Skip to content
AppendIQ

APPENDIQ / RESEARCH

Compliant Dialing in 2026: Federal and State DNC Rules, Consent, and Data Hygiene

AppendIQ Research · Research date: · 9 min read

Blue data pathways pass through review checkpoints, with some paths held aside.
Conceptual illustration.
In this article
  1. Start with the campaign, then check the rules
  2. Keep national and company-specific suppression separate
  3. Consent evidence must fit the actual call
  4. Build an opt-out process that can handle changing rules
  5. Federal calling hours are only the starting point
  6. State lists and registration are different obligations
  7. Use data hygiene to improve the evidence
  8. Keep records that explain each decision
  9. Frequently asked questions
AT A GLANCE / DISTINCT QUESTIONS, DISTINCT CHECKS
  1. Contact data

    Understand the records you hold.

  2. Screening signals

    Review selected filters and coverage.

  3. Campaign review

    Assess consent and applicable requirements.

A phone number becomes eligible for a campaign only after several questions have been answered. Who will receive the call? Which seller is calling? What is the purpose? How will the call be placed? Which jurisdictions apply, and has the recipient asked the business to stop?

A clean-looking spreadsheet cannot answer those questions by itself. An appended number, a successful validation check, or an accurate identity match can improve contact data without establishing permission to call.

For outbound teams, the practical goal is a repeatable decision process: establish eligibility, apply suppression, enforce the correct calling restrictions, and preserve evidence of what happened. This guide explains the federal baseline and selected state differences. The accompanying selected-state reference covers Connecticut, Florida, Pennsylvania, and Wisconsin. It is not a nationwide comparison or legal clearance.

Start with the campaign, then check the rules

Before importing leads into a dialer, document the seller, audience, offer, call technology, lead source, and anticipated states. Separate live-agent calls from artificial-voice or prerecorded calls, and evaluate texts as their own channel. Have counsel resolve uncertain classifications before launch.

Federal analysis usually includes the FTC’s Telemarketing Sales Rule, or TSR, and the FCC’s TCPA implementing rules. Their coverage and exceptions differ. State law adds another layer. The FTC expressly warns that TSR compliance does not displace state requirements. FTC telemarketing compliance guide

“B2B” also needs careful classification. A business-related lead can contain someone’s personal mobile number. The FTC’s 2024 amendments extended prohibitions on material misrepresentations and false or misleading statements to B2B telemarketing; they did not make every consumer telemarketing requirement apply identically to every B2B campaign. FTC 2024 rule announcement

Keep national and company-specific suppression separate

For covered campaigns, synchronize calling lists with the National Do Not Call Registry at least every 31 days. Maintain appropriate seller access and an audit trail identifying the registry version used. A vendor’s statement that a list was scrubbed does not explain whether the correct seller, numbers, and dates were covered. FTC DNC questions for telemarketers and sellers

A person’s direct request to stop calls belongs in a separate company-specific suppression process. The FTC explains that a qualifying established business relationship can support certain live-agent calls to a registered number, but that relationship does not override the consumer’s seller-specific do-not-call request. Telemarketing Sales Rule, 16 CFR Part 310

Operationally, suppression should happen before a campaign export and again at the point of dialing. Otherwise a request recorded in the CRM can arrive too late for an already-exported list. Connect agent dispositions, inbound requests, and relevant vendor systems to the same suppression controls.

Test the entire path. Submit a test opt-out, confirm that it reaches the correct seller’s records, and verify that queued calls stop. Check that a later data append or list reimport cannot silently restore the number to an active campaign.

The FCC rules generally require prior express written consent for covered advertising or telemarketing calls using an automatic telephone dialing system or an artificial or prerecorded voice to specified numbers, and for artificial or prerecorded telemarketing calls to residential lines, subject to applicable exceptions. The written-consent definition includes a signed agreement, the authorized number, and specified disclosures. The exact technology, recipient, and purpose matter. 47 CFR 64.1200

Build a reviewable consent record containing:

  • The form or interaction where permission was obtained
  • The exact disclosure and its version
  • The seller or callers covered by the authorization
  • The telephone number and applicable channels
  • The signature or other evidence supporting the required agreement
  • Capture time, source, and subsequent revocations

An IP address or vendor certificate can support provenance, but should not be treated as the whole analysis. Ask whether a reviewer could reconstruct what the person saw and agreed to. Quarantine records whose supporting evidence cannot be retrieved.

One frequently repeated claim needs correction: the Eleventh Circuit vacated the FCC’s challenged one-to-one consent restrictions on January 24, 2025. Do not present that vacated rule as a new requirement taking effect in 2026. The decision does not establish that every purchased lead or broad disclosure supplies valid consent under all remaining laws. Insurance Marketing Coalition v. FCC, court opinion

AI voice deserves the same scrutiny. The FCC classified AI-generated voices as artificial voices under the TCPA. An interactive or human-sounding presentation does not remove that classification. FCC announcement archived by GovInfo

Build an opt-out process that can handle changing rules

Design opt-outs for prompt, reliable suppression. Consumers should have clear ways to stop unwanted contact, and your team should be able to trace a request from receipt through every affected campaign and calling partner. Do not turn a statutory processing deadline into a target delay.

Have counsel verify the revocation rules and effective dates governing your campaign before changing accepted opt-out methods or narrowing suppression. This guide recommends a conservative operational process and does not resolve the recent federal consent-revocation transition.

Assign an owner to review ambiguous requests, but keep the number out of the affected campaign while the issue is resolved. Do not make a consumer repeat a clear request to each calling vendor working for the same seller.

Federal calling hours are only the starting point

The TSR generally prohibits covered outbound calls to a person’s home before 8 a.m. or after 9 p.m. at the called location, absent prior consent to call outside that window. FCC restrictions and state law must also be considered. Telemarketing Sales Rule, 16 CFR Part 310

Selected state examples show why one national dialer setting is inadequate:

  • Connecticut: The state consumer-protection agency identifies 9 a.m. to 8 p.m. in the consumer’s local time zone as permitted telemarketing hours. Connecticut DCP
  • Florida: Section 501.616 limits covered commercial telephone solicitation calls to 8 a.m. through 8 p.m. in the called person’s time zone and prohibits more than three calls on the same subject or issue in 24 hours, regardless of the originating numbers. Applicability and exemptions require separate review. Florida statute
  • Pennsylvania: A near-term transition matters. Act 47 of 2026 changes the calling window to 9 a.m. through 7 p.m. and adds a Sunday prohibition, effective October 18, 2026. Those changes were not yet effective on this article’s October 13 research date. Review the existing legal-holiday restriction and the amended act together. Pennsylvania Act 47

Store enough reliable location information to apply the correct rules. An area code alone should not be treated as proof of someone’s current physical location. Where jurisdiction or local time is unresolved, hold the record for review rather than guessing.

State lists and registration are different obligations

The existence of a state telemarketing law does not necessarily mean that businesses must obtain a wholly separate consumer list. Conversely, using the federal registry does not settle all state obligations.

Florida maintains a state-specific DNC list, and its business guidance says that obtaining the national list does not replace obtaining the state list. The same guidance distinguishes the DNC program from telemarketing licensing. Florida DNC program

Wisconsin uses the FTC-managed registry to enforce state law, while maintaining a separate telephone-solicitor registration requirement. Its guidance also explains that the state’s current-client exception differs from the federal 18-month purchase-based relationship exception. Wisconsin registry explanation, Wisconsin registration guidance

Maintain a state-by-state review record for list access, registration, licensing or bonding, calling windows, holidays, frequency limits, required disclosures, and applicable consent standards. Record the supporting source, effective date, campaign assumptions, reviewer, and next review trigger. An unchecked field should remain an open question.

Use data hygiene to improve the evidence

Recommended pre-dial checks include number normalization, deduplication, stale-record review, identity confidence, and reassignment assessment where relevant. Preserve the source and date of each field so later reviewers can distinguish original information from an append.

The FCC’s Reassigned Numbers Database can support a limited safe harbor when its requirements are met, including reliance on an erroneous “no” response from the most recent database. Callers remain responsible for proving the required query, including when an authorized agent performs it. A reassignment check does not itself establish consent. FCC reassigned-number guidance

Use litigation-risk screening, if adopted after appropriate review, only as a separate risk signal. It cannot replace DNC checks, consent evidence, or honoring opt-outs. The absence of a litigation flag says nothing about whether a recipient may lawfully be called. Apply the same required protections to everyone.

For any enrichment workflow, require an export that keeps compliance-related provenance alongside the appended fields. Avoid a single “safe to call” label whose meaning cannot be reconstructed.

Keep records that explain each decision

The FTC’s updated TSR recordkeeping requirements include five-year retention for required records. Relevant categories include call details, scripts, consent evidence, service providers, DNC-list access, and stop-calling requests. The rule contains category-specific details and exceptions; do not rely on older summaries that still describe two-year retention. FTC recordkeeping update, 2024 final rule

A useful internal audit asks a simple question: can the team explain why this number entered this campaign on this date? The answer should connect the seller, permission or other legal basis, suppression results, applicable calling window, dialer configuration, and outcome.

Frequently asked questions

Is a number that is absent from the DNC registry automatically callable?

No. Consent requirements, company-specific requests, state restrictions, and other applicable rules still require review. DNC screening addresses one part of eligibility. FCC calling rules

Can a seller rely on a previous customer relationship?

Sometimes, for qualifying live-agent calls under federal DNC rules. The relationship, timing, seller, opt-out history, and applicable state exception must be checked. Wisconsin illustrates why the federal relationship test cannot simply be copied everywhere. FTC guidance, Wisconsin guidance

Does a data vendor take over the caller’s compliance responsibility?

A vendor can perform specified tasks, but outsourcing requires oversight and retrievable evidence. For example, the FCC places the reassigned-number safe-harbor proof burden on the caller even when an agent runs the query. FCC guidance

What should be checked before the next campaign?

Confirm the seller and call classification, retrieve required permission evidence, apply fresh suppression, review state requirements, test opt-outs, and verify records can be retrieved. Resolve any uncertain eligibility before dialing.

Last researched: October 13, 2026. Methodology: primary federal regulations, FTC/FCC materials, judicial opinions, state statutes, and state agency guidance. State examples and the companion reference are selective and cover only the stated topics. The federal consent-revocation transition is outside this guide’s resolved scope. Educational information only, not legal advice or a representation that a particular campaign complies. Qualified counsel should review the campaign and the latest effective rules before launch.

Sources

  1. FTC telemarketing compliance guide
  2. FTC 2024 rule announcement
  3. FTC DNC questions for telemarketers and sellers
  4. Telemarketing Sales Rule, 16 CFR Part 310
  5. 47 CFR 64.1200
  6. Insurance Marketing Coalition v. FCC, court opinion
  7. FCC announcement archived by GovInfo
  8. Connecticut DCP
  9. Florida statute
  10. Pennsylvania Act 47
  11. Florida DNC program
  12. Wisconsin registry explanation
  13. Wisconsin registration guidance
  14. FCC reassigned-number guidance
  15. FTC recordkeeping update
  16. 2024 final rule
← All research & guides