DNC Registry Compliance for AI Lead Calling

What Is the Do Not Call Registry?

The National Do Not Call Registry was established by the FTC in 2003 under the Telemarketing Sales Rule (TSR). Consumers can add their phone numbers to the registry to opt out of telemarketing calls. Telemarketers must check the registry before calling and must not call numbers on the list unless an exemption applies.

Key facts about the registry:

• Over 250 million phone numbers are currently registered
• Numbers remain on the list permanently (unless the consumer removes them)
• Both landline and mobile numbers can be registered
• The registry is maintained at donotcall.gov
• Businesses must pay a fee to access the registry for scrubbing (fees vary by area code count and are renewed annually)

DNC Exemptions for Opted-In Leads

The most important exemption for AI lead calling businesses is the established business relationship (EBR) and prior express consent exemptions:

• Prior express consent. If a consumer provides their phone number and consents to be called, the DNC restriction does not apply to calls from the company they consented to. This is the core of the AI callback model: the lead fills out your form, provides their number, checks the consent box, and your AI calls them.
• Established business relationship. If a consumer has an existing business relationship with your company (purchased within 18 months or inquired within 3 months), you may call them even if they are on the DNC list. However, this exemption does not override a specific request to that company to stop calling.

Critical point: The prior consent exemption is specific to the company that received the consent. If a lead consents on your form, only your company can call them under that consent. You cannot sell or share that consent with other businesses.

Your Internal DNC List

Separate from the national registry, every business that makes telemarketing calls must maintain an internal Do Not Call list. This is a list of individuals who have specifically asked your company to stop calling them.

Requirements for your internal DNC list:

• Honor all opt-out requests. If someone says "do not call me" during an AI call, via email, by text, or through any other channel, add them to your internal list.
• Process requests within 30 days. The TSR requires that opt-out requests be processed within 30 days, but best practice (and what the AI should do) is to process them immediately.
• Keep the list for 5 years. Internal DNC records must be maintained for at least 5 years from the date of the request.
• Check before every call. Your AI system must check the internal DNC list before initiating any call. Numbers on your internal list are blocked regardless of whether the lead gave prior consent.
• Internal DNC overrides prior consent. Even if someone previously consented on your form, a later opt-out request means no more calls. The most recent instruction controls.

How AI Systems Should Handle DNC Compliance

AI calling systems should integrate DNC compliance at multiple points:

Before the Call

• Check the lead's phone number against your internal DNC list
• If you are making calls beyond opted-in form leads (re-engagement, outbound campaigns), also check the National DNC Registry
• Verify that valid, unexpired consent exists for this specific lead
• Block the call if any check fails

During the Call

• The AI must be trained to recognize opt-out language: "stop calling," "do not call me," "remove my number," "take me off your list," and variations
• When an opt-out is detected, the AI should immediately acknowledge it: "I understand. I have removed your number from our list and you will not receive any further calls from us."
• The opt-out must be logged and the number added to the internal DNC list in real time

After the Call

• Process any opt-out requests immediately (not in batch at end of day)
• Sync the internal DNC list across all calling systems, CRMs, and marketing platforms
• Ensure no other automated process (email, SMS, retargeting) re-triggers a call to an opted-out number

National DNC Registry Scrubbing

If your business makes any calls beyond opted-in form submissions, you must register with the National DNC Registry and scrub your calling lists:

1. Register at telemarketing.donotcall.gov. Pay the required fee based on the number of area codes you need to access.
2. Download the DNC list for your relevant area codes.
3. Scrub your calling list against the registry before starting any campaign.
4. Re-scrub at least every 31 days. The TSR requires that your version of the DNC list be no more than 31 days old when you use it.
5. Document your scrubbing. Keep records showing when you downloaded the list, when you scrubbed, and the results.

For opted-in form leads (where the lead gave prior express consent), scrubbing against the national registry is not required because the consent exemption applies. However, some businesses choose to scrub anyway as an additional safety measure.

State DNC Registries

Many states maintain their own Do Not Call registries in addition to the federal list. For a complete list of state-level requirements, see our state-by-state AI calling regulations guide.

Key state registries to be aware of:

• California, Florida, New York, Texas, Pennsylvania - all maintain active state DNC lists
• State registration fees and scrubbing requirements vary
• Some states require registration even for businesses that only call opted-in leads
• Non-compliance with a state DNC list can trigger state-level penalties on top of federal penalties

Common DNC Compliance Mistakes

1. Not maintaining an internal DNC list. Every business must have one, even if you only call opted-in leads. When a lead opts out, it must be recorded and honored permanently (or for 5 years minimum).
2. Delayed opt-out processing. Processing opt-outs in a daily or weekly batch means you might call someone again before their opt-out takes effect. Process immediately - the AI should block the number within seconds of the request.
3. Not syncing across systems. If a lead opts out during an AI call but your email system sends them a "we tried to call you" message the next day, the experience is poor and potentially non-compliant.
4. Assuming consent never expires. While form consent does not technically expire under the TCPA (unlike the EBR exemption), calling a lead who submitted a form 6 months ago without any subsequent interaction is risky. Old consent is harder to defend in litigation.
5. Not training the AI on opt-out language. "Stop," "no more calls," "take me off your list," "I do not want to be called" - the AI must recognize all reasonable variations and act on them.

Penalties for DNC Violations

DNC violations carry significant penalties at both the federal and state level:

• Federal: Up to $51,744 per violation (adjusted annually for inflation) under the TSR
• TCPA private lawsuits: $500 per violation, $1,500 for willful violations
• State penalties: Vary by state, with some (like Texas) imposing up to $25,000 per violation
• Class action risk: DNC violations affecting many consumers are frequently pursued as class actions

The FTC and state attorneys general have actively increased enforcement against robocallers and telemarketers. AI calling systems that operate without proper DNC procedures are high-value enforcement targets.

For more on consent requirements, see our sister site's FCC 1-to-1 consent rule guide.

Disclaimer: This guide provides general information about Do Not Call compliance. It is not legal advice. Regulations and penalty amounts are subject to change. Consult with a qualified attorney for guidance specific to your business.

Want to ensure your AI lead calling system is DNC compliant? Book a discovery call and we will review your compliance setup.

Frequently Asked Questions

Do I need to check the DNC registry if I only call leads who submitted my form?

Not for those specific leads, because prior express consent creates an exemption from the DNC registry. However, you still must maintain an internal DNC list and honor any opt-out requests from those leads. If you expand to any non-consent-based calling (re-engagement, purchased lists, old leads), you must check the national registry.

How quickly must I honor a DNC request?

The TSR technically allows up to 30 days, but best practice - and what regulators and courts expect - is immediate processing. Your AI system should add the number to your suppression list in real time during the call. Any additional calls to that number after the request (even within the 30-day window) increase your legal risk.

Can a lead re-consent after opting out?

Yes. A consumer can provide new consent after previously opting out. However, this new consent must be explicit and documented. The consumer must affirmatively agree to receive calls again - for example, by submitting a new form with a consent checkbox. You cannot assume re-consent based on other interactions (like visiting your website or opening an email).

What is the difference between the DNC registry and TCPA consent?

The DNC registry (managed by the FTC under the TSR) and TCPA consent requirements (enforced by the FCC) are separate but overlapping regulatory frameworks. The DNC registry restricts who you can call. TCPA consent requirements regulate how you call (specifically, the use of automated technology). For AI lead calling, you need to comply with both: the lead must not be on your internal DNC list, and you must have documented consent for the automated AI call.

Does calling a DNC number with consent still create risk?

The legal risk is low if you have documented prior express consent. However, the practical risk is that consumers who register on the DNC list clearly do not want telemarketing calls. Even with prior consent, these leads may be less receptive and more likely to file complaints. AI callback from fresh, opted-in form submissions mitigates this because the lead just requested contact moments ago.