How to stay current on TCPA regulatory changes as a founder

Last updated 2026-07-11

Why TCPA compliance is a moving target, not a one-time checkbox

Congress passed the Telephone Consumer Protection Act in 1991. The rules built on top of it have never stopped moving since. The FCC issues new orders. Federal courts read the same statute differently depending on your circuit. States pass their own mini-TCPA laws that go past the federal floor. And plaintiffs' attorneys track every gap between your practices and the current rules.

Statutory damages under 47 U.S.C. § 227 run $500 per violation and up to $1,500 per willful violation ^[1]. In a class action covering thousands of contacts, those numbers compound fast. The Cash App TCPA class action settlement reached $6 million, and the cash app tcpa class action settlement breakdown shows how quickly exposure scales for companies sitting on large contact lists ^[2].

Nobody sends you a push notification when the FCC changes a rule. That's the whole problem for a busy founder. You have to build a light, repeatable system that catches changes before they turn into liability. This article builds that system.

What are the main sources of TCPA regulatory change?

Four distinct places produce TCPA changes, and you need eyes on all four: FCC rulemaking, federal circuit court decisions, state legislatures, and FTC rulemaking for the National Do Not Call Registry. Miss one and you miss a whole category of risk.

The FCC's rulemaking process. Congress charged the FCC with implementing the TCPA. It issues declaratory rulings, report and order documents, and final rules through the Federal Register. Recent examples include the 2023 one-to-one consent rule (FCC 23-107), which required written consent to name a specific seller instead of a lead generator's whole partner list, and the FCC's February 2024 ruling that AI-generated voices count as artificial or prerecorded voices under the TCPA ^[3]. Both changed real operational requirements for outbound teams.

Federal circuit court decisions. Courts in the Ninth, Eleventh, and Seventh Circuits have split on what counts as an automatic telephone dialing system (ATDS), what qualifies as prior express written consent, and how internal do-not-call rules interact with the national registry. The Supreme Court narrowed the ATDS definition in Facebook v. Duguid in 2021 ^[4], but circuit courts keep deciding how narrowly to apply it. A ruling that protects you in one circuit may not protect you in another.

State legislatures. Florida, Oklahoma, Washington, and other states have passed laws that add requirements on top of the federal TCPA: shorter opt-out windows, stricter consent language, and private rights of action with higher damages. The state laws picture shifts every legislative session.

FTC rulemaking for the National Do Not Call Registry. The FTC runs the registry under the Telemarketing Sales Rule (TSR). Changes to TSR definitions and enforcement priorities affect who you can call and what records you have to keep. The TSR and the TCPA overlap, but they are not identical, and a change in one does not automatically update the other ^[5].

Where exactly should you monitor FCC activity?

The FCC's own website is your primary source, and the tools are free. You do not need a lobbyist or a law firm subscription to use them.

Start with the Electronic Comment Filing System (ECFS) at fcc.gov/ecfs. Search docket 02-278, the main TCPA docket. When the FCC opens a rulemaking or issues a declaratory ruling on the TCPA, it lands there. Click "Subscribe" after a search to get email updates on that docket. Free, and it takes about three minutes to set up.

The FCC also posts news releases at fcc.gov/news-events/news-releases. These are plain-language summaries that hit before the full order shows up in the Federal Register. For most founders, the release tells you whether an order touches your practices. Read the full order only if it does.

The Federal Register (federalregister.gov) publishes final FCC rules with effective dates ^[6]. Set up a search alert for "Telephone Consumer Protection Act" and you'll get email notice of new final rules. This is the authoritative source for when a rule actually takes effect, which matters because FCC orders often phase in on a staggered timeline.

A realistic cadence for a small team: check ECFS docket 02-278 once a month, lean on the Federal Register email alert for final rules, and skim FCC news releases weekly if you're running high-volume campaigns.

How do you track TCPA court decisions without a law firm on retainer?

You track them with free alerts plus one monthly blog, then pay for an attorney's read only when something looks relevant. Court decisions are harder to follow than FCC orders because they come from dozens of district and appellate courts. The methods below cost nothing but time.

The best free resource is CourtListener (courtlistener.com), run by the nonprofit Free Law Project. Set up email alerts for "TCPA" filtered to specific circuits. It pulls from PACER data and catches most published opinions within a few days ^[7]. It's not instant, but it's close enough.

For the decisions that matter most, both the plaintiff-side and defense-side TCPA bar publish regular case updates. The National Law Review covers TCPA rulings often, and several firms put out free monthly roundups. Squire Patton Boggs and Klein Moynihan Turco, among others, keep TCPA-specific blogs with case summaries. Reading one of these once a month beats reading raw opinions.

Care most about cases in your circuit. If you're headquartered in California and dialing California numbers, Ninth Circuit decisions matter most to you. Facebook v. Duguid came up through the Ninth Circuit before the Supreme Court took it, and its holding that an ATDS needs a random or sequential number generator reshaped the defense landscape nationally ^[4].

When a decision looks relevant, take it to a TCPA attorney for a 30-minute paid review. That's cheaper than missing the implication. You don't need counsel on retainer. You need a trusted attorney you can call quarterly or when something big drops.

Which newsletters and professional resources are actually worth your time?

Most TCPA newsletters are thinly veiled law firm marketing. A handful are genuinely useful, and you only need one or two.

The TCPA World blog (tcpaworld.com), run by Squire Patton Boggs attorney Eric Troutman, publishes often and covers both FCC rulemaking and case law. It's detailed, opinionated, and free. If you read nothing else, read this once a week.

The FCC's consumer news updates at fcc.gov/consumers give you the plain-language version of what's changing. Not the deepest analysis, but a decent reality check.

The Professional Association for Customer Engagement (PACE) and Responsible Enterprises Against Consumer Harassment (REACH) both track TCPA rulemaking and file comments during FCC comment periods. Following their public comments shows you where the industry is pushing back and what's likely to shift.

For state changes, the National Conference of State Legislatures (ncsl.org) tracks telemarketing and consumer protection bills by state ^[10]. It's not TCPA-specific, but it covers the legislation that creates mini-TCPA exposure at the state level.

Here's the honest version. The founder who sets up one FCC docket alert, one Federal Register keyword alert, and a weekly 15-minute skim of one TCPA blog is better protected than the founder who buys an expensive compliance platform and never reads what it sends.

How does the FCC rulemaking process work, and when should you pay attention?

The FCC follows the Administrative Procedure Act, so most major rule changes go through public notice and comment before they take effect ^[8]. That sequence gives you warning, which is the point of watching it.

First comes a Notice of Proposed Rulemaking (NPRM). It describes what the agency is thinking about changing and invites comment. The comment period usually runs 30 to 60 days. This is your earliest warning that a change is coming.

After comments close, the FCC issues a Report and Order with the final rule. The rule then appears in the Federal Register with an effective date, often 30, 60, or 90 days out, sometimes longer.

Some changes move faster. The FCC can issue a Declaratory Ruling to clarify an existing rule without a full NPRM. These can take effect quickly and still carry enforcement weight. The FCC's 2015 Declaratory Ruling on ATDS definitions expanded the scope of covered dialing equipment before Facebook v. Duguid partially reversed it in 2021.

Here's how to plan around it. When an NPRM touches the TCPA, read the summary, decide whether it would change your current practices, and budget 60 to 90 days for comments plus another 30 to 90 days before the final effective date. That's usually enough runway to adjust. The real danger is a Declaratory Ruling that drops with no NPRM at all, and your monthly docket check is the safety net for that.

What role do state attorneys general and private litigants play in shaping TCPA practices?

State AGs increasingly use the TCPA and state analogs to bring enforcement actions that quietly set new norms. When a state AG settles a TCPA case, the consent decree often includes injunctive terms, like specific consent language or call-time windows, that go past the statute's text. Those terms signal what the AG treats as acceptable practice going forward.

Private litigants shape TCPA interpretation even more directly. Most TCPA case law comes from private class actions, not FCC enforcement. A settlement like the credit one tcpa settlement or the Cash App case shows what plaintiffs' attorneys believe they can win on, which tells you where your practices need to be tightest ^[2].

Recent settlements show plaintiffs winning most consistently on three things: calling numbers on the National DNC Registry, contacting people who revoked consent, and using dialers that plaintiffs argue still qualify as ATDSs after Facebook v. Duguid. Watch those three closely.

One more thing founders miss. The TCPA has no administrative exhaustion requirement. A plaintiff can sue in federal district court directly, without ever filing with the FCC first. That's exactly why watching actual case outcomes, and more than FCC orders, is part of staying current.

How should you build a simple internal process to track these changes?

You do not need a six-figure compliance officer to do this well. You need a documented, consistent process that gets the right information to whoever decides how you dial and message. Here's one that works at an early-stage company.

Weekly (15 minutes). One person, ideally the founder or sales ops lead, skims one TCPA blog or newsletter. Flag anything that mentions a final rule, an effective date, or a ruling in a state you operate in.

Monthly (30 minutes). Check ECFS docket 02-278 for new filings. Review any Federal Register alerts that came in. Log findings in a shared doc with the date, source, and a one-line note on whether your practices need a look.

Quarterly (2 hours). Review your consent capture flow, your do-not-call scrubbing, and your call-time windows against the current rules. If monitoring flagged a change, update your practices. If you're unsure whether a court ruling or FCC order reaches you, this is the moment to spend 30 to 60 minutes with a TCPA attorney.

Annually. Run a full audit: consent language, DNC scrubbing frequency, call recording disclosures, and state-specific requirements for every state you dial into. Some founders use a one-time compliance kit to document a baseline and maintain it from there. LeadCompliant offers a free compliance checklist and TCPA tools that can anchor your annual audit without a full legal engagement.

Document everything. If a lawsuit comes, a paper trail showing regular monitoring and good-faith effort is a real asset in settlement talks.

What are the highest-risk TCPA changes to watch for in the next 12 months?

Nobody predicts FCC actions with certainty. But based on open dockets and enforcement patterns, three areas are most likely to hit small outbound teams: one-to-one consent enforcement, AI-generated voice calls, and state law acceleration.

One-to-one consent enforcement. The FCC's 2023 one-to-one consent rule (FCC 23-107) was set to take effect in January 2025, but litigation delayed it ^[3]. The requirement that written consent name a specific seller, rather than a broad partner category, directly hits any team buying leads from third parties. Watch for court decisions on whether the rule survives review, and watch the FCC's enforcement posture on lead generation consent.

AI-generated voice calls. The FCC ruled in February 2024 that AI-generated voices in robocalls need prior express consent under the TCPA, treating them the same as artificial or prerecorded voice calls ^[3]. If your team touches any AI voice tools, confirm they don't trip this definition.

State law acceleration. Florida's mini-TCPA (the FTSA) remains one of the most aggressive state analogs, with a private right of action for calls and texts using auto-dialers. Washington, Oklahoma, and Georgia have active proposals. If you dial into high-litigation states, state law risk can beat federal TCPA risk in some fact patterns.

For cold calling teams specifically, watch the FTC's ongoing Telemarketing Sales Rule work, which governs calling hours and abandoned call rates independently of the TCPA ^[5].

How do the National DNC Registry rules change, and how do you stay current on those?

The FTC runs the National Do Not Call Registry under the Telemarketing Sales Rule, not the FCC. That split is a genuine source of confusion. The FTC changes TSR requirements through its own rulemaking, separate from FCC TCPA orders.

To stay current, monitor the FTC's policy page at ftc.gov/policy and sign up for the FTC's business guidance email list. The FTC posts telemarketer guidance at ftc.gov/business-guidance.

The DNC requirement that trips up small teams most often is scrub frequency. You have to scrub your lists against the registry at least every 31 days ^[5]. The registry lives at donotcall.gov ^[11], and you can learn how do i get the do not call list and what subscription access costs. Missing a scrub cycle is one of the most commonly cited violations in FTC and state enforcement.

For the mechanics, the do not call list and do not call telemarketer list pages walk through how access works and what exemptions apply. State DNC lists, where they exist, need separate scrubbing and run on their own update cycles.

One thing founders miss: the TCPA and the TSR use different exemption categories. An exemption in one does not carry over to the other. If you think a campaign is exempt from the DNC registry, verify the basis under both the TSR and 47 U.S.C. § 227 separately.

What should you do when a major TCPA change actually lands?

When you spot a final FCC order or a significant ruling, work the sequence below. It keeps you from panicking over a change that doesn't touch you and from ignoring one that does.

First, read the rule summary, more than the headline. Most TCPA orders have a narrow scope. A ruling about political robocalls, for instance, does nothing to commercial outbound sales calls. Confirm the change actually reaches your calling or texting.

Second, find the effective date. FCC orders often give you 30 to 90 days before a new requirement kicks in. Federal Register publication starts the clock. Use that window to adjust, not to panic.

Third, document your response. Update your compliance log with the rule name, the effective date, and what you changed in your process or tech. This matters if you ever face an audit or a demand letter.

Fourth, if the change is ambiguous, buy a short paid consult. A 30-minute call to confirm your read of a rule runs $150 to $500 at most firms. That's a cheap hedge against a misread that could cost $500 per contact.

Fifth, tell your team. The person running your dialer or sending your SMS campaigns needs to know what changed, more than the legal owner. Most TCPA violations are operational, not intentional. They happen because a rep never heard the rule changed.

LeadCompliant's free TCPA tools and compliance kit can help you run this review against a structured checklist so you don't skip a step when time is tight.

Is there a summary of the most important TCPA rules in one place?

The statute itself, 47 U.S.C. § 227, is at law.cornell.edu/uscode/text/47/227 ^[1]. It's not short, but reading it once gives you the foundation. The FCC's implementing regulations are at 47 C.F.R. Part 64.

The FCC's consumer guide at fcc.gov/consumers is a readable summary, but it's written for consumers, not businesses, so it glosses over consent types and exemptions.

For text campaigns, the rules on prior express written consent for SMS are stricter than for informational calls. The text message marketing rules require written consent that clearly authorizes recurring messages from the specific sender, with a clear disclosure that consent isn't a condition of purchase. The FCC's 2012 Report and Order set this framework, and the one-to-one consent rule builds on it.

The clearest single page for enforcement signals is the FCC's enforcement bureau page at fcc.gov/enforcement, which lists active priorities. When the bureau is actively chasing a type of violation, that tells you where real risk sits. Robocalls and lead generator consent practices are both active priorities right now.

For a grounded overview of the whole statute, the tcpa explainer on this site covers the statute structure, the key definitions, and how the FCC's regulations map to the text of the law.

Frequently asked questions

How often does the FCC actually change TCPA rules?

The FCC issues multiple TCPA-related orders each year, from declaratory rulings that clarify existing rules to full report and order documents that create new requirements. Major rulemaking cycles come roughly every two to four years, but smaller clarifications and targeted rulings drop more often. A monthly check of ECFS docket 02-278 keeps anything from slipping through.

What is the penalty for missing a TCPA rule change and violating the new rule?

Statutory damages under 47 U.S.C. § 227 are $500 per violation for negligent violations and $1,500 per violation for willful or knowing violations. In a class action across thousands of contacts, total exposure scales fast. Claiming you didn't know the rule changed does not erase liability, though good-faith compliance efforts can influence settlement outcomes.

Do I need a lawyer to track TCPA changes, or can I do it myself?

You can do the monitoring yourself with free tools: FCC ECFS docket alerts, Federal Register keyword alerts, and one TCPA blog. Where you need an attorney is interpreting how a specific change applies to your specific practices, especially for ambiguous rulings. A quarterly or as-needed relationship with a TCPA attorney costs far less than ongoing outside counsel for most small teams.

How do state TCPA laws differ from the federal TCPA, and how do I track those?

State mini-TCPA laws can impose stricter consent requirements, shorter opt-out windows, and higher per-violation damages than the federal statute. Florida, Washington, and Oklahoma are among the most aggressive. Track state changes through the NCSL at ncsl.org, state AG press releases for your target states, and TCPA blogs that cover state legislation. Your monitoring list should include every state you actively dial into.

What is the FCC's one-to-one consent rule and does it affect my leads?

FCC 23-107 requires that prior express written consent for telemarketing calls and texts name the specific seller making contact, not a broad list of unnamed partners. It directly affects companies that buy leads from third-party generators where consent covered a whole category of sellers. Litigation delayed its January 2025 effective date, but eventual implementation will require consent language audits for anyone using purchased leads.

How do I set up free alerts to track TCPA regulatory changes?

Three free setups cover the major sources: (1) subscribe to FCC ECFS docket 02-278 email updates at fcc.gov/ecfs, (2) create a Federal Register alert for 'Telephone Consumer Protection Act' at federalregister.gov, and (3) subscribe to one TCPA blog's email list. Together these give you FCC rulemaking, final rule effective dates, and case law commentary with no paid subscription.

What happened in Facebook v. Duguid and why does it still matter?

In 2021 the Supreme Court ruled in Facebook v. Duguid that an ATDS under the TCPA must use a random or sequential number generator to store or produce numbers. That narrowed the definition sharply, meaning many modern predictive dialers may not qualify as ATDSs. It still matters because plaintiffs keep arguing over which systems meet the narrowed definition, and circuit courts apply the ruling differently in practice.

How often do I need to scrub my call list against the National DNC Registry?

The FTC's Telemarketing Sales Rule requires scrubbing against the National Do Not Call Registry at least every 31 days. Missing a scrub cycle is one of the most frequently cited violations in telemarketing enforcement. You also have to keep an internal DNC list and honor opt-out requests within 30 days. State DNC lists, where they exist, have separate scrubbing requirements.

Can the FCC issue a TCPA rule change without a public comment period?

Yes. The FCC can issue a Declaratory Ruling to clarify an existing rule without going through full notice-and-comment rulemaking under the Administrative Procedure Act. These can take effect quickly. The FCC has used declaratory rulings on TCPA issues several times, which is why monthly monitoring of the ECFS docket matters even between major rulemaking cycles.

Where can I read the actual text of the TCPA statute?

The statute is 47 U.S.C. § 227, available in full at law.cornell.edu/uscode/text/47/227. The FCC's implementing regulations are at 47 C.F.R. Part 64. Reading the statute once is worth doing. The definitions of 'automatic telephone dialing system,' 'prior express consent,' and 'telephone solicitation' in the statute text are the source of most litigation, so the exact language matters.

What's the difference between the TCPA and the FTC's Telemarketing Sales Rule?

The TCPA is a federal statute enforced mainly by the FCC and through private lawsuits, covering calls and texts to cell phones, residential lines, and fax machines. The FTC's Telemarketing Sales Rule is a regulation covering most outbound telemarketing, including calling hours, abandoned call rates, and DNC scrubbing. Both apply at once to most outbound sales teams, and an exemption in one does not create an exemption in the other.

How do I know if a new court ruling applies to my business?

Start with which federal circuit the ruling came from and whether you operate in that circuit. Then confirm the facts match your situation: same dialing technology, same consent issue, same call type. If both match, the ruling is directly relevant. If you're uncertain, a 30-minute attorney call is the right tool. Published opinions from your circuit bind your district courts; opinions from other circuits are persuasive but not binding.

Do TCPA rules apply to text message campaigns the same way as calls?

Largely yes, with some differences. The TCPA covers texts to cell phones the way it covers calls, requiring prior express consent for informational texts and prior express written consent for marketing texts. The one-to-one consent rule applies to texts. Some state mini-TCPA laws treat texts and calls differently. The FCC's autodialer rules also apply to texts, so the ATDS debate affects SMS campaigns as much as voice calls.

What's a realistic time commitment to stay current on TCPA changes as a founder?

Realistically, 15 to 30 minutes a week for skimming news and alerts, plus about two hours a quarter for a structured review of your practices against current rules. Once a year, budget a half-day for a full audit, maybe with attorney input. That's manageable alongside running a business. The mistake founders make is doing no monitoring and then burning 40 hours reacting to a demand letter.

Sources

1. Cornell Law School Legal Information Institute, 47 U.S.C. § 227: Statutory damages under the TCPA are $500 per violation and up to $1,500 per willful or knowing violation
2. Supreme Court of the United States, Facebook, Inc. v. Duguid, 592 U.S. 395 (2021): The Supreme Court held in 2021 that an ATDS under the TCPA must use a random or sequential number generator, narrowing the definition
3. Federal Trade Commission, Telemarketing Sales Rule (TSR) compliance guide: The FTC's Telemarketing Sales Rule requires telemarketers to scrub call lists against the National Do Not Call Registry at least every 31 days
4. Federal Register, federalregister.gov: Final FCC rules implementing TCPA changes are published in the Federal Register with effective dates
5. Free Law Project, CourtListener: CourtListener provides free email alerts for federal court opinions including TCPA cases, drawing on PACER data
6. Administrative Procedure Act, 5 U.S.C. § 553: The FCC follows the APA notice-and-comment process for most major rulemaking, giving the public and businesses advance notice before rules take effect
7. National Conference of State Legislatures, ncsl.org: NCSL tracks state telemarketing and consumer protection legislation that creates mini-TCPA requirements at the state level
8. FTC, National Do Not Call Registry for businesses: Businesses can access the National Do Not Call Registry at donotcall.gov to scrub call lists before dialing