How the FCC 1:1 Consent Rule Changes Lead Buying

The FCC's 1:1 consent rule caused more confusion in the lead industry than any regulation in the last decade. Agents panicked. Forums filled with misinformation. Lead vendors mostly hoped no one would ask too many questions.

Here's what you need to know: the FCC's 1:1 consent rule was struck down by the courts and never took effect. The multi-company consent model — where a consumer opts in on one form and multiple companies can contact them — remains legally permissible. But that doesn't mean the underlying compliance risks have disappeared.

This guide explains what the 1:1 consent rule was, why the courts killed it, what the ruling means for lead buyers in 2026, and what you should still be doing to protect yourself.

Disclaimer: This is educational content, not legal advice. Compliance requirements are complex and evolving. Consult a licensed attorney for legal questions specific to your situation. For specialized TCPA and lead generation counsel, see Henson Legal and Mac Murray & Shuster LLP.

What Was the FCC 1:1 Consent Rule?

In December 2023, the FCC adopted rules to close what it called the "lead generator loophole." Here's the before-and-after they were proposing.

The existing model (still in effect today): A consumer fills out a form on a lead generation website — say, a "Compare Insurance Quotes" page. They check a single consent box that says something like: "I agree to be contacted by our marketing partners." That one checkbox authorizes the lead generator to sell the consumer's information to multiple companies. Every one of those companies can call, text, and email the consumer based on that single, broad consent — as long as the consent clearly identifies who may contact them.

What the rule would have required: The consumer would have had to give specific consent to each individual company that would contact them. No more blanket "marketing partners" language. The rule had three requirements:

1. One-to-one consent: Written consent limited to a single, identified seller at a time
2. Logical and topical association: The seller had to be logically related to the website where the consumer gave consent
3. Clear and conspicuous disclosure: Consent had to be prominently displayed, not buried in fine print

Why the FCC proposed it: Consumer complaints about unwanted calls were at record levels. A consumer who thought they were getting one quote would receive calls from a dozen companies within minutes. The rule aimed to put consumers back in control of who contacts them.

The rule was scheduled to take effect on January 27, 2025. It never did.

What Happened: The 11th Circuit Killed the Rule

The Insurance Marketing Coalition (IMC) challenged the rule in the Eleventh Circuit Court of Appeals. What happened next came as a one-two punch:

First — the FCC stayed its own rule. On January 24, 2025 — three days before the effective date — the FCC issued a 12-month stay, citing respect for the court's evaluation and concerns from businesses about implementation timelines.

Then — the 11th Circuit vacated the rule entirely. The court issued a 26-page opinion concluding the FCC overstepped its statutory authority. The key finding: Congress defined "prior express consent" in the TCPA, and the FCC tried to redefine it into something more restrictive than Congress intended.

The court's language was direct:

"In its attempt to 'implement' the TCPA, the FCC overstepped statutory boundaries... Rather than respecting the line that Congress drew, the FCC stepped right over it."

Judge Luck noted during oral arguments:

"Just because you [the FCC] are ineffective at enforcing the authority doesn't mean you have the right to limit one's right, a statutory right, or rewrite those rights to limit what it means."

The court held that under common law principles, a consumer can give consent to receive calls from multiple entities at once, as long as the consent is clear and unmistakable. The "logically and topically related" restriction was similarly struck down as exceeding the FCC's authority.

Bottom line: The 1:1 consent rule is dead. As DNC.com put it: "The 1:1 rule isn't just on hold — it's DEAD and gone."

Why "Dead Rule" Doesn't Mean "Safe"

This is where most commentary gets it wrong. The 1:1 rule being vacated does not mean lead buyers can relax on compliance. As TCPA attorney John Henson warns: "Insurance agents are not 'safe' now that the FCC's One-to-One Consent rule is no more."

The lead practices that were risky before the rule was proposed are still risky today. Here's why:

The TCPA is fully in force. The core TCPA requirements — consent for calls, DNC compliance, calling hours, opt-out handling — were never affected by the 1:1 rule. These carry penalties of $500-$1,500 per call and average class action settlements of $6.6 million.

DNC violations are the bigger threat. American Income Life — an insurance company that likely had consent meeting even the 1:1 standard — still paid $14 million to settle DNC violations involving 49,695 phone numbers. Having great consent doesn't protect you if you skip DNC scrubbing.

Congress could act. The courts struck down the FCC's attempt to create the rule administratively, but Congress has the power to pass similar legislation. Consumer advocacy groups like the NCLC are actively pushing for stricter rules. The lead generation industry's best insurance against future regulation is self-regulation and consumer respect.

Carrier rules still apply. T-Mobile, AT&T, and Verizon still require one-to-one opt-in for SMS traffic through their Campaign Registry (TCR) policies. The carriers enforce their own standards regardless of the FCC ruling. If you're texting leads, carrier requirements effectively mandate something close to 1:1 consent for SMS.

State laws may fill the gap. Several states have adopted or are considering their own consent requirements that go beyond federal TCPA. See our state compliance guide for details.

What This Means for Lead Buyers in 2026

The practical impact of the ruling falls into several categories.

The multi-company consent model survives. Lead generators can continue using forms where a consumer consents to be contacted by multiple companies — as long as the consent language clearly identifies who may contact them. The partner list model is legally permissible.

Lead pricing stabilizes. The industry had been bracing for significant price increases as lead generators retooled for 1:1 consent. With the rule vacated, the economics of shared leads remain viable. Shared leads aren't going away.

Aged leads are unaffected. Leads generated at any point — whether before, during, or after the 1:1 rule debate — carry the same consent framework they always did. The consent was valid when the consumer gave it. For compliance details specific to aged leads, see our DNC compliance guide.

Vendor compliance questions remain relevant. Even without the 1:1 rule, you should still ask your vendor:

• What consent language does the consumer see?
• Can you show me the full user flow from ad to form submission?
• Does the consent cover the specific product/service I'm selling?
• Is the consent documented with timestamps?

These questions aren't about 1:1 compliance — they're about basic TCPA compliance, which is fully in force.

How This Affects Different Industries

Insurance Lead Buying

Insurance was the industry most affected by the 1:1 rule debate — the Insurance Marketing Coalition brought the lawsuit that killed it. With the rule vacated, the insurance lead marketplace returns to its prior model: shared leads with multi-company consent remain standard.

The silver lining of the debate: Many lead generators upgraded their consent forms during the 1:1 preparation period. Better consent language, clearer disclosures, and improved documentation are now industry standard — even though they weren't legally required. Lead quality improved as a side effect.

Medicare leads still face additional CMS compliance requirements that layer on top of TCPA. The 1:1 ruling doesn't change CMS rules.

Mortgage Lead Buying

Mortgage lead buying was already heavily regulated through TILA, RESPA, fair lending laws, and state licensing. The 1:1 rule's demise doesn't change any of these requirements. Rate comparison sites can continue their existing consent models, but mortgage-specific compliance remains strict.

Solar and Home Improvement

Solar and home improvement lead buying have fewer industry-specific regulations, making TCPA the primary compliance concern. The 1:1 ruling means these industries can continue with multi-company consent forms.

The Real Compliance Risks for Lead Buyers (With or Without 1:1)

The 1:1 rule consumed enormous industry attention, but the real threats to lead buyers have always been elsewhere. Here's what actually gets companies sued:

DNC violations. Calling numbers on the Do Not Call registry. This is the most common and most expensive violation category. Scrub every list against federal and state DNC registries every 31 days — it's a legal requirement.

Reassigned numbers. Nearly 100,000 phone numbers are reassigned daily. Consent is tied to the person, not the number. One investment bank paid $3.75 million over calls to reassigned numbers.

Consent that doesn't match the calling method. Using an auto-dialer, prerecorded voice, or AI-generated voice requires prior express written consent — a higher standard than basic consent. If your vendor's consent form doesn't specifically authorize these technologies, you're exposed.

Vendor supply chain failures. QuoteWizard paid $19 million because they couldn't trace consent through their lead supply chain. MediaAlpha and Assurance IQ paid a combined $145 million for deceptive lead generation practices. When you buy leads, you're buying the lead generator's compliance processes. As the FTC has stated: "We're not just looking at the people who generate bad traffic, but looking at the people who purchase that bad traffic."

State mini-TCPA laws. Florida, Texas, Georgia, Oklahoma, and others have passed their own telemarketing statutes — often stricter than federal TCPA. State and federal penalties can stack: up to $3,000 per call.

What Smart Lead Buyers Should Do Now

The 1:1 rule is dead, but smart lead buyers use this moment to strengthen their compliance posture — not relax it.

FAQ

Is the FCC 1:1 consent rule still in effect?

No. The 11th Circuit Court of Appeals vacated the rule in January 2025, finding the FCC exceeded its statutory authority. The rule never took effect. The multi-company consent model — where a consumer consents on one form to be contacted by multiple identified companies — remains legally permissible. However, the underlying TCPA requirements are fully in force, and Congress could pass similar legislation in the future.

Does the ruling mean I don't need to worry about consent?

Absolutely not. The TCPA still requires prior express consent for telemarketing calls and prior express written consent for auto-dialer calls, prerecorded messages, and marketing texts. DNC compliance is still mandatory. Penalties are still $500-$1,500 per violation. The 1:1 ruling only means that a consumer can consent to multiple companies on a single form — it doesn't weaken any other TCPA requirement.

Are aged leads affected by the 1:1 ruling?

Aged leads are unaffected. The consent framework for aged leads was never contingent on the 1:1 rule. What matters is that proper consent was obtained when the lead was generated, that the consent matches your calling method, and that you DNC scrub before calling. For full aged lead compliance guidance, see our DNC compliance guide.

Should I still push for 1:1 consent from my vendors?

It's a best practice but not a legal requirement. Leads with single-company consent tend to convert better (less competition, more intentional opt-in) and carry less litigation risk. Carrier requirements for SMS still effectively mandate 1:1 consent for text messaging. If your budget supports exclusive or single-consent leads, they're worth the premium — but multi-company consent leads remain fully legal and effective.

Could the 1:1 rule come back?

Yes — but through Congress, not the FCC. The court ruled the FCC lacked authority to create the rule administratively, but Congress has the power to pass similar legislation. Consumer advocacy groups are pushing for it, and DNC.com notes that the lead generation industry should self-regulate to reduce the political pressure for stricter laws. Smart lead buyers operate as if stronger regulation is coming — because historically, it always does.

The Bottom Line

The FCC 1:1 consent rule is dead. Lead buying is alive and well. But the TCPA, DNC requirements, state mini-TCPA laws, and consent documentation obligations remain fully in force — and they carry penalties that have bankrupted companies.

The agents who thrive aren't the ones celebrating looser rules. They're the ones who use this moment to build stronger compliance systems, demand better documentation from vendors, and operate with the discipline that protects their business regardless of what regulators do next.

Ready to work with a compliant lead source? Browse aged leads at AgedLeadStore — DNC-scrubbed, transparent sourcing, no contracts. Use promo code BILLRICE for a discount on your first order.