On September 9, the Federal Communications Commission (FCC) released a Report and Order and Further Notice of Proposed Rulemaking (FNPRM) (FCC-CIRC 2609-05) substantially revising the consent-revocation rules that were set to take effect January 31, 2027 under the Telephone Consumer Protection Act (TCPA). The new rules take effect just 30 days after Federal Register publication, superseding that delayed date entirely, so businesses have far less runway than expected.
The Big Change: Category-Specific Revocation
The Commission’s 2024 TCPA Consent Order had established a broad “revoke all” standard: any reasonable revocation request wiped out consent for all calls and texts from that caller, regardless of purpose. Industry pushback, including from financial institutions worried about accidentally silencing fraud alerts alongside debt collection calls, convinced the FCC that approach was overinclusive.
Under the new rule, callers may treat a revocation as applying only to the specific category of informational call or text at issue (calls that aren’t advertisements or telemarketing). A consumer who opts out of debt collection calls, for example, doesn’t automatically opt out of fraud alerts or appointment reminders too.
Importantly, this flexibility does not extend to telemarketing. A single revocation of telemarketing consent still kills all future telemarketing from that caller, full stop.
Callers Can Now Designate an Exclusive Opt-Out Method
Previously, consumers could revoke consent through any reasonable means, and callers had to honor all of them. Now, callers may designate one exclusive channel, chosen from three options: an automated voice/keypress mechanism, a standardized text-message keyword reply (like “STOP” or “UNSUBSCRIBE”), or a designated website/phone number. If a caller clearly and conspicuously discloses its chosen method, it doesn’t have to process revocations submitted any other way. Callers who skip this designation must still honor “any reasonable means,” with a rebuttable presumption of revocation once a consumer produces evidence of a request.
More Flexibility for Financial Institution Fraud Alerts
Financial institutions can now send exempt fraud-related calls and texts to wireless numbers obtained from “reliable sources,” not just numbers the customer gave directly, including numbers from an authorized family member, numbers captured via Caller ID when the customer calls in, or numbers from another financial institution’s records. The FCC is encouraging use of the Reassigned Numbers Database to avoid misdirected messages, though the existing opt-out and messaging-cap requirements still apply.
What’s Still on the Table
A companion Further Notice of Proposed Rulemaking seeks comment on additional changes: shortening the revocation-honoring window from 10 to 7 business days, requiring two-way texting capability, mandating a “revoke all” option as a condition of using category-specific revocation, clarifying how affiliates and business divisions are treated, trimming the list of standardized opt-out keywords, and allowing brief confirmation calls after a revocation.
What Companies Should Do Now
Given the accelerated effective date, compliance teams should move quickly to:
- Classify every calling/texting campaign as informational or telemarketing, and treat anything with promotional content as telemarketing.
- Decide whether to designate an exclusive revocation method, and if so, build clear, conspicuous disclosures into every script, IVR prompt, and text message.
- Update opt-out processing workflows to honor the correct scope of revocation, category-specific for informational messages, blanket for telemarketing, within the required timeframe.
- Watch the FNPRM closely, since a shortened honoring window and mandatory two-way texting could require further system changes down the road.
Our Take
The TCPA carries statutory damages of $500 per violation, trebled to $1,500 for willful violations, and remains one of the most heavily litigated consumer statutes in the country. Because the category-specific/telemarketing distinction is likely to become a flashpoint for enforcement and class action litigation, getting the classification and disclosure work right before the rule’s effective date is a meaningful risk-reduction step, not just a compliance formality.
Recent Comments