Insurance

Insurance lead consent requirements and documentation

Insurance lead consent requirements come down to three things: consent language on the quote form that names who may call or text and says agreeing is not a condition of purchase, a consent certificate stored for every lead, and records kept long enough to answer a complaint. State telemarketing and insurance rules add to the federal baseline.

Summit Leads is now onboarding buyers and suppliers for auto and home insurance leads. Email us with the lines, states and daily volume you want.

Summit Leads is now onboarding buyers and suppliers for life insurance, final expense, IUL and mortgage protection leads. Email us with the lines, states and daily volume you want.

This page is for lead generators who sell auto, home, life or final expense insuranceFinal expense insuranceA small whole life insurance policy bought to pay end-of-life costs such as a funeral. Glossary leads. It covers consent text, certificates, records, state telemarketing laws and state insurance solicitation rules. Summit currently works with web leads (form fills), not calls or live transfers.

Reviewed October 6, 2026, against the federal rule text and NAIC pages listed under Sources. This is general information for lead sellers, not legal advice. Have a lawyer review your forms and your obligations in each state you collect leads from.

Key points

  • The consent text must authorize the company that will call, not only the site that ran the form.
  • Store a consent certificateConsent certificateA record, often produced by a third-party consent certificate provider, that shows how and when a consumer gave consent on a web form. Glossary for every lead and send its reference with each post.
  • Keep the form version, the traffic source and every opt-out request with the lead record.

Insurance buyers call and text the people on your leads. Under the TCPATCPAThe Telephone Consumer Protection Act, the federal law that governs telemarketing calls and texts, autodialers, prerecorded voice messages and the Do Not Call Registry. Glossary (47 U.S.C. 227) and the FCC rule at 47 CFR 64.1200, autodialed or prerecorded marketing calls and texts to a mobile number need prior express written consentPrior express written consentUnder the TCPA, a written agreement signed by the consumer (an electronic signature counts) that clearly authorizes a seller to make telemarketing calls or texts using an autodialer or a prerecorded or artificial voice to a stated number. Glossary. The rule defines that consent at 64.1200(f)(9). On a quote form, each part of the definition looks like this:

Prior express written consent on an insurance quote form
What the rule asks forHow it appears on the form
A written agreement with the person's signatureThe person clicks a submit button placed with the consent text. An electronic signature counts where federal or state law recognizes it.
It clearly authorizes the sellerThe text names the insurance agency or company that will call, or links to a list of them.
It covers calls using an autodialer or a prerecorded or artificial voiceThe text says calls and texts may use automated technology or prerecorded messages.
It names the phone numberThe text refers to the number the person entered on the form.
Clear disclosure of what the person is agreeing toThe text sits next to the button, in readable type, not behind a link.
Clear disclosure that agreeing is not a condition of purchaseA sentence such as "Your consent is not required to buy any product."

Example. By clicking "Get my quotes," I agree that Example Insurance Agency and the companies listed here may contact me about auto and home insurance at the phone number I entered, by calls and text messages, including messages sent with an automatic telephone dialing system or a prerecorded voice. My consent is not a condition of buying anything. Message and data rates may apply. I can opt out at any time. (Example Insurance Agency is a made-up name. This wording is an illustration, not approved language.)

For each element of the rule in more detail, see prior express written consent.

Naming the companies that will call

The seller in the FCC rule is the company on whose behalf the call is made. In insurance lead generation that is usually the agency or carrier sales team that buys the lead, not you. Your consent text has to authorize that buyer, either by name in the text or through a clearly linked list.

The FCC one-to-one consentOne-to-one consentAn FCC rule adopted in 2023 that would have limited each prior express written consent to a single seller. Glossary rule was vacated by the Eleventh Circuit on January 24, 2025 (Insurance Marketing Coalition v. FCC) before it took effect, and the FCC removed it from its rules in August 2025. Some insurance buyers still require their own name in the consent text as a condition of their contracts. See the one-to-one consent rule.

Consent to be called about auto insurance quotes does not automatically cover calls about life insurance, final expense or any other product. If your form serves several lines, name each line the person may be contacted about, and send each lead only to buyers of the lines the consent covers.

A consent certificate is the record that shows a specific person agreed to specific consent text at a specific time. Buyers ask for it when a consumer complains or a dispute starts. A certificate commonly holds:

  • the exact consent text shown, and the button text
  • the date and time of submission, with time zone
  • the IP address and device or browser details
  • the page URL and the form version
  • the phone number and other details as entered
  • where available, a replay or capture of the page as the person saw it

You can produce certificates with your own form system or a third-party certification service. Either way, send the certificate ID or link with each lead you post, so the buyer can check it before calling. If a lead is sold to more than one buyer, every buyer relies on the same certificate, so the text must authorize all of them.

Record keeping for insurance leads

A certificate proves the moment of consent. Buyers also ask what happened afterward, so keep these records with each lead:

Records to keep with each insurance lead
RecordWhy it is asked for
Consent certificateShows what the person agreed to and when.
Form and consent text versionShows which wording was live on the date of the lead.
Traffic source and sub IDLinks the lead to the ad or site that produced it.
Posting logShows which buyers received the lead and when.
Validation resultsShows the phone and email checks run before posting.
Opt-out requestsShows when the person asked to stop and who was told.

How long to keep the records depends on the limitation periods that apply to calls and texts and on your buyer contracts. See TCPA record keeping for retention and format. Consent also ages: a lead resold weeks later rests on the same consent, which is one reason aged leads carry more risk. See what are aged leads.

Do Not Call and the Telemarketing Sales Rule

Buyers who call your leads must also follow the National Do Not Call Registry rules in 47 CFR 64.1200(c) and, for telemarketing, the FTC's Telemarketing Sales Rule (16 CFR Part 310). Your part as the seller is to pass on what buyers need to comply: the consent record, the time zone, and any opt-out you receive. See Do Not Call rules for businesses and the Telemarketing Sales Rule.

State mini-TCPA laws

Several states have their own telemarketing laws, often called mini-TCPA laws. Depending on the state, they add rules on consent wording, calling hours, the number of calls in a period, state Do Not Call lists, or registration for telemarketers. They usually apply based on where the consumer is, not where you or the buyer are based.

  1. Record the state and ZIP code on every lead, so buyers can apply the right state rules.
  2. Write one set of consent language that meets the strictest standard among the states you collect from, rather than one version per state.
  3. Tell buyers which states your traffic covers, and ask which state rules they require you to meet.

See TCPA state laws for the main state statutes, and TCPA compliance for insurance leads for how they apply to insurance calls.

Insurance solicitation rules for lead generators

Insurance is regulated by each state. The NAIC states that people who sell, solicit or negotiate insurance in the United States must be licensed as a producer, a term that includes agents and brokers (NAIC, producer licensing). The NAIC Producer Licensing Model Act defines "solicit" as attempting to sell insurance or asking or urging a person to apply for a particular kind of insurance from a particular company, and it lists exceptions to licensing.

The model act is a template. Each state sets its own rules, and whether a lead generation activity counts as solicitation depends on state law. This page does not answer that question for any state or business. Questions lead sellers commonly take to a lawyer or a state regulator include:

  • Does the ad or form name a specific insurance company or recommend a product?
  • Does anyone on your side talk with consumers about coverage, terms or prices?
  • Are you paid per lead, or per policy sold?
  • Which states do your consumers live in?

Each state insurance department publishes its own producer licensing rules. The NAIC keeps a directory of state insurance departments. Buyers may also set their own requirements in their contracts.

Checklist before you sell insurance leads

  • Consent text sits next to the submit button and names, or links to, every buyer that may call.
  • The text covers calls, texts, automated technology and prerecorded messages, and says consent is not a condition of purchase.
  • The text names each insurance line the person may be contacted about.
  • A consent certificate is created for every lead and its ID is sent with the post.
  • Form versions, traffic sources, posting logs and opt-outs are stored with each lead.
  • State and ZIP code are captured, and you know which states your traffic reaches.
  • You have checked state insurance department rules, with a lawyer, for the states you collect from.

For how consent fits into the full lead lifecycle, see how insurance lead generation works. For what buyers check on arrival, see insurance leads for agents.

Frequently asked questions

Does consent from an auto insurance quote form cover calls about life insurance?

Not automatically. Consent covers what the text says. Name each line on the form if you plan to sell more than one.

Can one consent certificate support a lead sold to several insurance buyers?

The same certificate is used, so its text must authorize every buyer that receives the lead, by name or through a linked list. A buyer that is not covered by the text is not covered by the certificate.

What do insurance buyers ask a seller for when a consumer disputes consent?

Usually the consent certificate, the form version live that day, the traffic source, and the posting log showing when the lead was sent. Keep all four linked to the lead record.

Related guides

Sources

  1. 47 U.S.C. 227, Restrictions on use of telephone equipment, Legal Information Institute, Cornell Law Schoollaw.cornell.edu
  2. 47 CFR 64.1200, Delivery restrictions, Electronic Code of Federal Regulationsecfr.gov
  3. 16 CFR Part 310, Telemarketing Sales Rule, Electronic Code of Federal Regulationsecfr.gov
  4. Producer licensing, National Association of Insurance Commissionerscontent.naic.org
  5. Producer Licensing Model Act (#218), National Association of Insurance Commissionerscontent.naic.org
  6. State insurance departments, National Association of Insurance Commissionerscontent.naic.org

Generating insurance leads?

Email us your insurance lines, traffic sources, how consent is captured, and daily volume. Summit currently works with web leads (form fills), not calls or live transfers.

Or write to team@summitleads.ai. We reply by email.

What happens next

  1. Step 1: You email us.
  2. Step 2: We reply by email.

Buying insurance leads instead? See insurance leads for agents.

Selling leads? Talk to us.

Email team@summitleads.ai. We reply by email. You can also message Summit Leads or Russell Brown on LinkedIn. Contact details.