Initial research article published September 26, 2026.
Authority, scope and status
The Telephone Consumer Protection Act, 47 U.S.C. §227, restricts certain calls and texts made with automated systems or artificial/prerecorded voices and supports federal rules on telemarketing and do-not-call practices. FCC rules distinguish informational and telemarketing communications, consent standards and revocation. The statute also supports a private right of action, making evidence of consent, purpose, number ownership and opt-out handling operationally important. The FCC's consent framework is not a generic permission slip. Telemarketing often requires prior express written consent; other communications can turn on prior express consent, the technology used and the called number. Reassigned numbers, channel changes and mixed-purpose campaigns complicate reliance on old records. Court decisions and FCC orders have continued to refine autodialer and revocation questions, so counsel should map each use case to current law rather than reuse a single marketing standard.
Evidence to retain
| Control | Evidence | Failure mode |
|---|---|---|
| Consent | Timestamp, disclosure, source, scope, number | Consent cannot be tied to the campaign |
| Purpose | Service, collection, fraud alert or marketing classification | An operational message contains promotion |
| Number hygiene | Ownership, reassignment and suppression checks | Consent does not necessarily follow the number |
| Opt-out | Channel capture and enterprise suppression | A stop request is missed in another platform |
| Vendor governance | Scripts, dialer settings, logs, QA and audit rights | Third-party activity cannot be reconstructed |
| Governance | Legal inventory, exceptions, testing and complaints | Production configuration diverges from policy |
Practical implementation
A bank should inventory outbound journeys across servicing, collections, fraud, authentication and marketing; define the legal basis for each; centralize suppression; and test production behavior after every platform or vendor change. Complaint and litigation metrics should be linked back to consent source, campaign, template and vendor. The important governance distinction is between a customer who can be contacted and a particular message that can be sent using a particular technology at a particular time.