The Definition: What Counts as Prior Written Consent

Under the TCPA and FCC rules, "prior express written consent" means an agreement, in writing, bearing your signature, that clearly authorizes a named seller to send you marketing texts or automated calls. That signature can be electronic. The underlying rule treats consent collected through a website form, email, text message, or telephone keypress as valid under the E-SIGN Act, though a voice recording alone no longer proves "written" consent.

Not every message needs the same level of permission. Marketing and automated messages require prior express written consent, while purely informational messages, like appointment reminders or fraud alerts, need only prior express consent. Add a coupon code to a reminder and you've crossed into marketing, which pushes the requirement back up to written.

The rules also apply per channel, and this is where a lot of businesses get caught:

• An email opt-in does not equal SMS consent. You need a separate opt-in that explicitly mentions text messages.
• Consent to one seller is not transferable or saleable to another, and it does not transfer when a purchased list changes hands.
• Messages must stay logically and topically associated with the interaction that prompted consent. Consent given on a loan comparison site does not authorize unrelated robotexts.
• A later opt-out overrides valid consent. The sender must stop.

The stakes explain why the distinction matters. TCPA penalties run $500 to $1,500 per violating message, and lawsuits can reach back four years, so keeping consent records for four years or longer is the practical standard. Liability sits with the sender, not the lead seller, which means a brand making the outreach owns the problem if consent turns out to be invalid.

The legal ground is also moving. The FCC's one-to-one consent rule, adopted in December 2023, was vacated by the Eleventh Circuit in January 2025, leaving the prior written-consent standard in force, while a February 2026 Fifth Circuit decision held the TCPA does not require written consent at all for automated telemarketing calls within that circuit. Treat the standard as jurisdiction-dependent and current, not settled.

For anyone comparing outreach providers, ask how consent gets collected and documented. Worqd's booking funnel requires an explicit "I agree to be contacted about my request" checkbox, and its B2B outreach is built as permission-aware outreach to relevant accounts rather than a template blast, with no sensitive form fields sent to public analytics.

The Rules Are Shifting: Courts Now Disagree on What's Required

The legal ground under your feet is shifting. What was settled law last year is now a matter of active debate among federal courts, leaving many businesses uncertain about their current obligations.

In December 2023, the FCC adopted a "one-to-one consent" rule. This required written consent to clearly identify the specific seller authorized to contact a consumer. The goal was to close a loophole where lead generators sold consent to hundreds of different companies. However, the Eleventh Circuit vacated this rule in January 2025, holding that the FCC exceeded its statutory authority.

The conflict deepened in February 2026. The Fifth Circuit ruled in Bradford v. Sovereign Pest Control that the TCPA does not require written consent for automated telemarketing calls within its jurisdiction. According to legal analysis of the ruling, this decision upends years of settled law but applies only within the Fifth Circuit. Outside that region, the written consent standard remains in force.

This creates a tricky compliance environment. You might have a valid oral consent in Texas but face liability for the same action in Georgia. Even in jurisdictions where written consent is no longer strictly required, courts still demand proof of clear, direct, and unequivocal authorization.

Why take the conservative approach? The penalties remain steep. A single violating message can cost you $500 to $1,500. More importantly, the statute of limitations allows lawsuits to reach back four years. If you cannot produce a signed record, you have no defense.

When evaluating outreach partners, look for documented proof. This includes:

• The exact consent language shown to the user
Timestamps and the specific URL where consent was capturedEvidence that a real human, not a bot, submitted the formRetention records spanning at least four yearsTopical association between the original interaction and the outreach

Independent proof is your strongest defense against liability. At Worqd, we treat this as a non-negotiable part of our permission-aware outreach. We ensure every contact has a traceable, documented history before we engage. This protects you from the financial risks of ambiguous consent.

The safest posture is still to collect documented written consent. It neutralizes the risk of jurisdictional shifts and provides the audit trail needed to survive litigation. Do not rely on oral assurances or vague opt-ins. The law may be flexible in some courts, but the financial exposure is not.

What Valid Consent Actually Requires in Practice

Knowing the definition of prior written consent is one thing. Proving it months or years later, when a complaint lands, is what actually keeps you out of trouble. The FCC standard requires an agreement "bearing the signature of the person called that clearly authorizes" the marketing messages, and courts expect businesses to back that up with real evidence, not a shrug (TermsFeed).

In practice, valid consent has a short list of non-negotiables:

• An unchecked, standalone consent box. Pre-ticked boxes are invalid, and the consent language can't be bundled into your terms of service.
• Clear disclosure of what the person is agreeing to, including who will be contacting them and the kind of messages they'll receive.
• A statement that consent is not a condition of purchase. Nobody should have to "agree" just to buy something.
• Records kept for at least four years, matching the statute of limitations on TCPA claims (ActiveProspect).

That recordkeeping deserves a closer look, because it's your strongest defense. Good consent records include the exact consent language shown on the form, a timestamp, the URL where the form was collected, the form fields the person submitted, and proof that a real human (not a bot) filled it out. As ActiveProspect puts it, "independent proof is your strongest defense." Bot-submitted leads count as no consent at all, which means the liability falls on whoever sends the next message.

One more thing people miss: consent has to stay on topic. The FCC requires that messages be "logically and topically associated" with the interaction that prompted the consent (Consumer Finance Monitor). If someone agreed to hear about car loans, you can't pivot to loan consolidation offers. And consent doesn't transfer. Buying a lead list doesn't buy you the original consent, and consent given to one seller can't be resold to another.

Finally, know where the liability sits. Under the TCPA, it's the business making the calls or texts, not the lead seller, that's on the hook if consent turns out to be invalid. That's why it's worth asking hard questions before you buy leads or run outreach through a partner. When we work with clients at Worqd, consent comes first: our booking funnel requires an explicit opt-in ("I agree to be contacted about my request"), and our B2B outreach is permission-aware and personalized to relevant accounts rather than a template blast. The fines run $500 to $1,500 per violating message, so getting this right before you hit send is a lot cheaper than getting it wrong after.

How Worqd Handles Consent in Its Outreach

When you're checking whether a provider takes consent seriously, the fastest tell is what their own booking funnel asks of you. Worqd's approach lines up with the legal standard on the points that matter most, and it's worth seeing exactly how.

The checkbox that does the legal work. Worqd's booking funnel requires an explicit, unchecked statement: "I agree to be contacted about my request." That matches the core requirement regulators describe, an agreement in writing that clearly authorizes contact, collected electronically, which is valid under the E-SIGN Act. It's a standalone, unbundled opt-in, the kind compliance guidance says holds up.

Scope stays narrow. The funnel states your details are used only to prepare for the call. That mirrors the FCC's rule that outreach must stay "logically and topically associated" with the interaction that prompted consent. Your budget range, shared to scope a growth call, doesn't become fodder for unrelated pitches later.

Worqd's other stated practices map onto the same standard:

• B2B outreach is personalized and permission-aware, sent to relevant accounts. The company describes it as "the opposite of a template blast," which fits the topical-association rule and the reality that consent never transfers between sellers.
• No sensitive form fields go to public analytics. Since consent records are your strongest defense in a TCPA claim, keeping contact data out of shared tooling reduces exposure.
• Opt-out requests get honored, which the FCC treats as binding even after valid consent is given.

Why does this matter commercially? Because consent is the foundation for follow-up that actually converts. With TCPA penalties running $500 to $1,500 per violating message and a four-year statute of limitations, sloppy consent practices don't just risk fines, they poison the pipeline. You can't run fast follow-up, database reactivation, or AI SDR outreach on contacts whose permission you can't document.

The cleanest providers treat consent as an asset, not a checkbox. If you want to see the practice in action, book a growth call at worqd.com/book and watch what the funnel asks of you. That's the whole point: faster follow-up on permission you can prove, and better creative pointed only at people who asked to hear from you.