TCPA appointment setting rules in 2026 turn on three things: the right kind of consent, calls placed between 8am and 9pm in the called party’s local time, and a list scrubbed against the National Do Not Call Registry. Reminder calls to people who already booked sit under looser rules than calls that sell.
This is a plain-language summary, not legal advice.
What does the TCPA actually cover?
The Telephone Consumer Protection Act is a federal statute from 1991, and the working rules live in the FCC’s regulations at 47 CFR 64.1200. It governs calls and texts placed with an automatic telephone dialing system or an artificial or prerecorded voice, plus telemarketing calls of any kind to numbers on the national registry.
Three details catch teams out.
- Texts count as calls. Every rule below applies to SMS the same way it applies to voice.
- The penalty is per call. Statutory damages are $500 per violation and up to $1,500 where the violation was willful or knowing. A list of 2,000 numbers is not one mistake, it is 2,000.
- The FTC’s Telemarketing Sales Rule runs alongside it. Different regulator, overlapping duties, including the do-not-call requirements and disclosure rules for sales calls.
What is the difference between prior express consent and prior express written consent?
This is the distinction that decides which script you can use.
| Prior express consent | Prior express written consent | |
|---|---|---|
| Covers | Informational and transactional calls and texts: reminders, confirmations, delivery updates, account notices | Telemarketing and advertising calls and texts delivered with an autodialer or a prerecorded voice |
| How it is given | Usually by providing the number in connection with the transaction, for messages closely related to it | A signed agreement, electronic signature accepted, naming the business allowed to call |
| What the disclosure must say | No set wording | That the person agrees to receive marketing calls or texts at that number using an autodialer or prerecorded voice, and that agreeing is not a condition of buying anything |
| Typical evidence | The booking record showing when and where the number was supplied | The form, the timestamp, the IP address, the exact wording shown and the checkbox state |
| Example | “Reminder: your 3pm cleaning on Thursday with Dr Patel” | “Book a whitening consult this month and save on your next visit” |
The test is content, not intent. A reminder that ends with a promotional sentence is a telemarketing call. Keep the two flows apart and keep the consent evidence attached to the number, not to the campaign.
Healthcare has a narrow carve-out worth knowing. The FCC treats certain treatment and appointment messages made by or for a covered entity as permitted under prior express consent where the patient gave the number, subject to limits on frequency and length and with an easy opt-out. It does not extend to billing, collections or marketing. Pair it with HIPAA’s rules on what you may say out loud before you confirm who is on the line.
When can you legally call, and whose clock counts?
Federal telemarketing calls are limited to 8am to 9pm in the local time of the person being called. Their clock, not yours. A team working US Eastern hours cannot open a Pacific list at 8am Eastern, and an evening block that ends at 9pm Eastern is already past the line in Hawaii.
Alongside the clock sit three list duties:
- National Do Not Call Registry. Scrub telemarketing lists against it. Registration does not expire.
- Internal do-not-call list. Maintain your own, honor requests immediately, and keep the record for five years.
- Established business relationship. A limited exemption that runs for 18 months after a purchase or transaction, and 3 months after an inquiry or application. It does not survive a direct request to stop.
Callers also have to identify themselves: the name of the individual caller, the business on whose behalf the call is made, and a phone number or address where that business can be reached.
How does someone revoke consent, and how fast must you act?
A person can withdraw consent by any reasonable means. FCC rules treat a one-word reply such as stop, quit, end, revoke, opt out, cancel or unsubscribe as automatically reasonable, and a spoken request on a live call counts too. Once revoked:
- Stop calling and texting within 10 business days.
- Apply it across channels for that business, not just the channel where it was given.
- Keep the record. A suppression entry with a timestamp and a source is what answers a complaint.
The operational failure is nearly always the same: three systems, three lists. The phone system has one suppression list, the SMS tool has another, and the CRM has a third. Consolidate to one, and make every tool read from it before it dials.
Which state mini-TCPAs are stricter than federal law?
Several states passed their own statutes with lower thresholds and private rights of action. Three matter most for appointment setting.
| State | Statute | What is tighter |
|---|---|---|
| Florida | Florida Telephone Solicitation Act, Fla. Stat. 501.059 | Prior express written consent for sales calls placed with an automated system for selecting or dialing numbers; calling window closes earlier than federal, at 8pm local; no more than three commercial calls on the same subject in 24 hours; caller ID spoofing prohibited. 2023 amendments narrowed the scope and added a pre-suit notice step for text claims |
| Oklahoma | Oklahoma Telephone Solicitation Act of 2022 | Closely modeled on Florida’s earlier language: written consent for automated sales calls, an 8am to 8pm local window, and a three calls in 24 hours cap on the same subject |
| Washington | Commercial Electronic Mail Act, RCW 19.190 | Governs commercial text messages and email to Washington residents; bans misleading sender information and subject lines; carries its own damages and pairs with the state consumer protection act. Washington’s separate telephone solicitation statute adds identification and hang-up duties |
The practical rule for a national list: build to the strictest state you dial into, or segment the list by state and enforce different windows per segment. Guessing costs more than segmenting.
Do you need permission to record the call?
Federal law and most states allow recording when one party consents, and the caller is that party. About a dozen states require all parties to agree, including California, Florida, Illinois, Maryland, Massachusetts, Pennsylvania and Washington. The Reporters Committee recording guide keeps a state-by-state view.
If the list crosses state lines, a single notice on every call is simpler and safer than conditional logic. Say it before any account detail comes up, and log the acknowledgment.
What does a compliant reminder call sound like?
Here is a template you can lift. Keep it under a minute, keep it factual, and keep the selling out of it.
“Good morning, this is Maria calling from Riverbend Dental on a recorded line. Am I speaking with Jordan Ellis?
Thanks Jordan. I am calling to confirm your cleaning with Dr Patel on Thursday the 24th at 3pm. Does that still work?
[If yes] Perfect, you are confirmed. Please arrive ten minutes early. If anything changes you can call us back on 555-0142 or reply to the text we sent.
[If no] No problem. I can move you to Friday at 10am or next Tuesday at 2pm. Which suits better?
[Close] One more thing: if you would rather not get reminder calls, I can switch you to text only or take you off reminders entirely. Would you like me to?
Thanks Jordan. Have a good day.”
What makes it compliant: it identifies the caller and the business, gives a callback number, confirms identity before any detail is shared, states the recording, contains no offer, and puts an opt-out in the caller’s hands without making them ask.
What should your outbound checklist cover before the first campaign?
Run this before a single number is dialed.
- Purpose defined. Informational or telemarketing. Written down, one per campaign, never both.
- Consent evidence. The form wording, the timestamp and the source stored against each number, exportable.
- Registry scrub. National Do Not Call Registry checked on a fixed cadence, with the scrub date logged per list.
- Internal suppression list. One list, read by the phone system, the SMS tool and the CRM. Five-year retention.
- Time zone enforcement. Local time derived from the number or the record, enforced by the dialer, not by the agent.
- State segmentation. Florida, Oklahoma and other mini-TCPA states split out with their own windows and frequency caps.
- Recording notice. In the first four lines of every script.
- Identification line. Caller name, business name, callback number.
- Opt-out handling. Every agent trained to action it on the call, not to promise a callback.
- Complaint runbook. Who is told, who suppresses the number, who preserves the recording, all within one business day.
- Vendor contract. Who owns the list, who scrubs it, who holds the consent records, and what indemnities apply.
- Quarterly review. Rules change; a 12-month-old script is an unreviewed script.
Who is responsible when someone else places the call?
Both of you, in practice. Businesses have been held liable for calls placed on their behalf, which means outsourcing the dialing does not outsource the exposure. Set it up so the compliance artifacts live with you: your consent records, your suppression list, your approved script, your calling windows.
That is how AssistBPO runs outbound desks. Assistants are employed, managed staff working your hours with your script, and outbound calling, SMS and email happen with lawful consent and do-not-call scrubbing, with recording notices set per country and state. Plans depend on hours, desks and coverage. Get a staffing plan within 1 business day.
One last piece of context on why this keeps coming up. The Wishup 2026 industry report puts the human virtual assistant services market at $6.5 billion in 2026, growing at 23.4 percent a year, with administrative work the single largest slice at 31.5 percent. More scheduling desks mean more reminder calls, and reminder calls are exactly where the informational and telemarketing lines blur. Decide which side of the line each campaign is on before the first dial, and the rest of the checklist writes itself.
Frequently asked questions
Do appointment reminder calls need the same consent as sales calls?
No. A reminder that confirms an appointment the person already booked is informational, so prior express consent is enough, and giving you the number when booking usually supplies it. The moment the call promotes a product, a service, an upgrade or a special offer, it becomes telemarketing and needs prior express written consent for automated or prerecorded delivery. Keep the two scripts separate. One reminder call that adds a sales line is a telemarketing call with the wrong paperwork behind it.
What are the legal calling hours under the TCPA?
Federal rules restrict telemarketing calls to between 8am and 9pm in the local time of the person being called. That is their time zone, not the caller's, so a US team working Eastern hours cannot start dialing California at 8am Eastern. Several states are tighter. Florida and Oklahoma close their windows earlier for commercial calls. Build the time zone into the dialer or the calling list so the rule is enforced by the system, not by memory.
Can someone revoke consent by replying stop to a text?
Yes. FCC rules treat replies such as stop, quit, end, revoke, opt out, cancel and unsubscribe as automatically reasonable ways to withdraw consent, and a consumer may also revoke by phone, email or any other reasonable method. Once revoked, the caller must stop within 10 business days and the revocation applies across channels for that business. The practical fix is one shared suppression list that the phone system, the SMS tool and the CRM all read.
Does the TCPA apply if we dial manually rather than with an autodialer?
Partly. The autodialer and prerecorded voice restrictions hinge on the technology used, and the Supreme Court narrowed the autodialer definition in 2021. But the Do Not Call Registry rules, the internal do-not-call list, the calling hour limits and the caller identification rules apply to live telemarketing calls regardless of how the number was dialed. Manual dialing reduces one class of risk. It does not make a call list compliant on its own.
Who is liable when an outsourced team places the call?
Both the seller and the caller can be exposed. Courts have held businesses responsible for calls placed on their behalf, so the consent records, the suppression list and the script all need to be yours even when someone else dials. Write it into the contract: who owns the list, who scrubs it, how often, who stores the consent evidence and how long, and what happens the same day a complaint arrives. Statutory damages start at $500 per call.
Do we have to announce that a call is recorded?
It depends on where both parties sit. Federal law and most states allow recording with one party's consent, which the caller supplies. About a dozen states, including California, Florida, Illinois, Maryland, Massachusetts, Pennsylvania and Washington, require every party to agree. Because a national calling list crosses all of them, the workable policy is a single recording notice at the top of every call, delivered before any account detail is discussed, with the caller's name and the business name.
Sources
- FCC, Telemarketing and robocalls
- eCFR, 47 CFR 64.1200, Delivery restrictions
- FTC, Telemarketing Sales Rule
- Florida Statutes 501.059, Telephone solicitation (FTSA)
- Washington State Legislature, RCW 19.190 (CEMA)
- Reporters Committee for Freedom of the Press, recording guide
- HHS, HIPAA for Professionals
- Wishup, The 2026 Virtual Assistant Industry Report




