{"id":22820,"date":"2024-05-01T21:17:44","date_gmt":"2024-05-01T21:17:00","guid":{"rendered":"https:\/\/www.bloomreach.com\/library\/understanding-tcpa-and-ctia-compliance-for-sms-marketing-in-the-us"},"modified":"2026-03-12T13:20:26","modified_gmt":"2026-03-12T13:20:26","slug":"understanding-tcpa-and-ctia-compliance-for-sms-marketing-in-the-us","status":"publish","type":"library","link":"https:\/\/www.bloomreach.com\/en\/blog\/understanding-tcpa-and-ctia-compliance-for-sms-marketing-in-the-us","title":{"rendered":"Understanding TCPA and CTIA Compliance for SMS Marketing in the US"},"content":{"rendered":"<p><strong>Disclaimer:<\/strong><\/p>\n<p><strong>The information in this post is for informational purposes only. Please contact your legal team to obtain advice with respect to any particular issues or concerns regarding TCPA compliance.<\/strong><\/p>\n<h2>What Is the TCPA?<\/h2>\n<p><strong>The Telephone Consumer Protection Act (TCPA)<\/strong> is a United States federal law governing the regulation of telephone solicitations. The TCPA was first signed into law in 1991 and has remained the bedrock of federal telemarketing regulations ever since.<\/p>\n<h2>Who Must Comply With the TCPA?<\/h2>\n<p>Because the TCPA regulates all telephone solicitations, any person, business, or entity that markets or sells their products or services over the phone \u2014 including voice calls, faxes, VoIP calls, and <strong>text messages<\/strong> \u2014\u00a0 is subject to the TCPA.\u00a0<\/p>\n<p>Brands using or planning to use <a href=\"https:\/\/www.bloomreach.com\/en\/blog\/sms-marketing\">SMS marketing<\/a> should be aware of Sections <a href=\"https:\/\/www.fcc.gov\/sites\/default\/files\/tcpa-rules.pdf\" target=\"_blank\" rel=\"noopener\"><u>4<\/u><\/a> and <a href=\"https:\/\/www.fcc.gov\/sites\/default\/files\/tcpa-rules.pdf\" target=\"_blank\" rel=\"noopener\"><u>5<\/u><\/a> of the TCPA\u2019s definition, which define what they mean by \u201ctelephone solicitation\u201d and \u201cunsolicited advertisement.\u201d\u00a0<\/p>\n<h3><b>Why Does the TCPA Matter for SMS Marketing?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">You cannot send unsolicited marketing text messages to your customers unless they voluntarily give you <\/span><b>prior express written consent<\/b><span style=\"font-weight: 400;\">, which the FCC defines as:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">&#8220;A written agreement between the caller and the receiver of the call that clearly authorizes the caller to deliver advertisements or telemarketing messages using an automatic telephone dialing system or an artificial pre-recorded voice.&#8221;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This consent must specify the phone number to be called and include the receiver&#8217;s written or electronic signature, which could be a button press confirming the agreement. The caller must also disclose that consent is not a condition of purchase.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Typically, consent is captured via opt-in forms on your website or during checkout. The consent language must be clearly communicated and separate from other terms.<\/span><\/p>\n<p><b>If you already have phone numbers from your customers, can you just start sending them marketing messages?<\/b><span style=\"font-weight: 400;\"> No. Having someone&#8217;s phone number does not mean you have permission to text them. They must explicitly opt in to marketing communications from your brand.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Consent is tied to the owner of the phone number, not the phone number itself. And if you operate a family of brands, consent to SMS from one brand does <\/span><b>not<\/b><span style=\"font-weight: 400;\"> mean consent to SMS from another. Each consent must be captured separately and clearly defined.<\/span><\/p>\n<h3><b>Transactional vs. Promotional Messages<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The TCPA applies different consent standards depending on the type of message you send:<\/span><\/p>\n<p><b>Promotional\/marketing messages<\/b><span style=\"font-weight: 400;\"> require <\/span><b>prior express written consent<\/b><span style=\"font-weight: 400;\"> (the higher standard). These include discount offers, product announcements, flash sales, upsell campaigns, and any message designed to promote or advertise.<\/span><\/p>\n<p><b>Transactional\/informational messages<\/b><span style=\"font-weight: 400;\"> require <\/span><b>prior express consent<\/b><span style=\"font-weight: 400;\">, which can be oral or written (a lower standard). These include order confirmations, shipping updates, appointment reminders, account alerts, and password resets. However, transactional messages cannot contain promotional content. If you include a discount code in a shipping notification, the entire message may be classified as promotional.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Understanding this distinction is important. Many businesses overcollect consent for transactional messages or undercollect for promotional ones. The safest approach: obtain written consent for all SMS communications and clearly separate transactional from promotional messages in your workflows.<\/span><\/p>\n<h2><b>TCPA Requirements for SMS Marketers<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Here are the key TCPA requirements for SMS marketing, along with Bloomreach solutions to help you stay compliant:<\/span><\/p>\n<h3><b>Consent<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Above all else, capturing clear and unambiguous consent is the most important requirement of TCPA compliance. Without prior express written consent, you may not send marketing messages.<\/span><\/p>\n<p><b>Bloomreach solution:<\/b> <a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/consent-management\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Consent management<\/span><\/a><span style=\"font-weight: 400;\"> + <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/tcpa-list-validation\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">TCPA list validation<\/span><\/a><\/p>\n<h3><b>Make It Easy To Opt Out<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The TCPA requires that customers can easily opt out of your SMS marketing program. The accepted method of unsubscribing is to respond to a text with <\/span><b>&#8220;STOP.&#8221;<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Since April 2025, FCC rules require businesses to accept opt-out requests through <\/span><b>any reasonable method<\/b><span style=\"font-weight: 400;\">, not just keyword replies. This includes email, phone calls, website forms, chatbots, or even in-person requests. Businesses must process opt-out requests within <\/span><b>10 business days<\/b><span style=\"font-weight: 400;\"> and may send a single confirmation message (within 5 minutes, with no promotional content) to clarify which types of messages the consumer wants to stop receiving.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It&#8217;s good practice to have easily accessible terms and conditions and periodically remind recipients of how to opt out so they aren&#8217;t frustrated or confused by the process.<\/span><\/p>\n<p><b>Bloomreach solution:<\/b> <a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/consent-management\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Consent management<\/span><\/a><span style=\"font-weight: 400;\"> and <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/two-way-sms-messaging-and-keyword-auto-responses#revoke-consent-action-opt-out\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">keyword opt-outs<\/span><\/a><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.bloomreach.com\/wp-content\/uploads\/2024\/05\/tcpa_opt-in.jpg\" alt=\"Example of opt-out messaging in SMS marketing\" \/><\/p>\n<h3><b>Send Time Restrictions (Silent Hours)<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The TCPA stipulates that text messages may not be sent before 8 a.m. or after 9 p.m. in the recipient&#8217;s time zone. Certain states are more restrictive. <\/span><a href=\"https:\/\/www.flsenate.gov\/Session\/Bill\/2021\/1120\/Analyses\/2021s01120.rc.PDF\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Florida<\/span><\/a><span style=\"font-weight: 400;\">, <\/span><a href=\"https:\/\/webserver1.lsb.state.ok.us\/cf_pdf\/2021-22%20ENR\/hB\/HB3168%20ENR.PDF\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Oklahoma<\/span><\/a><span style=\"font-weight: 400;\">, and <\/span><a href=\"https:\/\/lawfilesext.leg.wa.gov\/biennium\/2021-22\/Pdf\/Bills\/Session%20Laws\/House\/1497-S.SL.pdf?q=20220525151557\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Washington<\/span><\/a><span style=\"font-weight: 400;\"> state laws dictate texts can only be sent between 8 a.m. and 8 p.m. in the recipient&#8217;s local time zone. <\/span><a href=\"https:\/\/www.bloomreach.com\/en\/blog\/texas-senate-bill-140\"><span style=\"font-weight: 400;\">Texas SB 140<\/span><\/a><span style=\"font-weight: 400;\">, which took effect in September 2025, restricts automated messages to between 9 a.m. and 9 p.m. local time.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">To avoid risk, send texts between 9 a.m. and 8 p.m. and ensure time zones are respected.<\/span><\/p>\n<p><b>Bloomreach solution:<\/b> <a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/scenarios-1#using-silent-hours\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Silent hours in scenarios<\/span><\/a><\/p>\n<h3><b>Identification Requirements<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The TCPA requires the sender to provide their name, the name of the company they&#8217;re communicating on behalf of, and a telephone number or address which can be used to contact them again. This information should appear in your first message to new subscribers.<\/span><\/p>\n<p><b>Bloomreach solution:<\/b> <a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/sms-campaigns#brand-name\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Brand name<\/span><\/a><\/p>\n<h3><b>Message Frequency Guidelines<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The TCPA does not set strict limits on SMS frequency, but excessive messaging can be perceived as harassment and increases compliance risk. Most brands follow a general guideline of 1-2 promotional messages per week. Carrier-enforced policies add further restrictions:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Abandoned cart messages should be limited to <\/span><b>one message per unique cart event<\/b><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Abandoned cart messages must be sent <\/span><b>within 48 hours<\/b><span style=\"font-weight: 400;\"> of the event<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Offering subscribers the ability to customize their message frequency (weekly, monthly, or promotional-only) reduces opt-outs and builds trust.<\/span><\/p>\n<p><b>Bloomreach solution:<\/b> <a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/frequency-policy\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Frequency policy<\/span><\/a><\/p>\n<h3><b>Record-Keeping Requirements<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Maintaining detailed records of consent is your strongest defense in a TCPA complaint or lawsuit. Businesses should track:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>When and how consent was obtained<\/b><span style=\"font-weight: 400;\"> (exact date, time, and method)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>The exact language of the consent agreement<\/b><span style=\"font-weight: 400;\"> shown to the consumer<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>The contact details of the recipient<\/b><span style=\"font-weight: 400;\"> (phone number tied to consent)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Opt-out requests and processing dates<\/b><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Retain these records for at least <\/span><b>five years<\/b><span style=\"font-weight: 400;\">. Courts and regulators expect businesses to produce documented proof of consent when challenged.<\/span><\/p>\n<h3><b>Internal Do Not Call (DNC) List<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The TCPA requires callers and senders to maintain an internal do-not-call database of consumers who have asked not to be called or texted.<\/span><\/p>\n<p><b>Bloomreach solution:<\/b> <a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/consent-management\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Consent management<\/span><\/a><span style=\"font-weight: 400;\"> and <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/two-way-sms-messaging-and-keyword-auto-responses#revoke-consent-action-opt-out\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">keyword opt-outs<\/span><\/a><\/p>\n<h3><b>National Do Not Call Registry<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Marketers are required by the TCPA to suppress phone numbers on the <\/span><a href=\"https:\/\/www.donotcall.gov\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">National Do Not Call Registry<\/span><\/a><span style=\"font-weight: 400;\">. Some states maintain their own DNC lists as well, separate from the federal list.<\/span><\/p>\n<p><b>Bloomreach solution:<\/b> <a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/tcpa-list-validation\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">TCPA list validation<\/span><\/a><\/p>\n<h2><b>What Are the Penalties for Violating TCPA Regulations?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">TCPA violations carry serious financial consequences:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>$500 per violation<\/b><span style=\"font-weight: 400;\"> for standard infractions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>$1,500 per willful violation<\/b><span style=\"font-weight: 400;\"> (treble damages)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Up to $43,792 per violation<\/b><span style=\"font-weight: 400;\"> for DNC list infractions<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">There is no cap on statutory damages, so repeat violations can result in millions of dollars in penalties. TCPA violations are frequently pursued as class-action lawsuits, which compound the cost quickly.<\/span><\/p>\n<h3><b>Recent TCPA SMS Settlements<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Recent settlements illustrate the financial stakes of non-compliance:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Clover Network (2024):<\/b> <a href=\"https:\/\/topclassactions.com\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">$15 million<\/span><\/a><span style=\"font-weight: 400;\"> for sending over 1 million unsolicited marketing texts without consent<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Cash App (2025):<\/b> <a href=\"https:\/\/topclassactions.com\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">$12.5 million<\/span><\/a><span style=\"font-weight: 400;\"> for unsolicited referral program texts sent without clear consent<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Zales Jewelers (2025):<\/b> <a href=\"https:\/\/topclassactions.com\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">$7.5 million<\/span><\/a><span style=\"font-weight: 400;\"> for SMS marketing violations<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>DSW \/ Designer Brands (2025):<\/b> <a href=\"https:\/\/topclassactions.com\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">$4.42 million<\/span><\/a><span style=\"font-weight: 400;\"> for continuing to send marketing texts after consumers opted out<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">The pattern across these cases is clear: the largest settlements involve either sending texts without any consent at all or continuing to text after opt-out requests. Both scenarios are preventable with proper compliance infrastructure.<\/span><\/p>\n<h2><b>What Are the Biggest TCPA Risks?<\/b><\/h2>\n<h3><b>Reassigned Numbers<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Nearly 100,000 numbers are reassigned each day. Since consent is associated with the called party and not the phone number, contacting reassigned numbers carries significant TCPA risk.<\/span><\/p>\n<p><b>The FCC&#8217;s Reassigned Numbers Database (RND)<\/b><span style=\"font-weight: 400;\"> mitigates this risk. Operational since November 2021, the RND contains data on over 152 million U.S. phone numbers that have been permanently disconnected. Businesses can query the RND before sending messages to check whether a number has been reassigned since consent was obtained. A &#8220;No&#8221; response provides an FCC-recognized safe harbor against TCPA liability. Query your database at least every 45 days, matching the carrier aging period before number reassignment.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The RND is administered by <\/span><a href=\"https:\/\/www.reassigned.us\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">SomosGov<\/span><\/a><span style=\"font-weight: 400;\"> and available via subscription.<\/span><\/p>\n<p><b>Bloomreach solution:<\/b><span style=\"font-weight: 400;\"> Our <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/tcpa-list-validation\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">TCPA list validation<\/span><\/a><span style=\"font-weight: 400;\"> feature helps you automatically identify and remove deactivated numbers, known TCPA litigators, and DNC registrants from your list.<\/span><\/p>\n<h3><b>Private Right of Action<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">TCPA allows individuals to sue brands directly for violations and statutory damages. While individuals can initiate legal action, TCPA violations are often pursued as class-action lawsuits, which compound costs rapidly.<\/span><\/p>\n<h3><b>Personal Liability<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">In certain situations, executives and compliance officers are being targeted personally for litigation stemming from TCPA penalties.<\/span><\/p>\n<h3><b>DNC Violations<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Following the Supreme Court&#8217;s decision in <\/span><a href=\"https:\/\/www.supremecourt.gov\/opinions\/20pdf\/19-511_p86b.pdf\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Facebook v. Duguid<\/span><\/a><span style=\"font-weight: 400;\">, TCPA litigators have turned their focus to alleging DNC violations by organizations. There are different DNC lists (federal, state, and internal), and DNC compliance is taking on renewed importance. Failure to scrub against all applicable lists before sending is one of the most common triggers for TCPA litigation.<\/span><\/p>\n<h2><b>TCPA Exemptions<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Certain types of messages are exempt from full TCPA consent requirements:<\/span><\/p>\n<p><b>Emergency messages<\/b><span style=\"font-weight: 400;\"> are fully exempt. Severe weather alerts, public safety warnings, school lockdown notifications, and medical emergencies can be sent without prior consent.<\/span><\/p>\n<p><b>Healthcare messages<\/b><span style=\"font-weight: 400;\"> under HIPAA may be sent with prior express consent (not written). This includes appointment confirmations, prescription notifications, pre-operative instructions, and lab result notifications. These messages cannot contain marketing content.<\/span><\/p>\n<p><b>Non-commercial messages<\/b><span style=\"font-weight: 400;\"> from nonprofits, political organizations, and charitable entities often fall outside TCPA marketing rules. However, if the message contains any commercial promotion, standard TCPA rules apply.<\/span><\/p>\n<p><b>Informational\/transactional messages<\/b><span style=\"font-weight: 400;\"> require prior express consent (not written) when they are purely informational. Order confirmations, shipping updates, and account alerts fall into this category, as long as they contain no promotional content.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If you believe your messages may qualify for an exemption, consult your legal team. Exemptions are nuanced, and misclassifying a promotional message as informational can result in violations.<\/span><\/p>\n<h2><b>What Is the CTIA?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The <\/span><b>CTIA (Cellular Telecommunications Industry Association)<\/b><span style=\"font-weight: 400;\"> is a trade association that represents all sectors of wireless communications. The CTIA has established messaging guidelines to help companies stay compliant with local and federal SMS regulations.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Unlike the TCPA, <\/span><a href=\"https:\/\/www.ctia.org\/the-wireless-industry\/industry-commitments\/messaging-interoperability-sms-mms\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">the CTIA messaging guidelines<\/span><\/a><span style=\"font-weight: 400;\"> are principles and best practices that rely on voluntary compliance, not legal enforcement. You won&#8217;t be fined for failing to follow them. However, carriers reserve the right to shut down short codes and block senders that violate these guidelines. While not legal requirements, they should not be treated as suggestions.<\/span><\/p>\n<h3><b>SHAFT Content Restrictions<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The CTIA&#8217;s SHAFT guidelines specify what type of content is restricted in marketing text messages. SHAFT stands for <\/span><b>Sex, Hate, Alcohol, Firearms, and Tobacco<\/b><span style=\"font-weight: 400;\"> (including CBD).<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Content regarding controlled substances and adult content must be age-gated<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Depictions or endorsements of violence or hate are prohibited<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">No inappropriate or sexual content<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Profanity or hate speech is not allowed<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Endorsements of illegal or illicit drugs are forbidden<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Products that are federally legal (such as alcohol) can be marketed via SMS as long as age-gating is in place, requiring recipients to confirm they are at least 21 years old before receiving messages.<\/span><\/p>\n<h2><b>What Changed: TCPA Updates for 2025-2026<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The TCPA regulatory landscape has shifted significantly since mid-2024. If your SMS compliance practices haven&#8217;t been updated recently, review these developments with your legal team.<\/span><\/p>\n<h3><b>April 2025: New FCC Opt-Out Rules<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The FCC&#8217;s updated consent revocation rules took effect on April 11, 2025, with several key changes:<\/span><\/p>\n<p><b>Expanded opt-out methods.<\/b><span style=\"font-weight: 400;\"> Consumers can now revoke consent through any reasonable method, not just keyword replies. Businesses must accept opt-outs via text (&#8220;STOP,&#8221; &#8220;quit,&#8221; &#8220;end,&#8221; &#8220;revoke,&#8221; &#8220;opt out,&#8221; &#8220;cancel,&#8221; &#8220;unsubscribe&#8221;), email, phone calls, website forms, chatbots, or in-person requests. Consumers may also respond in the language in which they received the communication.<\/span><\/p>\n<p><b>10-business-day processing window.<\/b><span style=\"font-weight: 400;\"> Businesses must honor opt-out requests within 10 business days, down from the previous 30-day standard.<\/span><\/p>\n<p><b>Single clarification message.<\/b><span style=\"font-weight: 400;\"> You may send one clarification text within 5 minutes of receiving a revocation request to confirm which message types the consumer wants to stop. This message cannot contain any promotional content. If the consumer doesn&#8217;t respond, the opt-out applies to all automated messages from your brand.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">A related &#8220;revoke-all&#8221; provision, which would have required a consumer&#8217;s opt-out to apply across all communication types and channels, has been delayed to at least April 2026 and may be eliminated entirely under the FCC&#8217;s October 2025 rulemaking proposal.<\/span><\/p>\n<h3><b>February 2025: One-to-One Consent Rule Vacated<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">In December 2023, the FCC adopted a rule requiring that consent be specific to a single identified seller (closing the &#8220;lead generator loophole&#8221;). Just before taking effect in January 2025, the 11th Circuit Court of Appeals permanently vacated the rule in <\/span><i><span style=\"font-weight: 400;\">Insurance Marketing Coalition v. FCC<\/span><\/i><span style=\"font-weight: 400;\">, finding that the FCC&#8217;s one-to-one and topic restrictions conflicted with the TCPA&#8217;s statutory text.<\/span><\/p>\n<p><b>Current status:<\/b><span style=\"font-weight: 400;\"> The one-to-one consent rule is no longer in effect. Businesses follow the pre-2023 TCPA definition of prior express written consent, which does not mandate seller-specific approvals. Lead generators can continue obtaining consent for multiple sellers via a single form, provided the consent is clear and the consumer understands what they are agreeing to.<\/span><\/p>\n<h3><b>February 2026: Fifth Circuit Decision on Written Consent<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">In <\/span><i><span style=\"font-weight: 400;\">Bradford v. Sovereign Pest Control<\/span><\/i><span style=\"font-weight: 400;\"> (February 25, 2026), the Fifth Circuit Court of Appeals ruled that the TCPA requires only &#8220;prior express consent&#8221; for automated telemarketing calls and texts, not &#8220;prior express <\/span><b>written<\/b><span style=\"font-weight: 400;\"> consent&#8221; as the FCC&#8217;s regulations require. The court found that the FCC&#8217;s regulation adding the &#8220;written&#8221; requirement exceeded the statutory text. This decision was influenced by the Supreme Court&#8217;s 2024 <\/span><i><span style=\"font-weight: 400;\">Loper Bright<\/span><\/i><span style=\"font-weight: 400;\"> ruling, which eliminated judicial deference to agency interpretations.<\/span><\/p>\n<p><b>What this means for marketers:<\/b><span style=\"font-weight: 400;\"> In the Fifth Circuit (Texas, Louisiana, Mississippi), oral consent may now suffice for TCPA compliance. However, this only applies in those three states. Other circuits and the FCC&#8217;s own rules still mandate written consent. Oral consent is also significantly harder to document and prove in litigation.<\/span><\/p>\n<p><b>Our recommendation:<\/b><span style=\"font-weight: 400;\"> Continue obtaining written consent for all SMS marketing nationwide. Written consent remains the safest practice and provides the strongest legal defense regardless of jurisdiction.<\/span><\/p>\n<h3><b>September 2025: Texas SB 140<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Texas Senate Bill 140 imposed additional requirements on automated text messages sent to Texas residents, including stricter quiet-hour restrictions (9 a.m. to 9 p.m. local time) and enhanced penalties for violations. A November 2025 settlement clarified that businesses running genuine opt-in SMS programs are effectively exempt from Chapter 302&#8217;s telemarketing registration and bonding requirements. Read our <\/span><a href=\"https:\/\/www.bloomreach.com\/en\/blog\/texas-senate-bill-140\"><span style=\"font-weight: 400;\">detailed breakdown of Texas SB 140<\/span><\/a><span style=\"font-weight: 400;\"> for full compliance guidance.<\/span><\/p>\n<h3><b>Mobile OS Changes Affecting SMS Delivery<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">While not regulatory changes, recent updates from Apple and Google affect how SMS marketing messages are delivered and received:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/www.bloomreach.com\/en\/blog\/apple-ios-26-impacts-on-sms-marketing-campaigns\"><b>Apple iOS 26<\/b><\/a><span style=\"font-weight: 400;\"> introduces expanded message filtering that can send messages from unknown senders to a separate folder, potentially reducing visibility of welcome and confirmation texts.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/www.bloomreach.com\/en\/blog\/android-google-messages-how-they-affect-sms\"><b>Android Google Messages updates<\/b><\/a><span style=\"font-weight: 400;\"> add link warnings, inbox filters, and in-thread unsubscribe buttons that make opting out easier.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">These changes reinforce the importance of clear opt-in flows, branded sender IDs, and high-value message content. Encourage subscribers to save your number as a contact during onboarding.<\/span><\/p>\n<h2><b>How To Stay TCPA and CTIA Compliant With Bloomreach<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">With Bloomreach, you have all the tools you need to keep your SMS marketing compliant with laws and regulations. Our platform offers built-in protection with inherent TCPA and CTIA compliance so your campaigns are never in doubt.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Here&#8217;s what every SMS marketer should do to stay compliant, along with the specific ways our solution helps:<\/span><\/p>\n<h3><b>Capture Consent With Compliant Sign-Up Units<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">There are multiple ways your customers can join your SMS marketing program. Some sign up via on-site pop-ups while others give consent during checkout.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Regardless of the method, your opt-in process must properly inform customers that their phone number will be used for marketing purposes, that they can opt out at any time, and that you&#8217;ll never share their information. You should also provide links to your terms of service and privacy policy.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This is easy to do with Bloomreach, which guides marketers through the setup of these compliance requirements. You can build the ideal sign-up forms for your <\/span><a href=\"https:\/\/www.bloomreach.com\/en\/blog\/everything-you-need-to-create-the-best-sms-marketing-campaigns\"><span style=\"font-weight: 400;\">SMS marketing initiatives<\/span><\/a><span style=\"font-weight: 400;\"> and include all the necessary information to maintain compliance.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If you want to collect both email and SMS consent simultaneously, you must capture clear and unambiguous consent for each program as a separate opt-in. Subscribers cannot enter both phone and email information on the same screen with a single submission button, as SMS consent may be misinterpreted as forced. With Bloomreach, you can implement our <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/sms-sign-up-units\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">multi-step sign-up units<\/span><\/a><span style=\"font-weight: 400;\"> to grow both your email and SMS lists quickly and compliantly.<\/span><\/p>\n<h3><b>Consent Language Examples<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Your opt-in language must be specific and transparent. Here are examples of compliant consent language for different scenarios:<\/span><\/p>\n<p><b>Web form opt-in:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">&#8220;[By checking this box\/By submitting this form] and providing your phone number, you agree to receive recurring automated marketing messages, including cart reminders, at the phone number provided, even if that number is on a state or national do not call registry. Consent is not a condition of purchase. Reply STOP to unsubscribe. Reply HELP for help. Message frequency varies. Msg &amp; data rates may apply. View our Privacy Policy and Terms of Service.&#8221;<\/span><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.bloomreach.com\/wp-content\/uploads\/2024\/05\/tcpa_opt-in-form.png\" alt=\"Example of TCPA-compliant consent for SMS marketing\" \/><\/p>\n<p><b>Double opt-in confirmation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">&#8220;[Brand Name]: Reply YES to receive automated marketing messages and cart reminders. Msg frequency varies. Msg &amp; data rates may apply. Reply HELP for help. Reply STOP to unsubscribe.&#8221;<\/span><\/p>\n<p><b>In-store or text-to-join:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">&#8220;Text JOIN to [short code] to receive exclusive offers from [Brand Name]. By texting JOIN, you consent to receive automated marketing texts. Consent is not required for purchase. Msg &amp; data rates may apply. Reply STOP to opt out.&#8221;<\/span><\/p>\n<h3><b>Build Your Lists Quickly and Compliantly With Keywords<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Keywords are a great way to increase your subscriber count through external sources such as social networks (Instagram stories, Facebook ads) or posters in brick-and-mortar shops (text to join). Be sure to use the required compliance language and provide a link to your terms of service and privacy policy.<\/span><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.bloomreach.com\/wp-content\/uploads\/2024\/05\/tcpa_keywords.jpg\" alt=\"Example of using other keywords to sign up for SMS marketing\" \/><\/p>\n<p><span style=\"font-weight: 400;\">Bloomreach collects phone numbers by combining <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/consent-management\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">consent management<\/span><\/a><span style=\"font-weight: 400;\"> and <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/web-layers\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">weblayers<\/span><\/a><span style=\"font-weight: 400;\">. We provide templates drafted with TCPA and CTIA regulations in mind. You can find these templates in the platform with the prefix <\/span><i><span style=\"font-weight: 400;\">TCPA_CTIA.<\/span><\/i><\/p>\n<h3><b>Remove Customers Who Have Opted Out<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Under the April 2025 opt-out rules, you must honor opt-out requests from <\/span><b>any reasonable channel<\/b><span style=\"font-weight: 400;\"> within 10 business days. When a customer replies with &#8220;STOP&#8221; or a similar keyword, your brand needs to respond immediately.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Bloomreach handles incoming SMS\/MMS messages and picks up on opt-out messages instantly. When a customer replies with a configured opt-out keyword, a corresponding auto-response is executed immediately and their consent status is updated. You can set up multiple <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/two-way-sms-messaging-and-keyword-auto-responses#revoke-consent-action-opt-out\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">keywords to revoke consent<\/span><\/a><span style=\"font-weight: 400;\"> to ensure subscribers have multiple ways to request removal from your program.<\/span><\/p>\n<h3><b>Meet CTIA Guidelines for Long Codes and Short Codes<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The TCPA doesn&#8217;t regulate the provisioning of short codes, long codes, or toll-free numbers, although how these numbers are used must comply with TCPA requirements.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The CTIA reserves the right to shut down phone numbers for violations of the TCPA or CTIA <\/span><a href=\"https:\/\/www.ctia.org\/the-wireless-industry\/industry-commitments\/messaging-interoperability-sms-mms\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">messaging principles and best practices<\/span><\/a><span style=\"font-weight: 400;\">. All numbers must be registered, and each sender&#8217;s phone number collection processes must be vetted for compliance.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">With Bloomreach, this compliance is built in. We partner with leading SMS providers like <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/sinch-sms\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Sinch<\/span><\/a><span style=\"font-weight: 400;\"> and <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/infobip-smsmms-provider\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Infobip<\/span><\/a><span style=\"font-weight: 400;\"> to manage this process and ensure you get the green light before you start sending.<\/span><\/p>\n<p><a href=\"https:\/\/www.bloomreach.com\/en\/blog\/a-guide-to-sms-short-codes\"><span style=\"font-weight: 400;\">Short codes<\/span><\/a><span style=\"font-weight: 400;\"> (five-to-six-digit numbers that texts are sent from) are considered the &#8220;gold standard&#8221; for SMS senders. While they come with a cost (around $500 per month), the rigorous approval process ensures you meet the highest compliance standards. Short-code senders are given higher messaging throughput and are prioritized by carriers for better deliverability.<\/span><\/p>\n<h3><b>Disclose Data Rates and Carrier Fees<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">According to the CTIA guidelines, you must make customers aware that data rates and carrier fees may apply. It&#8217;s usually as simple as including <\/span><b>&#8220;Msg &amp; data rates may apply&#8221;<\/b><span style=\"font-weight: 400;\"> in your opt-in language.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">See an example of the default opt-in message flow:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>CUSTOMER:<\/b><span style=\"font-weight: 400;\"> [Enters phone number via a TCPA-compliant sign-up unit]<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>BRAND:<\/b> <i><span style=\"font-weight: 400;\">{{brand_name}}: Reply YES to receive automated marketing messages and cart reminders.<\/span><\/i><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>CUSTOMER:<\/b> <i><span style=\"font-weight: 400;\">YES<\/span><\/i><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>BRAND:<\/b> <i><span style=\"font-weight: 400;\">{{brand_name}}: Confirmed! Msg frequency varies. Msg &amp; data rates may apply. Reply HELP for help. Reply STOP to unsubscribe.<\/span><\/i><\/li>\n<\/ul>\n<h3><b>Respect Send Time Restrictions (Quiet Hours)<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Marketers should only send messages during TCPA-compliant timeframes, taking into account state-specific restrictions and local time zones. For nationwide campaigns, adjust for time zone differences: a text sent at 9 a.m. Eastern Time may still fall within quiet hours for recipients on the West Coast.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Bloomreach gives you the ability to define and control <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/scenarios-1#using-silent-hours\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">silent hours<\/span><\/a><span style=\"font-weight: 400;\"> to pause campaigns until it is safe to send again. Our platform also supports <\/span><a href=\"https:\/\/www.bloomreach.com\/en\/blog\/sms-automation-tools\"><span style=\"font-weight: 400;\">AI-powered optimal send times<\/span><\/a><span style=\"font-weight: 400;\"> that maximize engagement while staying within compliant windows.<\/span><\/p>\n<h3><b>Send Relevant Content<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Make sure that the content you send is relevant, aligned with your brand, and delivers on the promises you made when convincing customers to subscribe. Always provide value and do not send messages just for the sake of sending them.<\/span><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.bloomreach.com\/wp-content\/uploads\/2024\/05\/tcpa_order-confirmation.jpg\" alt=\"Example of relevant SMS messaging to stay TCPA-compliant\" \/><\/p>\n<h3><b>Remove Deactivated Numbers<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Consent is tied to the owner of a phone number, <\/span><b>not the phone number itself<\/b><span style=\"font-weight: 400;\">. Prior written consent becomes invalid if the customer who gave you consent no longer uses that phone number because it was deactivated or swapped.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">When a person terminates their cellular plan, gets a new phone number, or changes carriers, they need to be removed from your SMS marketing program. Ignoring this process leads to spam complaints, carrier filtering, and legal action.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Use the <\/span><a href=\"https:\/\/www.reassigned.us\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">FCC&#8217;s Reassigned Numbers Database<\/span><\/a><span style=\"font-weight: 400;\"> to check whether numbers in your list have been reassigned, and scrub your list at least every 45 days. Bloomreach helps you automatically identify and remove deactivated numbers using our <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/tcpa-list-validation\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">TCPA list validation<\/span><\/a><span style=\"font-weight: 400;\"> feature, which also suppresses known TCPA litigators and DNC registrants.<\/span><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.bloomreach.com\/wp-content\/uploads\/2024\/05\/tcpa_abandoned-cart.jpg\" alt=\"Example of TCPA-compliant abandoned cart messaging\" \/><\/p>\n<p>Any abandoned cart messages (e.g., shopping cart reminders) should:<\/p>\n<ul>\n<li>Be limited to only one message per unique abandoned cart event<\/li>\n<li>Be sent within 48 hours of the unique abandoned cart<\/li>\n<\/ul>\n<p>You can easily control the frequency of your SMS campaigns in Bloomreach Engagement using the <a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/frequency-policy\" target=\"_blank\" rel=\"noopener\"><u>frequency policy<\/u><\/a> feature.<\/p>\n<h2><b>boohooMAN Drives 25x ROI With Compliant SMS<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Compliance doesn&#8217;t mean sacrificing performance. UK fashion brand boohooMAN used Bloomreach to build a fully compliant <\/span><a href=\"https:\/\/www.bloomreach.com\/en\/blog\/sms-vs-email-marketing\"><span style=\"font-weight: 400;\">SMS marketing strategy<\/span><\/a><span style=\"font-weight: 400;\"> with double opt-in flows and personalized messaging. The results: a <\/span><b>5x overall ROI from SMS<\/b><span style=\"font-weight: 400;\"> and a <\/span><b>25x ROI from an SMS birthday campaign<\/b><span style=\"font-weight: 400;\">. By combining proper consent capture with AI-powered personalization, boohooMAN proved that compliant SMS drives real revenue.<\/span><\/p>\n<h2><b>SMS Compliance Quick-Reference Checklist<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Use this checklist to verify your SMS program meets TCPA and CTIA requirements:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Consent captured:<\/b><span style=\"font-weight: 400;\"> Prior express written consent obtained for all marketing messages<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Consent documented:<\/b><span style=\"font-weight: 400;\"> Records include timestamp, method, and exact language shown<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Transactional messages separated:<\/b><span style=\"font-weight: 400;\"> No promotional content in transactional texts<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Opt-out available:<\/b><span style=\"font-weight: 400;\"> &#8220;STOP&#8221; keyword and multiple opt-out channels supported<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Opt-outs processed promptly:<\/b><span style=\"font-weight: 400;\"> Within 10 business days (aim for real-time)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Silent hours respected:<\/b><span style=\"font-weight: 400;\"> Messages sent between 9 a.m. and 8 p.m. local time<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Sender identified:<\/b><span style=\"font-weight: 400;\"> Business name included in every message<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>DNC lists scrubbed:<\/b><span style=\"font-weight: 400;\"> Federal, state, and internal DNC lists checked before sending<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Reassigned numbers checked:<\/b><span style=\"font-weight: 400;\"> RND queried at least every 45 days<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Frequency controlled:<\/b><span style=\"font-weight: 400;\"> No excessive messaging; abandoned cart limited to 1 per event within 48 hours<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Data rates disclosed:<\/b><span style=\"font-weight: 400;\"> &#8220;Msg &amp; data rates may apply&#8221; included in opt-in language<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>SHAFT compliant:<\/b><span style=\"font-weight: 400;\"> No restricted content; age-gating for applicable products<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Records retained:<\/b><span style=\"font-weight: 400;\"> Consent records kept for at least 5 years<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">[ ] <\/span><b>State laws reviewed:<\/b><span style=\"font-weight: 400;\"> Texas SB 140, Florida, Oklahoma, Washington, and California requirements addressed<\/span><\/p>\n<h2><b>Stay Compliant With Bloomreach<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">TCPA compliance is non-negotiable, and the regulatory landscape continues to evolve. With Loomi AI, Bloomreach makes it easy to stay compliant with TCPA regulations, follow CTIA best practices, and adapt to new rules as they take effect.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Loomi AI includes <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/tcpa-list-validation\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">TCPA list validation<\/span><\/a><span style=\"font-weight: 400;\"> that automatically scrubs against DNC lists, deactivated numbers, reassigned numbers, and known litigators. Combined with <\/span><a href=\"https:\/\/www.bloomreach.com\/en\/blog\/consent-management\"><span style=\"font-weight: 400;\">consent management<\/span><\/a><span style=\"font-weight: 400;\">, <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/scenarios-1#using-silent-hours\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">silent hour enforcement<\/span><\/a><span style=\"font-weight: 400;\">, <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/frequency-policy\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">frequency policies<\/span><\/a><span style=\"font-weight: 400;\">, and a full suite of <\/span><a href=\"https:\/\/www.bloomreach.com\/en\/blog\/take-your-sms-marketing-strategy-to-the-next-level-with-bloomreach-engagements-newest-sms-marketing-features\"><span style=\"font-weight: 400;\">SMS marketing capabilities<\/span><\/a><span style=\"font-weight: 400;\">, you get compliance and performance from one platform.<\/span><\/p>\n<p><a href=\"https:\/\/www.bloomreach.com\/en\/products\/engagement\/mobile-messaging\"><span style=\"font-weight: 400;\">See how Bloomreach keeps your SMS marketing compliant and high-performing.<\/span><\/a><\/p>\n\n<div id=\"faq-block-v1block_0f7cec8d07705f3a9ac7b17b0b59b893\" class=\"faq-section-v1-container exclude_from_toc\">\n    <h3 class=\"section-title\">Frequently Asked Questions<\/h3>\n\n        <div\n        class=\"wd-faq-block-acf align wp-block-acf-faq-section-v1\" id=\"faq-block-v1block_0f7cec8d07705f3a9ac7b17b0b59b893\"    >\n    \n        <div class=\"faq-section-v1-acf__innerblocks\">\n<div id=\"faq-section-v1-single-itemblock_f8407e51d6c501353d5286059b9db390\" class=\"faq-section-v1-single-item-container\">\n    <div class=\"title-section\">\n        <p class=\"item-title\">Does the TCPA apply to text messages?<\/p>\n        <span class=\"item-button\">\n            <svg width=\"18\" height=\"10\" viewBox=\"0 0 18 10\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n            <g>\n            <path\n                    d=\"M9.00004 9.22C8.72864 9.22 8.47352 9.11415 8.2815 8.92281L1.00718 1.64917C0.910834 1.55282 0.85791 1.42526 0.85791 1.28888C0.85791 1.15318 0.910834 1.02494 1.00718 0.929271C1.10353 0.832923 1.23109 0.779999 1.36679 0.779999C1.5025 0.779999 1.63073 0.832923 1.7264 0.929271L9.00004 8.20223L16.2737 0.929271C16.37 0.832923 16.4976 0.779999 16.6333 0.779999C16.769 0.779999 16.8972 0.832923 16.9929 0.929271C17.0893 1.02562 17.1422 1.15318 17.1422 1.28888C17.1422 1.42458 17.0893 1.55282 16.9929 1.64849L9.71927 8.92213C9.52793 9.11415 9.27213 9.22 9.00004 9.22Z\"\n                    fill=\"#019ACE\"\/>\n            <\/g>\n            <\/svg>\n        <\/span>\n    <\/div>\n\n    <div class=\"item-content\">\n        <div class=\"content-inner\">\n            <p>Yes. The TCPA applies to all telephone solicitations, including SMS and MMS messages. Any marketing text message sent using an automatic dialing system or to a mobile phone number requires prior express written consent from the recipient.\r\n<\/p>\n        <\/div>\n    <\/div>\n<\/div>\n\n\n<div id=\"faq-section-v1-single-itemblock_802cf0cb756cd979a645afb51623d39d\" class=\"faq-section-v1-single-item-container\">\n    <div class=\"title-section\">\n        <p class=\"item-title\">What are the penalties for TCPA violations?<\/p>\n        <span class=\"item-button\">\n            <svg width=\"18\" height=\"10\" viewBox=\"0 0 18 10\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n            <g>\n            <path\n                    d=\"M9.00004 9.22C8.72864 9.22 8.47352 9.11415 8.2815 8.92281L1.00718 1.64917C0.910834 1.55282 0.85791 1.42526 0.85791 1.28888C0.85791 1.15318 0.910834 1.02494 1.00718 0.929271C1.10353 0.832923 1.23109 0.779999 1.36679 0.779999C1.5025 0.779999 1.63073 0.832923 1.7264 0.929271L9.00004 8.20223L16.2737 0.929271C16.37 0.832923 16.4976 0.779999 16.6333 0.779999C16.769 0.779999 16.8972 0.832923 16.9929 0.929271C17.0893 1.02562 17.1422 1.15318 17.1422 1.28888C17.1422 1.42458 17.0893 1.55282 16.9929 1.64849L9.71927 8.92213C9.52793 9.11415 9.27213 9.22 9.00004 9.22Z\"\n                    fill=\"#019ACE\"\/>\n            <\/g>\n            <\/svg>\n        <\/span>\n    <\/div>\n\n    <div class=\"item-content\">\n        <div class=\"content-inner\">\n            <p>Standard TCPA violations carry a penalty of $500 per message. Willful violations can result in $1,500 per message (treble damages). DNC violations can reach up to $43,792 per violation. There is no cap on total damages, meaning large-scale SMS campaigns that violate the TCPA can result in multi-million dollar settlements.\r\n<\/p>\n        <\/div>\n    <\/div>\n<\/div>\n\n\n<div id=\"faq-section-v1-single-itemblock_f59d11141c6d568ef6b646b493777d42\" class=\"faq-section-v1-single-item-container\">\n    <div class=\"title-section\">\n        <p class=\"item-title\">Do transactional messages require consent?<\/p>\n        <span class=\"item-button\">\n            <svg width=\"18\" height=\"10\" viewBox=\"0 0 18 10\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n            <g>\n            <path\n                    d=\"M9.00004 9.22C8.72864 9.22 8.47352 9.11415 8.2815 8.92281L1.00718 1.64917C0.910834 1.55282 0.85791 1.42526 0.85791 1.28888C0.85791 1.15318 0.910834 1.02494 1.00718 0.929271C1.10353 0.832923 1.23109 0.779999 1.36679 0.779999C1.5025 0.779999 1.63073 0.832923 1.7264 0.929271L9.00004 8.20223L16.2737 0.929271C16.37 0.832923 16.4976 0.779999 16.6333 0.779999C16.769 0.779999 16.8972 0.832923 16.9929 0.929271C17.0893 1.02562 17.1422 1.15318 17.1422 1.28888C17.1422 1.42458 17.0893 1.55282 16.9929 1.64849L9.71927 8.92213C9.52793 9.11415 9.27213 9.22 9.00004 9.22Z\"\n                    fill=\"#019ACE\"\/>\n            <\/g>\n            <\/svg>\n        <\/span>\n    <\/div>\n\n    <div class=\"item-content\">\n        <div class=\"content-inner\">\n            <p>Transactional messages (order confirmations, shipping updates, appointment reminders) require prior express consent, which can be oral or written. This is a lower standard than the prior express written consent required for promotional messages. However, if a transactional message includes any promotional content, it may be reclassified as promotional, requiring the higher consent standard.\r\n<\/p>\n        <\/div>\n    <\/div>\n<\/div>\n\n\n<div id=\"faq-section-v1-single-itemblock_c7de12692ba23575f2862ca7aff76480\" class=\"faq-section-v1-single-item-container\">\n    <div class=\"title-section\">\n        <p class=\"item-title\">How quickly must opt-out requests be processed?<\/p>\n        <span class=\"item-button\">\n            <svg width=\"18\" height=\"10\" viewBox=\"0 0 18 10\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n            <g>\n            <path\n                    d=\"M9.00004 9.22C8.72864 9.22 8.47352 9.11415 8.2815 8.92281L1.00718 1.64917C0.910834 1.55282 0.85791 1.42526 0.85791 1.28888C0.85791 1.15318 0.910834 1.02494 1.00718 0.929271C1.10353 0.832923 1.23109 0.779999 1.36679 0.779999C1.5025 0.779999 1.63073 0.832923 1.7264 0.929271L9.00004 8.20223L16.2737 0.929271C16.37 0.832923 16.4976 0.779999 16.6333 0.779999C16.769 0.779999 16.8972 0.832923 16.9929 0.929271C17.0893 1.02562 17.1422 1.15318 17.1422 1.28888C17.1422 1.42458 17.0893 1.55282 16.9929 1.64849L9.71927 8.92213C9.52793 9.11415 9.27213 9.22 9.00004 9.22Z\"\n                    fill=\"#019ACE\"\/>\n            <\/g>\n            <\/svg>\n        <\/span>\n    <\/div>\n\n    <div class=\"item-content\">\n        <div class=\"content-inner\">\n            <p>Under the FCC&#8217;s April 2025 rules, businesses must process opt-out requests within 10 business days. Best practice is to process them in real time. After receiving an opt-out, you may send a single confirmation message within 5 minutes (with no promotional content), but no further marketing messages.\r\n<\/p>\n        <\/div>\n    <\/div>\n<\/div>\n\n\n<div id=\"faq-section-v1-single-itemblock_c52721c33ada5eaf55a69cbcb76a606e\" class=\"faq-section-v1-single-item-container\">\n    <div class=\"title-section\">\n        <p class=\"item-title\">What is the difference between TCPA and CTIA?<\/p>\n        <span class=\"item-button\">\n            <svg width=\"18\" height=\"10\" viewBox=\"0 0 18 10\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n            <g>\n            <path\n                    d=\"M9.00004 9.22C8.72864 9.22 8.47352 9.11415 8.2815 8.92281L1.00718 1.64917C0.910834 1.55282 0.85791 1.42526 0.85791 1.28888C0.85791 1.15318 0.910834 1.02494 1.00718 0.929271C1.10353 0.832923 1.23109 0.779999 1.36679 0.779999C1.5025 0.779999 1.63073 0.832923 1.7264 0.929271L9.00004 8.20223L16.2737 0.929271C16.37 0.832923 16.4976 0.779999 16.6333 0.779999C16.769 0.779999 16.8972 0.832923 16.9929 0.929271C17.0893 1.02562 17.1422 1.15318 17.1422 1.28888C17.1422 1.42458 17.0893 1.55282 16.9929 1.64849L9.71927 8.92213C9.52793 9.11415 9.27213 9.22 9.00004 9.22Z\"\n                    fill=\"#019ACE\"\/>\n            <\/g>\n            <\/svg>\n        <\/span>\n    <\/div>\n\n    <div class=\"item-content\">\n        <div class=\"content-inner\">\n            <p>The TCPA is a federal law enforced by the FCC with legally binding requirements and penalties. The CTIA is a wireless industry trade association that publishes voluntary best-practice guidelines. While CTIA guidelines are not legally enforceable, carriers can shut down short codes and block senders that violate them. Following both TCPA rules and CTIA guidelines provides the strongest compliance posture.\r\n<\/p>\n        <\/div>\n    <\/div>\n<\/div>\n\n\n<div id=\"faq-section-v1-single-itemblock_9415a3ee7adf70b7e9cb40d4d860336f\" class=\"faq-section-v1-single-item-container\">\n    <div class=\"title-section\">\n        <p class=\"item-title\">What is the CTIA&#8217;s SHAFT policy?<\/p>\n        <span class=\"item-button\">\n            <svg width=\"18\" height=\"10\" viewBox=\"0 0 18 10\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n            <g>\n            <path\n                    d=\"M9.00004 9.22C8.72864 9.22 8.47352 9.11415 8.2815 8.92281L1.00718 1.64917C0.910834 1.55282 0.85791 1.42526 0.85791 1.28888C0.85791 1.15318 0.910834 1.02494 1.00718 0.929271C1.10353 0.832923 1.23109 0.779999 1.36679 0.779999C1.5025 0.779999 1.63073 0.832923 1.7264 0.929271L9.00004 8.20223L16.2737 0.929271C16.37 0.832923 16.4976 0.779999 16.6333 0.779999C16.769 0.779999 16.8972 0.832923 16.9929 0.929271C17.0893 1.02562 17.1422 1.15318 17.1422 1.28888C17.1422 1.42458 17.0893 1.55282 16.9929 1.64849L9.71927 8.92213C9.52793 9.11415 9.27213 9.22 9.00004 9.22Z\"\n                    fill=\"#019ACE\"\/>\n            <\/g>\n            <\/svg>\n        <\/span>\n    <\/div>\n\n    <div class=\"item-content\">\n        <div class=\"content-inner\">\n            <p>SHAFT stands for Sex, Hate, Alcohol, Firearms, and Tobacco (including CBD). The CTIA restricts these content categories in SMS marketing. Content involving federally legal products (like alcohol) may be permitted with age-gating that confirms recipients are at least 21 years old.\r\n<\/p>\n        <\/div>\n    <\/div>\n<\/div>\n\n<\/div>\n\n        <\/div>\n    \n            <script type=\"application\/ld+json\">\n        {\n            \"@context\": \"https:\/\/schema.org\",\n            \"@type\": \"FAQPage\",\n            \"mainEntity\": [\n                                {\n                    \"@type\": \"Question\",\n                    \"name\": \"Does the TCPA apply to text messages?\",\n                    \"acceptedAnswer\": {\n                        \"@type\": \"Answer\",\n                        \"text\": \"Yes. The TCPA applies to all telephone solicitations, including SMS and MMS messages. Any marketing text message sent using an automatic dialing system or to a mobile phone number requires prior express written consent from the recipient.\n\"\n                    }\n                },\n                                {\n                    \"@type\": \"Question\",\n                    \"name\": \"What are the penalties for TCPA violations?\",\n                    \"acceptedAnswer\": {\n                        \"@type\": \"Answer\",\n                        \"text\": \"Standard TCPA violations carry a penalty of $500 per message. Willful violations can result in $1,500 per message (treble damages). DNC violations can reach up to $43,792 per violation. There is no cap on total damages, meaning large-scale SMS campaigns that violate the TCPA can result in multi-million dollar settlements.\n\"\n                    }\n                },\n                                {\n                    \"@type\": \"Question\",\n                    \"name\": \"Do transactional messages require consent?\",\n                    \"acceptedAnswer\": {\n                        \"@type\": \"Answer\",\n                        \"text\": \"Transactional messages (order confirmations, shipping updates, appointment reminders) require prior express consent, which can be oral or written. This is a lower standard than the prior express written consent required for promotional messages. However, if a transactional message includes any promotional content, it may be reclassified as promotional, requiring the higher consent standard.\n\"\n                    }\n                },\n                                {\n                    \"@type\": \"Question\",\n                    \"name\": \"How quickly must opt-out requests be processed?\",\n                    \"acceptedAnswer\": {\n                        \"@type\": \"Answer\",\n                        \"text\": \"Under the FCC&#039;s April 2025 rules, businesses must process opt-out requests within 10 business days. Best practice is to process them in real time. After receiving an opt-out, you may send a single confirmation message within 5 minutes (with no promotional content), but no further marketing messages.\n\"\n                    }\n                },\n                                {\n                    \"@type\": \"Question\",\n                    \"name\": \"What is the difference between TCPA and CTIA?\",\n                    \"acceptedAnswer\": {\n                        \"@type\": \"Answer\",\n                        \"text\": \"The TCPA is a federal law enforced by the FCC with legally binding requirements and penalties. The CTIA is a wireless industry trade association that publishes voluntary best-practice guidelines. While CTIA guidelines are not legally enforceable, carriers can shut down short codes and block senders that violate them. Following both TCPA rules and CTIA guidelines provides the strongest compliance posture.\n\"\n                    }\n                },\n                                {\n                    \"@type\": \"Question\",\n                    \"name\": \"What is the CTIA&#039;s SHAFT policy?\",\n                    \"acceptedAnswer\": {\n                        \"@type\": \"Answer\",\n                        \"text\": \"SHAFT stands for Sex, Hate, Alcohol, Firearms, and Tobacco (including CBD). The CTIA restricts these content categories in SMS marketing. Content involving federally legal products (like alcohol) may be permitted with age-gating that confirms recipients are at least 21 years old.\n\"\n                    }\n                }\n                            ]\n        }\n        <\/script>\n        <\/div>\n","protected":false},"excerpt":{"rendered":"<p>Disclaimer: The information in this post is for informational purposes only. Please contact your legal team to obtain advice with respect to any particular issues or concerns regarding TCPA compliance. What Is the TCPA? The Telephone Consumer Protection Act (TCPA) is a United States federal law governing the regulation of telephone solicitations. The TCPA was [&hellip;]<\/p>\n","protected":false},"author":157,"featured_media":20330,"template":"","ew-regions":[],"ew-solutions":[],"library_type":[513],"library_blog_tag":[357,455,365,449],"industry":[],"channel":[269],"topic":[287,284],"class_list":["post-22820","library","type-library","status-publish","has-post-thumbnail","hentry","library_type-blog","library_blog_tag-best-practices","library_blog_tag-commerce-experience","library_blog_tag-marketing-automation","library_blog_tag-privacy-and-security","channel-sms-mms","topic-customer-data","topic-retention-loyalty"],"acf":{"library_blog_banner_content":"","library_blog_banner_cta1_text":"","library_blog_banner_cta1_href":"","library_blog_banner_cta1_new_tab":false,"library_blog_banner_cta2_text":"","library_blog_banner_cta2_href":"","library_blog_banner_cta2_new_tab":false,"library_blog_banner_bg_color":"#EAF7FE","library_blog_banner_cta_text_color":"#FFF","library_blog_banner_cta_bg_color":"#019ACE","library_blog_banner_cta2_text_color":"#000","library_blog_banner_cta2_bg_color":"#FFF","library_blog_chatgpt_content":"","library_blog_chatgpt_cta_href":"","library_blog_chatgpt_cta_text":"Ask ChatGPT"},"_links":{"self":[{"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/library\/22820","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/library"}],"about":[{"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/types\/library"}],"author":[{"embeddable":true,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/users\/157"}],"version-history":[{"count":2,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/library\/22820\/revisions"}],"predecessor-version":[{"id":83839,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/library\/22820\/revisions\/83839"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/media\/20330"}],"wp:attachment":[{"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/media?parent=22820"}],"wp:term":[{"taxonomy":"ew_regions","embeddable":true,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/ew-regions?post=22820"},{"taxonomy":"ew_solutions","embeddable":true,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/ew-solutions?post=22820"},{"taxonomy":"library_type","embeddable":true,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/library_type?post=22820"},{"taxonomy":"library_blog_tag","embeddable":true,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/library_blog_tag?post=22820"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/industry?post=22820"},{"taxonomy":"channel","embeddable":true,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/channel?post=22820"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/topic?post=22820"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}