TCPA Compliance Best Practices
· LeadSalesHub
Note: this post was carried over from the previous site during the marketplace rebuild. The URL is preserved; the content is due a refresh. Nothing here is legal advice — lead generation is regulated, the rules vary by jurisdiction and vertical, and you should take your own counsel.
The mistake most operators make with TCPA is treating consent as a checkbox rather than a record. The checkbox is the interface. The record is what matters, and it is what you will be asked for.
Capture four things, every time
- The consent text exactly as displayed. Not a reference to it, not a version number — the literal string the consumer saw. Consent language changes; your record needs to show what was on screen at that moment.
- The timestamp. Server-side, in UTC.
- The IP address the consent came from.
- The source URL where it was collected, including query parameters if they determined what was shown.
If you cannot produce all four for an arbitrary lead from eight months ago, you do not have a consent record — you have a claim that consent happened.
Why this gets harder in a marketplace
When one operator generates and works their own leads, the consent record and the contact attempt live in the same system. When a lead is sold, they separate. The buyer making the call is relying on a consent record held by someone else, captured under language they did not write.
Two implications:
For sellers: your consent record is part of the product. A lead with weak consent provenance is worth less, and should be.
For buyers: know what you are buying. Ask what consent language was shown and confirm it covers the contact you intend to make. "The seller said it was consented" is not a defence anyone has been happy with.
Suppression
Consent is necessary, not sufficient. Maintain suppression lists, honour opt-outs promptly across every channel, and check them at contact time rather than at purchase time — the gap between the two is where problems live.
Retention
Keep consent records for at least as long as your statute of limitations exposure, which is usually longer than your commercial need for the data. Deleting a lead record while retaining the obligation it created is a bad trade.