Prior express written consent is the TCPA’s strictest consent tier — and the one the 2024–2026 rule turbulence hit hardest. Here is what it is, when you need it, and exactly what changed.

Express Written Consent Under the TCPA: When You Need It, What It Must Say

Express written consent — formally, prior express written consent (PEWC) — is a signed, written agreement in which a consumer clearly authorizes a seller to deliver telemarketing calls or texts to a designated number using an autodialer or an artificial or prerecorded voice, defined at 47 C.F.R. § 64.1200(f)(9). You need it before any autodialed, prerecorded, or AI-voice marketing call to a cell phone, and before any prerecorded marketing call to a residential line. Each call that lacks it carries statutory damages of $500 — up to $1,500 if willful or knowing — under 47 U.S.C. § 227(b)(3). Here is the whole consent picture, as of July 2026.

This page is education, not legal advice. A dialer is a tool — compliance depends on how you use it. No dialer collects consent for you, and no dialer makes your calling lawful. Consult a TCPA attorney before building a consent program.

What Express Written Consent Actually Is

The regulatory definition, restored at 47 C.F.R. § 64.1200(f)(9) after the 2025 vacatur, is “an agreement, in writing, bearing the signature of the person called” that clearly authorizes the seller to deliver advertisements or telemarketing messages using an ATDS or artificial/prerecorded voice to a designated number. Unpacked, a valid agreement:

• is in writing — verbal consent, however clear, is not PEWC;
• bears the signature of the person called;
• clearly authorizes the calls — not buried authorization the signer would never notice;
• identifies the seller being authorized to call;
• states the delivery method — that calls or texts may use an autodialer or an artificial or prerecorded voice; and
• designates the specific phone number to be called.

Two practical notes. First, “expressed written consent” — the phrase half the search traffic uses — is the same thing misspelled; the term of art is prior express written consent. Second, the full regulation contains additional disclosure requirements and signature-capture detail beyond the core definition quoted here — have counsel review your exact form language and capture flow before you rely on it.

The Three TCPA Consent Tiers

“What is TCPA consent?” has three answers, depending on what is calling and what it says:

One 2024 addition sits on top of the table: the FCC’s unanimous Declaratory Ruling FCC 24-17 (February 8, 2024) holds that AI-generated and cloned voices are “artificial” voices under the TCPA — so AI-voice telemarketing requires PEWC, same as a prerecorded message.

And a term the federal rules never define: implied consent. It usually means one of two real things — prior express consent, the non-written tier for informational calls, or the established business relationship: a purchase within the prior 18 months or an inquiry within the prior 3 months, per 47 C.F.R. § 64.1200(f)(5). The EBR is an exemption from the National DNC solicitation rules only — it does not authorize autodialed or prerecorded marketing to a cell phone, and it ends on a company-specific do-not-call request. Neither substitute is PEWC.

When You Actually Need PEWC Before Dialing

The decision runs in one line: marketing content + regulated technology + protected line = PEWC. If the call or text advertises anything, is delivered by an ATDS or an artificial, prerecorded, or AI voice, and goes to a cell phone (or, for prerecorded calls, a residential line), you need a signed agreement on file before you dial. There is no blanket B2B carve-out — a decision-maker’s personal cell is a wireless number under 47 U.S.C. § 227(b)(1)(A)(iii) regardless of how they use it.

The contested variable is the ATDS. In Facebook v. Duguid (2021), a unanimous Supreme Court held equipment is an autodialer only if it can store or produce numbers using a random or sequential number generator. Whether that shields any given dialer depends on the court, as of July 2026: most federal courts have held that dialers calling stored lead lists fall outside the definition, but the Second Circuit has read stored-number capacity more broadly and the case law remains unsettled — ask a TCPA attorney before relying on it. One constant survives every circuit: artificial, prerecorded, and AI voices are restricted separately, whatever equipment places the call.

Live, manually dialed cold calling sits outside the PEWC regime entirely — no prior consent under federal law, with the DNC registry, the 8 a.m.–9 p.m. quiet hours, and state statutes doing the regulating instead. That side of the law lives in TCPA for cold callers.

What Changed in 2024–2026

Consent is the corner of the TCPA that moved most in the last two years. The current state of each piece:

The operational takeaway: the federal standard is again the one described above — written, signed, clear authorization, seller identified, number designated. If you buy leads generated in states with mini-TCPA statutes, have counsel check those states’ consent rules before treating the federal floor as the ceiling.

Revocation: Consent Is Not Permanent

Since April 11, 2025, a consumer can take consent back “in any reasonable manner” — no magic words, no required channel — and the caller must honor it within a reasonable time not to exceed ten business days of receipt, under 47 C.F.R. § 64.1200(a)(10). Reply texts using “stop,” “quit,” “end,” “revoke,” “opt out,” “cancel,” or “unsubscribe” are per se reasonable revocation.

A revocation should trigger two entries, not one: remove the number from consent-based campaigns, and add it to your internal do-not-call list — which 47 C.F.R. § 64.1200(d) requires you to maintain under a written policy and keep honoring for five years. The broader “revoke-all” rule is currently waived until January 31, 2027 and under active FCC reconsideration — treat it as a moving target, not settled law.

Recordkeeping: A Consent You Cannot Produce Is a Consent You Do Not Have

Courts apply the federal four-year catch-all statute of limitations, 28 U.S.C. § 1658(a), to TCPA claims — the statute itself names no period. A call placed today can be litigated in 2030, and the signed agreement is your answer. For every consent, keep the agreement itself, the signature and timestamp, the exact form language in effect when it was captured, where it was captured, and the designated number — retrievable by phone number in minutes, because per-call exposure of $500 to $1,500 under 47 U.S.C. § 227(b)(3) scales with every record you cannot find. The arithmetic is laid out in TCPA fines and penalties.

Where Enzo Fits — and Where It Doesn’t

Enzo’s role in a consent program is deliberately small, because consent is captured and stored upstream of any dialer. Keep signed agreements in your CRM or consent platform — your system of record — and let call outcomes flow back through Enzo’s native two-way Follow Up Boss sync, or to GoHighLevel, Salesforce, and HubSpot via Zapier and webhooks. Inside the dialer, Enzo gives you CSV import, list management, campaign scheduling, and campaign-level internal DNC: mark a contact DNC and they stay excluded from that campaign, but marks do not carry across campaigns, so re-apply your master suppression file to every new campaign. Enzo does not scrub lists against the national or state DNC registries — run every list through a third-party scrubbing service before it is imported. A dialer is a tool: it can be operated lawfully, but compliance depends on your lists, your consent records, and your habits.

Treat the consent rules as workflow — know which tier each campaign sits in, capture PEWC with a form counsel has reviewed, honor revocations inside ten business days, keep every signed record retrievable for four years — and the most turbulent corner of the TCPA becomes a filing discipline instead of an exposure.

See how consent-cleared lists flow into campaigns — book a free 20-minute discovery call.

Not legal advice. This guide is general information for outbound calling teams, not legal advice. Rules change and apply differently by state, industry, and call type — confirm your program with qualified telemarketing compliance counsel.

Definitions, dates, and figures from 47 U.S.C. § 227, 28 U.S.C. § 1658, 47 C.F.R. § 64.1200 (current through 90 FR 42138), Federal Register publications, FCC orders FCC 24-17, FCC 24-24, and DA 25-312, and the Eleventh Circuit’s opinion in Insurance Marketing Coalition v. FCC, as of July 2026 — educational only, not legal advice.