TCPA 2026: The New Compliance Rules Every AI Voice Agency Must Follow
The FCC just confirmed that AI-generated voices trigger TCPA restrictions. Non-compliance costs $500-$1,500 per call with no caps. Here's exactly what you need to know and do this week.
What the FCC Just Ruled
On June 5, 2026, the FCC issued a formal declaratory ruling: AI-generated voices on voice calls are subject to the Telephone Consumer Protection Act (TCPA). This wasn't speculation or guidance. It was confirmation backed by law.
The ruling reaffirmed that AI-generated voices fall under "artificial or pre-recorded voices" under 47 USC 227(b)(1)(B). What that means in English: every AI voice call an agency makes requires prior express written consent from the recipient before the call is placed.
If you're running an AI calling agency and haven't been documenting consent, you're exposed. Colorado's new AI Act (effective June 30, 2026) adds another layer: high-risk AI systems must pass bias testing and documentation before deployment.
Impact: Non-compliance now exposes you to $500-$1,500 per call penalties with no aggregate cap. Class actions are already rolling: average settlement 2025-2026 is $5M-$20M.
Why This Matters for AI Voice Agencies Right Now
If you're running an AI voice agency on Retell, VAPI, Synthflow, or Hermes, this ruling affects your business model immediately. Most agencies built their campaigns assuming TCPA didn't apply to AI. It does now, and retroactively.
The implications:
- 1.Consent is non-negotiable. Every call your agent places needs proof of consent on file.
- 2.EBR doesn't help you. You can't rely on Established Business Relationship to skip consent for AI calls.
- 3.Class action risk. Competitors and users are already filing. Get ahead of it.
- 4.State laws are tightening. Colorado AI Act, California SB 1047 (pending), and others add data handling and bias testing requirements.
The Penalty Structure (It's Brutal)
Negligent Violation
$500 per call
You didn't know about TCPA or made a good-faith mistake. Still $500/call, no aggregate cap.
Willful Violation
$1,500 per call
You knew about TCPA and ignored it (or should have known and were reckless). Treble damages apply.
Real Math:
A 5,000-call campaign with non-compliance:
Negligent: 5,000 calls x $500 = $2.5 million
Willful: 5,000 calls x $1,500 = $7.5 million
This is why class actions averaged $5M-$20M in 2025-2026.
What You Need on File RIGHT NOW
1. Prior Express Written Consent (PEWC)
Email, SMS, form submission, or signed agreement from the recipient explicitly agreeing to receive calls from your AI agent. Must be in writing. "Yes" in a chat doesn't count.
2. Call Timestamp and ID
Proof that the call was placed, who it went to, when it was placed, and which agent made it. Your phone provider (Twilio) handles this.
3. Consent Proof and Linked Record
The consent document tied to the phone number or contact. If you can't match consent to the call recipient, you lose in court.
4. AI Disclosure
Colorado AI Act (effective June 30) and proposed federal rules require disclosing that an AI system made the call within the first 2 seconds of the conversation.
5. Do-Not-Call Check
Screen all numbers against the National DNC Registry before dialing. Hermes, Retell, and Synthflow handle this, but verify it's running.
What Hermes Does About This
We built Hermes from day one with TCPA and state compliance in mind. Here's what's built in:
- Consent Manager: Track and link PEWC to every contact. Audit trail included.
- DNC Screening: Automatic National DNC Registry check before any call. Configurable per campaign.
- AI Disclosure: Auto-inject "This is an AI assistant" disclaimer in first 2 seconds. Configurable per agent.
- Call Logging: Every call timestamped, agent ID tracked, recording linkable. Export for legal discovery.
- Compliance Reports: Monthly audit reports showing consent coverage, DNC blocks, and call compliance by campaign.
Action Steps for Agencies Affected (This Week)
Day 1: Audit Your Campaigns
- List every active campaign
- Check: does each contact have written consent on file?
- Identify gaps
- Estimate exposure
Day 2: Gather Documentation
- Pull all consent forms from past 6 months
- Match to phone numbers called
- Flag any calls without linked consent
- Document DNC screening evidence
Day 3: Implement Hermes (or upgrade your current platform)
- Set up consent manager
- Import contact list with consent proof
- Enable DNC screening and AI disclosure
- Run compliance audit report
Day 4-5: Update Your Process
- Require PEWC before any campaign launch
- Add AI disclosure to all agent configs
- Train team on consent requirements
- Document your compliance playbook
Key Sources and Citations
FCC Declaratory Ruling on TCPA and AI Voices
June 5, 2026
Ginsburg Law Group: AI Robocalls + TCPA
February 2026
Colorado AI Act Requirements (Effective June 30, 2026)
Signed into law: May 2024
FAQs
Does TCPA really apply to AI voices?
Yes, confirmed by FCC June 5, 2026. AI-generated voices are "artificial or pre-recorded voices" under 47 USC 227(b)(1)(B), triggering TCPA consent requirements.
Can I use Established Business Relationship to skip consent?
No. EBR exempts manual sales calls from Do-Not-Call rules, but does NOT exempt AI voice calls from TCPA consent. You still need PEWC.
What counts as prior express written consent?
Email, SMS, form submission, or signed document where the recipient explicitly agrees to receive calls from your AI agent. "Yes" in chat doesn't count. Must be in writing with clear identification of the calling party.
What are the penalties for non-compliance?
$500 per call for negligent violations, $1,500 per call for willful violations, no aggregate cap. A 5,000-call non-compliant campaign can cost $2.5M-$7.5M in penalties.
Do I need a lawyer to be compliant?
Recommended. But Hermes includes compliance controls (consent manager, DNC screening, AI disclosure, call logging) that handle 80% of the burden. Get legal review for your consent form and campaign templates.
Stay Compliant. Keep Your Margins.
Hermes gives you compliance controls built in: consent manager, DNC screening, AI disclosure, call logging, and monthly audit reports. Run your AI voice agency without the legal risk.