TCPA Basics for Remote Outreach and Appointment-Setting Teams

Remote appointment setters, SDR support assistants and customer outreach teams can be powerful growth tools. They can also create legal risk if calls and texts don't follow US telemarketing rules. The Telephone Consumer Protection Act (TCPA) and the Federal Communications Commission's implementing rules restrict how businesses call and text consumers, and violations can lead to significant statutory damages in private lawsuits. State laws add further requirements.

The rules apply based on who is called and how, not where the caller sits. An assistant in the Philippines, Mexico or Colombia calling US consumers on your behalf is subject to the same rules as someone in your office. This guide explains the basics US companies should understand before remote assistants make calls or send texts, and the controls that reduce risk. It's general information, not legal advice; telemarketing law is complex and changes, so work with counsel. For role details, see appointment setters and SDR support.

The core rules

The FCC's TCPA rules are codified at 47 CFR 64.1200 (eCFR, 47 CFR 64.1200). Key concepts include:

Autodialers and artificial or prerecorded voices

The rules restrict calls made using an automatic telephone dialing system or an artificial or prerecorded voice to certain numbers, including wireless numbers, without the called party's prior express consent, with stricter "prior express written consent" requirements for telemarketing. Texts are treated as calls for many purposes. What counts as an autodialer has been the subject of litigation, so get advice about your dialing tools.

In 2024, the FCC issued a declaratory ruling confirming that calls using AI-generated voices are "artificial" voices under the TCPA (FCC declaratory ruling, PDF). If your outreach uses AI voice tools, the same consent rules apply.

Calling hours

Telephone solicitations to residential subscribers are prohibited before 8 a.m. or after 9 p.m., local time at the called party's location. Remote teams across time zones must calculate the recipient's local time, not their own.

Do-Not-Call

The rules prohibit telephone solicitations to residential subscribers who have registered on the National Do-Not-Call Registry, subject to exceptions such as an established business relationship or prior express invitation or permission. Companies that rely on a safe harbor must use a version of the registry obtained no more than 31 days before calls are made and keep records. The FTC administers the registry under its Telemarketing Sales Rule, which has its own requirements.

Company-specific Do-Not-Call lists

Companies making telemarketing calls must maintain their own internal do-not-call list, honor requests not to be called and keep those requests for five years. Callers must have a written policy, train personnel and identify themselves and the entity on whose behalf they call.

Revoking consent

Under the FCC's rules, consumers can revoke consent in any reasonable manner, and revocation requests must be honored within a reasonable time not exceeding ten business days. Callers can't require an exclusive means of revocation.

State laws

Many states have their own telemarketing laws, sometimes called "mini-TCPAs", with stricter rules on consent, calling hours, frequency and registration. Some require telemarketer registration. Counsel should review which states your outreach reaches.

B2B vs consumer outreach

Business-to-business calls to business landlines are generally treated differently from calls to consumers, but the line blurs: many business contacts use personal mobile phones, and some protections apply to wireless numbers regardless. Don't assume B2B outreach is exempt; get advice about your lists and methods.

Controls for remote outreach teams

Consent and list sourcing

• Know where every number came from and what consent exists.
• Store consent records with the contact.
• Don't buy lists without understanding their consent basis.

Scrubbing

• Scrub lists against the National Do-Not-Call Registry within the required time window, where applicable.
• Scrub against your internal do-not-call list before every campaign.
• Consider scrubbing against state registries and reassigned-number data, with counsel's guidance.

Time-zone controls

• Configure dialers to enforce local calling hours based on the recipient's location.
• Train assistants to check time zones for manual calls.

Opt-outs

• Train assistants to recognize opt-out requests in any form, such as "stop calling," "remove me" or a text reply.
• Record opt-outs immediately in the CRM and suppression lists.
• Honor them across all channels and campaigns, within the required timelines.

Scripts and identification

• Use approved scripts that identify the caller and the company.
• Don't misrepresent who's calling or why.

Tools

• Use dialers and texting platforms configured for compliance, with features such as DNC suppression, time-zone enforcement and opt-out handling.
• Restrict who can upload lists and launch campaigns.

Records

• Keep records of consent, DNC scrubs, opt-outs and call logs.
• Document your written policy and training.

Training remote assistants

Training should cover: what the TCPA and DNC rules require, consent basics, calling hours, recognizing and processing opt-outs, approved scripts, what to do when unsure, and escalation contacts. Refresh training periodically and when rules change. Quiz assistants on scenarios, such as a prospect who says "I'm busy, don't call me again" in the middle of a conversation.

Monitoring and quality assurance

Controls only work if someone checks them. A simple monitoring routine:

• Weekly: review opt-outs processed, any calls flagged outside permitted hours and any complaints.
• Monthly: sample call recordings, where recording is lawful and disclosed, to check scripts, identification and opt-out handling.
• Quarterly: review list sources, consent language, tool configuration and training records with counsel or your compliance lead.

Record findings and fixes. Monitoring protects the business and gives assistants confidence that they're doing the work correctly.

Handling complaints

When a consumer complains about a call or text, treat it seriously. The assistant should apologize, add the number to the internal do-not-call list immediately and escalate the complaint to the designated contact, with details such as the date, time, number called and what was said. Complaints can be early warnings of a list or process problem.

Call recording laws

If you record calls for quality, note that recording consent laws vary by state, and some states require consent from all parties. Disclose recording at the start of calls where required, and follow your counsel's guidance.

Roles and responsibilities

The business on whose behalf calls are made can be liable for violations by its vendors and staff. Responsibilities should be clear: who approves lists, who configures tools, who maintains suppression lists and who monitors compliance. Remote assistants should never upload new lists or launch campaigns without approval.

Email is different

Commercial email is governed by the CAN-SPAM Act, enforced by the FTC, with requirements such as accurate headers, a clear opt-out and honoring opt-outs promptly. Messages to consumers in other countries may be subject to their laws. Assistants supporting email outreach should follow your email policy.

A worked example

A home services company uses remote appointment setters to call homeowners who requested quotes online. Counsel helps design web form consent language and review the dialer setup. Before each calling session, the system suppresses numbers on the internal DNC list and enforces local calling hours. Assistants are trained to mark any opt-out immediately; a weekly report shows opt-outs processed and any calls outside permitted hours, which should be zero. When a homeowner texts "STOP," the opt-out is honored across channels.

Common mistakes

Assuming offshore callers are exempt. The rules follow the recipient.

Ignoring time zones. Calculate the recipient's local time.

Buying lists without consent records. Know your sources.

Slow opt-outs. Process immediately.

Using AI voice tools without consent review. AI voices count as artificial.

Frequently asked questions

Does the TCPA apply to B2B calls?

Some rules apply differently, but many protections apply regardless, especially for wireless numbers. Get advice.

Can remote assistants text prospects?

Only with appropriate consent and compliant tools. Texts are treated as calls for many TCPA purposes.

Who is liable if a remote assistant violates the rules?

The business on whose behalf calls are made can be liable. Build controls and training.

Does ExecWing provide legal compliance review?

No. We follow your policies, scripts and tools, and recommend you work with counsel on telemarketing compliance.