Call Center Compliance — The Working Checklist

The Call Center Compliance Checklist: Four Blocks, Run on a Calendar

A workable call center compliance checklist has four blocks: pre-campaign list work, per-call conduct, recordkeeping, and a quarterly audit. Every item below names its federal rule — mostly the FCC’s TCPA regulations at 47 C.F.R. § 64.1200 and the FTC’s Telemarketing Sales Rule at 16 C.F.R. Part 310 — so your team can verify each one. Put the recurring items on a calendar and compliance becomes a monthly chore instead of a legal exposure. Current as of July 2026.

This page is education, not legal advice. A dialer is a tool — the dialer itself is compliant software, but compliance depends on user behavior. Enzo does not scrub lists against the national or state DNC registries — run every list through a third-party scrubbing service before uploading it. Enzo provides campaign-level internal DNC (per-campaign only). Consult a telemarketing attorney for your specific program.

The Checklist at a Glance

Block 1: Pre-Campaign — Before a List Is Dialed

• ☐ Hold a registry subscription for every area code you dial. Each seller needs its own SAN; under 16 C.F.R. § 310.8, calling any number in an unpaid area code is itself a TSR violation — even numbers not on the registry. Fee year from October 1, 2025: first five area codes free, $82 each after, $22,626 cap; fees adjust every October 1.
• ☐ Scrub every list against the National DNC Registry inside 31 days. The FCC’s safe harbor requires a registry version obtained no more than 31 days before any call (47 C.F.R. § 64.1200(c)(2)(i)(D)); the TSR runs the same clock (16 C.F.R. § 310.4(b)(3)(iv)). Enzo does not scrub — use a third-party service, then import the clean CSV. Mechanics live in the DNC registry guide.
• ☐ Scrub state lists where they apply. Several states sell their own quarterly lists — Texas at $200 per quarter per list, per the official Texas No Call telemarketer FAQ as of July 2026; Florida at $30 per area code per quarter, per the FDACS order form. Confirm current fees before subscribing.
• ☐ Apply your master suppression file before upload. Internal do-not-call requests must be honored for 5 years (47 C.F.R. § 64.1200(d)). Enzo’s internal DNC is campaign-level only — marks do not carry across campaigns — so keep the master file outside the dialer and re-apply it to every new campaign.
• ☐ Match consent records to dialing mode. Artificial or prerecorded-voice telemarketing — including AI voices, per FCC ruling FCC 24-17 (February 2024) — and autodialed marketing to cells require prior express written consent: a signed agreement naming your company (47 C.F.R. § 64.1200(a)(2)–(3), (f)(9)). Live, manually dialed calls need no prior consent federally, subject to DNC and hours rules. The one-to-one consent rule never took effect (vacated January 24, 2025; deleted effective August 29, 2025), so bundled lead-gen consent is again permissible federally — though state mini-TCPA laws may be stricter.
• ☐ Flag established-business-relationship contacts correctly. A purchase within the prior 18 months or an inquiry within the prior 3 months lets you call a registered number — until a company-specific do-not-call request ends it (47 C.F.R. § 64.1200(f)(5)).
• ☐ Schedule inside 8 a.m.–9 p.m., called-party local time. 47 C.F.R. § 64.1200(c)(1) puts the burden of determining local time on the caller, with no weekend or holiday exception — and area code is not location. Some states run tighter windows: check calling hours by state first.
• ☐ Decide on optional screens. The Reassigned Numbers Database carries a safe harbor for a “no” response to a query of the most recent update (47 C.F.R. § 64.1200(m)); entry pricing starts at $8/month for 1,000 queries at reassigned.us. Litigator lists carry no safe harbor and no statute requires them — they only lower the odds of dialing a serial plaintiff.

Block 2: Per-Call — What Every Agent Does on Every Dial

• ☐ Identify yourself in the opener. Give the caller’s name, the company on whose behalf the call is made, and a phone number or address for it (47 C.F.R. § 64.1200(d)(4)).
• ☐ Announce recording in the first line on recorded campaigns — an up-front announcement is the recognized consent path in the strictest states. The verified map is in call recording consent states.
• ☐ Capture opt-outs the moment they happen. Consumers may revoke consent in any reasonable manner, and revocations must be honored within ten business days (47 C.F.R. § 64.1200(a)(10), effective April 11, 2025). Record the request when made and route it to your internal DNC process.
• ☐ No prerecorded or AI-voice content without written consent on file. Voicemail drops, soundboards, and cloned voices all sit under the artificial/prerecorded-voice rules, whatever dialing mode places them.
• ☐ Re-check the clock against the prospect’s location, not yours. A loaded list does not excuse a 9:15 p.m. dial where the prospect lives.

Block 3: Recordkeeping — What You Must Be Able to Show

• ☐ A written do-not-call policy plus training records. Required by 47 C.F.R. § 64.1200(d) and available on demand. It has teeth: 47 U.S.C. § 227(c)(5) gives an affirmative defense to companies that established and implemented, with due care, reasonable compliance practices — provable only on paper.
• ☐ Dated scrub logs. Log every registry download and every scrub run per list — the 31-day safe harbor is documentation-dependent.
• ☐ Signed consent files. Keep prior-express-written-consent records at least four years: courts apply the federal four-year catch-all statute of limitations to TCPA claims (28 U.S.C. § 1658(a)).
• ☐ The internal DNC list itself. Requests recorded when made, honored within ten business days, kept for 5 years (47 C.F.R. § 64.1200(d)).

Block 4: The Quarterly Audit — 90 Minutes, Four Times a Year

• ☐ Re-verify registry subscriptions. Confirm every area code you now dial sits under your SAN; national fees change every October 1.
• ☐ Re-sync state lists. State registries publish on their own quarterly cycles — Texas on January 1, April 1, July 1, and October 1.
• ☐ Sample recorded calls. Pull a handful per campaign and check the opener: identification, recording announcement, opt-out handling.
• ☐ Time the revocation pipeline. Trace a test opt-out from agent capture to suppression and confirm it lands well inside ten business days.
• ☐ Review rule changes. The “revoke-all” provision is currently waived until January 31, 2027 and under active FCC reconsideration — the date and the rule itself could change again; check FCC.gov. FTC penalty figures adjust in most Januaries, and quiet-hours suits surged onto federal dockets in 2025.

What a Missed Item Costs

Private plaintiffs can sue at $500 per violating call — up to $1,500 for willful or knowing violations — under 47 U.S.C. § 227(b)(3), with no proof of monetary injury required; do-not-call claims under § 227(c)(5) need more than one call by or for the same company within 12 months. Add FTC penalties of up to $53,088 per TSR violation as of 2026 (adjusted annually — verify the current figure) and state attorneys general under 47 U.S.C. § 227(g), and the per-call math turns eight-figure fast — see TCPA for cold callers for the cases.

Where Enzo Fits — and Where It Doesn’t

Enzo covers the workflow side: CSV import and list management keep scrubbed lists organized, campaign scheduling keeps dials inside the windows you set, call recording is optional, and campaign-level internal DNC keeps a marked contact out of that campaign even if they appear in another upload. Two limits. Internal DNC is per-campaign only — marks do not carry across campaigns — so keep your master suppression file outside the dialer and re-apply it to every new campaign. And Enzo does not scrub the national or state registries: run every list through a third-party scrub service (Blacklist Alliance is one example, not an endorsement) first. The dialer itself is compliant software; compliance depends on user behavior — your lists, your records, your habits.

Run the four blocks on a calendar — the 31-day scrub monthly, the audit quarterly — and most of what gets calling teams sued becomes a checkbox instead of a surprise. See how campaign-level DNC and campaign scheduling work inside a real workflow — book a free discovery call.

Not legal advice. This guide is general information for outbound calling teams, not legal advice. Rules change and apply differently by state, industry, and call type — confirm your program with qualified telemarketing compliance counsel.

Rules and figures from 47 U.S.C. § 227, 47 C.F.R. § 64.1200, 16 C.F.R. Part 310, and published FCC and FTC materials, as of July 2026. Company names are trademarks of their owners.