DNC & TCPA Compliance for Outbound Call Centers
The TCPA is the most litigated federal statute in the US. A single non-compliant outbound campaign can expose your business to $500–$1,500 per call in statutory damages. This guide covers every requirement your program must meet before the first dial.
What the TCPA actually requires
The Telephone Consumer Protection Act restricts autodialed calls, prerecorded messages, and text messages to consumers. It applies to every business making outbound calls — including businesses that outsource calling to a third-party call center. If your call center partner violates TCPA, the statutory damages accrue to your company.
The law has two distinct tracks. For calls to cell phones using an automatic telephone dialing system (ATDS) or prerecorded voice, TCPA requires prior express written consent — a clear, signed authorization that is not a condition of purchase. For calls to residential landlines, the standard is lower, but the National DNC Registry and calling hours restrictions still apply in full.
The Supreme Court's 2021 ruling in Facebook v. Duguid narrowed the definition of an ATDS, but predictive dialers and certain click-to-call systems may still qualify. Any dialer technology used in outbound programs should be reviewed by TCPA counsel before deployment.
Your liability, not your vendor's
TCPA violations are the client's liability, not the call center's. If an agent calls a DNC-registered number, makes a call outside permitted hours, or fails to honor an opt-out, the statutory damages accrue to your business. This is why compliance infrastructure at your call center partner is a business-critical requirement, not a nice-to-have.
The complete outbound compliance checklist
Every outbound program must satisfy all six areas before the first call is dialed. TCPA litigation often comes down to recordkeeping — if you cannot prove compliance, you lose.
Consent documentation
- Prior express written consent captured at point of lead generation
- Consent records stored with timestamp, IP address, and source URL
- Consent language reviewed by legal counsel
- Opt-out mechanism clearly communicated at time of consent
DNC list scrubbing
- National DNC Registry scrub within 31 days of call date
- State-specific DNC scrubs for FL, TX, IN, WY, PA, and others
- Internal DNC list maintained and honored within 30 days of opt-out
- All scrub records retained with date, registry version, and results
Calling hours enforcement
- Dialer configured to use called party's local time zone
- Calling hours enforced at system level — not just agent training
- Holiday and weekend calling policies documented
- Time-zone logic tested before each campaign launch
Call identification
- Agent scripts include required caller identification language
- Caller ID displays a working callback number
- Prerecorded messages include full identification at the start
- Company name and contact information provided on every call
Opt-out handling
- Opt-out requests captured in real time by agents
- Internal DNC list updated within 24 hours of request
- Opt-out honored across all campaigns, not just the one referenced
- Opt-out confirmation sent to consumer
Recordkeeping (4-year minimum)
- Call logs retained with date, time, duration, and disposition
- Consent records retained with full audit trail
- DNC scrub records retained with scrub date and registry version
- Agent TCPA training records retained and signed
State DNC registries: the federal list is the floor
The National DNC Registry is the baseline — not the ceiling. Several states maintain their own Do Not Call lists with stricter requirements, shorter scrub windows, and separate registration fees. A call that is fully compliant with federal TCPA rules may still violate state law if you are calling into one of these states without the proper registrations and scrubs.
Separate state DNC list + telemarketer registration required. Annual fee applies. Covers some B2B calls federal law exempts.
Texas No-Call List administered by the PUC. Separate registration required. Civil penalties up to $5,000 per violation.
Indiana DNC List with narrower exemptions than federal law. Separate registration required.
Own DNC registry. Applies to calls made from within Wyoming and calls made to Wyoming residents from outside the state.
State DNC list and telemarketing registration requirements with additional disclosure rules.
No separate DNC registry but CCPA imposes data handling requirements on contact lists with no federal equivalent.
Additional states — including New York, Connecticut, Illinois, and Michigan — have telemarketing statutes with disclosure requirements and registration rules that go beyond federal law. Multi-state outbound programs require compliance infrastructure that tracks all applicable state requirements, not just the federal baseline.
How Summit Call Solutions manages TCPA & DNC compliance
At Summit Call Solutions, TCPA and DNC compliance is built into every outbound program from day one — not bolted on after the fact. Our compliance infrastructure covers every item on the checklist above, and we document everything for client audit purposes.
Automated DNC scrubbing against the National Registry and all applicable state lists before every campaign launch
Time-zone-aware dialing enforced at the system level — not just agent training
Consent verification as part of lead intake — we will not dial a contact without documented consent
100% call recording for audit and dispute resolution, retained for the full 4-year TCPA statute of limitations
Dedicated compliance review for every new program before go-live
Agent TCPA training completed before first call, documented and refreshed annually
Summit operates two company-owned facilities — our Enfield, Connecticut center and our near-shore center — both US-managed and held to the same compliance standards. We maintain active subscriptions to all applicable state DNC registries and handle state telemarketer registrations as part of standard program setup. See our full compliance and security standards for more detail.
Frequently asked questions
What is the difference between TCPA and DNC compliance?
TCPA (Telephone Consumer Protection Act) is a federal law governing how outbound calls can be made — covering consent requirements, dialer technology, calling hours, and identification requirements. DNC (Do Not Call) compliance refers specifically to honoring the National Do Not Call Registry and applicable state registries. Both are required for compliant outbound programs, but they address different aspects of the calling process.
Does TCPA apply to B2B outbound calls?
TCPA primarily targets calls to consumers, but B2B calls are not entirely exempt. Calls to cell phones — even for business purposes — may require consent if an ATDS is used. Some state telemarketing laws, including Florida's, explicitly cover certain B2B calls. Any outbound program calling cell phone numbers should have TCPA counsel review the program design.
What happens if my call center partner violates TCPA?
TCPA violations are your liability as the client, not your call center's. Statutory damages run $500 per call for negligent violations and $1,500 per call for willful violations. Class action suits — where a single campaign may have called thousands of non-consenting numbers — routinely reach eight figures. This is why compliance infrastructure at your call center partner is a business-critical requirement.
How long must TCPA compliance records be retained?
The TCPA statute of limitations is four years, so compliance records — including consent documentation, DNC scrub records, call logs, and agent training records — should be retained for a minimum of four years. In practice, retaining records for five years provides a reasonable buffer.
Run compliant outbound programs without the compliance overhead
Summit Call Solutions handles DNC scrubbing, consent verification, state registrations, and TCPA recordkeeping as part of standard program operations. If your current call center partner cannot walk you through each item on this checklist, that is a risk your business is carrying.