TCPA compliance for AI calling
An AI voice is an artificial voice in the eyes of the TCPA. That single fact decides most of what follows. Here is what the law asks of you, what kolz ai enforces on your behalf, and what stays yours.
Last reviewed August 2026. This is not legal advice.
1. Why the TCPA applies to every call you make here
The Telephone Consumer Protection Act governs marketing calls placed with an automated system or an artificial or prerecorded voice. A synthesised AI voice is an artificial voice, so the strictest branch of the rule applies to every campaign run on this platform, on mobiles and landlines alike.
This is not a technicality to route around. Statutory damages are $500 per call and $1,500 where the violation was wilful, with no ceiling, and the plaintiffs' bar brings them as class actions. One badly sourced list of 5,000 numbers is a catastrophic number, so the discipline below is worth more than any feature.
2. Prior express written consent
For a marketing call, consent has to be in writing, from the person you are calling, and it has to say what is about to happen. A compliant consent record:
- Names the business that will be calling, specifically, not a category or a network.
- Discloses the method: that calls may be placed using an automated system or an artificial or prerecorded voice.
- Is not conditioned on buying anything.
- Is signed, which includes a tick box or a digital signature, kept with the timestamp, the IP address and the exact wording shown at the time.
A purchased list is not consent. A list scraped from a directory is not consent. Consent given to one business does not transfer to another, which is what makes lead-vendor data the most common way a campaign goes wrong.
3. Do-not-call obligations
- National DNC Registry: registered numbers need consent or a qualifying existing business relationship. kolz ai scrubs your uploaded list against the registry before dialling, so this one is handled for you.
- Your internal list: anyone who asks you to stop goes on it, immediately and permanently, and that list survives across campaigns and across platforms. Opt-outs given on a kolz ai call are added to our global list automatically; opt-outs you receive by any other route are yours to record.
- Revocation any way they like: a consumer can withdraw consent by any reasonable means, including saying so on the call. Honour it promptly and record it.
- Reassigned numbers: consent belongs to the person, not the digits. A number that changed hands is a new person who never agreed to anything.
4. Hours, identification and conduct
- Calling hours: 8am to 9pm in the called party's local time under federal rules. Some states narrow it further, and a few restrict calls on Sundays or holidays.
- Identify yourself: the call should name the business on whose behalf it is placed and give a way to reach a person.
- Say it is an AI: not a universal federal requirement today, but several states are moving that way and it costs you nothing. Put it in the opening line.
- Caller ID: transmit a number that is answerable. Spoofed or unreachable numbers are a separate violation.
- State law: Florida, Oklahoma, Washington and Maryland among others run their own stricter regimes, and they apply based on where the person you are calling is, not where you are.
5. What we do, and what stays yours
We would rather be exact about this than reassuring. kolz ai is the dialler and the voice. The consent behind the list is yours, and no platform can supply it for you.
Enforced by kolz ai
- Calling window: campaigns dial between 9am and 8pm US Eastern. Outside that window the dialler stops on its own, it is not a setting you can forget to switch on.
- Accepted policy on record: every account accepts our Usage & Compliance Policy before it can use the dashboard, and we store the version, the wording, the timestamp and the IP.
- National DNC scrubbing: uploaded lists are scrubbed against the National Do Not Call Registry before your campaign dials. You do not have to run it yourself.
- A global do-not-call list: anyone who tells one of our agents to stop calling is added to a platform-wide list and is not dialled again by any campaign on kolz ai, including campaigns run by other accounts.
- Opt-out handling on the call: every campaign prompt we generate instructs the agent that the moment someone says remove me or stop calling, it stops, apologises once and ends the call. It is written into the prompt for every campaign, not a setting you have to find.
- Recording and transcript of every call, downloadable with the results, which is the evidence of what was actually said if a complaint ever arrives.
- Campaign controls: you can stop a running campaign, and unanswered numbers are only retried when you turn retries on.
Yours, and we cannot do it for you
- Collecting and keeping consent for every number you upload.
- Honouring opt-outs you receive anywhere else. Our global list covers people who opted out on a kolz ai call. Someone who told you to stop by email, text or in person is on your records, not ours, so keep them out of the file.
- What the agent says. You write the prompt, so the disclosures, the offer and the accuracy of the claims in it are yours.
- State-specific rules for the places your list lives in.
6. Keep the records that defend you
Almost every TCPA defence comes down to producing a consent record for the specific number that complained. Keep, for at least four years: the consent wording exactly as it was shown, the timestamp and IP or signature, the source of every number, your DNC scrub dates, your internal opt-out list, and the recordings. Filing this properly before you launch costs an afternoon. Reconstructing it after a demand letter is usually impossible.
Frequently asked
Does the TCPA apply to AI voice calls?
Yes. An AI-generated voice is an artificial voice under the TCPA. A marketing call placed with one needs prior express written consent from the person you are calling, whether the number is a mobile or a landline, and regardless of how the call was dialled.
What counts as prior express written consent?
A signed agreement from the consumer that names the business who will call, states clearly that calls may be placed using an automated system or an artificial or prerecorded voice, and is not a condition of buying anything. A tick box with that disclosure next to it, stored with a timestamp, is the usual form. A purchased list is not consent.
Do I have to scrub against the National Do Not Call Registry myself?
No. kolz ai scrubs uploaded lists against the National Do Not Call Registry before a campaign dials, and anyone who asks one of our agents to stop calling goes on a global do-not-call list that no campaign on the platform will dial again. Keep your own consent records regardless: registry status is one check, and a TCPA claim turns on consent.
What are the legal calling hours?
Federally, 8am to 9pm in the time zone of the person being called. Several states are stricter. kolz ai dials between 9am and 8pm US Eastern by default, which sits inside the federal window for the contiguous states, but you remain responsible for state rules that apply to your list.
How much is a TCPA violation worth?
$500 per call, trebled to $1,500 for a wilful or knowing violation, and the claims are usually brought as class actions. There is no cap. Your consent records are the defence, which is why keeping them matters more than any platform feature.
Questions about a specific campaign
Write to support@kolz.ai. We can tell you what the platform does. For whether a particular list or script is lawful, talk to a lawyer who practises in this area: it is a cheap conversation compared to the alternative.