Robocall Compliance Checklist for Business Calling

Start with the purpose of the call

Write down what the call is for in one sentence. A reminder, a service notice and a promotional offer are not the same thing, and they may not rely on the same consent. If the purpose changes, revisit the consent and the script.

Do not let a vague "we may contact you" line carry a campaign. The consent should make sense to the person who gave it and cover the kind of call you are about to place.

Prove consent, not just intent

Consent records should show who agreed, when, to what, and through which form or interaction. If the consent came from a third-party lead source, confirm that the source is legitimate and that the scope covers your calls.

For automated marketing calls, consent requirements are stricter than for many informational calls. Speak with qualified counsel about your specific program; this checklist is operational guidance, not legal advice.

• Store the consent text the recipient actually saw.
• Record the date, time and source of the consent.
• Keep the phone number and the purpose the consent covers.
• Have a process for revoking consent and suppressing future calls.

Respect do-not-call and opt-out requests

Maintain an internal suppression list and check it before every campaign. Honor verbal and written opt-outs, and make sure the suppression applies across the business, not only to the campaign where the request was made.

Scrub against applicable do-not-call registries where required. Do not call a number again to confirm an opt-out unless the law and your process clearly allow it.

Identify the caller and explain the purpose

The message should make it clear who is calling and why. Do not disguise an automated message as a live person. If the call uses AI voice, be prepared to explain that when asked.

Keep the script short, accurate and specific. Avoid implying an emergency, a debt, a legal consequence or a benefit that does not exist.

Use a responsible calling window

Configure calling hours and account for the recipient's time zone where your workflow supports it. Avoid early-morning, late-night and holiday calls unless the situation and applicable rules clearly permit them.

If a campaign is running late or a list is messy, pause it. A delayed notification is easier to fix than a wave of complaints.

Keep records and review outcomes

Retain campaign records, consent evidence, suppression actions and call outcomes for as long as your legal and business obligations require. Review failures, complaints and opt-outs after every campaign.

A compliance process is not finished when the call launches. It is finished when you can show what happened and what you changed as a result.