State telemarketing laws impose obligations that run independently of, and often stricter than, the federal Telephone Consumer Protection Act and the FTC’s Telemarketing Sales Rule. A campaign that satisfies every federal requirement can still generate per-call liability under state statutes. Roughly 32 states plus the District of Columbia require separate telemarketer registration, about a dozen maintain their own Do Not Call lists, and a growing number have enacted “mini-TCPA” statutes with autodialer definitions far broader than the federal one. If you call into those states, you have to meet the federal floor and then layer each state’s additional rules on top.
Registration and Bonding Before You Dial
Most states require telemarketing companies to register with a state agency, usually the attorney general’s office or a consumer protection division, before placing a single call. Annual registration fees generally run between $50 and $200, though some states charge more based on call volume or the products being sold. Calling into a state without registering, or letting a registration lapse, is a standalone violation separate from anything that happens on the call.
Many of those states also require a surety bond as a condition of registration. Bond amounts typically fall in the $25,000 to $50,000 range, with outliers as low as $10,000 and as high as $100,000 depending on the jurisdiction and the product. The bond guarantees funds for consumer compensation if the telemarketer commits fraud or violates state law. If the bond lapses, registration can be revoked automatically, which turns every subsequent call into an unlicensed solicitation.
State Do Not Call Lists
The national Do Not Call Registry is the baseline. About a dozen states operate their own registries that exist independently of the federal list, and if you call into one of those states, scrubbing against the federal registry is not enough. You need to subscribe to each state list and cross-reference it before dialing. Per-call fines can follow even when a number is not on the federal registry.
The federal Telemarketing Sales Rule gives a limited safe harbor for calls to consumers with an existing business relationship: a purchase, rental, or lease within the prior 18 months, or an inquiry within the prior three months, provided the consumer has not specifically asked that company to stop calling.1Federal Trade Commission. Q&A for Telemarketers and Sellers About DNC Provisions in TSR Many state registries do not honor that federal exception, or they define the relationship window differently. Non-profits, political campaigns, and charitable organizations often get carve-outs from state scrubbing requirements, but the exemptions vary and should not be assumed.
Calling Hours Measured at the Consumer’s Location
Federal rules prohibit outbound telemarketing to residences outside 8:00 a.m. to 9:00 p.m. local time at the called person’s location.2eCFR. 16 CFR 310.4 – Abusive Telemarketing Acts or Practices Several states narrow that window further, and a handful prohibit commercial calls on Sundays or specific legal holidays. The window is measured by the recipient’s clock, not yours. A dialing platform that routes across time zones without adjusting for the destination will produce per-call violations for every out-of-window connection.
Operating outside authorized hours is a standalone violation regardless of prior consent. A campaign running into four or five states in one afternoon may face four or five different permissible windows at once, and the burden of proving each call landed in the lawful window at the recipient’s end falls on the caller.
Identification and Disclosures on the Call
Federal and state law both require telemarketers to identify themselves promptly on every call. For prerecorded or automated messages, the FCC requires the caller to state the name of the business responsible for initiating the call at the start of the message, provide a callback number during or after the message, and offer an automated opt-out mechanism within two seconds of the identification.3eCFR. 47 CFR Part 64 Subpart L – Restrictions on Telemarketing, Telephone Solicitation, and Facsimile Advertising Live calls carry parallel identification duties under the Telemarketing Sales Rule and state statutes.
State additions are common. They may require the caller to disclose their individual name rather than only the company, the specific product or service being sold, and sometimes a state-issued solicitor registration number on request. Most states require those disclosures within the first minute, before any sales pitch or collection of personal information. A vague business name or a dodged answer to “who do you represent?” is a separate consumer-protection violation in most jurisdictions.
Consent for Automated and Prerecorded Calls
The federal TCPA prohibits using an automatic telephone dialing system or a prerecorded voice to call cell phones and certain other numbers without prior express consent, and for telemarketing calls that consent must be in writing.4Office of the Law Revision Counsel. 47 USC 227 – Restrictions on Use of Telephone Equipment After the Supreme Court’s 2021 decision in Facebook v. Duguid, the federal definition of “automatic telephone dialing system” is relatively narrow, covering only equipment that generates numbers using a random or sequential number generator.
State mini-TCPA laws fill that gap, and this is where federal compliance alone can get you sued. A growing number of states define “autodialer” to include any system that selects or dials numbers automatically, even one that draws from a preloaded contact list. Under those broader definitions, the dialing platforms most businesses use every day qualify as autodialers, which means prior express written consent is required for calls that would be perfectly legal under federal law.
A valid written consent agreement must clearly disclose that the consumer is agreeing to receive automated or prerecorded calls, identify the specific seller, and state that the consumer is not required to sign as a condition of purchasing anything. Electronic signatures satisfy the writing requirement under the E-SIGN Act.5Federal Deposit Insurance Corporation. Consumer Compliance Examination Manual – X-3 The Electronic Signatures in Global and National Commerce Act (E-Sign Act) Without a verifiable record of that signed agreement at the moment the call was placed, every automated call to a resident in a mini-TCPA state is a separate violation. The burden of proving consent is on the caller.
One-to-One Consent
In December 2023, the FCC adopted a rule closing what it called the “lead generator loophole,” requiring that written consent be obtained separately for each individual seller and that resulting calls be logically related to the website where consent was given.6Federal Communications Commission. One-to-One Consent Rule for TCPA Prior Express Written Consent As of mid-2025, the FCC postponed the effective date pending judicial review.7Federal Communications Commission. FCC Postpones Effective Date of One-to-One Consent Rule Even with the federal rule on hold, some states already enforce similar requirements through their own statutes, so lead generators and the sellers buying their leads should not assume blanket consent forms remain safe.
Revoking Consent
Under FCC rules, a consumer who previously gave consent can revoke it at any time using any reasonable method, and once revoked, the caller must stop all robocalls and robotexts to that number.8Federal Communications Commission. Federal Communications Commission DA 25-312 Reasonable method is deliberately broad: replying “stop” to a text, telling a live agent, submitting a web form, or any clear expression of the consumer’s wish to stop.
The FCC’s rule that a revocation on one topic applies to all future robocalls and robotexts from that caller on unrelated matters has had its compliance deadline extended to April 11, 2026. That gives callers a limited grace period on the cross-topic aspect, but the core obligation to honor a revocation for the specific type of call that triggered the request is already in effect. State laws may offer no grace period at all, so treating any revocation as applying across the board immediately is the safer practice.
Prohibited Calling Patterns
Some behaviors are banned outright regardless of consent or registry status.
Abandoned calls are a frequent source of liability. A call is “abandoned” when a consumer picks up and the telemarketer fails to connect a live agent within two seconds of the greeting. Under FCC rules, a company avoids enforcement if its abandonment rate stays below 3% of calls answered by a live person, measured over each 30-day period.9Federal Communications Commission. FCC-10-18A1 Several states set their own caps, measure the rate differently, or offer no safe harbor at all.
Spoofing caller ID is illegal under the Truth in Caller ID Act, which carries civil penalties of up to $10,000 per violation and criminal fines of the same amount for willful violations.10Congress.gov. S. Rept. 111-96 – Truth in Caller ID Act of 2009 Most states have their own spoofing prohibitions that stack on top of the federal penalty, and some treat it as a criminal offense rather than a civil one.
Buying leads from third parties does not insulate you. If a lead generator scraped numbers without proper consent or failed to scrub against registry lists, the company that uses those leads inherits the exposure for every resulting contact. This vicarious liability hits hardest when a company assumes a vendor handled compliance without independently verifying the consent records.
Record-Keeping
The 2024 amendments to the Telemarketing Sales Rule expanded what telemarketers must document and extended the retention period to five years from the date each record is produced.11Federal Trade Commission. Telemarketing Sales Rule – Federal Trade Commission The required records cover nearly every piece of a telemarketing operation:
- Call logs identifying the telemarketer, the seller, the product or service, the calling and called numbers, date, time, duration, the script used, caller ID information transmitted, and the outcome.
- Consent records for every consumer whose consent is claimed, including the consumer’s name and phone number, a copy of the consent request as it was presented, a copy of the consent provided, the date, and the purpose. An IP address with a timestamp alone is not sufficient.
- Every substantially different script, prerecorded message, brochure, and promotional piece, retained for five years after it goes out of use.
- Employee records: names, home addresses, phone numbers, job titles, and any fictitious names used by anyone directly involved in phone sales. Fictitious names must be traceable to a specific person.
- Which version of the Do Not Call registry was accessed, the date, the subscription account number, and the campaign it was used for.
- Contracts with any vendor used to deliver outbound calls, kept for five years after the contract expires.
State laws may add their own documentation requirements or longer retention periods. If the seller and the telemarketer are separate entities, they can allocate record-keeping between them in a written agreement.12Federal Trade Commission. Complying with the Telemarketing Sales Rule
Safe Harbor, Where It Exists
Not every accidental violation produces liability under federal law. The TSR provides a safe harbor for Do Not Call violations if the company can show written compliance procedures covering both its internal do-not-call list and the national registry, training of all personnel and assisting entities on those procedures, use of a version of the national registry obtained no more than 31 days before the call, active monitoring and enforcement of its procedures, and that the offending call was a genuine error rather than a failure to gather the information needed to comply.13eCFR. 16 CFR Part 310 – Telemarketing Sales Rule
The TCPA contains a parallel affirmative defense for callers who have established and implemented reasonable practices and procedures with due care to prevent violations.4Office of the Law Revision Counsel. 47 USC 227 – Restrictions on Use of Telephone Equipment “Due care” is the operative phrase. A binder of unused policies will not qualify. Regulators and courts look for ongoing training, real-time call monitoring, and documented corrective action.
State safe harbors vary. Some mirror the federal structure, others offer none at all and apply strict liability regardless of a company’s compliance efforts. Which state falls into which camp should shape how aggressively you dial into that market.
Penalties
Enforcement runs through two channels: lawsuits by individual consumers and civil actions by state attorneys general.
Private Lawsuits
Under the federal TCPA, any person who receives a violating call can sue for $500 per violation or actual damages, whichever is greater. A court that finds the violation willful or knowing can treble the award to $1,500 per call.4Office of the Law Revision Counsel. 47 USC 227 – Restrictions on Use of Telephone Equipment State mini-TCPA laws and consumer protection statutes create additional private rights of action with their own damage amounts. Some states set statutory damages as low as $500 per call and others go higher, and treble damage provisions for willful violations exist in multiple states.
Per-violation damages compound quickly. A single campaign reaching 10,000 numbers without proper consent can generate exposure in the millions before trebling. Class actions amplify the risk, because one named plaintiff can aggregate claims on behalf of every affected consumer in the state.
State Attorney General Actions
State attorneys general bring civil enforcement actions seeking injunctions, civil penalties, consumer restitution, and disgorgement of profits. These actions tend to target repeat offenders and companies with high complaint volumes. Penalties in an AG action often exceed what a private plaintiff can recover because the state can aggregate violations across all affected residents and seek penalties per call on a statewide basis. Persistent violators have faced revocation of state business licenses or criminal misdemeanor charges where fraud is involved.
If you are the consumer on the receiving end of these calls, keep records of call times, dates, caller ID information, and anything the caller said. Those details are the foundation for both a private lawsuit and a complaint to the state attorney general’s office.