TCPA Basics for Small Businesses That Call Customers

TCPA compliance is not only a telemarketer problem. The Telephone Consumer Protection Act governs how any business contacts consumers by phone, and it carries statutory damages of $500 per violation — trebled to $1,500 if willful. Appointment reminders, payment follow-ups, and routine "checking in" calls all sit inside its scope.

The damages are per call and available in class actions. That combination is why TCPA litigation exists as an industry, and why an ordinary office should know where the lines are. None of what follows is legal advice — it is the shape of the statute as it affects a small business that makes outbound calls.

Does the TCPA apply to my business if I am not a telemarketer?

Yes, if you call consumers. The statute restricts how you call, not what you sell. Three restrictions apply regardless of industry:

• Automated and prerecorded calls to mobile numbers require prior consent. The kind depends on the purpose.
• Calls outside permitted hours are prohibited for telephone solicitations.
• Do-not-call requests must be honored, and you must maintain the list recording them.

A contractor calling a past customer to offer a maintenance plan is squarely in the marketing category, whether or not anyone in the office would use that word. The framing that gets businesses in trouble is "we only call our own customers." An existing relationship changes some obligations; it does not remove them.

Which calls need consent, and what kind?

The requirement scales with two variables: whether the call is marketing, and whether a machine placed it or played it.

Two definitions carry the weight.

Prior express consent means the consumer gave you the number for the purpose in question — typically by writing it on an intake form. Not a high bar, but a specific one, and "we found it in our records" does not meet it.

Prior express written consent is a signed agreement naming your business, disclosing that automated marketing calls may follow, and stating that agreeing is not a condition of purchase. Electronic signature counts; a checkbox buried in terms of service generally does not.

The safest posture for a small office is the top row: a person dials and speaks. That is where most medical, legal, and trades offices already operate, and it removes the most litigated category of exposure.

Do appointment reminder calls need consent?

Usually you have it, and usually it came from the intake form. The risk is not the reminder itself — it is what else rides along.

Informational calls placed by a live person to a number the patient provided for that purpose are the ordinary case, and not the ones generating lawsuits. Prerecorded reminders to a mobile number need prior express consent, which the intake form typically supplies if it asked for a callback number and said what it would be used for.

The FCC has recognized a narrow exemption for certain healthcare-related calls. It covers specific categories of treatment-related messages, caps how many may be sent, and does not extend to account balances, collections, or anything that markets a service.

That is where reminders go wrong. A reminder that also mentions a promotion becomes a marketing call and inherits the marketing consent standard. Keep the script to the appointment. Getting reminders answered at all is a routing problem more than a compliance one — cutting no-shows with better call routing covers that side.

What hours can I call customers?

Between 8:00 a.m. and 9:00 p.m. in the called party's local time, not yours.

That is the federal rule for telephone solicitations, and several states impose narrower windows. Two operational consequences follow.

First, the relevant time zone belongs to the person you are calling. A Denver office dialing an East Coast number at 7:15 p.m. Mountain is calling at 9:15 p.m. Eastern, outside the window. Area code is an imperfect proxy for where a mobile user is, so err inward at both ends.

Second, a phone system that knows the time helps only for calls it controls. Signal sets business hours in your own timezone and routes inbound calls accordingly — that governs when your phones ring, not when staff dial out. Outbound discipline is a staff rule, and call reporting tells you whether it is followed.

Do I need my own do-not-call list?

Yes. An internal do-not-call list is a requirement, not a courtesy, and the obligation exists independently of the national registry. The rules in practice:

1. Record the request when someone asks not to be called, at the time they ask.
2. Honor it promptly — same-day is the defensible standard.
3. Retain the entry for five years.
4. Keep a written policy describing how requests are recorded and honored, available on demand.
5. Train whoever answers phones, because the request usually arrives verbally, mid-call, from someone who will not repeat it.
6. Check the national registry before soliciting numbers you have no established business relationship with.

The failure mode is rarely malice. It is a request noted on a sticky pad, and a second staff member calling that person a week later from a different list.

Can a customer revoke consent, and how?

By any reasonable means, at any time. You do not get to specify the channel.

A consumer who says "stop calling me" mid-call has revoked, as has one who tells your front desk in person. Attempting to require a written form or a particular department is itself a problem, and revocation is broad by default unless the consumer limits it.

What your phone system does and does not do about this

Worth stating plainly, because vendors blur it.

Signal has no autodialer, no predictive dialer, no prerecorded outbound campaign feature, and no texting. Every outbound call is a person picking up a handset or clicking dial. That structurally removes the most heavily litigated TCPA categories, because those categories require equipment Signal does not provide.

What Signal gives you is the record and the caller ID. Call history shows what was dialed, when, and from which extension — the log you want when a complaint arrives a year later. Outbound caller ID controls what number your team presents, and transmitting accurate caller ID is its own obligation under the Truth in Caller ID rules. Setting it consistently is also the best defense against being labeled 'Spam Likely'.

What Signal does not do is decide whether you had consent. No phone system can.

Frequently asked questions

Does the TCPA apply to my business if I am not a telemarketer?

Yes. The TCPA regulates how you call consumers, not what you sell. Automated or prerecorded calls to mobile numbers require consent, calling hours are restricted for solicitations, and do-not-call requests must be honored. An existing customer relationship changes some obligations but does not eliminate them.

Do appointment reminder calls need consent?

Live reminders placed by a person to a number the patient provided are the ordinary case and rarely a problem. Prerecorded reminders to a mobile number need prior express consent. A narrow FCC healthcare exemption exists but is limited in purpose and volume, and never covers billing or marketing.

What hours can I call customers?

Between 8:00 a.m. and 9:00 p.m. in the called party's local time zone, with some states narrower. The time zone is theirs, not yours, and area code is an unreliable proxy for where a mobile user is. Err inward at both ends.

Do I need my own do-not-call list?

Yes, separate from the national registry. Record requests when they are made, honor them promptly, retain entries for five years, keep a written policy, and train whoever answers the phone — most requests arrive verbally, mid-call.

If your office makes outbound calls and you are not sure what your current system logs, ask us what a Signal call history record looks like. Knowing what you can prove is the cheap half of this problem.