TCPA Compliance Checklist

Work through the federal Telephone Consumer Protection Act baseline, layer in state-specific "mini-TCPA" requirements, and track open gaps as you go. Your progress and notes are saved automatically on this device, and you can export a PDF snapshot at any time.

STOP, UNSUBSCRIBE, CANCEL, END, and QUIT are all recognized as valid opt-out keywords.

Opt-out requests are processed and honored as soon as reasonably possible (no later than 10 business days, per FCC rules).

A single confirmation message is sent after opt-out, and no further marketing messages follow it.

Revocation applies across all campaigns/programs from the sender, not just the specific thread the opt-out was sent from (2024 FCC scope-of-consent rules).

Reasonable revocation methods are honored even outside of texted keywords (e.g., a reply in plain language, a request made through customer support).

An internal do-not-contact list is updated immediately and suppresses all future sends to that number.

No telemarketing texts before 8:00am or after 9:00pm in the recipient's local time zone.

Recipient time zone is determined from area code or verified location data, not the sender's own time zone.

Processes account for ported or relocated numbers that may no longer match their original area-code time zone.

Numbers are scrubbed against the National Do-Not-Call Registry at least every 31 days.

An internal, company-specific do-not-call list is maintained and checked before every send.

DNC scrubbing is applied to all SMS/MMS marketing campaigns.

Any reliance on an established business relationship (EBR) exception is documented, time-limited, and does not apply to autodialed marketing texts without separate consent.

Consent records are retained for a minimum of 4-5 years (covering the statute of limitations plus a buffer).

Opt-out requests and the date/time each was honored are logged and retained.

Written TCPA compliance policies and procedures exist and are reviewed at least annually.

Staff and vendors who touch outbound texting complete documented TCPA training.

Third-party texting vendors are contractually required to comply with TCPA and provide audit rights.

The sending business is clearly identified in every message.

Expected message frequency is disclosed at the point of opt-in and remains accurate.

"Msg & data rates may apply" is included in opt-in confirmation messaging.

Replying HELP returns support contact information or clear instructions.

Open Gaps Summary

0 compliant0 needs attention of 28 items
Nothing is flagged Needs Attention for this view.

This checklist is educational and does not constitute legal advice. TCPA case law and state "mini-TCPA" statutes change frequently, so confirm current requirements with counsel before relying on this list.