TCPA one-to-one consent rule: Vacated, and what it means for lead generators
The FCC one-to-one consent rule would have let a consumer consent to calls from only one seller at a time, and only to calls related to the interaction that prompted the consent. It never took effect: a federal appeals court vacated it in January 2025, and the FCC removed it from its rules in August 2025.
The FCC's one-to-one consent rule was expected to be the biggest change to TCPA consent for lead generators in years. It never took effect: a federal appeals court vacated it in January 2025, and the FCC removed it from its rules in August 2025. Here is what the rule said, what happened to it, and what that means for operators selling leads to buyers who use automated contact systems.
Last reviewed: October 6, 2026.
Educational Content Only: This is educational content, not legal advice. Consult a qualified attorney for compliance guidance specific to your operations.
What is the FCC one-to-one consent rule?
The FCC adopted the one-to-one consentOne-to-one consentAn FCC rule adopted in 2023 that would have limited each prior express written consent to a single seller. Glossary rule in December 2023, with an effective date of January 27, 2025. The rule would have changed the definition of prior express written consent for telemarketing calls and texts made with an automatic telephone dialing system (ATDS) or an artificial or prerecorded voice. It added two limits: a consumer could consent to calls from only one seller at a time, and only to calls logically and topically associated with the interaction that prompted the consent.
The rule targeted a common practice, often described as "list sharing", where a single consumer consent names a broad category of sellers. Language like "insurance providers," "home improvement contractors," "personal injury attorneys," or "mortgage lenders" was used to authorize any company in that category to contact the consumer using automated systems. This meant a consumer submitting a form for a roofing quote could be authorizing contact from dozens of different roofing companies, contractors, or home service providers simultaneously, based solely on their one-time form submission.
The FCC said it aimed the rule at "consent farm" operations that collected consumer contact information and then sold it, with the consent attached, to large numbers of companies based on a single, broadly worded authorization. The rule never took effect. The FCC postponed the January 27, 2025 date, and on January 24, 2025 the U.S. Court of Appeals for the Eleventh Circuit vacated both limits in Insurance Marketing Coalition v. FCC (No. 24-10277). The court held that the FCC had exceeded its authority under the TCPATCPAThe Telephone Consumer Protection Act, the federal law that governs telemarketing calls and texts, autodialers, prerecorded voice messages and the Do Not Call Registry. Glossary: the statute does not require a consumer to consent to calls from only one entity at a time, or only to calls on a logically and topically associated subject.
After the court's mandate issued in April 2025, the FCC removed the rule and restored the prior text of 47 CFR 64.1200(f)(9), effective August 29, 2025. That definition calls for an agreement in writing, bearing the signature of the person called, that clearly authorizes the seller to deliver telemarketing calls or messages using an autodialerATDS / autodialerAn automatic telephone dialing system, a category of equipment regulated by the TCPA. Glossary or an artificial or prerecorded voice, and that identifies the telephone number to be called. It does not require one seller per consent or topic matching.
What the ruling means for lead generators selling to multiple buyers
Had the rule taken effect, it would have changed the traditional ping/postPing/postA real-time selling method in which a lead is pinged to buyers with partial data, buyers bid, and the winning bidder receives the full lead by post. Glossary model (capture one consent, sell the lead to multiple buyers who each contact the consumer) at its foundation, because broad categorical consent would no longer have produced valid consent for each buyer. With the rule vacated, there is no federal one-seller limit on multi-buyer distribution.
That does not settle every question. The consent still has to clearly authorize the seller that makes the call, and whether a given form does that depends on its wording and how it is presented to the consumer. Some state telemarketing laws set their own consent and calling rules, and buyers set their own requirements through supply agreements.
Operators preparing for the rule generally looked at three paths: routing each lead to a single buyer, co-registration forms that let consumers pick specific buyers at submission, and named-partner forms that list each buyer by name. None of these is required by current federal rules, but some operators kept them because certain buyers prefer or require seller-specific consent. Co-registration designs that present buyers clearly and let consumers actively choose which companies may contact them are more defensible than designs that pre-select all buyers or bury buyer names in a long list.
What ping/post operators should know now
For ping/post operators, the practical result is that federal rules no longer include the one-seller limit that would have made auction-based distribution incompatible with consent captured before the ping. Consent language that is shown clearly before submission, that a consumer would understand, and that covers the calls your buyers will make is still the core of a defensible form.
Operators whose buyers ask for seller-specific consent can still meet that request: name the buyers who may receive the lead, keep the list current, and version the consent language when buyers change. If a buyer is chosen only at the moment of the ping auction, it cannot be named in consent captured before the ping, so check that each buyer in the auction accepts the consent language your form actually uses.
Where a buyer does require its name in the consent, the buyer's legal entity name or a clearly identifiable trade name is the standard reference. Vague descriptions do not identify a company: "a licensed roofing contractor in your area" is not a named company. "ABC Roofing Company" is. For buyers who operate under multiple brands, the brand name that consumers would recognize and associate with incoming contacts is the appropriate reference, provided it is specific enough to identify a single entity unambiguously.
How to review your consent language
Reviewing consent language is a structured process that requires coordination across your buyer relationships, your form infrastructure, and your consent record management system. The sequence matters: rushing a form update without completing the upstream coordination steps creates new compliance gaps even as it closes old ones.
Begin by auditing your buyer relationships and delivery architecture. Identify which specific companies will be contacting consumers who submit each of your forms. For each form, create a complete list of buyers who may receive leads from that form. For buyers who ask to be named, obtain each buyer's legal or trade name as it should appear in consent language: some buyers have preferences, and using an incorrect or unfamiliar name creates confusion when consumers search for information about who contacted them. Document this audit with effective dates.
Draft consent language that clearly states who may contact the consumer, by what means, and about what. A common structure for consent language in a named-partner model: "By submitting this form, you agree to be contacted by [Buyer Company Name] regarding your [service type] project by autodialed calls, prerecorded messages, and text messages to the number provided. Consent is not required to receive services." For co-registration designs naming multiple buyers, the language should clearly identify each company and allow the consumer to affirmatively select which companies may contact them.
Before deploying updated consent language, archive the previous form version with a documented end date. Version control for consent language is the mechanism that allows you to prove which consent language applied to leads captured during any given date range. After deploying the new language, communicate the change to your buyers: they will want to know the precise date the new language went live so they can tell which version applies to each lead. Update your ping/post delivery payload to include a consent version identifier field so buyers can systematically track the consent language behind each lead in their pipeline.
What buyers may still require
Some buyers revised their supplierSupplierAny company that provides leads to a buyer, whether it generates them itself or brokers them from publishers. Glossary requirements to prepare for the one-to-one rule, and some still ask for seller-specific consent as a contractual or risk choice, even though federal rules no longer require it. The requirements affect both new supplier onboarding and existing supplier audits. Understanding what each buyer requires, and confirming that your operations meet it, is key to maintaining and growing buyer relationships.
Buyers that keep this requirement may ask that your consent language specifically names them or their network entity before leads captured under that consent can be purchased for automated contact use. Some buyers conduct form audits during onboarding: they review your live landing pages to confirm that their name appears in the consent language before approving a supplier relationship. Others rely on representations and warranties in supply agreements, with indemnification clauses that activate if consent is later found not to meet the agreed standard.
Some buyers ask for a consent version identifier on each lead in the delivery payload: a field that specifies which consent language version was active at the time of the lead's capture. This allows buyers to sort their incoming supply by consent version: leads captured under broad categorical language can be treated differently from leads captured under seller-specific language. Without a version identifier in the payload, buyers cannot make this distinction efficiently, which creates friction in pricing and dispute resolution.
For new supplier relationships, confirm each buyer's consent standard at onboarding rather than assuming one, because requirements differ from buyer to buyer. For legacy supplier relationships, some buyers audit their supply chains to identify which incoming leads were captured under which consent language, with different risk management protocols applied to each group.
Related resources
What is the FCC one-to-one consent rule?
The one-to-one consent rule was part of an FCC order adopted in December 2023. It would have required prior express written consent for autodialed or prerecorded telemarketing calls and texts to cover only one seller at a time, and only calls logically and topically associated with the interaction that prompted the consent. The rule never took effect. The FCC postponed its January 27, 2025 effective date, and on January 24, 2025 the Eleventh Circuit vacated it in Insurance Marketing Coalition v. FCC. The FCC then removed the rule and restored the prior text of 47 CFR 64.1200(f)(9), effective August 29, 2025.
How does the one-to-one consent rule affect lead generators selling to multiple buyers?
It does not apply today, because it was vacated before it took effect. The Eleventh Circuit held that the TCPA does not limit a consumer to consenting to calls from one entity at a time, and the current federal definition of prior express written consent has no one-seller or topic-matching requirement. The consent still has to be a signed written agreement that clearly authorizes the seller to make autodialed or prerecorded telemarketing calls and identifies the phone number. Some buyers still ask for seller-specific consent as a contractual or risk choice, and state laws may set their own rules.
Do I need separate consent for each buyer?
Not under the vacated one-to-one rule, which was removed from the FCC rules in August 2025. Each seller that calls still needs prior express written consent that clearly authorizes that seller to make autodialed or prerecorded telemarketing calls to the number provided. Some buyers require their own name in the consent language through their supply agreements, and state laws may differ, so check each buyer relationship and consult a qualified attorney about your specific forms.
When did the one-to-one consent rule take effect?
It never did. The FCC adopted the rule in December 2023 with a scheduled effective date of January 27, 2025. The FCC postponed that date, and on January 24, 2025 the Eleventh Circuit vacated the rule in Insurance Marketing Coalition v. FCC (No. 24-10277), holding that the FCC had exceeded its authority under the TCPA. The FCC removed the rule and restored the prior text of 47 CFR 64.1200(f)(9), effective August 29, 2025.
Need help structuring consent for multi-buyer lead delivery?
Tell us your current consent setup: how your forms word consent, which buyers they cover, and how you store consent records.
Discuss Compliant Lead DeliveryBuying leads instead? Become a buyer
Related for publishers: Consent language: what publishers must not change. Related in the lead gen guide: Prior express written consent.