AI Cold Calling TCPA Compliance: 2024 FCC Ruling Explained

The short answer: AI-generated voices used in outbound calls are legally classified as artificial or prerecorded voice calls under the Telephone Consumer Protection Act (TCPA). The FCC made this explicit in a February 2024 ruling. That means the same consent rules that apply to robocalls apply to your AI cold calling campaigns — and the penalties for getting it wrong are severe. This article walks you through what the law actually says, what changed in 2024, and the practical compliance steps every team running AI outbound calls should have in place.

Nothing in this article is legal advice. TCPA compliance is fact-specific and evolving. Consult qualified legal counsel before launching AI calling campaigns.

What the TCPA Actually Covers

The Telephone Consumer Protection Act, enacted in 1991 and significantly amended since, restricts how businesses can contact consumers by phone. The relevant restrictions for AI cold calling fall into three main buckets:

Artificial or prerecorded voice calls: Calls to any telephone number — landline or mobile — using an artificial or prerecorded voice require prior express consent from the recipient. For marketing calls, that consent must be written.
Autodialer calls to cell phones: Calls placed using an automatic telephone dialing system (ATDS) to mobile numbers also require prior express consent for non-emergency purposes.
Do Not Call (DNC) rules: Separate from the consent rules, the National Do Not Call Registry and company-specific DNC lists restrict who you can call regardless of how the call is made.

Violations can result in statutory damages of $500 per call, trebled to $1,500 for willful violations. Because AI calling systems can make thousands of calls, class-action exposure can be enormous.

The 2024 FCC Ruling: AI Voices Are Not a Loophole

In February 2024, the FCC issued a declaratory ruling clarifying that calls made using AI-generated voices qualify as “artificial voice” calls under the TCPA. The ruling was a direct response to the rapid adoption of AI voice technology and concerns that businesses were treating AI-generated audio differently from traditional robocall recordings.

The FCC’s position is straightforward: if a voice on an outbound call was generated by artificial intelligence rather than a live human speaking in real time, it is an artificial voice — full stop. It does not matter whether the AI sounds realistic, whether it can hold a two-way conversation, or whether the campaign is framed as “conversational AI” rather than a robocall. The classification is based on how the voice was produced, not how it sounds.

What this means operationally: Every outbound AI cold call to a U.S. consumer number is subject to the TCPA’s prior express written consent requirement if it has any marketing purpose. There is no technical workaround.

Prior Express Consent: What It Means and What It Requires

TCPA distinguishes between different levels of consent depending on the type of call and whether it has a marketing component.

Informational vs. Marketing Calls

For purely informational calls — appointment reminders, fraud alerts, order confirmations — prior express consent (which can be oral or implied in some cases) may be sufficient if you have an established business relationship. But for any call that includes a marketing or promotional element, you need prior express written consent. Most AI cold calling campaigns are marketing calls.

What “Written Consent” Looks Like in Practice

Under FCC rules, prior express written consent for marketing calls must:

Be a signed agreement (electronic signatures qualify under the E-SIGN Act)
Clearly authorize the specific seller or entity making the calls
State that calls may be made using an artificial or prerecorded voice
Not be a condition of purchasing any good or service

A checkbox on a web form, a signed opt-in confirmation, or a recorded verbal agreement that meets these criteria can all qualify — but the burden of proof is on you to document and retain that consent. Vague or buried opt-in language embedded in terms and conditions is unlikely to hold up.

The One-to-One Consent Rule (2024 Update)

The FCC also finalized a rule in 2024 requiring that prior express written consent be granted on a one-to-one basis — meaning consent to be contacted by one company does not extend to affiliated companies, lead aggregators’ partners, or any third party. If you purchased a lead list where the lead originally consented to contact from “marketing partners,” that consent almost certainly does not satisfy the requirement for your AI calls. This is one of the most common compliance gaps agencies and sales teams run into.

Do Not Call Lists: A Separate (Parallel) Obligation

Even if you have valid consent, the National DNC Registry and company-specific DNC lists impose separate restrictions. Key rules:

Scrub call lists against the National DNC Registry before dialing. Registrations must be honored within 31 days of a consumer registering.
Maintain an internal DNC list. If a prospect tells your AI agent they do not want to be called, that request must be honored promptly and the number added to your internal DNC list.
The established business relationship (EBR) exemption allows calls to existing customers in some circumstances, but this is narrow and does not exempt you from the TCPA’s artificial voice consent requirements.

For industries like real estate, mortgage, and insurance — where lead lists are frequently purchased — DNC scrubbing must happen before every campaign, not just once at list acquisition.

Calling-Time Restrictions and Caller ID Rules

Two additional TCPA-related rules that often get overlooked in AI calling deployments:

Time-of-Day Restrictions

Telemarketing calls — including AI calls — may only be made between 8:00 a.m. and 9:00 p.m. in the recipient’s local time zone, not your team’s time zone. If you’re running a national AI calling campaign from an East Coast office, calling a California number at 7:00 p.m. your time is a TCPA violation. Your dialing system needs to be time-zone aware at the individual number level.

Caller ID Requirements

Under the Truth in Caller ID Act (which the FCC enforces alongside TCPA), you may not transmit misleading or inaccurate caller ID information. Your AI call must display a phone number that is either your actual number or one you are authorized to use and that can receive calls or be used to opt out. Spoofing or displaying numbers you do not own is illegal.

Industry-Specific Compliance Considerations

Compliance risk is not uniform across industries. Here’s how it plays out in the verticals most likely running AI cold calling campaigns:

Industry	Key Compliance Pressure Points
Real Estate	Cold lists of homeowners rarely carry valid TCPA consent; cell phone scrubbing and DNC checks are essential
Insurance	High volume of purchased leads; one-to-one consent rule creates significant risk for shared lead data
Solar	Aggressive cold outreach history means heightened regulatory scrutiny; document consent meticulously
Mortgage	Subject to TCPA plus additional federal lending marketing rules; dual compliance review needed
Home Services	Often calls landlines; artificial voice rules still apply to landlines under 2024 FCC ruling
B2B / SaaS	Business numbers generally have fewer TCPA protections, but calling mobile phones of business contacts still carries risk
Recruiting	Calling candidates on personal cell phones requires the same consent analysis as consumer marketing
Lead-Gen Agencies	Highest risk: acting as the caller on behalf of multiple clients means the agency may be the liable party

Practical Compliance Checklist for AI Cold Calling Campaigns

Before any AI calling campaign goes live, work through the following:

Classify the call purpose. Is it marketing, informational, or transactional? Marketing calls need prior express written consent.
Audit your consent records. Do you have documented, one-to-one consent for each number you intend to call? Is the consent specific to AI or prerecorded voice calls?
Scrub for cell phones. Identify which numbers are mobile. TCPA applies differently — and more stringently — to cell phones.
Run DNC scrubs. Scrub against the National DNC Registry and your internal DNC list. Repeat this before each campaign, not just once.
Configure time-zone controls. Ensure your AI calling platform enforces 8 a.m.–9 p.m. local-time restrictions per recipient, not per caller.
Verify caller ID compliance. Confirm the number transmitted is one you own and that it can receive inbound calls or handle opt-out requests.
Build in a real-time opt-out mechanism. Your AI agent must be able to process opt-out requests during the call and trigger immediate DNC list updates.
Log everything. Consent records, call logs, opt-out requests, and DNC scrub timestamps should be retained. If you’re ever in litigation, documentation is your defense.
Review lead sources contractually. If leads come from a third party, confirm in writing what consent was captured and whether it satisfies one-to-one requirements.
Have legal counsel review your campaign setup. Compliance requirements evolve; a one-time legal review of your consent flow is not a substitute for ongoing counsel.

Common Mistakes Teams Make

A few patterns come up repeatedly when AI calling campaigns generate legal exposure:

Assuming B2B is exempt. Business-to-business calls have more flexibility, but calling a person’s mobile phone for business purposes still triggers TCPA analysis. “It’s a business call” is not a blanket exemption.
Relying on purchased list consent. Vendors often claim their lists are “TCPA compliant,” but the one-to-one consent rule means that consent given to the list vendor or its unnamed partners does not transfer to you.
Not scrubbing before every campaign run. DNC registrations and internal opt-outs accumulate between campaigns. A list that was clean three months ago may not be clean today.
Calling outside permitted hours due to time-zone mismatches. Automated systems default to the caller’s time zone if not explicitly configured otherwise.
Failing to disclose the AI nature of the call. While TCPA focuses on consent rather than disclosure per se, some states have enacted or are considering laws requiring AI call disclosure. Staying ahead of this is prudent.
Treating the AI agent’s live-sounding voice as a legal distinction. As the FCC’s 2024 ruling made clear, how realistic the voice sounds is irrelevant. It’s still an artificial voice.

Choosing Compliant AI Calling Technology

Your AI calling platform should make compliance easier, not harder. When evaluating tools, look for built-in DNC scrubbing, time-zone enforcement, opt-out handling during calls, and call logging with exportable records. Platforms that let you bypass these controls create liability that lands with you, not the software vendor.

For context, QALRA — our own AI cold-calling platform — is designed with these operational requirements in mind, including time-zone controls and opt-out handling. Any platform you use should be evaluated against the same criteria, and technology is not a substitute for a sound legal compliance program.

Frequently Asked Questions

Does the TCPA apply to B2B AI calls?

It depends on the number being called. The TCPA does not distinguish between business and consumer calls when a mobile phone is involved — if you’re calling a business contact’s personal cell phone, the consent rules apply. Calls to direct business landlines are generally lower risk, but the artificial voice rules under TCPA still technically apply to landlines. B2B teams should still consult counsel and, at minimum, run DNC scrubs.

Can I use a lead list I purchased if the vendor says it’s “TCPA compliant”?

Not safely under the 2024 one-to-one consent rule. Consent in a lead vendor’s database was typically granted to that vendor or broadly to “marketing partners” — not specifically to your company for AI or prerecorded voice calls. Vendor representations of compliance do not transfer legal liability to them. You remain responsible for ensuring valid, specific consent exists for each number you call.

What happens if a prospect verbally asks the AI agent to stop calling?

That is a valid opt-out request and must be honored immediately. Your AI calling system must be capable of recognizing opt-out language during a call, ending the call appropriately, and triggering an internal DNC list update. Failing to honor opt-out requests is itself a separate TCPA violation.

Do state laws add additional requirements on top of TCPA?

Yes, and significantly so. States including California, Florida, and Texas have enacted telemarketing and call recording laws that are stricter than federal TCPA minimums. California’s CCPA also intersects with how contact data is gathered and used. If you are calling into multiple states — which most national campaigns do — you need to understand the most restrictive state law applicable to each call, not just baseline federal rules.

Is it legal to use an AI voice without disclosing it’s AI?

Federal TCPA rules do not currently mandate disclosure that a voice is AI-generated (as distinct from consent requirements), but this is an evolving area. Some states are considering or have passed disclosure requirements. Beyond legality, failure to disclose can create reputational risk and consumer trust issues. Many compliance-forward teams include a brief disclosure at the start of AI calls regardless of whether it is strictly required.

How long do I need to retain consent records?

TCPA does not specify a universal retention period, but given the four-year federal statute of limitations for TCPA claims, retaining consent documentation for at least four years from the date of the last call covered by that consent is a commonly cited benchmark. Your legal counsel may recommend longer depending on your industry and state requirements.