Field notes
What "documented consent" actually means before you dial
Most people who buy an AI calling system have a list they are excited about. Old leads. Booth signups. A spreadsheet someone exported years ago. The question they ask is whether the technology can call all of it.
The technology can. That is not the question that matters.
The question is whether you are allowed to, and the standard for that is narrower than most business owners expect. It is worth understanding before you hand anyone a file, because the vendor who tells you not to worry about it is the one who will not be there when it matters.
The standard is four words, and each one does work
The phrase is prior express written consent. It gets thrown around loosely. Read it one word at a time.
Prior. The permission has to exist before the call. Not gathered during it, not inferred afterward from the fact that they engaged. Before.
Express. They said yes to being contacted. They did not merely fail to say no. A pre-checked box, a buried line in terms nobody read, a scroll past a paragraph — none of that is a person expressing anything.
Written. There is a record. A signature, a form submission, a documented electronic agreement. Something that exists independently of anyone’s memory of the conversation.
Consent. To what, specifically. Consent to receive a newsletter is not consent to receive automated calls. Consent given to one business is not consent given to a company that bought the list later. The permission has a shape, and the shape includes who and how.
Miss any one of those four and you do not have consent. You have a list.
What does not count
Some things that feel like permission and are not:
A business card dropped in a bowl at a trade show. A name captured at a booth. Someone who called you once, years ago, about something else. A purchased list, however reputable the seller. A list you inherited when you bought the business. Someone who is “obviously interested” because of what they searched for. A contact who engaged with your social media.
None of these is worthless — several are perfectly fine for a human being to pick up the phone and call, depending on the rules that apply to your trade and your state. But automated dialing is held to a different standard than a person dialing manually, and the gap between those two standards is where businesses get hurt.
Age matters more than people think
Even real consent goes stale.
Someone who filled out a form and asked to be contacted about buying a house in 2019 gave you genuine permission. They also gave it about a life they may no longer be living. They bought. They moved. They changed their number, and that number now belongs to somebody who never heard of you.
There is no universal expiration date, and anyone who gives you a confident number is guessing. But the practical rule is simple: the older the consent, the weaker it is, and the more the lurden shifts to you to show it was current and specific. A stated buying timeline that has already come and gone is not a signal of interest. It is a receipt from a closed transaction.
The part that protects you is the documentation
Here is the thing that surprises people. In a dispute, the fight is rarely about whether consent existed in some cosmic sense. It is about whether you can produce it.
Which means the useful question is not “did they say yes?” It is: if someone asked me to prove it, what would I hand them? A timestamp. A form record. A signed line. The specific language they agreed to.
If the answer is “I remember they were interested,” you do not have documentation. You have a story.
That is why we ask about list provenance before we build anything, and why we will decline a campaign that cannot answer it. Not because we enjoy being difficult. Because the exposure lands on the business making the call, not on the vendor who built the dialer, and we would rather lose the install than hand you a liability with our name on the invoice.
What a good list looks like
If you are assembling something to work, the shape you want is boring: recent, documented, and yours. Inbound inquiries from people who reached out to you. Past customers with a real transaction history. Form submissions where you can produce the form. Six to twenty-four months old, not seven years.
Smaller and clean beats large and murky. Every time. A few hundred contacts you can stand behind will outperform a purchased list of thousands, and it will not cost you a lawyer.
This is not legal advice. It describes how we approach list provenance and consent when we build an install. Consent obligations belong to the business sending the message, and you should have your own attorney review your program.