Telemarketing rules by state: what outbound teams must know

Last updated 2026-07-09

Why do state telemarketing laws matter if TCPA already exists?

The TCPA (47 U.S.C. § 227) sets a national minimum, and it has teeth: up to $1,500 per willful violation, per call or text ^[1]. But Congress left the door open for states to go further. The statute's own text preserves "any State law that imposes more restrictive intrastate telemarketing standards" ^[1]. States walked right through that door.

At least 40 states have their own telemarketing or do-not-call statutes that go past federal law in at least one way. Some make you register as a telemarketer before you place a single call. Some ban calling on Sundays. Some hand consumers a private right of action worth $1,000 per call, on top of any TCPA claim. You can be 100% TCPA-compliant and still eat a six-figure state enforcement action.

So federal compliance is the entry fee, not the finish line. If your team calls into multiple states, a check of the national DNC list is not enough. You need a per-state review of registration, calling hours, and consent.

What is the federal TCPA baseline that all states build on?

Know the federal floor first, because every state rule either copies it or tightens it.

Under the TCPA and FCC regulations, the core federal rules are:

• Calling hours: 8 a.m. to 9 p.m. in the called party's local time ^[8]
• National DNC list: you cannot call a registered number without prior express written consent or an established business relationship ^[8]
• Autodialer restrictions: prior express written consent is required to call a cell phone with an ATDS or prerecorded voice for marketing ^[1]
• Identification: callers must state their name, the company's name, and a phone number at the start of each call ^[8]
• Opt-out: you must honor do-not-call requests within a reasonable time, and the industry standard is 30 days ^[8]

The FCC's 2024 one-to-one consent rule, adopted in FCC 24-17, was set to require that consent name the specific seller placing the call rather than a broad category of sellers ^[3]. A federal court vacated that portion in early 2025, so the strict one-to-one standard is not in force nationally right now. Plenty of lead buyers still write contracts as if it is, because the direction of travel is clear and states can impose their own version.

Some states are stricter on every one of these points. Others only bolt on a registration requirement. The table below shows where state law usually diverges.

How do state telemarketing rules compare to federal rules across key categories?

State	State DNC List	Registration Required	Stricter Calling Hours	Per-Violation Fine (max)
California	No separate list; uses national	No state-level telemarketer license	Same as federal (8a-9p)	$2,500 per CIPA violation + TCPA
Florida	Yes (Florida DNC Program)	Yes (must register with FDACS)	Same as federal	$10,000 per call [4]
Texas	Yes (Texas No-Call list)	Yes (register with the state)	Same as federal	$10,000 per call [5]
Indiana	Yes	Yes	Same as federal	$10,000 per call
New York	No separate list	No registration	Same as federal	Varies by AG action
Pennsylvania	Yes	Yes	Same as federal	$1,000-$3,000 per violation
Colorado	No separate list	No registration	Same as federal	Up to $20,000 per violation [6]
Wisconsin	Yes	Yes	No calls on Sunday	$100-$10,000 per violation
Minnesota	Yes	Yes	8 a.m. to 9 p.m. (state time)	$25,000 per violation [12]
Wyoming	No	No	Same as federal	N/A (relies on FTC/TCPA)

This is a highlight reel, not a full audit. Laws change. Verify current requirements with each state's attorney general office before calling into a new state.

A few patterns show up fast. Southern and Midwestern states (Florida, Texas, Indiana) tend to pair registration requirements with high per-call fines. Western states lean more on federal enforcement. Wisconsin is the odd one out with its Sunday ban, which has burned national campaigns that assumed Sunday was fair game everywhere.

Which states have their own do-not-call lists you must scrub against?

Scrubbing the national FTC do-not-call list ^[7] is mandatory, but it does not cover states that run their own lists. These states had active, separate DNC programs as of mid-2026:

• Florida: The Florida Do Not Call Program runs through the Florida Department of Agriculture and Consumer Services ^[9]. You access it at donotcall.fdacs.gov.
• Texas: The Texas No-Call List is administered by the Public Utility Commission and enforced by the state.
• Indiana: Indiana's DNC list is maintained by the Attorney General's Consumer Protection Division.
• Pennsylvania: The Pennsylvania DNC list runs through the PA Attorney General.
• Wyoming: Wyoming once had its own list but has largely folded into the federal registry.
• Minnesota: Minnesota runs a list through the AG's office.
• Wisconsin: Wisconsin's list comes from the Department of Agriculture, Trade and Consumer Protection.

Each process differs. Some charge a fee per area code to pull the list. Some make you register as a telemarketer in the state before you can even download the data. Call into Florida or Texas without scrubbing their lists and the state does not care that you scrubbed the national one ^[4][5].

For teams running a cold calling platform, check whether your vendor scrubs state lists or only the national registry. Most cheap dialers only do the national list.

Which states require you to register as a telemarketer before calling?

This is the rule that catches teams off guard. Several states make any company placing outbound telemarketing calls into the state register before the first dial. Registration usually means:

• Filing a registration form with the state
• Paying an annual fee (often $100 to $500, though Florida runs higher)
• Posting a surety bond (commonly $50,000)
• Naming principal officers and key sales personnel

States with formal registration requirements include Florida, Texas, Indiana, Pennsylvania, Minnesota, and Wisconsin, among others. The specifics vary. Florida's Telemarketing Act (Fla. Stat. § 501.601 et seq.) is one of the most detailed, requiring a bond and letting the state investigate complaints on its own ^[4].

Calling into Florida without registering is a violation by itself, separate from whether you dialed a DNC number. That gives enforcement a second hook. If someone complains, the state can fine you for the unregistered status even if the number was on no list at all.

The honest picture for small teams: most small outbound groups calling into multiple states are not registered in every state they should be. That's a live liability gap. Registration is not expensive. The bond is the biggest line item, and many surety providers write these for $500 to $1,000 a year depending on your call volume and credit.

What are the strictest state telemarketing laws in the US?

Three states generate the most telemarketing enforcement and litigation: Florida, California, and Texas. If you build a risk-ranked compliance plan, start there. That's where the suits come from.

Florida is probably the most aggressive enforcer. The Florida Telemarketing Act covers nearly any phone solicitation to a Florida resident. It requires registration and bonding, mandates specific disclosures within the first 30 seconds of a call, bars calls before 8 a.m. or after 9 p.m., and lets both the state and private citizens sue. Fines run up to $10,000 per violation ^[4]. Florida also bars calls to anyone who asked that company not to call, with no grace period.

California has no telemarketer registration in the Florida sense, but it stacks several statutes. The California Consumer Privacy Act (CCPA) governs how lead data is sourced and used. The state's Automatic Renewal Law creates liability if you upsell on a call without proper consent. And the California Invasion of Privacy Act (CIPA) creates liability for recording a call without all-party consent ^[11]. California is an all-party consent state. Record a call with a Californian without disclosing it and you face CIPA exposure on its own, separate from any telemarketing statute.

Texas mirrors Florida on the basics: mandatory registration, a state no-call list, and fines up to $10,000 per violation ^[5]. Texas also gives consumers a private right of action under the Business and Commerce Code, so individual plaintiffs can sue you without the state getting involved.

States like Wyoming, South Dakota, and Montana keep a light footprint and lean almost entirely on the FTC and TCPA. They're low on the worry list.

Do state calling hour restrictions differ from the federal 8 a.m. to 9 p.m. rule?

Most states adopt the federal window: 8 a.m. to 9 p.m. in the called party's local time. A handful go stricter.

Wisconsin bans telemarketing calls on Sundays entirely under its no-call statute. That's the clearest bright-line break from federal law and the one campaigns miss most.

Minnesota's statute mirrors the federal hours but gives its AG broad authority to police additional prohibited times through enforcement. In practice, state investigators have treated late-evening calls as borderline.

Some states also apply tighter rules to specific industries. A state might restrict debt collectors (governed separately by the FDCPA) to shorter windows that bleed into telemarketing when a call has a promotional angle.

The safe play: call between 9 a.m. and 8 p.m. in the called party's time zone, seven days a week except Sunday in Wisconsin. That keeps you inside both federal and every current state window with a buffer.

For cold calling scripts run by multi-state teams, put time-zone logic in the dialer, not the script. Picture a rep in New York working a mixed list at 6 p.m. Eastern. Florida numbers are fine. California numbers are fine at 3 p.m. Pacific. But a Mountain Time number is getting called at 4 p.m., and if the list is sloppy, the rep may be firing at three time zones at once without realizing it. Dialers that don't handle time zones per record are a liability.

How does consent under state law differ from TCPA consent?

Federal law requires "prior express written consent" for autodialed or prerecorded marketing calls to cell phones ^[1]. State laws pile on more.

A few states require written consent even for manual calls in certain industries. Insurance telemarketing in some states requires documented, signed consent before a pitch. Real estate cold calling rules bend to state licensing boards on top of the telemarketing statute.

California's CCPA touches consent at the data layer. If a lead's data came from a broker without a valid CCPA basis to sell it, calling that lead creates CCPA exposure for your company even if the number is on no DNC list.

Texas's Deceptive Trade Practices Act (DTPA) creates liability for misleading telemarketing claims, which reaches wider than federal disclosure rules.

Here's the messy part: state consent rules aren't tidy or in one place. They're spread across consumer protection statutes, AG regulations, and court rulings. If your consent flow is just a TCPA checkbox, you likely have gaps in California and Texas at a minimum.

For teams thinking through what what is cold calling in sales means legally, consent is the line between a compliant program and one that's one complaint away from a state investigation.

What fines can states actually impose for telemarketing violations?

State fines swing wide, and several states dwarf a typical single-call TCPA figure.

State	Maximum Fine Per Violation	Private Right of Action?
Florida	$10,000 [4]	Yes
Texas	$10,000 [5]	Yes
Minnesota	$25,000 [12]	Yes
Colorado	$20,000 [6]	Yes
Indiana	$10,000	Yes
Pennsylvania	$3,000	Yes
New York	Varies (AG discretion)	Limited
California	$2,500 (CIPA) + civil	Yes (CIPA)

"Per violation" is the phrase that matters. In states with a private right of action, each call to a registered number is its own violation. A campaign that dialed 500 DNC-registered Florida numbers could face $5 million in state exposure, separate from any TCPA claim.

In practice, most state enforcement settles for far less, and AGs go after high-volume offenders, not teams that made a handful of mistakes. But the statutory maximum is the lever plaintiffs' attorneys pull. A demand letter citing $10,000 per call under Florida law plus $1,500 per call under TCPA, even on 50 calls, gets to seven figures fast. That math is why most cases settle quickly.

Colorado's $20,000 ceiling under the Colorado Consumer Protection Act ^[6] is the highest single-call exposure in the country for a pure telemarketing violation.

Do state laws apply to B2B telemarketing, or just consumer calls?

This is a real gray area. The national DNC list and most TCPA marketing rules focus on residential lines and personal cell phones. Business-to-business calls to a company's business line generally sit outside TCPA's marketing rules, and the FCC has said as much in prior orders.

State laws are inconsistent. Some statutes apply only to calls to natural persons in a residential capacity. Others reach wider. Florida's Telemarketing Act covers calls to "purchasers" without cleanly carving out business calls in every situation. Some AG interpretations have reached into B2B when the called party used the number like a residential one.

The safest read of most state laws: B2B calls to a general office line fall outside most telemarketing statutes. Calls to an individual's personal cell for a business purpose are murkier. If you have a cell number for a business owner and you're calling to pitch a product, TCPA and possibly state law apply, even if the pitch is business-oriented.

For AI cold calling programs, this matters more. AI-generated calls using a prerecorded or synthetic voice face TCPA liability for cell phones regardless of business context. The FCC ruled in February 2024 that AI-generated voices count as "artificial" voices under the TCPA, which triggers the consent requirement ^[10].

What should a small outbound team actually do to comply with state laws?

Here's the practical sequence, ranked by effort and payoff.

Step 1: Map your call geography. Pull your prospect list and see which states you actually call into. If 90% of your calls hit three states, you need deep compliance in those three, not a shallow pass over all 50.

Step 2: Check registration for every state you call. For each state on the list, check the AG's site to see whether telemarketer registration is required. If it is, register before your next campaign. This one step removes a common enforcement hook.

Step 3: Pull and scrub state DNC lists. Calling into Florida, Texas, Indiana, Minnesota, Pennsylvania, or Wisconsin? Pull their state lists on top of the national one. Fold it into your regular scrub cadence (at least every 31 days for TCPA purposes ^[8]).

Step 4: Set time-zone-aware calling hours. Build the logic at the record level, not the rep level. A dialer that auto-suppresses records outside their local calling hours is the only reliable fix.

Step 5: Document your consent chain. For each lead source, know exactly what consent language the consumer saw, when, and for which company. Even with the federal one-to-one rule vacated ^[3], sloppy shared consent is the first thing a plaintiff's lawyer attacks.

Step 6: Train on state-specific disclosures. Florida requires specific disclosures inside the first 30 seconds. Build those into your cold call script for state-specific campaigns.

LeadCompliant's free DNC checker and compliance kit handle the national scrub and consent documentation basics, and walk through state registration for the highest-risk states. A useful starting point for small teams without a dedicated compliance person.

One honest caveat: nobody has clean data on how often state AGs pursue small-volume offenders. The closest proxy is enforcement tracking from the National Association of Attorneys General (NAAG), which points to most telemarketing actions involving companies with thousands of violations, not dozens. The private plaintiff bar plays a different game. A plaintiff's attorney will file on 10 calls if the math works, and Florida and Texas produce the most private telemarketing suits outside federal TCPA court.

Are there any state telemarketing exemptions that outbound teams should know about?

Yes, and they matter. Most state statutes carve out the same categories as federal law, plus a few extras.

Common exemptions across most state laws:

• Existing customers with an established business relationship (EBR). The EBR window under TCPA is 18 months from the last purchase or 3 months from an inquiry. States vary, so check each one.
• Calls in response to a consumer's direct request. If the person filled out a web form asking to be contacted, that's an express invitation and generally exempt.
• Nonprofit organizations. Most states exempt calls made by or on behalf of recognized 501(c)(3) organizations, though some still require disclosure.
• Political calls. Federal law and most state laws exempt bona fide political calls. Note: political calls to cell phones with an ATDS still need consent under TCPA, but many state statutes add nothing on top.
• Licensed professionals. In some states, attorneys, real estate brokers, and financial advisors get partial exemptions when soliciting for their licensed services.

The EBR exemption is the one teams misapply most. An EBR does not override a specific request to be removed from your list. If someone says "don't call me again" on a call, the EBR is dead for that person. True under both federal law and virtually every state analog ^[8].

How do state laws handle text message (SMS) telemarketing?

Most state telemarketing statutes were written for voice calls, and their text references "telephone solicitations" in ways courts have generally stretched to cover SMS. But the application is less settled than for calls.

TCPA clearly covers texts sent via ATDS; the FCC confirmed that in its 2012 order and later rulings. For state law, the analysis turns on whether the statute says "telephone call" (which courts often extend to SMS) or defines coverage more narrowly.

California's CIPA creates liability for intercepting electronic communications, and some cases have applied it to commercial SMS where consent was missing ^[11]. Florida's telemarketing statute has been applied to texts in AG enforcement.

The safest assumption for a national SMS campaign: treat state telemarketing rules as covering SMS the same way they cover calls, especially for DNC scrubbing and consent. Someone who put their cell on the Florida DNC list almost certainly expects that to stop texts, and Florida's AG has taken that view.

Time-of-day limits should apply to SMS too. A marketing text at 6 a.m. to a Florida resident may not be squarely covered by the state's 8 a.m. "call" rule, but it creates reputational risk, and some regulators now treat it as an analog violation.

Frequently asked questions

Does TCPA preempt state telemarketing laws?

No. The TCPA explicitly preserves state laws that impose stricter requirements. Its text keeps any state law that sets more restrictive intrastate telemarketing standards. In practice, states like Florida, Texas, and Minnesota have statutes that go well past federal law on registration, fines, and do-not-call obligations. Federal compliance is the floor, not a shield against state claims.

Which state has the strictest telemarketing law?

Florida and Minnesota are consistently the strictest on enforcement and penalties. Minnesota allows fines up to $25,000 per violation. Florida requires registration, surety bonds, and specific call disclosures, and lets both the state and private citizens sue for up to $10,000 per call. Colorado's $20,000 ceiling is the highest single-violation figure in the country for a consumer-protection telemarketing violation.

Do I need to scrub against state DNC lists in addition to the national list?

Yes, if you call into Florida, Texas, Indiana, Minnesota, Pennsylvania, or Wisconsin. Each of those states runs its own do-not-call registry separate from the FTC national list. Scrubbing only the national list does not satisfy state obligations in those states. Fines for calling a number on a state list reach $10,000 per call in Florida and Texas.

Do I need to register as a telemarketer in every state I call into?

Not every state, but several major ones require it. Florida, Texas, Indiana, Pennsylvania, Minnesota, and Wisconsin all have registration requirements. Registration usually means filing with the state, paying a fee, and posting a surety bond. Calling into these states without registering is itself a violation, separate from whether you ever dial a DNC number.

Are B2B telemarketing calls exempt from state telemarketing laws?

Generally yes for calls to a business's main office line, but calls to an owner's personal cell for a business pitch sit in a gray area. Many state statutes focus on consumers in their personal capacity, but some are broad enough to reach business-purpose calls depending on how courts and AGs read them. When in doubt, apply the same rules you'd use for consumer calls.

Can I call on Sundays in all states?

No. Wisconsin bans telemarketing calls on Sundays under its no-call statute. Federal law allows calling seven days a week between 8 a.m. and 9 p.m. local time, but Wisconsin's Sunday restriction is a concrete exception. Most other states follow the federal window without adding day-of-week limits, but verify before launching a Sunday campaign into a new state.

How does California's all-party consent law affect telemarketing?

California requires all parties to consent to being recorded. Record calls with California residents without disclosing the recording at the start and you face liability under the California Invasion of Privacy Act (CIPA), separate from TCPA or telemarketing statutes. The fix is simple: add a recorded-call disclosure to your script opener for any call that might touch a California number.

How often do I need to re-scrub against state DNC lists?

Federal rules require scrubbing the national DNC list at least every 31 days. Most state laws don't specify a shorter interval, so 31 days is the working baseline. Some compliance teams scrub every 15 days to cut exposure from numbers that registered between scrubs. For high-volume campaigns, more frequent scrubbing lowers both liability and wasted dials.

Does an established business relationship (EBR) override a state DNC registration?

For most state and federal rules, an EBR lets you call a customer even if they're on a DNC list, within time limits (18 months from last purchase, 3 months from inquiry under TCPA). But if the person told you specifically not to call, the EBR is dead. A company-specific do-not-call request always beats the EBR, under both TCPA and virtually every state analog.

Do state telemarketing rules apply to text messages?

Courts and regulators generally extend state telemarketing statutes to SMS, even when the statute says 'call.' Florida's AG has treated texts as covered by the state's telemarketing rules. TCPA clearly covers texts sent via ATDS at the federal level. The safest approach is to apply state DNC scrubbing and consent requirements to SMS campaigns the same way you do for voice calls.

What disclosures are required at the start of a telemarketing call?

Federal rules require callers to state their name and the company's name and phone number at the start of each call. Florida's Telemarketing Act requires specific disclosures within the first 30 seconds, including the nature of the call and the product or service offered. Some states require you to disclose that the call is a sales call before pitching. Build state-specific opener language into your scripts for high-risk states.

What happens if a state law conflicts with the federal TCPA?

If a state law is stricter than TCPA, you follow the stricter state rule; there's no real conflict, just a higher bar. If a state law tried to allow something TCPA prohibits (rare), federal law would control. In practice, almost all state-federal telemarketing gaps run one direction: state law is stricter, and you meet that higher standard when calling into that state.

Are nonprofit organizations exempt from state telemarketing rules?

Most state telemarketing statutes exempt calls made by recognized 501(c)(3) nonprofits or on their direct behalf, mirroring the federal exemptions. But the exemption often does not cover commercial co-ventures, where a for-profit telemarketer calls on behalf of a nonprofit for a fee. Verify the specific exemption language in each state's statute rather than assuming the federal carve-out carries over.

How do I find each state's telemarketing registration requirements?

The most reliable source is each state attorney general's website, usually under a consumer protection section. The National Association of Attorneys General (NAAG) site links to every state AG office. For Florida and Texas specifically, the requirements are detailed and well-documented. LeadCompliant's compliance kit includes a state registration reference chart for the highest-volume states.

Sources

1. U.S. Code, 47 U.S.C. § 227 (TCPA text): TCPA allows up to $1,500 per willful violation and states may enact stricter intrastate telemarketing standards
2. Florida Legislature, Florida Telemarketing Act (Fla. Stat. Chapter 501): Florida requires telemarketer registration, surety bond, and imposes fines up to $10,000 per violation
3. Texas Attorney General, Consumer Protection: Texas maintains a state no-call list and imposes fines up to $10,000 per violation with a private right of action
4. Colorado Attorney General, Consumer Protection: Colorado allows fines up to $20,000 per violation under the Colorado Consumer Protection Act for telemarketing violations
5. FTC, National Do Not Call Registry: The national DNC registry is maintained by the FTC and telemarketers must scrub against it
6. FTC, Telemarketing Sales Rule (16 CFR Part 310): Federal calling hours are 8 a.m. to 9 p.m. local time, callers must identify themselves, and do-not-call requests must be honored
7. Florida Department of Agriculture and Consumer Services: Florida operates a separate state DNC program administered by FDACS, distinct from the national FTC list
8. California Legislative Information, California Penal Code (Invasion of Privacy Act, PEN Section 632): California requires all-party consent to record calls; violators face civil and criminal penalties under CIPA
9. Minnesota Attorney General: Minnesota imposes fines up to $25,000 per violation for telemarketing violations and maintains its own DNC list