Glossary
TCPA
The Telephone Consumer Protection Act (TCPA) is a U.S. federal law that restricts telemarketing calls, texts, and certain automated dialing practices, including those used in B2B sales development. For SDR teams, it governs when, how, and to whom you can place outbound calls or send texts, especially to mobile numbers, and imposes steep per-violation penalties for non-compliance.
TCPA statutory damages are $500 for each violating call or text under the autodialer and prerecorded-voice rules and up to $500 under the do-not-call rules, and a court may increase either award to as much as $1,500 for willful or knowing violations, so even a few thousand non-compliant dials can translate into millions of dollars in exposure, particularly in class actions.
Source: 47 U.S.C. § 227(b)(3) and (c)(5)
Number of Do Not Call complaints received by the FTC in fiscal year 2023, with more than 249 million active numbers on the National Do Not Call Registry, illustrating how heavily telemarketing behavior is monitored.
Source: FTC National Do Not Call Registry Data Book 2023
Increase in TCPA class actions filed in 2025 through midyear, with 1,052 class cases compared with 539 in the same period of 2024, highlighting rapidly escalating litigation risk for outbound calling programs.
Source: TCPAWorld midyear litigation report, July 2025, using WebRecon data
What TCPA means in practice
The Telephone Consumer Protection Act (TCPA) is a U.S. federal law enacted in 1991 to curb intrusive telemarketing, fax spam, and automated calls. It restricts the use of autodialers, artificial or prerecorded voices, and unsolicited texts, and sets rules around calling hours and honoring do-not-call requests. Over time, regulators and courts have applied the TCPA to newer channels, such as SMS and AI-generated voice calls, making it central to modern outbound sales compliance.
In B2B sales development, the TCPA is especially important for cold calling and SMS outreach to mobile numbers. The law requires prior express consent for many informational autodialed calls and texts to wireless numbers, and prior express written consent for telemarketing that uses an autodialer or prerecorded/artificial voice. Its rules also bar telephone solicitations to residential subscribers before 8 a.m. or after 9 p.m. local time and require honoring national and internal do-not-call lists. Crucially, business-to-business calls are not categorically exempt: the restrictions on autodialed and artificial or prerecorded-voice calls and texts to wireless numbers apply whether the number belongs to a consumer or a business contact, and FCC rules extend the do-not-call and calling-hour protections to wireless numbers as described in the FCC's 2003 TCPA order, so SDRs calling prospect cell phones should treat those numbers as within scope.
The TCPA framework has evolved with technology and case law. The Supreme Court’s Facebook v. Duguid decision narrowed what qualifies as an “automatic telephone dialing system,” reshaping how courts view many dialers. At the same time, states have layered on their own “mini-TCPA” laws; a growing number of states have telemarketing statutes that mirror or go beyond the federal TCPA, tightening calling hours, consent standards, and penalties. Recent FCC and state actions explicitly bring text messages and AI voice-cloning technologies under TCPA-style rules, so tools that automate outreach at scale are directly impacted.
For sales organizations, the TCPA is not just a legal concern; it’s a core operational constraint. Violations can trigger statutory damages of $500 to $1,500 per call or text, often aggregated into large class actions, which can quickly reach seven- or eight-figure exposure. Litigation data shows thousands of TCPA lawsuits filed annually and a sharp rise in class actions, underscoring the risk for any company running high-volume outbound calling.
Modern B2B sales teams respond by building TCPA-aware processes into their tech stack and workflows. This includes classifying numbers (wireless vs. landline), tracking consent status and source in the CRM, scrubbing lists against national and internal do-not-call files, enforcing time-of-day rules, and carefully selecting dialers and messaging tools. For outsourced SDR partners such as SalesHive, strong TCPA processes are foundational to scaling compliant cold-calling programs that still deliver pipeline.
The upside of getting TCPA right
What teams gain when this is run well as part of a disciplined outbound motion.
Reduces Legal and Financial Exposure
Adhering to TCPA guidelines significantly lowers the risk of costly lawsuits and regulatory actions. With statutory damages of $500 to $1,500 per violating call or text, even modest non-compliance can become financially devastating, especially when aggregated into class actions.
Improves Prospect Trust and Brand Reputation
A TCPA-compliant calling strategy signals respect for buyer privacy and preferences. Prospects are more receptive when they feel your outreach is permission-based and professional, which can improve live connect quality and downstream conversion rates for B2B SDRs.
Drives Higher-Quality Targeting
Because TCPA requires careful consent and list hygiene, sales teams are pushed to refine targeting and focus on higher-intent, properly permissioned contacts. This often results in better meeting quality and a stronger pipeline-to-revenue conversion profile.
Enables Scalable, Defensible Outreach Processes
Embedding TCPA rules into your dialer settings, CRM fields, and cadences creates repeatable, auditable workflows. This makes it easier to scale SDR headcount or outsource to providers while maintaining consistent compliance across teams and locations.
Aligns Phone, SMS, and Email in a Unified Strategy
TCPA-centered planning forces organizations to think holistically about call and SMS outreach alongside email and other channels. This alignment supports more coordinated, consent-aware sequences that keep your entire sales development motion on the right side of regulation.
How to do it well
Practical guidance from the team that runs outbound campaigns every day.
Build a Written TCPA and Telemarketing Policy
Document how your organization interprets TCPA (with legal counsel), including consent standards, dialing rules, call-time windows, and treatment of mobile vs. landline numbers. Make this policy the backbone of SDR onboarding, ongoing training, and vendor contracts.
Classify and Scrub Contact Data Before Calling
Use data services to flag wireless numbers, run list scrubs against the National Do Not Call Registry where applicable, and maintain a robust internal do-not-call list. Integrate these flags into your CRM so SDRs and dialers cannot call prohibited or high-risk numbers by mistake.
Limit or Avoid Autodialers for Unconsented Mobiles
For B2B prospecting to mobile numbers without prior express written consent, favor human-initiated click-to-dial over high-speed autodialing modes. This reduces the risk that your technology is characterized as an autodialer and aligns outreach with the more conservative side of current case law.
Capture, Store, and Prove Consent
Treat consent as a core data asset: log consent type, source, timestamp, and channel in structured CRM fields. Ensure that web forms, event scans, and inbound inquiries clearly disclose telemarketing intent and automatically sync consent details to your sales systems.
Honor Opt-Outs and DNC Requests Immediately
Make it easy for prospects to say no, via verbal requests, keypress options, or replies like "STOP", and operationalize those signals across all channels. Update internal DNC flags in real time and propagate them to dialers and engagement platforms so no SDR can inadvertently re-contact the same person.
Continuously Monitor Vendors and State Law Changes
Vet outbound calling and SMS vendors for TCPA awareness, obtain clear documentation on how their tools avoid autodialer classifications, and revisit these decisions regularly. Track emerging state mini-TCPA laws and update playbooks as new restrictions or registration requirements come online.
Want this running in your pipeline instead of on your reading list?
Book a strategy callExpert tips on TCPA
What our strategists and SDR coaches tell teams working on this right now.
Treat TCPA as a Data Problem First
Before tweaking scripts or cadences, invest in classifying every phone number in your CRM as wireless, VoIP, or landline and tagging consent status. When SDRs can instantly see these flags, they can choose the right outreach channel and dialing mode without guessing.
Use Click-to-Dial for High-Value Mobile Prospects
For executive mobile numbers sourced from B2B contact data providers, disable aggressive auto-dial modes and rely on human-initiated calls from your SDRs. You'll still reach key stakeholders but with a significantly lower chance of your technology being characterized as an illegal autodialer.
Operationalize Opt-Outs Across All Systems
Make sure a prospect's "do not call" or "STOP" reply instantly updates every relevant platform, CRM, dialer, and engagement tools, via integrations or automation. Periodically test this flow by submitting your own opt-outs and confirming that no further calls or texts are triggered.
Align Legal, RevOps, and SDR Leadership
Schedule regular working sessions between legal counsel, RevOps, and SDR leaders to review tool configurations, scripts, and new state mini-TCPA requirements. This cross-functional approach ensures that policy updates actually show up in your sequences, list logic, and daily SDR behavior.
Demand Transparency from Outsourced Providers
When partnering with call centers or SDR agencies, request detailed documentation of their TCPA policy, dialer setup, DNC scrubbing process, and training program. Build audit rights and compliance KPIs into the contract so you can verify their practices rather than relying on assurances.
Common challenges and pitfalls
The traps that quietly erode results, and what to do instead.
Misunderstanding B2B Applicability
Many teams incorrectly assume the TCPA doesn't apply to B2B calls, especially when dialing company decision-makers. In reality, the TCPA's autodialer and artificial or prerecorded-voice restrictions cover calls and texts to wireless numbers, including business mobiles, exposing SDR programs that rely heavily on mobile data for prospecting.
Navigating Fragmented Federal and State Rules
Sales leaders must juggle federal TCPA rules, FTC Do Not Call regulations, and an expanding patchwork of state mini-TCPAs, each with its own calling hours, consent standards, and penalties. A growing number of states have laws that can be stricter than the federal baseline, complicating nationwide campaigns.
Data Quality and Consent Tracking
Accurate identification of wireless vs. landline numbers, along with reliable consent records, is a persistent challenge. Incomplete or inconsistent CRM data makes it hard to prove consent and increases the risk that SDRs unknowingly violate TCPA or state rules.
Risky Dialer and Automation Choices
Some power dialers, SMS platforms, and AI calling tools may be treated as autodialers or use artificial/prerecorded voices under TCPA interpretations. Without careful selection and configuration, B2B teams can inadvertently turn an efficient tool into a liability multiplier.
Ensuring SDR-Level Compliance at Scale
Even with good policies, day-to-day execution is hard: new SDRs, offshore teams, and outsourced call centers might deviate from scripts, ignore time-zone rules, or mishandle opt-outs. Gaps in training, monitoring, and QA quickly erode your compliance posture.
Put TCPA to work
SalesHive designs outbound programs that align high-volume B2B cold calling with practical TCPA safeguards. Before an SDR ever picks up the phone, SalesHive’s list-building process focuses on verified business contacts, segmentation by geography and time zone, and clear separation of wireless vs. landline numbers. Internal do-not-call flags and suppression logic help keep campaigns away from obvious TCPA and Do Not Call pitfalls while still targeting the right buying committees.
On the execution side, SalesHive’s U.S.-based and Philippines-based SDR teams use structured call cadences, compliant scripts, and human-initiated dialing modes instead of risky robodialing. Their cold-calling and SDR outsourcing services are tightly integrated with email outreach (including AI-powered personalization via eMod), so teams can lean more on personalized email touches where phone outreach is higher risk. With over 100,000 meetings booked for 1,500+ clients, SalesHive brings proven operational discipline to scaling outbound while working within the TCPA and evolving state-level telemarketing rules, giving revenue leaders confidence in both pipeline growth and compliance posture.
TCPA FAQs
Does the TCPA apply to B2B cold calling?
Can my SDRs cold call prospect cell phones without consent?
How is the TCPA different from the Do Not Call rules?
What counts as an autodialer under the TCPA today?
How does TCPA affect SMS and text-based prospecting?
Am I liable if my outsourced SDR provider violates TCPA rules?
Related terms
Other concepts worth knowing in the same corner of outbound.