TL;DR: The Telephone Consumer Protection Act (TCPA) is the federal law governing automated calls and texts to insurance leads. Violations cost $500–$1,500 per call. Onyx’s AI agents handle consent logging, call recording, and compliance tracking automatically — so you stay compliant while booking more appointments.
What Is TCPA and Why Insurance Agents Must Care
The Telephone Consumer Protection Act (TCPA) is the federal regulation that controls how businesses can contact consumers by phone and text. Passed in 1991, the TCPA limits autodialed calls, prerecorded messages, text marketing, and live telemarketing to cell phones and landlines. Violations are expensive — $500 to $1,500 per violation, plus attorney fees and class action liability.
For insurance agents using AI or automated calling systems, TCPA compliance is non-negotiable. One unlawful call to a wrong number or without proper consent can trigger a lawsuit. Scale that across thousands of leads, and you’re facing catastrophic exposure.
The law is complex, but the fundamentals are clear: get consent first, keep records, and respect opt-outs. Onyx builds compliance into its AI appointment booking and outbound calling workflows so you don’t have to manually track it.
The Core TCPA Rules for Insurance Agents
TCPA regulations split into three main categories: autodialed/prerecorded calls, text messages, and live telemarketing. Here’s what each means for insurance agents.
Autodialed and Prerecorded Calls
An autodialed call is any call made using technology that can dial, play a message, or log a response without human intervention. This includes AI appointment booking agents, voicemail blasts, and recorded messages.
The rule: You cannot place an autodialed or prerecorded call to a cell phone without the recipient’s prior express written consent. You can call landlines without written consent (but still need to comply with other rules). This is the most common TCPA violation for insurance agents using AI.
Prior express written consent means the consumer must have signed or electronically agreed to receive calls from you. A phone number on a lead form doesn’t count — the consumer must have agreed to be called by your specific business.
Text Messages and SMS
SMS marketing to cell phones requires the same prior express written consent as autodialed calls. Each text message is counted separately — so if you send 500 SMS texts without consent, that’s 500 violations at $500 each.
Prerecorded SMS (automated text messages) fall under the same rules as autodialed calls: prior express written consent required, do not call list compliance, and annual consent re-verification in some states.
Live Telemarketing Calls
Live agent calls (human-to-human) have looser rules than autodialed calls, but you still must comply with the National Do Not Call Registry and honor written opt-out requests. This is where most agents are currently compliant — it’s the AI and automation that opens the door to violations.
How Onyx’s AI Agents Stay TCPA Compliant
Onyx’s AI agents (available in Prime and Elite AI tiers) handle TCPA compliance through three mechanisms: consent verification, call recording, and audit logging.
Consent Verification Before Outbound Calls
When you import a lead or collect a new contact in Onyx, the system prompts you to log the consent type. Onyx tracks:
- Date of consent
- Consent type (voice, email, form submission, phone opt-in)
- Consent medium (how the consumer agreed)
- Expiration status (some states require annual re-consent)
Before the AI agent initiates an outbound call, Onyx verifies that consent is logged. If consent is missing or expired, the call is blocked and flagged for review.
Automatic Call Recording and Retention
Onyx integrates with Twilio, which provides automatic call recording for all inbound and outbound calls. Every call is recorded, timestamped, and stored securely for audit purposes. The recording captures:
- Call date and time
- Duration
- Agent name (AI agent ID or live agent name)
- Call outcome (appointment booked, voicemail, callback)
- Audio transcript (for voice AI calls)
Call recordings are retained for 36 months (beyond the typical statute of limitations) so you have proof of compliance if a dispute arises.
Audit Trail and Compliance Dashboard
The Onyx compliance dashboard displays:
- Active consents per lead
- Consent expiration dates
- Opt-out requests and their status
- Call history with recording links
- Text message logs with opt-out compliance
This creates an electronic audit trail that proves you were compliant at the time of each call. In a TCPA lawsuit, this audit trail is your defense.
Common TCPA Violations and Penalties
Insurance agents most commonly violate TCPA in three scenarios:
Calling Without Written Consent
Scenario: You import 500 aged leads from a list broker and immediately have your AI agent call them. The leads consented to the list broker, not to you.
Violation: Autodialed call without prior express written consent from the recipient.
Penalty: $500–$1,500 per call × 500 calls = $250K–$750K exposure.
How to avoid it: Verify that your lead source included explicit consent language naming your business and your intention to contact by phone. If it didn’t, send a text or email asking for verbal consent before the AI agent calls.
Ignoring Opt-Out Requests
Scenario: A lead texts “STOP” to decline future texts. Your automation system doesn’t have a stop word filter, so the AI agent continues sending SMS messages.
Violation: Ignoring an express written opt-out request.
Penalty: $500–$1,500 per message after the opt-out.
How to avoid it: Onyx’s SMS automation includes automatic STOP keyword detection. When a lead replies STOP, the system immediately flags the contact as opted-out and blocks future SMS and calls. This is automatic — no manual intervention needed.
Calling Disconnected or Wrong Numbers
Scenario: Your lead list is six months old. Half the phone numbers are now disconnected or reassigned to different people. Your AI agent calls them anyway.
Violation: Calling non-consenting parties on reassigned numbers.
Penalty: $500–$1,500 per call to a wrong number.
How to avoid it: Onyx doesn’t prevent this automatically, but it flags it. Monitor your AI call logs for “number invalid” or “disconnected” outcomes. Remove those numbers from your outbound list. Insurance agents should validate lead lists quarterly to avoid this.
Best Practices for Call Recording and Consent Management
Log Consent at Lead Capture
When a prospect fills out a form, request explicit consent: “By submitting this form, you agree to be contacted by [Your Name] via phone call and text message to discuss your insurance needs.”
In Onyx, add a custom field: Consent to Call (Yes/No) and log the date. This creates the paper trail.
Use Prerecorded Disclaimers on AI Calls
When your AI agent calls a lead, the first 3–5 seconds should include a prerecorded disclaimer:
“Hello, this is [Your Name] calling from [Company Name]. This call may be monitored or recorded for quality and compliance purposes. By staying on the line, you consent to this call being recorded. Press 1 to continue, or hang up to opt out.”
This satisfies the two-party consent requirement in states like California and Florida and creates a recorded affirmation of consent.
Honor STOP Requests Immediately
Train your team (or configure your automation) to process opt-out requests in real time. Onyx does this automatically for SMS, but for voice calls, create a workflow:
- Lead says “Remove me from your list”
- AI agent confirms: “I’ve marked you as opted out. You will not receive further calls from us.”
- System logs the opt-out with timestamp
Keep Consent Records for 36 Months
TCPA lawsuits can be filed up to three years after a violation. Onyx retains call recordings and consent logs for 36 months by default. Do not delete these records.
Annual Consent Renewal (in Some States)
Some states (like Connecticut and Florida) require consent renewal every 12 months if the business relationship is inactive. Onyx’s consent management system flags leads that need re-consent, and you can send an SMS renewal message.
TCPA Penalties and Liability Exposure
A single TCPA violation carries a civil penalty of $500–$1,500 per violation. However, penalties scale:
- Small violation (50 calls): $25K–$75K
- Medium violation (500 calls): $250K–$750K
- Large violation (5,000+ calls): $2.5M–$7.5M+
Beyond the fine, TCPA violations can trigger:
- Class action lawsuits (attorneys can file on behalf of all affected consumers)
- Attorney fees (defendant pays plaintiff’s legal costs)
- Injunctions (court order to stop the behavior)
- Criminal prosecution (in cases of knowing intent)
The average TCPA settlement is $100K–$500K, and major violations have exceeded $10M. For insurance agents, TCPA compliance isn’t optional — it’s existential.
TCPA Compliance Checklist for Insurance Agents
Use this checklist before launching any outbound calling or texting campaign:
- [ ] All leads have documented consent (date and method logged)
- [ ] Consent form names your business and states “by phone and text”
- [ ] Lead list is current (validated within the last 3 months)
- [ ] Do Not Call Registry check performed (free at donotcall.gov)
- [ ] Call recording enabled on all outbound AI calls
- [ ] Prerecorded disclaimer plays at start of AI call
- [ ] STOP keyword detection enabled for SMS
- [ ] Opt-out requests processed within 24 hours
- [ ] Team trained on TCPA rules and liability
- [ ] Consent logs and call recordings retained for 36 months
- [ ] Compliance audit conducted quarterly
Onyx automates 8 of these 11 items. The remaining 3 (lead validation, DNR check, team training) are your responsibility.
FAQ
Q: Can I call a lead if they left their phone number on my website but didn’t explicitly agree to be called?
A: Not via autodialed or AI agent call. A phone number alone is not consent. You need explicit written consent stating that you (specifically) will contact them by phone. Best practice: send a text or email first asking for verbal consent, then have the AI agent call. The FCC has enforced this rule against hundreds of companies, with settlements ranging from $50K to $5M. Your lead form should include a checkbox with language like: “I agree to be contacted by [Your Name] via phone, text, and email regarding insurance quotes.” This single checkbox creates the paper trail you need.
Q: What if a lead texts STOP but my SMS automation continues sending?
A: You’ve violated TCPA. The lead can file a complaint, and you’re liable for $500–$1,500 per message after the STOP request. Onyx’s SMS automation honors STOP keywords automatically, but double-check that STOP word detection is enabled in your workflow settings. The National Do Not Call Registry maintains a public database of TCPA lawsuits, and many name SMS violations as the trigger. Don’t be one of them — test your STOP word filter quarterly to ensure it’s working.
Q: Do I need consent for live agent calls (human to human)?
A: Not for the outbound call itself, but you must still comply with the National Do Not Call Registry. You can call a lead once without prior consent, but if they ask to be added to your do-not-call list, you must honor it. Many insurance agents don’t realize this distinction — the TCPA allows one introductory call, but after that, you need a business relationship or prior express written consent. Use that first call wisely.
Q: How long do I need to keep call recordings?
A: TCPA statute of limitations is three years. Keep recordings for at least 36 months. Onyx retains recordings for 36 months by default. If you delete a recording before the three-year window closes, you lose your evidence of compliance. Courts assume deletion is intentional spoliation (destruction of evidence), which hurts your case. Treat call recordings like insurance — you don’t want to file a claim, but you’re glad you have it.
Q: Does my AI calling system need to tell the lead they’re talking to an AI?
A: Not under federal TCPA rules, but some states (like California) require disclosure that a call is recorded. As a best practice, use a prerecorded disclaimer at the start of every AI call: “This is an automated call and may be monitored or recorded.” This accomplishes two things: it satisfies state recording disclosure laws, and it builds trust with the lead. Transparency is a compliance advantage — leads who know they’re talking to an AI are less likely to dispute the call later.
Final Thoughts
TCPA compliance is table stakes for insurance agents using AI and automation. The penalties are steep, but the fixes are straightforward: document consent, record calls, log everything, honor opt-outs.
Onyx’s AI calling and SMS automation handle most of the compliance heavy lifting — consent verification, call recording, STOP detection, and audit trails are all built in. Use the checklist above to cover the remaining items, and you can scale your AI-powered outbound calling without legal risk.
The agents booking the most appointments are the ones who move fastest. But speed without compliance is expensive. Onyx lets you do both.
Ready to scale your outbound AI calling while staying compliant? Start your free trial of Onyx CRM — or upgrade to Prime or Elite AI to unlock AI appointment booking and voice receptionist features.
