If you buy leads or run any kind of outbound, the Telephone Consumer Protection Act (TCPA) shapes how you're allowed to contact people. It's one of the most litigated consumer laws in the country, and insurance is a frequent target. This is general education to help you ask better questions — not legal advice. Run your specifics past qualified counsel.
The TCPA is a federal law that restricts certain phone calls and text messages, especially those made with automated dialing technology or prerecorded voices. It was written to curb unwanted telemarketing, and over the years courts and the FCC have layered on interpretation that affects everyday agency work.
Why it matters for you specifically:
Statutory damages are steep. The law allows for damages per violation, and a single bad calling list can multiply fast.
Plaintiff attorneys watch this space. Insurance outreach is a known enforcement and litigation hotspot.
Liability can follow the lead. How a lead was generated and what the consumer agreed to can land on the agency that calls them, not just the vendor that sold the data.
The takeaway isn't fear — it's that compliance is a competitive advantage. Agencies that document consent and respect the rules can scale outbound without the risk hanging over every campaign.
What counts as consent under the TCPA?
Consent is the center of TCPA compliance, and not all consent is equal. The framework generally distinguishes between two levels.
Prior express consent — the consumer agreed to be contacted, often sufficient for non-marketing or manually dialed informational calls.
Prior express written consent — a higher bar typically required for telemarketing calls and texts made with an autodialer or prerecorded/artificial voice. It usually involves a clear, conspicuous disclosure and the consumer's signature (an electronic signature counts).
Consent has to be specific and documented. "They filled out a form somewhere" is not a record. The disclosure language, the timestamp, the IP address, and the exact source page are what hold up when a claim arrives.
When you buy leads, ask the vendor for the consent artifacts: the disclosure the consumer saw, the list of partners they agreed to be contacted by, and proof of opt-in. If a vendor can't produce that, you're inheriting their risk.
What about autodialers and prerecorded calls?
The TCPA draws a sharp line around technology. Calls and texts placed using an automatic telephone dialing system (ATDS) or an artificial/prerecorded voice carry stricter consent requirements than manually dialed calls.
The definition of an autodialer has been narrowed and debated in the courts, so the safe posture is to know exactly what your dialing platform does and how it places calls. A few practical points:
Prerecorded voice messages to consumers generally require the higher written-consent standard for marketing.
Ringless voicemail has been treated by regulators as a call subject to TCPA rules — don't assume it's a loophole.
Text messages are treated like calls under the TCPA, so the same consent logic applies to SMS outreach.
A live transfer changes the dynamic but doesn't erase it. The consumer requested contact and is talking to a person in real time, which is a strong position — but the underlying consent and the way the call was initiated still matter.
How do quiet hours and revocation work?
Two operational rules trip up agencies more than anything else.
Quiet hours. Federal rules restrict telemarketing calls to before 8 a.m. and after 9 p.m. in the consumer's local time zone. The consumer's local time is what counts — not your office's. For multi-state campaigns, that means a lead's area code or, better, their actual location drives when you can dial. State laws can be stricter, and several states impose tighter windows.
Revocation. A consumer can revoke consent at any time, through any reasonable means. Recent FCC guidance has reinforced that revocation must be honored promptly and that you can't force consumers into a single rigid opt-out method. Once someone says stop — by phone, text, email, or reply — that has to flow into your suppression list and stick.
Rule
What it means in practice
Quiet hours
Dial 8 a.m.–9 p.m. in the consumer's time zone, stricter where state law requires
Revocation
Honor opt-outs promptly through any reasonable channel
Reassigned numbers
A number may belong to someone new — consent doesn't transfer
Record retention
Keep consent and opt-out records to defend a claim
Reassigned numbers deserve a mention: phone numbers get recycled, and consent given by a prior owner doesn't carry to whoever holds the number now. Scrubbing tools exist to flag this risk.
How should an agency build a compliance posture?
You don't need to become a lawyer, but you do need a defensible process. The agencies that stay out of trouble treat compliance as plumbing, not paperwork.
Vet lead sources. Demand consent documentation before you pay, and keep it.
Centralize suppression. One DNC and opt-out list every dialer and texter checks before contact.
Enforce quiet hours by the consumer's clock, automatically where possible.
Train and recheck. Agents should know what to say when asked "how did you get my number?" and how to log a revocation.
Retain records. If you can't reproduce the consent, you can't defend it.
Compliance and performance aren't in tension. Clean lists, real consent, and respected quiet hours mean you're calling people who actually want the call — which is also how you close more of them.
The platform you use should make the right behavior the default: time-zone-aware dialing, suppression that every channel respects, and call records you can pull on demand. That's part of how Truvo IQ is built. Just remember this article is education, not legal advice — bring your specific questions to qualified counsel before you set policy.
