Are AI phone calls legal? TCPA, PECR, and consent
Are AI phone calls legal? Here is the complete breakdown of TCPA, PECR, and EU AI Act rules, consent requirements, and pre-launch compliance checks.
## Are AI phone calls legal? The direct answer Yes, under conditions. Legality depends on who you call, your reason for calling, and whether you collected valid consent before dialing. In the US, the FCC treats AI-generated voices as an artificial or prerecorded voice under the TCPA. Verify four operational controls before launching an outbound voice campaign: * **Who you call and why:** Distinguish between inbound customer service, requested callbacks, existing commercial accounts, and cold prospects. * **Consent or legal basis:** Verify whether your target audience requires prior express consent, prior express written consent, or another documented legal basis. * **Opposition and preference registers:** Check numbers against national do-not-call registries before loading lists into your dialer. * **AI disclosure and records:** State that the call uses artificial intelligence at the start, and retain full call transcripts. This guide outlines regulatory rules across major jurisdictions for businesses deploying voice agents via DeepAgent. This article is not legal advice; check your specific compliance setup with your DPO or a lawyer. ## Statutory rules for AI phone calls in the US, UK, and EU Outbound voice automation connects telemarketing regulations, privacy laws, and artificial intelligence mandates across different markets. ### United States: TCPA and the FCC voice ruling In the United States, commercial calls fall under the Telephone Consumer Protection Act, codified at 47 U.S.C. § 227. The FCC Declaratory Ruling adopted 2 February 2024 and released 8 February 2024 (FCC 24-17) governs synthetic speech. The FCC ruling confirmed that AI technologies generating human voices count as an "artificial or prerecorded voice" under the TCPA. Such calls need the called party's prior express consent unless an emergency purpose or an exemption applies. Telemarketing calls using this technology require prior express written consent. Check calling lists against the National Do Not Call Registry for telemarketing campaigns. ### United Kingdom: PECR and TPS regulations In the United Kingdom, electronic marketing falls under the Privacy and Electronic Communications Regulations (PECR), enforced by the Information Commissioner's Office (ICO). Under PECR, automated marketing calls require prior consent before dialing. Live marketing calls must avoid numbers registered on the Telephone Preference Service (TPS) or the Corporate Telephone Preference Service (CTPS) unless the recipient notified you that they consent to receive your calls. ### European Union: EU AI Act and GDPR Under Article 50 of the EU AI Act, deployers must ensure that AI systems interacting directly with natural persons inform those persons that they are interacting with an artificial intelligence. This disclosure must happen at the start of the call. Under the General Data Protection Regulation (GDPR), establish a lawful basis for processing personal data, provide clear information notices, respect the right to object, practice data minimisation, and define storage retention periods with your DPO. For detailed data architecture reviews, consult our guide on GDPR and conversational AI. On the DeepAgent self-service platform you can launch outbound calls to leads only after confirming you have their explicit consent. ## Call scenarios and compliance risk levels Different outbound calling workflows carry distinct regulatory requirements. The table below outlines how operational models align with current compliance rules. | Situation | Operational example | What to verify before calling | | :--- | :--- | :--- | | **Inbound calls** | Agency customer service line handling policyholder inquiries | Notify callers that the system uses artificial intelligence under EU AI Act Article 50. Maintain full transcripts. | | **Requested callbacks** | Lead submits an online form requesting a quote or callback | Verify that the submission form captures explicit contact consent. Execute the callback quickly. | | **Past contacts database** | Retail or hospitality brand contacting historical customer lists | Confirm historical consent records. Scrub lists against national do-not-call registries before dialing. | | **Cold B2B outreach** | Software or wholesale supplier contacting corporate phone numbers | Check UK numbers against the CTPS and confirm consent for any automated call. | | **Cold B2C telemarketing** | Outbound promotional campaigns to consumer phone lists | Secure prior express written consent under the TCPA. Secure prior consent under PECR. Check national DNC registries. | Real deployments show how these scenarios operate across commercial contexts: * **Inbound service:** Agenzia Unipol Cerignola, an Italian insurance agency, deployed an AI phone assistant named Adriana on its main agency number. Over two months, the system handled 725 inbound calls representing about 10 hours and 15 minutes of conversation, with an average call duration of 51 seconds. It recorded a 99.6% transcript coverage rate across 343 operational outcomes. Call transfers to agency staff succeeded in 200 out of 207 attempts (96.6%). * **Requested callbacks:** Flor de Pacifico connected an AI voice agent to inbound form submissions for international real-estate investment leads. Operating between 08:00 and 21:00, the system initiated calls within seconds of form submissions, completing 207 calls in 5.5 days, securing 76 answers (about a 37% answer rate), and booking 18 qualified appointments. Similarly, consumer lender Fincontinuo ran 8,668 outbound call attempts between 1 May and 31 July to callback requests from web forms. The platform completed 1,492 conversations and delivered 560 prequalified leads to advisors. You can review this setup in our articles on lead follow-up automation and speed-to-lead voice agents. * **Cold B2B lists:** An Italian insurance company recruiting agencies for its network used an outbound agent to contact cold lists of agency principals. The campaign ran 685 call attempts in one week, yielding 275 completed conversations (40.15%) and 36 qualified agencies. Unanswered calls represented 31.24% of attempts, voicemail and IVR filters stopped 17.66%, and technical failures accounted for 6.57%. 32 of the 36 qualified contacts were reached between 10:00 and 12:00. Teams evaluating this approach can review our operational guide on AI cold calling for B2B and examine the structural differences in a predictive dialer vs AI voice agent. * **Past customer lists:** Dinamo Steak House used an AI voice agent to contact its internal database of past customers collected over time. The agent executed 6,709 call attempts, leading to 1,188 completed conversations, about 693 minutes of talk time, and 40 interested customer leads for a EUR 49 promotional dining voucher. Contacting historical lists requires strict consent verification, as detailed in our analysis of automating outbound sales calls limits. ## AI disclosure at the start of the call AI cold calling compliance begins when the receiver answers the phone. To comply with EU AI Act Article 50, your voice agent must state its artificial identity right away. The opening sequence addresses four items early: 1. Identity: The voice agent states its name and the commercial brand it represents. 2. AI Disclosure: The agent states that it is an artificial intelligence voice system. 3. Purpose: The agent states the exact reason for the call. 4. Opt-Out: The agent gives the recipient an immediate opportunity to end the call. Here is an illustrative opening script for an outbound commercial call: > "Hello, this is an automated AI assistant calling on behalf of Apex Logistics. I am following up on your inquiry regarding freight scheduling. Please note this is an artificial voice line. If you prefer not to discuss this or wish to be removed from our contact list, let me know at any point." If the recipient asks not to be called, the AI agent recognises the intent, acknowledges the request, and ends the call. The platform records this outcome in the dashboard so administrators suppress the phone number from future campaigns. You can audit these interactions using AI call analytics transcripts and outcomes. ## Pre-launch checklist for outbound voice AI Before loading contact records or initiating outbound campaigns, verify this eight-point compliance checklist: 1. **List origin verification:** Document where and when each telephone number was obtained. Reject lists lacking verifiable consent documentation. 2. **Consent record auditing:** Confirm that you possess prior express written consent for US telemarketing leads, prior consent for UK automated marketing calls, or a validated legal basis under GDPR. 3. **National registry scrubbing:** Scrub your list against the National Do Not Call Registry (US), the TPS/CTPS databases (UK), or relevant national preference registries before uploading. Do this before you upload the list. 4. **Calling window configuration:** Set the calling hours in the campaign settings and check local rules on calling times with your lawyer. 5. **Immediate opt-out capture:** Confirm that your voice prompt recognises opt-out requests, logs the outcome, and stops further automated attempts to that record. 6. **Data retention and DPO review:** Establish clear retention schedules for call recordings and transcripts with your Data Protection Officer, applying GDPR data minimisation rules. 7. **Test calls:** Run tests across internal numbers to confirm prompt logic and disclosure statements as outlined in our guide on how to test an AI voice agent. 8. **Operator escalation paths:** Test call transfer protocols to ensure the voice agent transfers the caller to a human representative when requested, using methods covered in our AI voice agent human handoff guide. ## Regulatory environment in other international markets Voice AI rules vary across international borders. In India, commercial calls are regulated by TRAI rules and the national DND preference registry; check locally before dialing. ## DeepAgent plans and implementation pricing DeepAgent provides subscription tiers to deploy conversational voice systems. * **Starter:** EUR 99 per month * **Pro:** EUR 299 per month * **Growth:** EUR 500 per month * **Scale:** EUR 799 per month * **Enterprise:** Custom quote Prices exclude VAT. Annual billing saves 17%. To try it: 30 minutes free, no card. You can explore the complete feature comparison on our pricing page. To launch outbound campaigns via the self-service platform, users must verify that they hold explicit consent for the contacts they intend to dial. ## Frequently asked questions about AI calling rules ### Is it legal to call customers with an AI voice agent? Yes, provided you satisfy applicable telemarketing statutes and data protection laws. In the United States, telemarketing calls using synthetic voices require prior express written consent under the TCPA. In the United Kingdom, automated marketing calls require prior consent under PECR. In the European Union, Article 50 of the EU AI Act requires the system to inform the person immediately that they are speaking with an artificial voice. ### Do I need consent for B2B AI calls? Yes, depending on the jurisdiction and phone line. In the United States, calls that use an AI-generated voice need prior express consent under the TCPA unless an emergency purpose or exemption applies, and telemarketing calls need prior express written consent. In the United Kingdom, live calls to corporate numbers must respect the Corporate Telephone Preference Service (CTPS), while automated calls still require prior consent under PECR. ### Does the AI have to disclose that it is an artificial voice? Yes. Under Article 50 of the EU AI Act, providers and deployers must inform natural persons that they are interacting with an AI system. ### Can I use an AI agent to call people who submitted a web form? Yes. When a prospect submits an online form requesting a quote or callback and provides consent to be contacted, an AI voice agent can initiate that callback immediately. Teams using DeepAgent confirm explicit consent before launching outbound campaigns to inbound form leads. ### What happens if someone asks not to be called again during an AI call? The call outcome must be recorded as an opt-out, and the number must be added to your internal exclusion list immediately. DeepAgent captures call outcomes and transcripts so operators can remove objecting contacts from future dialing lists. ## Getting started with compliant voice automation Operating voice agents requires transparent AI disclosure, documented consent, and regular transcript reviews. Verify list sources and system prompts before scheduling campaigns. Talk to sales → · Create your agent →