Compliance

TCPA compliance for outbound AI calling: what operators miss

Outbound AI calling can grow your business — or get it fined. Here are the TCPA basics every operator should know: consent, DNC scrubbing, calling hours, disclosure, and opt-out.

Devon Park· Compliance Lead, MapleVoice· Mar 29, 2026· 10 min read

The Telephone Consumer Protection Act (TCPA) governs how businesses can call and text consumers in the US. When the calls are placed by an AI voice agent at scale, regulators and plaintiffs’ attorneys pay close attention — and the penalties are per-call, so mistakes compound fast.

This is a plain-English overview, not legal advice. But these are the basics every operator running outbound AI calls should understand before dialing.

Consent is the foundation

TCPA hinges on consent. For many automated or AI-driven calls — especially marketing — you need prior express consent, and for some, prior express written consent. ‘We had their number’ is not consent. Document how and when each contact opted in, and keep that record.

If you can’t show consent for a given number, don’t auto-dial it.

The operational must-dos

  • DNC scrubbing — check numbers against the National Do Not Call Registry and your internal do-not-call list before calling.
  • Calling hours — generally 8am–9pm in the called party’s local time zone. Time-zone awareness matters when you dial nationally.
  • Clear disclosure — identify your business and the purpose of the call up front; for AI calls, be honest about the nature of the call.
  • Easy opt-out — honor opt-out requests immediately and suppress that number going forward.
  • Frequency limits — don’t hammer a number; excessive repeat calls invite complaints and liability.

The five mistakes that get businesses fined

  • Assuming a purchased or scraped list is ‘consented’ — it usually isn’t.
  • Dialing across time zones without adjusting for local calling hours.
  • Ignoring or slow-walking opt-out requests.
  • No audit trail — being unable to prove consent and suppression when challenged.
  • Treating AI outbound as exempt — it isn’t; the same rules apply, and scale increases exposure.

How to run outbound responsibly

Build compliance into the workflow, not around it: only dial numbers with documented consent, scrub against DNC lists automatically, enforce local calling hours, disclose clearly, and honor opt-outs in real time — with logs you can produce on demand. A managed provider should bake these controls in by default rather than leaving them to you.

Frequently asked questions

Is outbound AI calling legal?

Yes, when done in compliance with the TCPA and related rules: documented consent where required, DNC scrubbing, lawful calling hours, clear disclosure, and immediate opt-out handling. The technology being AI doesn’t change the obligations.

What are the basic TCPA rules for outbound calls?

Get appropriate consent, scrub against the National and internal Do Not Call lists, call only within local calling hours (generally 8am–9pm), disclose who you are and why you’re calling, and honor opt-outs immediately — with records to prove it.

Does MapleVoice handle TCPA compliance for outbound?

MapleVoice builds TCPA controls into outbound — disclosure, DNC scrubbing, calling-hour enforcement, and opt-out handling — so the guardrails run by default. This is operational guidance, not legal advice; consult counsel for your program.

Keep reading

Hear it answer a real call

MapleVoice builds and runs a fully-managed AI voice agent for your business — live in about 48 hours, flat monthly price.