TCPA Compliance Guide for Buying Insurance Leads

The Telephone Consumer Protection Act is easy to ignore until a demand letter arrives. If you are buying leads and calling them, you need a working understanding of it. The statute lets a consumer sue for $500 per violation, and a court can triple that to $1,500 if the violation was willful or knowing (47 U.S.C. § 227(b)(3)). Each call or text can be a separate violation, so the numbers add up fast. This guide is general information, not legal advice. Talk to a TCPA lawyer about your own setup.

What TCPA Is and Why You Should Care

TCPA is a federal law enacted in 1991 that regulates telemarketing calls, auto-dialed calls, pre-recorded messages, and text messages. It was designed to protect consumers from unwanted robocalls. The FCC writes and enforces the rules under it, and consumers can also file private lawsuits.

The penalties are not theoretical. TCPA class actions are common, and plaintiff attorneys look for consumers who received calls they did not consent to. Anyone who makes a lot of outbound calls to people they have never spoken to before, including insurance agents, is exposed.

Express Consent vs. Prior Express Written Consent

TCPA distinguishes between two types of consent, and the difference matters.

Express consent means the person gave their phone number voluntarily. If someone fills out a form and provides their phone number, they have given express consent to receive calls from you, but only non-telemarketing calls. You could call to follow up on their inquiry, but you could not pitch them a product they did not ask about.

Prior express written consent is the higher standard. It requires the consumer to sign (including electronically) a clear disclosure that they agree to receive telemarketing calls or texts, including via autodialer or pre-recorded voice. This is what you need if you are using any kind of power dialer, auto-dialer, or pre-recorded message.

When you buy leads, the consent was captured by the lead vendor, not by you. This is the key point. The vendor’s form and disclosure language determine whether you have a legal basis to call that lead. If the vendor’s opt-in language is weak, generic, or missing, the consent may not cover you, and you are the one making the call.

What Happened to the One-to-One Consent Rule

In 2023 the FCC adopted a “one-to-one” consent rule. It would have required prior express written consent to be given to one seller at a time, instead of one form covering a long list of “marketing partners,” and it was due to take effect in January 2025.

It never took effect. On January 24, 2025, the Eleventh Circuit vacated the rule inInsurance Marketing Coalition v. FCC, finding the FCC had exceeded its authority under the TCPA (Wiley summary). The FCC then removed the vacated language from its rules.

That does not make every multi-partner form safe. Consent still has to be real, clear and cover the company that is calling, and state laws can be stricter than federal rules. With shared leads, ask the vendor exactly what the consumer agreed to and whether your company is named.

What to Ask Your Lead Vendor

Before you buy a single lead, ask these questions. If the vendor cannot answer them clearly and specifically, that is a red flag.

1. “Do your leads have TCPA-compliant consent?” This is the baseline question. The answer should be yes, and they should be able to explain how consent is captured.
2. “Do you use TrustedForm certificates or similar verification?” TrustedForm creates an independent, timestamped record of the form submission, including the disclosure language the consumer saw. A third-party record like this is useful evidence of consent in a dispute.
3. “Are leads sold as exclusive or shared?” If the vendor sells shared leads, ask how the consent language covers each buyer, and whether your company is named on the form.
4. “Can I see a sample of your lead form and consent language?” A legitimate vendor will show you exactly what the consumer sees when they opt in. If the vendor will not share this, walk away.
5. “How do you handle Do Not Call list scrubbing?” Ask whether leads are checked against the National Do Not Call Registry, and understand when written consent lets you call a number that is on it.

How This Affects Your Lead Strategy

Compliance concerns push many agents toward exclusive, intent-based leads with explicit opt-in to a specific company. The consent chain on those leads is simpler to follow.

If a consumer fills out a form that says “I want to be contacted by [Your Company Name] about life insurance,” and they sign that consent, you have a clean legal basis to call them. If a consumer fills out a generic form that says “I want insurance quotes from multiple companies,” the consent chain gets murky fast.

Aged leads present additional risk. Consent can be revoked at any time. A consumer who filled out a form weeks ago may have already told other agents to stop calling. If you dial them with an autodialer after they have revoked consent, you are exposed.

Leads with consent that names your company, a clear record of the form, and a recent submission are the easiest to defend. Ask for that documentation whatever you buy.

Protecting Yourself

Even with compliant leads, there are basic steps you should take to limit your exposure.

• Maintain your own internal Do Not Call list. When someone tells you to stop calling, add them immediately and never call again.
• Document every call. Your CRM should log the date, time, and outcome of every contact attempt.
• Keep records of lead provenance. Know where every lead came from, when consent was captured, and what the consumer agreed to.
• If you use a dialer, make sure it can detect and skip numbers on the DNC registry and your internal suppression list.
• Ask your E&O carrier or broker whether your policy covers TCPA claims, and what it would take to add that coverage.

TCPA compliance is not optional. It is a federal law with real financial consequences, and the rules change. Check the current rules, and your state’s, before you change how you call or text leads.