A federal rule meant to close the "one checkbox, dozens of marketers" loophole in lead-buying was scheduled to take effect January 27, 2025. It never did — a federal appeals court struck it down three days before the deadline, and the FCC hasn't replaced it since. **The old multi-seller consent standard most businesses assumed was gone is still the law governing every purchased lead you call or text in 2026.**
Did the FCC's One-to-One Consent Rule Take Effect in 2026?
No. The rule would have required a business to get consent specific to itself before contacting a lead — closing the practice where a single web-form checkbox authorized calls and texts from every "marketing partner" named in fine print, sometimes dozens of unrelated companies off one form. It was set to take effect January 27, 2025. Three days earlier, the Eleventh Circuit Court of Appeals vacated it in Insurance Marketing Coalition Ltd. v. FCC, ruling the FCC exceeded its authority by requiring "prior express consent plus" — something the statute doesn't demand — and that the rule would have barred calls even where a consumer "clearly and unmistakably stated" they'd accept marketing from multiple companies (Consumer Financial Services Law Monitor, 2025). The rule was dead before its start date arrived.
What Was the Rule Actually Trying to Fix?
The target was the lead-generation industry's oldest trick: bundled consent. A consumer fills out one form — requesting an insurance quote, a mortgage rate, a home-repair estimate — and a checkbox buried in the terms authorizes "our marketing partners," a list that can run to dozens of companies the consumer has never heard of. Under that standard, one signature is valid consent for every name on the list, and a lead broker can resell the same contact to multiple buyers who each get to call or text it legally. The one-to-one rule would have required separate consent, tied to each business by name, before that business could make contact at all.
What's the Actual Consent Standard Right Now?
Pre-2023 prior express written consent (PEWC) — the standard that predates the one-to-one rule entirely. The FCC formally reinstated it on August 29, 2025 to match the court's ruling, and as of a March 2026 legal update, no rehearing or Supreme Court petition had been filed to bring the one-to-one rule back (ActiveProspect, 2026). PEWC still requires consent be in writing, signed, and disclose clearly what a consumer is agreeing to — a blank checkbox with no disclosure was never valid consent under either standard. What PEWC allows, and the one-to-one rule would have banned, is multi-seller consent: one signed form naming several companies, or a defined category of partners, as long as the disclosure is clear.
| What a lot of 2026 compliance guides say | What's actually true | |
|---|---|---|
| Effective date | Took effect January 27, 2026 | Never took effect — vacated January 24, 2025, three days before its original January 27, 2025 date |
| Who it requires consent from | Separate consent per business, per contact | Reversed on appeal — courts and the FCC reinstated the pre-2023 multi-seller standard |
| Buying leads from a marketplace or aggregator | Restricted to one seller per consent form | Still lawful if the form's disclosure is clear and the consent is signed |
| What governs a purchased lead today | The one-to-one rule | Pre-2023 PEWC, formally reinstated by the FCC August 29, 2025 |
Does This Change Anything About Using AI to Follow Up on Leads?
Not the legal analysis. An AI voice agent or automated text follow-up is judged against the exact same consent record a human caller would need — the FCC's February 2024 ruling settled that an AI-generated voice counts as an "artificial voice" requiring the same consent as a prerecorded call, one-to-one rule or not. What AI changes is the stakes of getting that record wrong. A system that can call or text a purchased lead within seconds of it landing in your CRM can also work through a bad list — thin, undocumented, or expired consent — at a volume and speed no single employee dialing by hand ever could. The speed is the value. It's also exactly why a lead's consent paperwork is worth checking before it's plugged into anything automated, not after a complaint shows up.
Is Washington or Another Northwest State Stricter Than Federal Law?
Some are. Washington passed its own telemarketing law, effective June 9, 2022, that bars calls before 8 a.m. or after 8 p.m. regardless of consent — an hour tighter than the federal TCPA's 9 p.m. cutoff — independent of anything the FCC does with the one-to-one rule (Manatt, 2022). For a business running AI-driven follow-up calls or texts into Seattle or Western Washington on top of a Montana or Idaho base, the calling-hours rule that actually binds a given contact is whichever is stricter, state or federal, not just the federal default.
When None of This Actually Matters for Your Business
If every lead you call started with the person calling you, filling out your own contact form, or booking through your own site, this whole rule change — and non-change — is close to irrelevant. An established business relationship and consent from your own direct interactions was never what the one-to-one rule targeted, and it isn't what pre-2023 PEWC governs either. Both are aimed squarely at purchased and aggregated leads that arrive carrying someone else's consent language. A contractor booking every job off referrals and their own website doesn't need to think about any of this. A business buying leads from an insurance, mortgage, or home-services marketplace and running that list through automated text or AI voice follow-up does.