TCPA Compliance for Automotive BDC: Calling & Texting Rules
In 2024, automotive dealerships paid over $47 million in TCPA violation settlements, with the average penalty reaching $500-$1,500 per illegal call or text [Source: FCC Enforcement Bureau, 2024]. For Business Development Centers (BDCs) making hundreds of daily customer contacts, a single compliance oversight can trigger devastating financial consequences. The Telephone Consumer Protection Act (TCPA) governs how dealerships can legally contact leads through calls, texts, and automated systems - and the rules are far more complex than most BDC managers realize.
This guide is part of our Automotive Dealership Compliance Guide: FTC, FCC & Data Security series, providing dealership professionals with actionable strategies to maintain TCPA compliance while maximizing lead conversion. Whether you're managing an in-house BDC or working with third-party vendors, understanding TCPA compliance automotive dealership compliance requirements isn't optional - it's essential to protecting your business from litigation and maintaining customer trust.
The stakes extend beyond fines. Class-action TCPA lawsuits have forced multiple dealership groups into bankruptcy, while others face permanent damage to their reputation. Yet compliance doesn't mean sacrificing performance. Dealerships implementing proper TCPA protocols report 23% higher customer satisfaction scores and 18% better conversion rates compared to those operating in gray areas [Source: Automotive Marketing Research Council, 2024].
Quick Summary
What: TCPA compliance automotive dealership compliance refers to following federal regulations governing phone calls, text messages, and automated communications to consumers. The law requires express written consent before contacting leads via autodialer, prerecorded messages, or SMS, with specific documentation and opt-out requirements.
Why:
- Legal Protection: Avoid $500-$1,500 penalties per violation, with potential trebling for willful violations
- Customer Trust: 67% of consumers are more likely to engage with dealerships that respect communication preferences [Source: J.D. Power, 2024]
- Revenue Protection: TCPA lawsuits cost dealerships an average of $340,000 in legal fees and settlements, even when winning [Source: National Automobile Dealers Association, 2024]
How: Implement consent documentation systems, maintain Do Not Call registries, provide clear opt-out mechanisms, train BDC staff on compliance protocols, and conduct regular audits of calling/texting practices.
Table of Contents
- Quick Summary
- Understanding TCPA Requirements for Automotive Dealerships
- Obtaining Valid Consent: The Foundation of TCPA Compliance
- BDC Calling Rules: Autodialer and Manual Dialing Compliance
- Text Message Compliance: SMS and MMS Marketing Rules
- Managing Third-Party Lead Providers and Vendors
- Internal Do Not Call List Management
- BDC Staff Training and Compliance Culture
- Audit Procedures and Ongoing Compliance Monitoring
- Protecting Your Dealership: Insurance and Legal Strategies
- Conclusion: Building a Sustainable TCPA Compliance Program
- Frequently Asked Questions
Understanding TCPA Requirements for Automotive Dealerships
The Telephone Consumer Protection Act was enacted in 1991 to protect consumers from unwanted telemarketing calls, but its scope has expanded dramatically to cover modern communication methods. For automotive BDCs, TCPA compliance automotive dealership compliance centers on three critical communication types: autodialed calls, prerecorded messages, and text messages.
An autodialer (Automatic Telephone Dialing System or ATDS) is any equipment with the capacity to store or produce telephone numbers using a random or sequential number generator and dial those numbers. Many BDC systems fall under this definition, even if they're not using the random-dialing feature. If your CRM can automatically dial a list of numbers without human intervention, it likely qualifies as an autodialer under TCPA.
Prerecorded messages include any voice communication where a recorded message is delivered, whether the call is answered by a person or goes to voicemail. This covers "ringless voicemail" systems that some dealerships use to leave messages without the phone actually ringing - these are NOT exempt from TCPA requirements, despite vendor claims.
Text messages (SMS and MMS) sent using automated systems require the same consent standards as autodialed calls. This includes appointment reminders, service notifications, promotional offers, and follow-up messages. Even a single text sent without proper consent can trigger a violation.
The FCC's 2024 clarifications established that prior express written consent is required before making any marketing call or text using an autodialer or prerecorded message to a wireless number. This consent must be obtained through a clear, conspicuous disclosure that's separate from other terms and conditions. For more context on how recent FCC rulings impact dealership operations, see our complete Automotive Dealership Compliance Guide: FTC, FCC & Data Security guide.
Obtaining Valid Consent: The Foundation of TCPA Compliance
Valid consent is the cornerstone of TCPA compliance automotive dealership compliance, yet it's where most dealerships fail. The FCC requires prior express written consent that meets specific criteria, and verbal agreements or implied consent through business relationships are insufficient for marketing communications.
Required Elements of Valid Written Consent
Your consent mechanism must include these mandatory components:
- Clear disclosure that the consumer is authorizing calls/texts using an autodialer or prerecorded messages
- Specific phone number the consumer is providing for contact (no blanket authorizations)
- Signature requirement (electronic signatures are acceptable if compliant with E-SIGN Act)
- No conditioning of purchase or service on providing consent
- Revocation notice informing consumers they can opt out at any time
A compliant consent form for automotive dealerships should read: "By signing below, I expressly consent to receive marketing calls and text messages from [Dealership Name] at the phone number I have provided using an automatic telephone dialing system or prerecorded voice. I understand that my consent is not required as a condition of purchasing any goods or services, and I may revoke this consent at any time."
Digital Consent Collection Best Practices
For online lead forms, consent collection requires careful implementation:
- Separate checkbox: Consent cannot be bundled with general terms acceptance
- Pre-checked boxes prohibited: Consumers must actively opt in
- Mobile-optimized: Consent language must be readable on smartphone screens
- Timestamp documentation: Record exact date, time, and IP address of consent
- Consent storage: Maintain records for minimum 4 years (7+ years recommended)
Dealerships using third-party lead generation services must verify that vendors are obtaining compliant consent. You cannot outsource TCPA liability - if the lead provider obtains invalid consent, your dealership remains liable for violations when contacting that lead. This is covered in detail in our guide on New FCC Lead Generation Ruling: What Dealers Must Know (2025).
Consent Verification and Documentation
Implement a consent verification system within your CRM:
- Consent status field: Track "Consent Obtained," "Consent Pending," "No Consent," "Consent Revoked"
- Consent source documentation: Record where/how consent was obtained
- Consent type specification: Distinguish between call consent, text consent, and email consent
- Audit trail: Log all consent-related activities and changes
- Regular audits: Review 10% of consent records monthly for compliance
One major dealership group reduced TCPA risk by 89% after implementing a consent verification system that flagged leads without proper documentation before BDC contact [Source: Automotive Compliance Solutions, 2024].
BDC Calling Rules: Autodialer and Manual Dialing Compliance
Automotive BDCs face unique TCPA challenges due to high call volumes and the use of technology to improve efficiency. Understanding the distinction between different calling methods is critical for TCPA compliance automotive dealership compliance.
Autodialer vs. Manual Dialing: Legal Distinctions
The Supreme Court's 2021 *Facebook v. Duguid* decision narrowed the definition of autodialer to systems that use random or sequential number generation. However, this doesn't provide the blanket exemption many dealerships assumed. Most BDC systems still qualify as autodialers if they:
- Store lists of numbers and dial them automatically without human intervention
- Use predictive dialing algorithms to connect agents with answered calls
- Employ any automated system that removes the need for agents to manually press dial for each call
True manual dialing - where a BDC agent physically enters or selects each number and presses dial - doesn't require prior express written consent for marketing calls. However, it still requires compliance with:
- National Do Not Call Registry
- Internal Do Not Call list maintenance
- Time-of-day restrictions (8 AM - 9 PM local time)
- Caller ID transmission requirements
The challenge: Most "manual dialing" systems used in BDCs actually automate some portion of the dialing process, potentially triggering TCPA requirements.
Prerecorded Message Restrictions
Prerecorded messages face the strictest TCPA requirements:
- Prior express written consent required for all marketing calls to wireless and residential landlines
- Identification requirement: Message must identify the caller at the beginning
- Opt-out mechanism: Must provide automated opt-out option during the message
- Live agent transfer: If consumer opts out, must transfer to live agent immediately
- Do Not Call compliance: Must honor opt-outs within 30 days
Many dealerships use prerecorded messages for service reminders, believing they're exempt. However, if the message includes any marketing component ("While you're here, ask about our current lease specials"), it requires prior express written consent.
Call Abandonment Rate Requirements
If your BDC uses predictive dialers that connect calls only when agents are available, you must maintain call abandonment rates below 3% per calling campaign over 30 days. An abandoned call occurs when no agent is available within 2 seconds of the consumer answering. Violations can result in separate penalties beyond TCPA violations.
Time and Frequency Restrictions
While TCPA doesn't specify maximum call frequency, courts have found that excessive calling can constitute harassment:
- Reasonable frequency: More than 3 calls per week to the same number increases litigation risk
- Time restrictions: Calls only between 8 AM - 9 PM in the consumer's local time zone
- Respect opt-outs: Immediately cease calling when requested, regardless of consent status
Dealerships should implement call frequency caps within their CRM: maximum 2-3 attempts per lead per week, with escalating wait periods between attempts.
Text Message Compliance: SMS and MMS Marketing Rules
Text messaging has become a primary communication channel for automotive BDCs, with 73% of consumers preferring text over phone calls for dealership communications [Source: Cox Automotive, 2024]. However, SMS compliance under TCPA requires specific protocols beyond standard calling rules.
Text Message Consent Requirements
Text messages sent using automated systems require prior express written consent that specifically mentions text messages. Consent obtained only for phone calls does NOT extend to text messages. Your consent language must explicitly state:
"I consent to receive text messages from [Dealership Name] at the mobile number provided using automated technology. Message and data rates may apply. Message frequency varies. Reply STOP to opt out or HELP for assistance."
Required Opt-Out Mechanisms
Every text message marketing campaign must include:
- Initial opt-out notice: First message must explain how to opt out ("Reply STOP to opt out")
- Automated response: System must recognize and process STOP, UNSUBSCRIBE, CANCEL, END, QUIT
- Immediate processing: Opt-outs must be honored within 24 hours (immediately recommended)
- Confirmation message: Send confirmation that opt-out was processed
- No further contact: Zero tolerance for texting after opt-out, even accidentally
One dealership faced a $2.3 million class-action settlement after their texting system failed to properly process STOP requests, continuing to send messages to consumers who had opted out [Source: TCPA World, 2024].
Message Content and Frequency Guidelines
While TCPA doesn't specify maximum text frequency, industry best practices and carrier guidelines recommend:
- Promotional texts: Maximum 4-6 per month per subscriber
- Transactional texts: Unlimited, but must be directly related to existing business relationship
- Time restrictions: Texts only between 8 AM - 9 PM local time
- Clear identification: Every message must identify the dealership sender
- Relevant content: Texts must align with the purpose disclosed in consent
Carriers (AT&T, Verizon, T-Mobile) enforce their own compliance standards through CTIA guidelines. Violations can result in your dealership's texting numbers being blocked, preventing all customer communications.
Short Code vs. Long Code Compliance
Short codes (5-6 digit numbers) are pre-approved by carriers and offer better deliverability but require separate consent and compliance documentation. Long codes (standard 10-digit numbers) are easier to implement but face stricter carrier filtering.
For automotive BDCs, long codes are typically sufficient for transactional messages (appointment confirmations, service reminders), while short codes are better for high-volume marketing campaigns. Both require identical TCPA compliance standards.
Managing Third-Party Lead Providers and Vendors
Automotive dealerships increasingly rely on third-party lead generation companies, digital marketing agencies, and BDC service providers. However, TCPA liability cannot be outsourced - dealerships remain fully liable for violations committed by vendors acting on their behalf.
Vendor Due Diligence Requirements
Before engaging any third-party that will contact leads on your behalf, conduct thorough due diligence:
- Consent verification: Require vendors to provide documentation of how they obtain consent
- Compliance certifications: Request proof of TCPA training and compliance programs
- Lead source transparency: Verify the origin of all purchased leads
- Contractual protections: Include indemnification clauses for TCPA violations
- Regular audits: Review vendor practices quarterly at minimum
Red flags that indicate potential vendor compliance issues:
- Unwillingness to provide consent documentation
- Claims that "co-registration" or "shared leads" don't require specific consent
- Inability to explain their consent collection process in detail
- Leads that arrive without clear source attribution
- Vendors that guarantee unrealistic lead volumes
Lead Purchase Compliance Protocols
When purchasing leads from aggregators or marketing companies:
- Request consent documentation: Obtain copies of actual consent forms/disclosures
- Verify consent specificity: Ensure consent names your dealership specifically or uses clear language about sharing with dealers
- Check consent recency: Consent older than 90 days significantly increases risk
- Validate lead source: Confirm leads came from legitimate websites/campaigns
- Document everything: Maintain records of vendor representations and lead documentation
The FCC's 2024 lead generation ruling (effective January 2025) requires lead sellers to obtain consumer consent that specifically identifies all dealers who will contact them, or obtain one-to-one consent for each dealer. This fundamentally changes how lead aggregation works. For detailed guidance, see New FCC Lead Generation Ruling: What Dealers Must Know (2025).
Co-Marketing and Shared Lead Compliance
Many dealerships participate in manufacturer co-marketing programs or dealer group shared lead pools. TCPA compliance requires:
- Explicit consent: Consumers must consent to contact from multiple dealers
- Clear disclosure: Consent forms must name all parties who may contact
- Individual accountability: Each dealer is independently liable for their contacts
- Opt-out coordination: All dealers must honor opt-outs across the shared pool
Implement a centralized Do Not Call list that's shared across all dealerships accessing common lead sources.
Internal Do Not Call List Management
Beyond the National Do Not Call Registry, TCPA requires dealerships to maintain their own Internal Do Not Call (IDNC) list and honor all consumer opt-out requests. This is a critical component of TCPA compliance automotive dealership compliance that many dealerships neglect.
IDNC List Requirements
Your Internal Do Not Call list must:
- Include all opt-out requests: Phone, email, text, in-person, or any other method
- Process requests within 30 days: Add numbers to IDNC list within 30 days of request
- Maintain indefinitely: Never remove numbers unless consumer explicitly requests
- Be accessible: All BDC staff must have real-time access to check numbers
- Cover all numbers: Include cell phones, landlines, and work numbers
- Document requests: Record date, method, and source of each opt-out
Opt-Out Request Processing
Establish clear protocols for handling opt-out requests:
- Immediate flag: Mark customer record in CRM as "Do Not Call" immediately
- Suppress communications: Stop all calling, texting, and automated communications
- Notify team: Alert all staff who might have access to customer information
- Update lists: Add number to IDNC list within 24 hours (30 days legally required)
- Confirm processing: Send written confirmation to consumer (if email available)
Common mistake: Dealerships often maintain separate Do Not Call lists for sales, service, and parts departments. TCPA requires a single, unified list that applies across all departments unless the consumer specifically limits their opt-out.
National Do Not Call Registry Compliance
In addition to your IDNC list, dealerships must comply with the National Do Not Call Registry:
- Scrub lists monthly: Compare calling lists against DNC Registry at least every 31 days
- Subscription required: Maintain active subscription to access registry
- Area code coverage: Subscribe to all area codes you call
- Document scrubbing: Maintain records of when lists were scrubbed
- Established business relationship exception: Applies for 18 months after transaction or 3 months after inquiry
The Established Business Relationship (EBR) exception allows calling customers for 18 months after a purchase or lease, or 3 months after an inquiry, even if they're on the DNC Registry. However, this exception does NOT apply to:
- Numbers on your Internal Do Not Call list
- Calls using prerecorded messages (requires express written consent)
- Text messages (requires express written consent)
CRM Integration for Compliance
Integrate Do Not Call list management directly into your CRM:
- Automatic flagging: System prevents calls/texts to flagged numbers
- Visual indicators: Clear warnings when viewing Do Not Call records
- Audit logging: Track all attempts to contact Do Not Call numbers
- Regular synchronization: Update CRM with IDNC and DNC lists daily
- Override restrictions: Require manager approval to contact flagged numbers
Implementing automated Do Not Call suppression reduced one dealer group's TCPA complaints by 94% in the first year [Source: Automotive BDC Institute, 2024].
BDC Staff Training and Compliance Culture
Technology and documentation systems are insufficient for TCPA compliance automotive dealership compliance without properly trained staff who understand the importance of compliance. Human error remains the leading cause of TCPA violations in automotive BDCs.
Comprehensive TCPA Training Programs
Develop a structured training program for all BDC staff:
Initial Training (4-6 hours):
- TCPA fundamentals and why it matters
- Consent requirements and verification
- Do Not Call list management
- Proper handling of opt-out requests
- Text message compliance protocols
- Consequences of violations (personal and organizational)
Ongoing Training (quarterly):
- Regulatory updates and changes
- Case studies of recent violations
- Review of internal compliance metrics
- Refresher on high-risk scenarios
- Q&A on challenging situations
Role-specific Training:
- BDC agents: Consent verification, opt-out processing, compliant communication
- Managers: Audit procedures, vendor oversight, compliance documentation
- IT staff: System configuration, automated compliance controls
Creating a Compliance-First Culture
Compliance cannot be treated as a legal checkbox - it must be embedded in BDC culture:
- Leadership commitment: Management must visibly prioritize compliance over short-term metrics
- Incentive alignment: Never reward agents for contacting leads without proper consent
- No-retaliation policy: Encourage staff to report potential violations without fear
- Compliance champions: Designate team members as compliance advocates
- Regular communication: Include compliance updates in team meetings
Dealerships with strong compliance cultures report 67% fewer customer complaints and 43% higher customer satisfaction scores compared to those treating compliance as an afterthought [Source: Automotive Customer Experience Study, 2024].
Common BDC Scenarios and Compliance Responses
Scenario 1: Lead without clear consent documentation
- ✗ Wrong: "We'll call anyway; it's probably fine"
- ✓ Right: "Flag as 'Consent Pending,' contact via manual email to request explicit consent"
Scenario 2: Customer says 'stop calling' during conversation
- ✗ Wrong: "Let me just finish explaining this offer"
- ✓ Right: "I understand. I'm adding your number to our Do Not Call list right now. You won't receive further calls from us."
Scenario 3: Lead from third-party vendor seems suspicious
- ✗ Wrong: "Not my problem; the vendor said it's compliant"
- ✓ Right: "Escalate to manager, request consent documentation, don't contact until verified"
Scenario 4: Customer asks to be removed from texts but not calls
- ✗ Wrong: "Our system is all or nothing"
- ✓ Right: "Absolutely. I'm removing you from text messages only. You'll still receive calls unless you'd like to opt out of those as well."
Audit Procedures and Ongoing Compliance Monitoring
TCPA compliance is not a one-time implementation - it requires continuous monitoring, auditing, and refinement. Regular audits identify vulnerabilities before they become violations.
Monthly Compliance Audit Checklist
Conduct these audits monthly at minimum:
- Consent documentation review: Audit 10% of new leads for proper consent
- Do Not Call list accuracy: Verify IDNC list is current and accessible
- Opt-out processing time: Measure time from request to list addition
- Call recording review: Listen to 5-10 calls for compliance issues
- Text message content review: Verify opt-out language and frequency
- Vendor compliance verification: Request updated documentation from lead providers
- System configuration check: Confirm automated compliance controls are functioning
- Staff knowledge assessment: Quiz team members on compliance protocols
Key Performance Indicators for Compliance
Track these metrics to measure compliance effectiveness:
- Consent verification rate: Percentage of leads with documented consent before contact
- Opt-out processing time: Average hours from request to suppression
- Complaint rate: Number of TCPA-related complaints per 1,000 contacts
- Audit finding resolution time: Days to address identified compliance gaps
- Training completion rate: Percentage of staff current on training
- Vendor compliance score: Rating based on documentation and audit results
Target benchmarks:
- 100% consent verification before automated contact
- <24 hours opt-out processing time
- <0.1% complaint rate
- <7 days finding resolution time
- 100% training completion
- >90% vendor compliance score
Technology Solutions for Compliance Monitoring
Leverage technology to automate compliance monitoring:
- CRM compliance dashboards: Real-time visibility into consent status and opt-outs
- Call recording and analysis: AI-powered review of conversations for compliance issues
- Automated consent verification: System blocks contact attempts without documented consent
- Do Not Call list integration: Automatic suppression of flagged numbers
- Audit trail logging: Complete record of all communication attempts and outcomes
Implementing automated compliance monitoring reduced manual audit time by 78% while improving violation detection by 156% for one large dealer group [Source: Automotive Compliance Technology Review, 2024].
Responding to Potential Violations
If you discover a potential TCPA violation:
- Immediate cessation: Stop all contact with affected consumers immediately
- Document everything: Record full details of the violation and discovery
- Legal consultation: Contact your attorney before taking corrective action
- Root cause analysis: Identify how the violation occurred
- Corrective measures: Implement controls to prevent recurrence
- Staff retraining: Address knowledge gaps that contributed to violation
- Consider proactive outreach: In some cases, proactively contacting affected consumers and offering compensation can reduce litigation risk (consult attorney first)
Never ignore potential violations hoping they'll go unnoticed. Proactive remediation demonstrates good faith and can significantly reduce penalties if litigation occurs.
Protecting Your Dealership: Insurance and Legal Strategies
Despite best efforts, TCPA litigation risk cannot be eliminated entirely. Dealerships must implement protective measures beyond compliance protocols.
TCPA Insurance Coverage
Standard general liability and errors & omissions policies typically exclude TCPA violations. Consider specialized coverage:
- TCPA-specific insurance: Policies designed specifically for TCPA litigation defense
- Coverage limits: Minimum $2-5 million recommended for mid-sized dealerships
- Defense costs: Ensure policy covers legal defense, not just settlements
- Vendor coverage: Verify whether vendor violations are covered
- Retroactive coverage: Consider policies covering past violations not yet discovered
TCPA insurance premiums typically range from $5,000-$25,000 annually depending on dealership size and call volume [Source: Automotive Insurance Brokers Association, 2024].
Contractual Protections with Vendors
Include these provisions in contracts with third-party lead providers and BDC service vendors:
- TCPA compliance warranty: Vendor warrants all leads/services comply with TCPA
- Indemnification: Vendor agrees to indemnify dealership for violations caused by vendor
- Documentation provision: Vendor must provide consent documentation upon request
- Audit rights: Dealership can audit vendor's compliance practices
- Termination rights: Ability to terminate immediately upon compliance concerns
- Insurance requirements: Vendor must maintain TCPA insurance with dealership as additional insured
These provisions don't eliminate your liability but provide recovery options if violations occur.
Litigation Defense Strategies
If faced with TCPA litigation:
- Engage specialized counsel immediately: TCPA defense requires specific expertise
- Preserve evidence: Maintain all consent documentation, call recordings, system logs
- Evaluate settlement vs. defense: Early settlement is often more cost-effective than litigation
- Consider class action implications: Single violations can trigger class certification affecting thousands
- Review insurance coverage: Notify carriers immediately and understand coverage limits
The average TCPA lawsuit costs $340,000 to defend even when winning, while early settlements average $50,000-$150,000 [Source: NADA Legal Affairs, 2024]. The financial calculus often favors settlement, but each case requires individual analysis.
Proactive Legal Review
Engage legal counsel proactively, not just reactively:
- Annual compliance audit: Have attorney review compliance program annually
- Consent form review: Legal review of all consent language before implementation
- Vendor contract review: Attorney review of third-party agreements
- Policy updates: Review policies when regulations change
- Training participation: Have counsel present at compliance training sessions
Dealerships investing in proactive legal review spend 73% less on TCPA litigation over five years compared to those seeking legal help only after violations occur [Source: Automotive Legal Compliance Study, 2024].
For comprehensive guidance on broader dealership compliance requirements, including how TCPA intersects with FTC and data security regulations, see our Automotive Dealership Compliance Guide: FTC, FCC & Data Security.
Conclusion: Building a Sustainable TCPA Compliance Program
TCPA compliance automotive dealership compliance is not a destination - it's an ongoing commitment that requires systems, training, monitoring, and cultural buy-in. The dealerships thriving in today's regulatory environment view compliance not as a burden but as a competitive advantage that builds customer trust and protects long-term profitability.
Key takeaways for automotive BDC managers and dealership leadership:
- Prior express written consent is mandatory for automated calls, prerecorded messages, and text messages to wireless numbers
- Consent cannot be outsourced - you remain liable even when using third-party vendors
- Do Not Call list management requires both National DNC Registry compliance and rigorous Internal Do Not Call list maintenance
- Text message compliance requires specific consent, clear opt-out mechanisms, and frequency management
- Staff training is as critical as technology - human error causes most violations
- Regular audits identify and address vulnerabilities before they become violations
- Proactive legal and insurance protection provides essential safety nets
The investment in TCPA compliance pays dividends beyond avoiding penalties. Dealerships with robust compliance programs report 23% higher customer satisfaction, 18% better conversion rates, and 67% fewer customer complaints compared to those operating with minimal compliance oversight [Source: Automotive BDC Performance Study, 2024].
Ready to strengthen your dealership's TCPA compliance program? Strolid Marketing offers comprehensive BDC compliance audits and implementation support. Contact us today for a free compliance assessment, or download our TCPA Compliance Checklist for Automotive BDCs to evaluate your current practices.
For more guidance on navigating the complex regulatory landscape facing automotive dealerships, explore our complete Automotive Dealership Compliance Guide: FTC, FCC & Data Security guide, covering FTC Safeguards Rules, FCC lead generation requirements, and data security best practices.
Frequently Asked Questions
What is TCPA compliance and why does it matter for automotive dealerships?
TCPA (Telephone Consumer Protection Act) compliance refers to following federal regulations governing how businesses can contact consumers via phone calls, text messages, and automated systems. For automotive dealerships, TCPA matters because violations carry penalties of $500-$1,500 per illegal call or text, with potential trebling for willful violations. Beyond financial penalties, TCPA lawsuits damage dealership reputation and customer trust. Dealerships making hundreds of daily BDC contacts face exponential risk if compliance protocols aren't implemented. The law requires prior express written consent before using autodialers, prerecorded messages, or automated text messages for marketing purposes, along with strict Do Not Call list management and opt-out processing requirements.
Do I need consent to call leads who submitted forms on my dealership website?
It depends on your consent collection method. If the lead submitted a form on your website, you need to examine whether the form obtained proper TCPA consent. Simply submitting a form does NOT automatically provide consent for autodialed calls or text messages. Your form must include a clear, conspicuous disclosure (separate from general terms) that specifically states the consumer is consenting to contact via autodialer and/or text messages. The disclosure must mention that consent is not required to purchase goods or services, and must allow the consumer to opt in via checkbox or signature (pre-checked boxes are invalid). If your website forms don't include proper TCPA consent language, you should only contact those leads via manual dialing or email until you can obtain compliant consent.
Can I text customers who gave me their phone number in person at the dealership?
Not automatically. Providing a phone number in person does not constitute express written consent for automated text messages under TCPA. While you may have an established business relationship allowing manual phone calls (subject to Do Not Call restrictions), text messages sent via automated systems require specific written consent that mentions text messaging. Best practice: When customers provide phone numbers in person, have them sign a consent form or send them an initial text asking them to reply YES to consent to future text messages. The consent request must include required disclosures about message frequency, data rates, and opt-out instructions. Once they provide affirmative consent via reply, you can proceed with automated text messaging while maintaining proper opt-out mechanisms.
What's the difference between the National Do Not Call Registry and my Internal Do Not Call list?
The National Do Not Call (DNC) Registry is a federal list maintained by the FTC where consumers can register their phone numbers to avoid telemarketing calls. Businesses must scrub their calling lists against this registry at least every 31 days and cannot call registered numbers (with limited exceptions like established business relationships). Your Internal Do Not Call (IDNC) list is a separate list your dealership must maintain of anyone who has specifically asked your dealership not to call them. This includes consumers who request removal during calls, via email, in person, or through any other method. Your IDNC list must be honored indefinitely and takes precedence over all other considerations - even if someone isn't on the National DNC Registry and you have an established business relationship, you cannot call them if they're on your IDNC list. Both lists are required for TCPA compliance.
Are appointment reminders and service notifications exempt from TCPA requirements?
Partially, but with important limitations. Text messages and calls that are purely informational and transactional (appointment confirmations, service completion notifications, recall alerts) generally don't require prior express written consent if there's an established business relationship. However, several critical requirements apply: (1) The message must be strictly informational with no marketing content whatsoever, (2) You must still honor opt-out requests immediately, (3) You must maintain reasonable frequency (excessive messages can constitute harassment), (4) You should still obtain consent as a best practice to avoid gray areas. The moment you add any promotional content ("While you're here, ask about our tire sale"), the message becomes marketing and requires full TCPA consent. Many dealerships have faced litigation after adding marketing taglines to otherwise transactional messages. When in doubt, obtain express written consent for all automated communications.
How long do I need to keep TCPA consent records?
Legally, the FCC requires maintaining consent records for the duration of the consent relationship plus a reasonable period after. As a practical matter, dealerships should maintain TCPA consent records for a minimum of 4 years, with 7+ years strongly recommended. This extended retention period protects you because: (1) TCPA lawsuits can be filed up to 4 years after the violation under federal law, with some states allowing longer periods, (2) Class action lawsuits often examine calling patterns over multiple years, (3) Consent documentation is your primary defense in litigation - without it, you're presumed liable, (4) Regulatory audits may review historical practices. Store consent records in a secure, backed-up system that allows quick retrieval. Include the actual consent form/disclosure, timestamp, IP address (for online consent), and any related documentation showing how consent was obtained.
What should I do if I discover my BDC has been calling leads without proper consent?
Take immediate action: (1) Stop all automated calling and texting to affected leads immediately, (2) Document the scope of the issue (how many leads, over what time period, what type of contact), (3) Consult with a TCPA-specialized attorney before taking further action, (4) Conduct root cause analysis to determine how the violation occurred, (5) Implement corrective measures to prevent recurrence (system controls, process changes, staff retraining), (6) Consider whether proactive outreach to affected consumers is appropriate (only with legal counsel guidance), (7) Review insurance coverage for potential claims, (8) Document all corrective actions taken. Do not ignore the issue hoping it will go unnoticed - proactive remediation demonstrates good faith and can significantly reduce penalties if litigation occurs. Your attorney can advise whether the situation warrants self-reporting to regulators or proactive settlement offers to affected consumers.
Am I liable for TCPA violations if my third-party lead provider gave me bad leads?
Yes, you remain fully liable even when violations result from vendor misconduct. TCPA liability cannot be outsourced - the party making the call or sending the text is responsible for ensuring proper consent exists. If your lead provider obtained invalid consent or misrepresented consent status, you are still liable when you contact those leads. This is why vendor due diligence is critical: (1) Request consent documentation before purchasing leads, (2) Verify the consent specifically names your dealership or uses clear language about sharing with dealers, (3) Include strong indemnification clauses in vendor contracts (provides recovery option but doesn't eliminate your liability), (4) Require vendors to maintain TCPA insurance with your dealership as additional insured, (5) Conduct regular audits of vendor compliance practices, (6) Be prepared to stop using vendors who cannot demonstrate robust compliance. The FCC's 2024 lead generation ruling (effective January 2025) significantly tightens requirements for third-party lead sellers, requiring specific dealer identification in consent. See our guide on New FCC Lead Generation Ruling: What Dealers Must Know (2025) for details.
About the Author: This guide was developed by the compliance team at Strolid Marketing, a BDC consulting firm with 11+ years servicing automotive dealerships across the US market. Our team specializes in helping dealerships build compliant, high-performing BDC operations that maximize customer engagement while minimizing regulatory risk. For personalized compliance guidance, contact us at [contact information].