tcpa_law ยท 11 min read

Understanding the TCPA's One-to-One Consent Rule

The TCPA one to one consent rule is a consumer protection principle clarifying that your consent to receive automated marketing texts is non-transferable and applies only to the specific entity to which you gave it. This means if you give your phone number to Company A, they cannot sell or pass your consent along to Company B to start texting you. Under the Telephone Consumer Protection Act (TCPA), each text message sent in violation of this rule could entitle you to statutory damages of $500, potentially increasing to $1,500 if the violation is found to be willful or knowing. This critical rule, reinforced by the Federal Communications Commission (FCC), aims to stop the rampant trade of consumer contact lists and ensures that "prior express written consent" is a meaningful, direct agreement between you and a single business.

What is the TCPA's One to One Consent Rule?

The concept of "one-to-one consent" stems from the Federal Communications Commission's efforts to strengthen the Telephone Consumer Protection Act. In a 2013 ruling, the FCC clarified the requirements for obtaining "prior express written consent" for autodialed or prerecorded marketing messages sent to wireless numbers. The commission stated that consent must be given to a specific, named entity. This prevents a company from using vague language in its terms of service to get your permission and then selling your number as a "lead" to countless other businesses. The core principle is that your consent is not a blank check for the entire marketing world; it is a direct, personal permission slip granted to a single seller.

To be valid, this consent must be documented in writing, which can include electronic forms like a website checkbox, an email, or a text message reply. The disclosure seeking your consent must be clear and conspicuous, meaning it cannot be buried in a lengthy legal document or hidden in fine print. It must explicitly state that by providing your signature (electronic or otherwise), you authorize the seller to send you marketing communications using an autodialer or prerecorded voice to the specific number you provided. Furthermore, the disclosure must inform you that you are not required to provide consent as a condition of purchasing any goods or services.

This one-to-one requirement is a powerful tool against the pervasive practice of lead generation abuse. Many websites exist solely to collect consumer information and sell it to third parties, from mortgage lenders to solar panel installers. Before this clarification, these sites would argue that by agreeing to their terms, you had consented to be contacted by their ambiguous network of "partners." The one-to-one rule invalidates this argument. If you fill out a form on a generic loan comparison site, that site cannot legally transfer your consent to a dozen different banks who then start spamming your phone. Each bank would need to obtain its own separate, direct consent from you.

How Autodialers and Consent Are Legally Connected

The entire framework of TCPA consent hinges on the technology used to send the call or text. The law's strictest requirements, including the need for prior express written consent, are triggered when a company uses an Automatic Telephone Dialing System, commonly known as an autodialer or ATDS. While the legal and technical definition of an ATDS has evolved, particularly after the Supreme Court's 2021 decision in Facebook, Inc. v. Duguid, it generally refers to equipment that has the capacity to store or produce telephone numbers to be called using a random or sequential number generator. Many modern text message marketing platforms, though sophisticated, can fall under this definition depending on their specific architecture and capabilities.

Because these systems can send thousands or even millions of autodialer text messages in a single day, the potential for consumer harassment is immense. This is precisely why the FCC and courts have consistently held that using such technology for marketing requires the highest level of consumer consent. It is the use of an autodialer that transforms a simple promotional text into a potential TCPA violation carrying a penalty of $500 to $1,500. Informational messages, like appointment reminders or fraud alerts, have different, more lenient consent standards. You can learn more about this distinction in a resource like the TCPA Informational Call Exception: A 2024 Legal Guide.

Connecting this back to the one-to-one rule, the logic becomes clear. The law recognizes the intrusive power of automated marketing and gives consumers granular control over who can use it. By requiring consent to be specific to one seller, the TCPA prevents a single checkbox click from unleashing a torrent of spam from unknown companies. If a business wants to use an autodialer to send you marketing messages, it must first establish a direct relationship with you and receive your unambiguous permission. This ensures you are knowingly and willingly opting into communications from a company you recognize and trust, not an anonymous entity that bought your data.

What Constitutes a Violation of This Rule?

A violation of the one-to-one consent rule can occur in several common scenarios that you may recognize from your own message history. The most blatant violation is receiving automated marketing texts from a company you have never heard of or interacted with. If you did not provide your phone number directly to that company and explicitly agree to receive their marketing texts, any autodialed message they send you is a potential violation. This is the classic case of a business using a purchased lead list, a practice the one-to-one consent rule was designed to eliminate.

Another frequent violation happens through lead aggregator websites. Imagine you visit a site that promises to provide you with insurance quotes from multiple providers. You enter your phone number, and in the fine print, it says you agree to be contacted by "marketing partners." Soon after, you start receiving texts from five different insurance agencies. Under the TCPA's one-to-one rule, this is illegal. Your consent was given to the aggregator website, not to each individual insurance agency. For their texts to be legal, each agency would have had to obtain its own, separate prior express written consent from you.

Furthermore, issues with revoking consent under TCPA also constitute violations. You have the absolute right to revoke your consent at any time and through any reasonable means. Replying with words like "STOP," "QUIT," or "UNSUBSCRIBE" is a universally accepted method. Once you revoke consent, the company must stop sending you marketing texts within a reasonable period, which the FCC suggests is typically no more than 10 business days. If the texts continue beyond that window, each subsequent message is a new violation. It's important to remember that you have four years to file a claim under the federal statute of limitations, which you can learn more about in Understanding the TCPA Statute of Limitations in 2024. This article is for informational purposes only and does not create an attorney-client relationship. If you believe your rights have been violated, you should consult with a qualified attorney to review the specifics of your situation. You can also submit your evidence for a free case evaluation at SpamClaims.com to see if you may have a valid claim.

How Much Money Can You Recover for Consent Violations?

The TCPA provides for powerful statutory damages to compensate consumers for the nuisance and invasion of privacy caused by illegal calls and texts. For each message that violates the law, you may be entitled to recover $500. This amount is not per campaign or per company, but per individual text message or phone call. If a company sends you a series of ten illegal texts, you could potentially recover $5,000 in damages. This framework is designed to make it financially risky for companies to ignore consumer privacy rights, as the penalties can accumulate rapidly.

Moreover, the law allows for a tripling of these damages if the violations are found to be "willful or knowing." This means if a company knew it was breaking the law, or showed a reckless disregard for it, the penalty can increase to $1,500 per violation. Examples of willful violations could include continuing to text you long after you replied "STOP," knowingly purchasing lead lists from a shady data broker without verifying consent, or systematically hiding the consent disclosure in convoluted terms of service. In our previous example, those ten illegal texts could now be worth as much as $15,000 if a court determines the sender's actions were willful.

These figures are not just theoretical; companies pay millions of dollars every year to settle TCPA lawsuits. You can see a history of major class action cases and their payouts by visiting the TCPA Settlement Tracker. Proving a case often involves a detailed legal process where your attorney will gather evidence about the sender's practices. This can involve formal legal procedures known as TCPA discovery requests, which compel the company to turn over records about their texting platform, their consent records, and their policies for honoring opt-out requests. While no outcome is ever guaranteed, the TCPA provides a clear path for consumers to hold illegal spammers financially accountable.

Real Examples of One-to-One Consent Violations

To better understand how these violations occur in the real world, consider a few common examples. These scenarios illustrate how easily companies can breach the one-to-one consent rule and why it is so important for consumers to be vigilant.

From: +14805551234 Hi Jessica, it's Tom with ABC Solar! Ready to save big on your electric bill? We saw you were interested in a solar quote. Tap here for a free estimate: [link]

In this example, Jessica had recently visited a website that promised a "free home energy audit." She entered her number, believing she would get information from that specific site. However, the site was a lead generator that sold her information to dozens of local contractors. ABC Solar, a company Jessica has never heard of, is now texting her as if they have a relationship. This is a clear violation of the one-to-one consent rule because Jessica's consent was not given directly to ABC Solar.

From: 844-555-4321 XYZ Lending: CONGRATS! Based on your recent inquiry, you're pre-qualified for a $15,000 personal loan. No impact to your credit score to see your rate: [link] Reply STOP to end msgs.

Here, the user might have checked their credit score on a popular finance app. Buried in the app's terms of service was a clause allowing them to share user data with "trusted financial partners." The app then sold a list of users to XYZ Lending, which initiated this text campaign. The user never inquired with XYZ Lending or gave them specific permission to send marketing texts. This is another example of illegal consent transfer, making each text a potential TCPA violation.

From: The Corner Cafe Hey neighbor! Show this text for a BOGO coffee deal this Friday! Valid 6am-10am. See you then!

[Two weeks later, from the same number]

From: The Corner Cafe Weekend special! Get a free muffin with any latte purchase Sat & Sun. Don't miss out!

This scenario is slightly different. Let's say you initially signed up for texts from your local coffee shop. You enjoyed the deals for a while but then replied "STOP" to the first message. The shop, however, either had a broken system or simply ignored your request and sent you another promotional text two weeks later. By failing to honor your opt-out request (a form of revoking consent under TCPA), The Corner Cafe has committed a new violation with the second message.

How to Check Your Phone for Violations

Finding potential TCPA violations on your own phone is easier than you might think. Most spam texts hide in plain sight, and a few simple searches can reveal evidence that may be valuable for a potential claim. Follow these concrete steps to conduct a quick audit of your messaging history.

First, open the main messaging application on your smartphone. Locate the search bar, which is usually at the top of the screen. Use this function to search for common keywords associated with spam and unsolicited marketing. Good terms to search for include: "offer," "winner," "congratulations," "free," "deal," "loan," "quote," "pre-approved," and, most importantly, "STOP."

Second, as you review the search results, look for messages from numbers or short codes that you do not recognize. Pay close attention to texts from businesses you have never interacted with. Did a random lender text you a mortgage offer? Did a solar company you've never heard of send you a link? These are significant red flags and potential violations of the one-to-one consent rule.

Third, when you find a suspicious message, take a comprehensive screenshot. It is crucial that the screenshot captures the entire message, the sender's number or short code, and the date and time the message was received. Do not crop the image. For texts received after you replied "STOP," be sure to screenshot your "STOP" message and the illegal texts that came after it to show a clear timeline.

Finally, organize your evidence. Save the screenshots in a dedicated folder on your phone or computer. Create a simple log noting the sender's number, the date of each message, and a brief description of why you believe it is a violation (e.g., "Never gave consent," or "Sent after I replied STOP"). This documentation is incredibly helpful when you submit your case for review.

Check Your Phone Right Now

Take a moment to apply the steps from the previous section. The evidence of TCPA violations could already be sitting on your device. The most revealing search might be the simplest one.

Open your messages and search the word STOP.

This single word can uncover two major types of violations. First, it will show you every automated text that included the legally required "Reply STOP to unsubscribe" language. Ask yourself: did you actually subscribe to every one of those lists? If you see messages from companies you never gave your number to, each one could be a violation. Second, this search will show you every conversation where you actually did reply "STOP." Did any of those companies text you again afterward? If so, they broke the law by ignoring your request to opt out. These are clear violations that could entitle you to compensation.

Submit screenshots at SpamClaims.com

Frequently Asked Questions

What does "prior express written consent" really mean?

"Prior express written consent" is the TCPA's highest standard of consent, required for autodialed marketing calls and texts to cell phones. It means there must be a written agreement, signed by you, that clearly and conspicuously authorizes a specific seller to send you marketing messages using an autodialer to a specific phone number. The term "written" is interpreted broadly and can include electronic methods like checking a box on a website form, responding to an email, or replying to a text message. The key is that you must take an affirmative action to agree, and the disclosure must inform you that you are not required to consent to make a purchase. A pre-checked box that you fail to uncheck is generally not considered valid consent.

Can a company text me if I'm on the Do Not Call Registry?

Yes, a company can legally send you automated marketing texts even if you are on the National Do Not Call Registry, but only if you have provided them with prior express written consent. The DNC Registry is a general protection that prohibits unsolicited telemarketing calls. However, giving specific consent to a single company effectively creates an exception to the DNC rules for that company alone. If you have a direct business relationship and have explicitly opted in to their texts, they can contact you. Conversely, if you have not given consent, they cannot text you, and the fact that you are on the DNC list may serve as additional evidence in a claim against them.

How do I prove a company used an autodialer?

Proving a company used an autodialer (ATDS) can be a technical challenge for a consumer, and you are not expected to do it alone. However, you can look for clues. Messages that are generic, impersonal, and sent from a short code (a 5 or 6 digit number) are often sent using an ATDS. In a formal lawsuit, proving autodialer use is a key task for your attorney. Through a process called discovery, your legal team can file TCPA discovery requests to compel the company to provide technical specifications about their sending platform, phone number lists, and sending logs. In some cases, a TCPA expert witness may be hired to analyze this data and provide testimony that the system meets the legal definition of an ATDS.

What if I gave consent by accident by not unchecking a box?

This is a common and legally contentious scenario. The FCC has been clear that for consent to be valid, the consumer must take an "affirmative action." A pre-checked box that a consumer simply overlooks may not meet this standard. The argument is that failing to act (by not unchecking the box) is not the same as affirmatively agreeing to receive marketing texts. If the checkbox was also placed next to buried, confusing language or required you to agree as a condition of service, it is even less likely to be considered valid consent. These situations are highly fact-specific, and whether the consent is binding often depends on the overall context of the disclosure. It is wise to have an attorney review the specific web page or form where you believe you accidentally consented.

TLDR

Submit your spam screenshots for attorney review

This article is for informational purposes only and does not create an attorney-client relationship.