCPA. Private individuals can sue for $500 per violation, or up to $1,500 per willful violation, under 47 USC 227(c)(5). Each call to a registered number is a separate violation, so large campaigns generate huge aggregate liability.

Does an established business relationship (EBR) let me call someone on the DNC registry?

Yes, with limits. Under the TSR and TCPA, you can call a registered number if you have an EBR, meaning the consumer bought from you within the past 18 months or made an inquiry within the past three months. The EBR belongs to your company, not to a lead seller or marketing partner. If the consumer tells you to stop, the EBR ends immediately regardless of their last purchase date.

Can cell phone numbers be on the DNC registry?

Yes. Cell phone numbers can be registered on the National DNC Registry just like landlines. But cell phones also get extra protection under TCPA Section 227(b), which bans autodialed or prerecorded calls to mobile numbers without prior express consent, entirely apart from registry status. Scrubbing the DNC registry is necessary but not sufficient for mobile calling compliance.

What is the safe harbor from DNC violations?

Under 16 CFR 310.4(b)(3)(iii), a telemarketer can avoid TSR liability for an inadvertent call to a registered number if it accessed the registry within 31 days of the call, keeps a written DNC compliance policy, trains its personnel on that policy, and can show the violation was an isolated error. The safe harbor doesn't protect willful violations or companies without documented compliance programs.

Do state DNC lists have different validity rules than the national registry?

State lists generally mirror the federal permanent-registration approach, but their exemptions and penalties vary. Florida, Indiana, Pennsylvania, and Texas each run separate DNC programs with state-specific penalty structures and EBR windows. Sellers calling into those states must satisfy both the national registry and the applicable state list. Some states let consumers register on the state list only, so federal-only scrubbing misses those numbers.

What happens if a registered number gets reassigned to a new person?

The new subscriber inherits any existing DNC registration until they remove it or the number is formally cleared. This is a real liability trap. The FCC opened the Reassigned Numbers Database (RND) to subscription in 2021 specifically to help callers spot recently reassigned numbers before dialing. Using the RND alongside DNC scrubbing reduces but doesn't eliminate exposure from reassigned numbers.

Can a telemarketer remove a number from the DNC registry?

No. Telemarketers have no mechanism to remove a number from the National DNC Registry. Only the consumer can request removal, which they do at donotcall.gov. Numbers also drop off automatically when disconnected lines are reassigned. There's no appeal or challenge process for sellers. The registry is a one-way door: numbers stay in permanently until the consumer or the system takes them out.

How do I access the DNC registry as a telemarketer?

Through the business portal at donotcall.gov. You create an account, subscribe to the area codes you need, and download the data or pull it via API. The first five area codes are free; additional area codes cost $69 each per year, up to a cap of $19,834 for national coverage. You must certify that you're accessing the data only for compliance, not to mine numbers to call.

Does the DNC registry apply to non-profit or political calls?

Generally no. Tax-exempt nonprofits calling on their own behalf, and political campaigns making political calls, are typically exempt from the TSR's DNC provisions at the federal level. Surveys are also exempt if no sale is made on the call. State DNC laws sometimes treat these exemptions differently. Don't rely on a third-party vendor's nonprofit status to cover your own calls.

What internal records do I need to prove DNC compliance?

You need proof of registry subscription and download dates for at least 24 months, your current internal DNC list with timestamps for when each number was added, written DNC policies and training logs, and call records showing which list version was active during each campaign. Without these, an enforcement inquiry or civil suit leaves you with no documented defense even if your scrub was clean.

How is the DNC registry different from a company's internal do-not-call list?

The national registry covers calls from all telemarketers and is government-run. An internal do-not-call list is company-specific and must include any consumer who directly told your company not to call. Both are mandatory. The internal-list obligation under 47 CFR 64.1200(d) and the TSR applies even to companies otherwise exempt from the national registry, and it predates the national registry by more than a decade.

Sources

1. Congress.gov, Do-Not-Call Improvement Act of 2008, Public Law 110-187: The Do-Not-Call Improvement Act of 2008 directed the FTC to eliminate the five-year re-registration expiration requirement and make DNC registrations permanent.
2. FTC, National Do Not Call Registry Data Book FY 2023: As of FY 2023, over 249 million phone numbers are registered on the National Do Not Call Registry; registration is free for consumers and goes into effect within 31 days; business access fees are $69 per area code after the first five, capped at $19,834 for national coverage.
3. FTC, Telemarketing Sales Rule, 16 CFR Part 310: TSR 16 CFR 310.4(b)(3)(iv) requires telemarketers to use DNC registry data no more than 31 days old; 310.4(b)(3)(iii) describes the safe harbor; records must be retained for 24 months.
4. FTC, Civil Penalty Amounts, 2024 Adjustment Notice: As of 2024, the maximum civil penalty per TSR violation is $51,744, adjusted annually for inflation under the Federal Civil Penalties Inflation Adjustment Act.
5. U.S. Code, 47 USC 227 (TCPA), via Cornell LII: 47 USC 227(c)(5) authorizes private plaintiffs to sue for $500 per violation or up to $1,500 per willful violation; 47 USC 227(b) prohibits autodialed calls to cell phones without prior express consent.
6. FTC Press Release, $225 million judgment against health insurance telemarketer, 2023: In 2023, the FTC obtained a $225 million judgment against a telemarketer for DNC and TSR violations, illustrating aggregate liability risk from large call campaigns.
7. FCC, TCPA Rules, 47 CFR 64.1200, via eCFR: 47 CFR 64.1200(d) requires companies making more than one telemarketing call per quarter to maintain a written internal DNC policy; 47 CFR 64.1200(c)(2) requires scrubbing against a registry no more than 31 days old; the FCC opened the Reassigned Numbers Database to subscription in 2021.
8. FTC, Complying with the Telemarketing Sales Rule (state preemption guidance): The federal registry preempts weaker state protections but leaves stronger state DNC laws in force; sellers must comply with both federal and applicable state requirements.
9. FTC, donotcall.gov consumer registration page: Consumers register on the National DNC Registry at donotcall.gov or by calling 1-888-382-1222 from the number they wish to register; registration is free and takes effect within 31 days.