The FCC's One-to-One Consent Rule Is Dead: What Lead Generators Actually Need to Know in 2025

Background: What Was the One-to-One Consent Rule?

In December 2023, the FCC adopted new rules aimed at closing what it called the "lead generator loophole" in the TCPA.

The problem the FCC was trying to solve: A consumer visits a comparison shopping website, fills out a form, and checks one box agreeing to be contacted—and then receives 50 phone calls from 50 different companies within 24 hours. The consumer had no idea their information was going to 50 sellers. They just wanted a roofing quote.

The FCC's proposed fix: One-to-one consent. Under the new rule, each company that wanted to contact a consumer would need its own individual, explicit consent. You could no longer get blanket consent for an entire partner network through a single form submission.

For lead generators selling to multiple buyers, this was potentially catastrophic. If you run a roofing lead gen site and sell leads to 50 roofing companies, you'd need the consumer to individually opt in to each one. The economics of that model collapse immediately.

The rule was set to take effect January 27, 2025.

It never made it.

---

What Happened: The 11th Circuit Killed It

On January 24, 2025—three days before the rule was set to go live—the U.S. Court of Appeals for the Eleventh Circuit issued its decision in Insurance Marketing Coalition v. FCC.

The court's ruling: The FCC exceeded its statutory authority. The one-to-one consent requirement was inconsistent with the TCPA's ordinary meaning of "prior express consent." The court found that consumers can validly provide "clear and unmistakable" consent to receive calls from multiple sellers through a single form submission—the FCC couldn't unilaterally narrow that definition without Congressional authorization.

The Eleventh Circuit vacated the rule entirely and remanded it to the FCC.

In April 2025, the FCC announced it would not challenge the ruling.

On August 29, 2025, the FCC formally reinstated the prior standard—the pre-one-to-one rules that had governed TCPA consent since the law was enacted.

The one-to-one consent rule is officially, formally, permanently dead (at least in its current form).

---

What This Means for Lead Generators (The Good News)

The blanket multi-seller consent model is still legal.

Here's what you can still do:

Multi-seller consent disclosure (still valid):

"By clicking 'Get Quotes,' you consent to receive calls and text messages from [Your Company] and its network of service providers at the phone number provided, including via automated dialing systems. Consent is not required to purchase."

You can still list a category of partners ("contractors in our network") rather than naming every individual company.

You can still use a clickthrough link to a list of partners, rather than presenting a checkbox for each one individually.

This is the model that built the lead generation industry—and the 11th Circuit confirmed it's consistent with the TCPA.

---

What Hasn't Changed: The TCPA Is Still Very Much Alive

Don't mistake the death of one-to-one consent for the death of TCPA compliance requirements. The core law is unchanged, and it still carries $500–$1,500 per-violation exposure.

What is still fully required:

1. Prior Express Written Consent (Still Mandatory)

Before making any autodialed or prerecorded marketing call or text, you must have:

• Written consent from the consumer (a checkbox, click-to-agree, or electronic signature)
• Clear disclosure that they will receive marketing calls/texts
• Identification of the company (or companies) that will contact them
• Acknowledgment that consent is not a condition of purchase

This hasn't changed. The only thing that changed is you don't need one consent document per buyer.

Compliant consent language example:

"By clicking 'Submit,' you provide your prior express written consent to receive marketing calls and texts from [Your Company] and our network of home improvement partners at the phone number you provided, including via automated technology. Consent is not a condition of purchase. Msg/data rates may apply."

Still non-compliant:

• Hiding consent in Terms of Service (not clear and conspicuous)
• Using pre-checked consent boxes (not affirmative action)
• Generic "by using this site" language with no specific reference to calls/texts

2. The Do Not Call Registry (Still Applies)

Phone numbers on the National DNC Registry cannot be called for marketing purposes unless you have prior express written consent or an established business relationship.

Scrub leads against the DNC list before selling. Violations: $50,120 per call.

3. Opt-Out Requests (Stricter Since April 2025)

The biggest new change that actually took effect: The FCC's Consent Revocation Rule, effective April 11, 2025.

This rule significantly changes how opt-outs must be handled.

---

The Rule That DID Take Effect: Consent Revocation (April 11, 2025)

While the one-to-one consent saga was dominating headlines, a different FCC rule quietly took effect on April 11, 2025—and it has real operational implications for lead generators and their buyers.

Key requirements:

1. Consumers can revoke consent through any reasonable method

You can no longer designate an exclusive opt-out channel. Previously, many companies would specify: "To opt out, text STOP to this number only."

Now, consumers can revoke via:

• Texting "STOP," "QUIT," "END," "CANCEL," or "UNSUBSCRIBE" in response to any text
• Verbally requesting removal during a call
• Submitting a request through your website
• Any other reasonable communication

If a consumer tells a sales rep "take me off your list" during a call, that counts as a valid revocation—even without using a formal opt-out link.

2. You must honor revocations within 10 business days

After receiving an opt-out request, you have a maximum of 10 business days to stop all autodialed/prerecorded marketing calls and texts.

3. One post-revocation clarification text is allowed

You may send a single confirmation text (within 5 minutes of receiving the revocation) to clarify the scope of the opt-out. It cannot contain any marketing content.

What this means for your operation:

• Your suppression list must be updated within hours of receiving opt-out requests, not days
• Your buyers need to know about this rule—when a lead they purchased requests removal, that revocation may apply to your consent as well
• If you have a call center or VA qualifying leads, they need to be trained to recognize and log opt-out requests immediately

---

The Consent Landscape Right Now (2025 Summary)

Here's the current state of play for lead generators as of 2025:

---

What Lead Generators Should Do Right Now

1. Audit Your Current Consent Language

Review every form, landing page, and lead capture asset. Make sure your consent language is:

• Visible and conspicuous (not buried below the fold or in small print)
• Specific about calls/texts (not generic "contact" language)
• References your company and partner network
• Confirms consent is not required to purchase

The one-to-one rule is dead, but poorly written consent language still creates TCPA exposure. The standard for "clear and unmistakable" consent hasn't changed.

2. Build an Any-Method Opt-Out System

You need a suppression list that can be updated from multiple input sources:

• SMS opt-outs (STOP texts to any number in your system)
• Web form submissions
• Call center logs
• Email requests

Use your CRM (Airtable, HubSpot) to maintain a unified suppression list. Check every lead against it before selling. Update it within hours of receiving opt-out requests.

3. Update Your Buyer Terms of Service

Your ToS should include language clarifying:

• Buyers are responsible for their own TCPA compliance when contacting leads
• Buyers must honor revocation requests and maintain their own suppression lists
• Buyers agree to comply with the consent revocation rule effective April 11, 2025
• Buyers indemnify you against claims arising from their outreach practices

4. Store Consent Records

Document every consent: timestamp, IP address, phone number, and exact consent language shown at the time of submission. The FTC's Telemarketing Sales Rule requires records for at least 5 years.

Tools: TrustedForm (ActiveProspect) or Jornaya both automate this at scale.

5. Train Anyone Who Handles Lead Calls

If you or your team ever calls leads to qualify them, every person on the phone needs to know:

• How to recognize and log an opt-out request during a call
• That verbal opt-outs count as valid revocations under the new rule
• The 10-business-day honor window starts the moment the request is received, not when it gets logged

---

The Bottom Line

The one-to-one consent rule is dead. That's genuinely good news for lead generators who sell to multiple buyers—the blanket multi-seller consent model that built this industry is still legal.

But this is not a free pass on TCPA compliance. The core law is unchanged, the DNC registry is unchanged, and the new opt-out rules are stricter than they were before.

The lead generators who will get sued are not the ones who failed to implement one-to-one consent (that rule never existed). They're the ones who have vague consent language, no suppression lists, and untrained teams that ignore opt-out requests.

Fix those things, and you're in a strong position.

Note: This post is for informational purposes only and does not constitute legal advice. TCPA law is complex and fact-specific. Consult a qualified attorney before making compliance decisions for your business.