Call Center Compliance

Auto dialers are legal. What the law regulates is which calls you make with them — and with whose consent.

TCPA Autodialer Rules: When Auto Dialers Are Legal — and When They Aren’t

Are auto dialers illegal? No. The TCPA does not ban dialing software — it regulates conduct: what plays when someone answers (a live agent versus an artificial, prerecorded, or AI voice), whether the call is marketing or informational, and whether the number is a cell or a landline. Get those three variables right and auto dialing is lawful; get them wrong and each call carries $500 to $1,500 in statutory exposure under 47 U.S.C. § 227(b)(3). Here is the consent matrix by call type, the autodialer definition courts actually apply, and the state wrinkles — as of July 2026.

This page is education, not legal advice. The dialer itself is compliant software — compliance depends on how you use it: your lists, your consent records, your call types. Enzo does not scrub against national or state DNC registries — run every list through a third-party scrubbing service before uploading. Consult a TCPA attorney about your specific program.

What the TCPA Actually Restricts

The TCPA never says “auto dialers are prohibited.” It restricts conduct: ATDS or artificial/prerecorded-voice calls to wireless numbers without the required consent, prerecorded telemarketing to residential lines without written consent, solicitations to numbers on the National Do-Not-Call Registry without an exemption, and solicitations outside 8 a.m.–9 p.m. at the called party’s location.

Everything else — a live, manually dialed, non-prerecorded sales call to a number not on the DNC registry, inside legal hours — requires no prior consent under federal law. The stakes sit in the private right of action: $500 per call under 47 U.S.C. § 227(b)(3), up to $1,500 for willful or knowing violations, no proof of injury required, with courts applying the federal four-year catch-all limitations period under 28 U.S.C. § 1658(a). The full penalty picture lives in TCPA for cold callers.

What Counts as an Autodialer After Facebook v. Duguid

In Facebook v. Duguid (2021), a unanimous Supreme Court held that equipment is an ATDS only if it has the capacity to store or produce telephone numbers using a random or sequential number generator. Dialing automatically from a stored lead list, by itself, does not satisfy the definition in most courts’ post-Duguid reading.

That “most courts” matters: the area remains unsettled — the Second Circuit has read the definition more broadly for stored numbers — so whether a given predictive or power dialer is an ATDS depends on the court, as of July 2026; ask a TCPA attorney before relying on it. The full breakdown, including the circuit split, is in what an ATDS is.

Two constants survive the definitional fight. Artificial and prerecorded-voice restrictions apply separately, whatever dialer places the call. And the FCC’s unanimous February 8, 2024 declaratory ruling (FCC 24-17) holds that AI-generated and cloned voices are “artificial” voices under the TCPA — AI-voice telemarketing needs prior express written consent, same as a recording.

Federal consent runs in tiers (47 C.F.R. § 64.1200(a)(1)–(3)). Match the row to your campaign before anyone dials:

Call type Number called Federal consent required Cite
Marketing call using an ATDS or artificial/prerecorded/AI voice Cell phone Prior express written consent (PEWC) 47 C.F.R. § 64.1200(a)(2)
Artificial/prerecorded/AI-voice marketing call Residential landline Prior express written consent (PEWC) 47 C.F.R. § 64.1200(a)(3)
Informational (non-marketing) autodialed or prerecorded call Cell phone Prior express consent — need not be written 47 C.F.R. § 64.1200(a)(1)
Live agent, manually launched, no prerecorded voice Cell or landline not on the DNC registry No prior consent under federal law; quiet hours and caller ID rules still apply 47 C.F.R. § 64.1200(c)(1), (d)(4)
Telephone solicitation, any dialing method Number on the National DNC Registry Off-limits without an exemption — an established business relationship (purchase within 18 months or inquiry within 3 months) or the person’s prior express invitation or permission, evidenced by a signed written agreement (47 C.F.R. § 64.1200(c)(2)(ii)) 47 C.F.R. § 64.1200(c)(2), (f)(5)

Three notes on reading the matrix. PEWC (47 C.F.R. § 64.1200(f)(9)) is a written agreement, bearing the signature of the person called, clearly authorizing marketing by ATDS or artificial/prerecorded voice to a designated number — capturing it cleanly is covered in the express written consent guide. The established business relationship is a DNC exemption only — it never substitutes for PEWC on autodialed or prerecorded marketing to a cell. And the FCC’s one-to-one consent rule never took effect — vacated January 24, 2025 in Insurance Marketing Coalition v. FCC, deleted from the CFR effective August 29, 2025 — so bundled multi-seller lead-gen consent is again permissible federally, though state mini-TCPA laws may impose stricter consent rules of their own.

The Rules That Apply No Matter What Dialer You Run

Winning the ATDS argument does not exempt a calling program from the rest of the federal rulebook:

  • Quiet hours. No telephone solicitation before 8 a.m. or after 9 p.m., local time at the called party’s location — the caller bears the burden of determining that time, with no weekend or holiday exception (47 C.F.R. § 64.1200(c)(1)).
  • The 31-day DNC scrub. The safe harbor requires registry data obtained no more than 31 days before any call, plus documented written procedures and training (47 C.F.R. § 64.1200(c)(2)(i)(D)).
  • Revocation. Effective April 11, 2025, consumers may revoke consent in any reasonable manner — “stop,” “quit,” “end,” “revoke,” “opt out,” “cancel,” and “unsubscribe” all count — and callers must honor it within ten business days (47 C.F.R. § 64.1200(a)(10)). The related “revoke-all” provision is waived until January 31, 2027 and under active FCC reconsideration — it could change again; check FCC.gov.
  • Internal DNC. A written policy, trained personnel, requests recorded when made and honored within ten business days, each kept for five years (47 C.F.R. § 64.1200(d)).
  • Identification. State the caller’s name, the company, and a contact number or address on telemarketing calls (47 C.F.R. § 64.1200(d)(4)).
  • No blanket B2B pass. Autodialed and prerecorded-voice restrictions attach to any wireless number regardless of business use — a decision-maker’s personal cell is covered.

State Auto Dialer Laws: Broader Triggers Than the Federal Test

A handful of states wrote their own autodialer definitions — several deliberately skipped the random-or-sequential-generator element that narrowed the federal test:

  • Florida requires prior express written consent for sales calls involving “an automated system for the selection and dialing of telephone numbers” or a recorded message (Fla. Stat. § 501.059(8)(a)), with a private right of action at $500 per violation, trebled up to $1,500 for willful or knowing conduct.
  • Oklahoma triggers on an automated system for the selection or dialing of numbers (15 O.S. § 775C.3(A)) — the broader, disjunctive standard.
  • Maryland’s Stop the Spam Calls Act (effective January 1, 2024) uses the same “selection or dialing” formulation (Md. Com. Law § 14-4502(a)(3)).

The disjunctive statutes may cover list-based dialers that are not federal autodialers — no appellate court has settled how far “automated system” reaches, so ask counsel before treating a Duguid win as a fifty-state pass. Florida and Oklahoma add a rebuttable presumption that a call to one of their area codes reaches someone in the state — your list’s area codes, not your office location, decide which statutes apply. The full picture is in state mini-TCPA laws.

The Operator’s Checklist Before an Autodialed Campaign

  1. Classify the campaign — marketing or informational. If any part of the call pitches a product, treat it all as marketing.
  2. Map the numbers — cells versus landlines, and which states the area codes put in play.
  3. Match consent to the matrix — PEWC records for anything automated-plus-marketing, retrievable per number.
  4. Scrub inside 31 days — national registry, state lists, and your internal DNC file — third-party scrub before the list touches a dialer.
  5. Schedule by the prospect’s location — 8 a.m.–9 p.m. where they are, tighter where state law says so.
  6. Honor opt-outs within ten business days — and log the date each request came in.

Where Enzo Fits — and Where It Doesn’t

Enzo runs power, predictive, preview, single-line, and multi-line dialing — all agent-driven: live calls for human agents, no prerecorded messages played at anyone. Its compliance role is deliberately narrow: campaign-level internal DNC. Mark a contact DNC and they stay excluded from that campaign — but marks do not carry across campaigns, so keep your master suppression list outside the dialer and re-apply it to every new campaign. Enzo does not scrub against national or state DNC registries: third-party scrub first, then import the clean file. No dialer makes your calling lawful — compliance depends on your lists, your consent records, and your habits.

Auto dialers are legal; undisciplined calling programs get sued. Classify each campaign, hold the consent records the matrix requires, scrub on the 31-day clock, dial inside the window, honor opt-outs on time — then have a TCPA attorney check the result against the states you call. See how agent-driven dialing and campaign-level DNC work in practice — book a free discovery call.

Not legal advice. This guide is general information for outbound calling teams, not legal advice. Rules change and apply differently by state, industry, and call type — confirm your program with qualified telemarketing compliance counsel.

Sources: 47 U.S.C. § 227; 47 C.F.R. § 64.1200; 28 U.S.C. § 1658(a); Facebook, Inc. v. Duguid, 593 U.S. 395 (2021); Insurance Marketing Coalition Ltd. v. FCC (11th Cir. 2025); FCC 24-17 and FCC 24-24; Fla. Stat. § 501.059; 15 O.S. § 775C; Md. Com. Law § 14-4502 — as of July 2026. Educational only, not legal advice.

FAQ

Common questions.

Are auto dialers illegal?

No. Auto dialers are legal under federal law — the TCPA regulates how they are used, not the machine itself. What federal rules restrict is specific conduct: autodialed or prerecorded calls to cell phones without the right tier of consent, telephone solicitations to numbers on the National Do-Not-Call Registry, calls outside 8 a.m.–9 p.m. at the called party's location, and artificial or AI voice content without prior express written consent. A live, agent-driven session on a properly scrubbed list, inside legal hours, with the right consent for the call type, is lawful under federal law — though a handful of state statutes define automated dialing more broadly than the federal test, so check the states you call into.

What are the TCPA autodialer rules in 2026?

Four rules do most of the work. Marketing calls using an ATDS or an artificial, prerecorded, or AI voice to a cell phone require prior express written consent, and prerecorded marketing to residential landlines does too (47 C.F.R. § 64.1200(a)(2)–(3)). Informational autodialed or prerecorded calls to cells require prior express consent, which need not be written. Telephone solicitations to DNC-registered numbers are off-limits without an exemption, with a safe harbor tied to registry data no more than 31 days old. And since April 11, 2025, consumers can revoke consent in any reasonable manner, which callers must honor within ten business days. The FCC's one-to-one consent rule never took effect — it was vacated January 24, 2025 and deleted from the CFR effective August 29, 2025.

What counts as an autodialer under the TCPA?

It depends on the court, as of July 2026. In Facebook v. Duguid (2021), a unanimous Supreme Court held that equipment is an automatic telephone dialing system (ATDS) only if it can store or produce numbers using a random or sequential number generator — dialing automatically from a stored lead list, by itself, does not qualify in most courts' reading. But the Second Circuit has read stored-number capacity more broadly, so where your prospects live can change your exposure. And the ATDS question is only half the analysis: artificial, prerecorded, and AI-voice calls are restricted separately, whatever dialer places them. Ask a TCPA attorney before relying on any ATDS conclusion.

Do auto dialer laws require consent for every call?

No. Under federal law, the consent requirement tracks the call type. A live, manually dialed, non-prerecorded call requires no prior consent at all — it only has to respect the DNC registry, quiet hours, and identification rules. Informational autodialed or prerecorded calls to cell phones require prior express consent, which can be as simple as the person having provided their number for that purpose. The strictest tier — prior express written consent, a signed written agreement covering a designated number — applies to marketing made with an ATDS or an artificial, prerecorded, or AI voice.

Can I legally use an auto dialer to call cell phones?

Yes, with the right consent for the call type. Marketing calls to a cell using an ATDS or artificial, prerecorded, or AI voice require prior express written consent under 47 C.F.R. § 64.1200(a)(2); informational calls require prior express consent, which need not be written. Two cautions: there is no blanket B2B exemption — a decision-maker's personal cell is treated as a wireless number regardless of business use — and after Facebook v. Duguid most courts hold that list-based dialers are not ATDS, but that case law is unsettled, so many teams obtain written consent or dial lists live rather than betting the company on the definition.

Do state autodialer laws differ from the federal TCPA?

Yes, and several are broader. Florida's Telephone Solicitation Act requires prior express written consent for sales calls made with an automated system for the selection and dialing of numbers (Fla. Stat. § 501.059(8)(a)). Oklahoma and Maryland go further — their statutes trigger on an automated system for the selection or dialing of numbers, with no random-or-sequential-generator element, which may cover list-based dialers that are not federal autodialers; courts have not settled the boundary. Florida and Oklahoma also apply a rebuttable presumption that calls to their area codes reach residents of the state. Have counsel verify the current rules for every state you call into.

What is the penalty for violating TCPA autodialer rules?

Statutory damages are $500 per violating call or actual monetary loss, whichever is greater, and a court may increase that to up to $1,500 per call for willful or knowing violations under 47 U.S.C. § 227(b)(3). No proof of monetary injury is required, consumers can sue directly, and damages attach per call — which is how call logs become class actions. Courts apply the federal four-year catch-all statute of limitations (28 U.S.C. § 1658(a)), so exposure accumulates. According to court records and press reports, Capital One settled autodialer claims for $75.5 million, and 2025 brought settlements including American Income Life at $14 million.

Ready to have more conversations per hour?

Schedule Discovery Call
Schedule Discovery Call