How to discipline a sales rep for a TCPA violation

Last updated 2026-07-11

Why does disciplining a rep for a TCPA violation actually matter legally?

This is more than an HR problem. Under 47 U.S.C. § 227, the Telephone Consumer Protection Act, every illegal call or text carries a statutory penalty of $500, and courts can triple that to $1,500 per violation if they find the conduct was "willful or knowing." ^[1] A single rogue rep who fires off 200 autodialed calls to numbers on the Do Not Call registry is not a $1,000 HR headache. That is a $300,000 exposure event.

The legal concept that makes your response matter is vicarious liability. The FCC ruled in 2013 that a company can be held liable for TCPA violations committed by its agents, even independent contractors, if the company ratified the conduct or gave the agent apparent authority to act. ^[2] "Ratification" in plain language means: you found out and did nothing. If you discover a rep made illegal calls and you let them keep calling without documented action, a plaintiff's lawyer will argue you endorsed the behavior.

What you do in the 48 hours after you learn about a potential violation shapes your legal exposure more than almost anything else. That is why this discipline process is about more than fairness to the employee. It builds a paper trail that shows a court or the FCC three things: your company takes compliance seriously, the violation was an individual act contrary to your written policies, and you moved quickly to stop it.

What are the TCPA rules a sales rep is most likely to break?

Before you write a single word of a performance improvement plan, know exactly which rule the rep broke. The TCPA is not one rule. It covers several distinct prohibitions, and the legal treatment differs depending on which one was violated.

The violations sales reps commit fall into four buckets.

Calling a number on the National Do Not Call Registry. The FTC maintains the DNC registry, and telemarketers must scrub their lists against it every 31 days at minimum. ^[3] A rep who loads a raw purchased list into a dialer without scrubbing it first is the classic example. See our guide to the do not call list for how the registry works in detail.

Using an autodialer or prerecorded message without prior express written consent. This is the core TCPA prohibition under 47 U.S.C. § 227(b). ^[1] Texting a prospect from a platform that uses an automated system, or blasting a ringless voicemail, without documented written consent is a violation on every call or text.

Calling or texting outside the permitted hours. Federal rules under 47 C.F.R. § 64.1200 restrict telemarketing calls to between 8 a.m. and 9 p.m. local time at the called party's location. ^[4] A rep in the Eastern time zone who starts dialing at 7:45 a.m. is calling Mountain time customers at 5:45 a.m.

Ignoring a company-specific do not call request. Once a consumer asks not to be called again, that request must be honored for at least five years. A rep who re-dials a number that opted out, even once, is on the wrong side of 47 C.F.R. § 64.1200(d). ^[4]

Knowing which bucket the violation falls into tells you how serious the infraction is and whether it is part of a pattern you have not yet found.

What should you do in the first 48 hours after discovering a violation?

Move fast. Not only because evidence gets harder to pull the longer you wait, but because acting quickly documents the moment you discovered the problem. That timestamp defines whether any subsequent calls count as ratification.

Hour 1: Pause the rep's outbound activity. Do not wait for an investigation to conclude. Pull their access to the dialer and any texting platform while you review. This is not termination. It is a precautionary hold. Frame it that way in writing to the rep: "Pending a review of recent call activity, your outbound calling access is suspended as of [date and time]."

Hours 1-24: Pull the records. You want call logs from your dialer (dates, times, called numbers, duration), any text message logs, the consent documentation your system shows for the called numbers, and DNC scrub records showing when the list was last checked. If you use a cold calling platform with a compliance module, most of this exports in a few clicks.

Hours 24-48: Determine scope. Was this one call? A hundred? Was it a single list that never got scrubbed, meaning every number on it is a potential violation? This scope assessment drives everything: the severity of discipline, whether you need outside counsel, and whether you have a proactive disclosure obligation.

If the scope is large (more than a few dozen numbers, or any hint of a pattern across multiple reps), call your attorney before you discipline anyone. Statements made in the investigation can be discoverable, and you want to be careful about what goes into writing.

How do you document a TCPA violation for HR and legal purposes?

Good documentation does two things at once. It protects the company if the rep sues for wrongful termination, and it shows regulators or plaintiffs that you treat TCPA compliance as a real policy, not window dressing.

Here is what belongs in the file:

1. A written description of the specific violation, citing the policy section that was breached, the date and time of the offending calls or texts, and the specific numbers involved. 2. Copies of the relevant call logs, text logs, or dialer records, with any DNC suppression records showing the number should have been flagged. 3. A record of prior compliance training the rep received, including dates and what was covered. This matters enormously. If you can show the rep signed off on a training module that covered this exact rule, willfulness gets harder to argue on the rep's behalf and harder for a plaintiff to pin on the company. 4. The rep's written response or any denial, collected during the investigation meeting. 5. The disciplinary decision and rationale, in writing, signed by the manager and HR.

Keep this file separate from standard HR files if your counsel advises it, since legal holds sometimes treat them differently. Retention should run at least five years, matching the company-specific DNC request window under 47 C.F.R. § 64.1200(d). ^[4]

What level of discipline is appropriate for different types of TCPA violations?

There is no single right answer, but here is how most compliance-conscious companies map it. The variables that matter: was this negligence or deliberate, how many calls were affected, and has this rep done something similar before.

Scenario	Typical Response
First offense, one or two calls, procedural error (forgot to re-scrub list)	Written warning + mandatory retraining before reinstatement
First offense, systemic (bad list used for days, dozens of calls)	Final written warning or suspension + mandatory retraining + monitored probation
Intentional (rep knew about the opt-out or DNC status and called anyway)	Termination for cause, regardless of number of calls
Repeat offense after prior written warning	Termination for cause
Rep sold or shared leads externally or falsified consent records	Termination + preserve records for potential legal referral

One thing worth saying plainly: if the rep deliberately bypassed a known opt-out because they were chasing a commission, the right answer is almost always termination. Not because you need to make an example, but because the company's exposure climbs fast with a rep who ignores opt-outs knowingly. The TCPA's treble damages provision exists precisely for willful conduct, and keeping that person in the seat while they know how to work around your controls is a bad bet. ^[1]

For borderline cases, a suspension with mandatory retraining and a probationary period of monitored calls (where a compliance officer or manager spot-checks a sample of the rep's calls weekly) is a defensible middle ground. Document that monitoring formally.

What does a TCPA violation cost the company if a plaintiff actually files suit?

This is where the stakes get concrete, and it is worth walking your sales team through the numbers behind the policy.

The statute sets the floor at $500 per violation and the ceiling for willful violations at $1,500 per violation. ^[1] Courts have consistently treated each individual call or text as a separate violation. The class action mechanism turns a single rogue campaign into an existential event: if a plaintiff's attorney can certify a class of everyone who received the same illegal campaign, the math compounds fast.

Real outcomes show the scale. The Cash App cash app tcpa class action settlement resulted in a substantial settlement paid to consumers who received unauthorized texts. The credit one tcpa settlement is another high-profile example of how quickly exposure grows when auto-dialing practices go unchecked.

Nobody has reliable aggregate data on average TCPA settlement amounts across all company sizes. But the FCC's enforcement history and public court records show individual company settlements routinely landing in the six and seven figures. WebRecon's litigation tracking has found TCPA suits among the largest categories of consumer protection filings in federal court, with thousands of new cases filed each year. ^[5]

For a small outbound team, even a single class action threat, regardless of merit, can cost $50,000 to $200,000 in legal defense before a settlement or dismissal. That number should reframe how much budget makes sense for compliance training and tooling.

How do you retrain a sales rep after a TCPA violation?

Retraining is not optional, and "we told them again" is not retraining. For the documentation to hold up, the training has to be specific, dated, and acknowledged in writing.

Effective post-violation retraining covers:

The specific rule that was violated. Not a general TCPA overview. Walk through exactly which provision of 47 U.S.C. § 227 or 47 C.F.R. § 64.1200 was triggered, what the rep did that crossed the line, and what the correct behavior looks like. ^[1][4]

How to read a scrubbed list. If the violation involved a list that was never run against the DNC registry, show the rep how to verify a list has been scrubbed and what the timestamp should look like. See our guidance on how do i get the do not call list for the exact process on accessing the registry.

How to handle a live opt-out. Role-play the scenario where a consumer says "take me off your list." Practice the rep's response: what they say, what they type into the CRM, and who they notify.

The company's internal escalation path. The rep should know exactly what to do if they are unsure whether a number is safe to call: who to ask, what system to check, how long that check takes.

Have the rep sign a dated attestation that they completed the training, understood the material, and know a repeat violation will result in termination. That document is one of your most valuable pieces of evidence if you ever need to show that the violation was an individual act, not a company practice.

LeadCompliant's compliance kit includes a TCPA training acknowledgment template and a DNC suppression checklist built for small outbound teams. Use them as a starting point for post-incident retraining materials.

Can a company be held liable for what an independent contractor rep does?

Yes, and this surprises a lot of founders who assumed the 1099 structure was a liability firewall. It is not.

The FCC's 2013 Declaratory Ruling addressed this head-on, finding that a seller can be liable for TCPA violations by its lead generators or third-party agents if the seller "knew or should have known" of the violations or if the agent acted with apparent authority. ^[2] The FCC also said a seller cannot knowingly accept the benefits of illegal telemarketing while dodging liability by claiming the caller was technically an independent contractor.

In practice, if you pay commissions on deals closed by a 1099 rep who used your scripts, called on your behalf, and worked your leads, and that rep violates the TCPA, you are likely in the frame. Courts look at the substance of the relationship, not the contract label.

The fix is not to stop using contractors. It is to make sure your contractor agreements include explicit TCPA compliance obligations, representations that the contractor will follow DNC rules and obtain proper consent, and an indemnification clause requiring the contractor to cover any TCPA liability arising from their calls. Pair that with actual monitoring (more than a contract clause) and you have a much stronger defense. If you also verify that mobile phone do not call list scrubbing happens before each campaign, you cut off the most common violation path.

What should be in your TCPA compliance policy to support future disciplinary action?

A disciplinary action is only as strong as the policy it enforces. If your written policy is vague or outdated, a rep's attorney can argue the rules were unclear and the discipline was arbitrary.

A solid TCPA compliance policy for an outbound team covers at minimum:

Consent requirements. What type of consent is required before a rep can call or text a number, how consent gets documented in the CRM, and who is responsible for verifying it before a campaign goes out.

DNC scrubbing. How often lists must be scrubbed (the federal minimum is every 31 days, but monthly is the standard practice), which system is used, and who signs off that scrubbing happened before dialing starts. ^[3]

Calling hours. The 8 a.m. to 9 p.m. local time rule stated explicitly, with a note about state law variations (some states, like California, run stricter rules). ^[4]

Opt-out handling. What the rep must do the moment a consumer requests removal, how quickly that must be entered into the system (best practice is real-time, not end of day), and the five-year retention requirement.

Violation reporting. A clear instruction that reps must self-report if they believe they made a call they should not have. Policies that punish self-reporting create a culture of concealment, which makes your liability worse.

Disciplinary consequences. A plain statement that violations are subject to discipline up to and including termination, and that intentional violations result in immediate termination.

Have every rep sign and date the policy at hire and again any time it is materially updated. Keep those signatures. They are the foundation of any discipline or termination you impose later.

How do you handle a rep who claims they did not know the rules?

"I didn't know" is the most common defense you will hear, and it is worth taking seriously as a factual matter even if it does not change the outcome much.

First, check your own records. Did the rep receive training that covered this specific rule? Did they sign the policy? If the answer to both is yes and they are claiming ignorance, that is an aggravating factor, not a mitigating one. Signing a document saying you understand a rule and then claiming ignorance of it is not a good-faith defense.

If your records show the training was genuinely inadequate, take that seriously, because other reps may be in the same position. A remedial training event for the full team, with updated materials and fresh signatures, is the right response. That does not excuse the individual violation, but it addresses the systemic gap.

For the rep themselves, genuine ignorance from thin onboarding usually lands in the written warning plus mandatory retraining bucket, not termination, for a first offense with limited scope. Document the training gap, fix it, and use it as evidence that the company's response was proportionate and constructive.

One thing to watch for: reps who claim ignorance but whose call patterns show clear awareness. A rep who called 50 numbers from a list, skipped every one that had a DNC flag visible in the CRM, and only called the others is not ignorant of the DNC rules. Pattern evidence like that changes the analysis significantly.

When should you involve legal counsel in a TCPA discipline situation?

Most single-incident, small-scope violations can be handled internally with good documentation and clear policy. But several fact patterns should trigger an immediate call to outside counsel before you do much else.

Call your attorney if: the violation touched more than 50 unique phone numbers; the rep has already been contacted by a plaintiff or plaintiff's attorney; the conduct involved falsified consent records or deliberate evasion of your compliance systems; you have received a demand letter or notice of litigation; or a regulatory inquiry arrives from the FCC or a state attorney general.

Loop in counsel too if the investigation reveals the violation was not isolated to one rep but reflects a broader practice on the team. At that point, you are not dealing with an HR matter. You are managing a potential class action scenario, and the steps you take in the next few days matter legally.

If you are drafting a termination letter for cause and plan to assert that the rep's conduct exposed the company to TCPA liability, have counsel review that letter. A clumsy termination letter can create wrongful termination exposure if it makes legal admissions you do not intend. The tcpa statute and the FCC's implementing rules are complex enough that a generalist employment attorney may miss things. Look for someone who handles consumer protection or telecommunications regulatory work alongside employment.

What tools can help you catch violations before they turn into lawsuits?

Discipline is what you do after a violation. Prevention is what keeps you from needing it.

The prevention stack for a small outbound team has a few layers. A real-time DNC scrubbing integration, where your dialer checks the number against the federal registry and your internal suppression list before the call connects, kills the most common violation type. Most modern sales dialers offer this as a configurable feature. If yours does not, that is a problem worth fixing.

For text message marketing, consent verification at the point of opt-in is the control that matters most. Your system should capture and timestamp the exact consent language the user saw, where they saw it, and when. That record is your defense if the contact later claims they never consented.

Call recording with a compliance review workflow, where a sample of each rep's calls gets reviewed weekly by a compliance owner or manager, creates a feedback loop that catches problems early. You do not need to review every call. A random 5% sample is enough to surface pattern violations.

LeadCompliant's free checker tools let you verify numbers against the federal DNC registry and spot common consent documentation gaps before a campaign goes out. Using a tool like that in your pre-campaign checklist is a low-cost control that also creates a timestamped audit record.

For teams running heavy cold call outreach, the investment in compliance tooling is almost always cheaper than the cost of a single TCPA defense, even one that settles favorably.

Frequently asked questions

Can I fire a sales rep for a single TCPA violation?

Yes. In most U.S. states employment is at-will, and a single TCPA violation can justify termination, especially if it was intentional or involved bypassing a known opt-out. For unintentional first offenses with limited scope, many companies use written warnings plus retraining instead. The key is that your written policy states in advance that violations can result in termination, so the decision is not arbitrary.

Does the sales rep personally face any legal liability under the TCPA?

The TCPA's private right of action runs against the entity that initiated the call, typically the company, not the individual employee. Individual liability can arise in some circumstances, including when an officer or director personally directed the illegal conduct or when a sole proprietor is the calling party. In most W-2 employee situations, the company bears the legal exposure, which is exactly why the company needs to discipline and document quickly.

What if the rep was following a script or list that the company provided?

This is a serious problem for the company. If the company provided a non-scrubbed list or a script that instructed calling without proper consent verification, the violation is a systemic failure more than an individual one. Discipline for the rep may still fit if they had training telling them to verify the list before use and skipped that step. But the company also needs to fix the root cause, which means auditing the list sourcing and campaign approval process immediately.

How long do I need to keep records of the TCPA discipline process?

Keep the full disciplinary file for at least five years. That matches the five-year minimum retention requirement for company-specific do not call records under 47 C.F.R. § 64.1200(d). TCPA suits can be filed up to four years after the violation under the general federal statute of limitations, so having contemporaneous records from the time of the violation matters if a claim surfaces years later.

What if my sales rep violated the TCPA while working remotely and I cannot verify the calls?

Pull records from every system that logged activity: your CRM, the dialer platform, any softphone or VoIP provider, and text messaging platforms. Most modern sales tools log outbound activity with timestamps and called numbers regardless of where the rep sat physically. If the rep used personal devices in a way that bypassed your systems entirely, that is a policy gap to close immediately by requiring all outbound calls to route through company-controlled platforms.

Should I tell affected consumers that they were called illegally?

Do not make that decision without counsel. Proactive disclosure to consumers can be read as an admission that could be used in litigation. In some regulatory contexts, voluntary disclosure to the FCC or a state regulator can work in your favor and reduce penalties, but the calculus is fact-specific. Get legal advice before any outreach to potentially affected consumers or any voluntary regulatory disclosure.

Can a terminated rep sue the company for wrongful termination after a TCPA discipline?

Yes, any terminated employee can file a wrongful termination claim. That risk is why documentation matters so much. If you have a written policy stating violations lead to termination, training records showing the rep knew the rules, call records showing the violation occurred, and a consistent pattern of enforcement across similarly situated employees, you have a strong defense. Document everything before, during, and after the termination.

How is a TCPA violation by an independent contractor handled differently than one by an employee?

The discipline mechanism differs, since you cannot write up a 1099 contractor the way you would a W-2 employee. Your recourse is the contract: most contractor agreements allow termination for breach of compliance obligations. The legal liability analysis, however, is very similar. The FCC has made clear that companies can be vicariously liable for contractor TCPA violations if the contractor acted with apparent authority or the company ratified the conduct.

What is the difference between a willful and a non-willful TCPA violation for discipline purposes?

The statute allows courts to triple damages from $500 to $1,500 per call for willful or knowing violations. For discipline, willfulness is the dividing line between serious remediation and termination. A rep who called a number they knew was on your internal opt-out list, or who deliberately disabled a DNC filter, has committed a willful violation. The discipline should reflect that, and the company should preserve records showing it treated the conduct as willful internally.

What should a TCPA compliance policy say about progressive discipline?

Be explicit but preserve flexibility. A good policy says first unintentional violations result in written warning and mandatory retraining, second violations or any intentional violation result in final written warning or termination, and falsification of consent or DNC records results in immediate termination for cause. Including the phrase 'up to and including termination' at every level preserves your ability to skip steps for serious conduct without making the discipline look arbitrary.

Do state TCPA-equivalent laws affect how I discipline a rep?

State laws like California's Rosenthal Fair Debt Collection Practices Act or Florida's Telemarketing Act can impose stricter requirements than the federal TCPA. If the rep's calls violated a state law on top of the federal statute, note that in the discipline documentation. It does not usually change the HR process, but it affects the legal exposure analysis and should be flagged for counsel.

How do I know if a complaint or demand letter means a lawsuit is coming?

Demand letters from plaintiff's attorneys are often the first step toward a lawsuit, more than a negotiating tactic. Treat every written demand asserting TCPA violations as if litigation is probable. Preserve all relevant records immediately, forward the letter to counsel the same day you receive it, and do not contact the sender directly. Even informal complaints that show up by email or through your website should be documented and reviewed by counsel if they assert TCPA violations by name.

Can retraining after a violation actually reduce a company's TCPA penalty?

There is no formal penalty reduction credit for retraining in the TCPA statute itself. But evidence of prompt remediation, including documented retraining, policy updates, and enhanced monitoring after a violation, can influence how a court or the FCC treats the severity of the conduct. It supports the argument that the violation was an aberration rather than company practice, which is relevant to both class certification and damages calculations.

Sources

1. Cornell Legal Information Institute, 47 U.S.C. § 227 (TCPA statute text): TCPA statutory penalties are $500 per violation, trebled to $1,500 for willful or knowing violations; the statute prohibits autodialed or prerecorded calls without prior express consent
2. FTC, National Do Not Call Registry, Business Guidance: Telemarketers must scrub their call lists against the National Do Not Call Registry at least every 31 days
3. Electronic Code of Federal Regulations, 47 C.F.R. § 64.1200 (Delivery restrictions and DNC requirements): Federal rules restrict telemarketing calls to 8 a.m. to 9 p.m. local time at the called party's location; company-specific DNC records must be retained for at least five years
4. WebRecon LLC, Annual Consumer Litigation Stats Report (TCPA filing counts): TCPA suits have been among the largest categories of consumer protection filings in federal court, with thousands of new cases filed annually
5. FTC, Telemarketing Sales Rule, 16 C.F.R. Part 310: The Telemarketing Sales Rule works alongside the TCPA and requires sellers to check the Do Not Call Registry and honor opt-outs; violations carry separate civil penalties
6. FTC, Consumer Protection and Data Privacy (text-message telemarketing guidance): Text campaigns without proper consent have led to large TCPA class actions, illustrating how text violations scale into class-wide exposure
7. Cornell Legal Information Institute, 47 C.F.R. § 64.1200(f) (prior express written consent definition): Federal rules require prior express written consent for autodialed or prerecorded telemarketing calls and texts, a standard that took effect October 16, 2013
8. U.S. Department of Labor, Workplace and employment resources (at-will employment overview): Most U.S. states recognize at-will employment, meaning an employer can terminate for TCPA violations without establishing just-cause under most circumstances