The Assumption, and Why It's Wrong
Ask a room full of agency BD reps whether TCPA applies to their outbound, and a good number will say some version of "no, we're calling businesses, not consumers." That belief is common enough to be worth naming directly, and it does not hold up. dnc.com's compliance FAQ states it plainly: "B2B calls and texts are subject to the same TCPA wireless restrictions as Business to Consumer (B2C)." An automated call or text to a wireless number carries the same consent requirement no matter which kind of entity is on the other end.
This matters more than it might sound like it should, given how much agency new-business outreach happens exactly this way. Only 59% of agencies have even tried outbound as a growth channel, and just 9% call the results very effective, per SparkToro's 2025 survey of digital agencies. A program that's already underperforming does not need a TCPA exposure problem stacked on top of it.
What Actually Requires Consent
The trigger is the method, not the recipient. An autodialed call, a prerecorded voice message, or an automated text sent to a wireless number all require prior express written consent (PEWC) before contact. PEWC is a documented, specific authorization obtained in advance, not a verbal assumption that "reaching out to another business is fair game" or a general belief that a purchased contact list was sourced compliantly.
SMS Carries the Identical Rule
dnc.com's language covers "B2B calls and texts" together, not calls alone. That is directly relevant to any agency BD program that has shifted part of its cadence toward text messages, whether as the primary channel or layered alongside calling and email. Moving outreach from a call to a text does not relax the consent requirement. It changes what a defensible consent record needs to look like for that specific channel, covered fully in the companion consent-documentation guide.
This is the structural reason VA Horizon's own agency BD outreach runs the way it does: every conversation happens over SMS between a Human + AI SDR and a prospect who opted into that specific exchange, on the VA Horizon Private CRM, with the full conversation preserved as a timestamped transcript. The channel being text-based doesn't exempt it from the rule above. It gives every conversation a retrievable record instead of a verbal claim.
What the Exposure Actually Looks Like
TCPA violations carry real dollar figures, not abstract risk. Penalties run from $500 per call for a negligent violation up to $1,500 per call for a willful one, and the FTC's Telemarketing Sales Rule separately allows penalties up to $51,744 per violation. Florida layers its own mini-TCPA (the FTSA) on top, adding $500 to $1,500 per call or text with a private right of action, meaning a recipient can sue directly rather than waiting on a regulator. Run a 1,000-call automated campaign without documented consent and the cumulative exposure lands somewhere between $500,000 and $1.5 million.
Volume is exactly what most agency BD programs are chasing when they're trying to escape referral dependence. That is precisely the moment a consent gap turns from a theoretical risk into a real one.
What to Check in Your Own Program
- Confirm whether your automated calls or texts to wireless numbers have documented prior express written consent behind them, not an assumption that a business contact is exempt.
- If your cadence recently added SMS, confirm consent documentation moved with it. dnc.com treats calls and texts the same.
- Know your per-call and per-violation exposure before you scale volume, not after a complaint arrives.
- If you're targeting Florida contacts specifically, budget for the state's own mini-TCPA exposure on top of the federal figures.
- If you outsource outreach to a vendor, ask directly what consent record they can produce for a specific contact, not just a general compliance assurance.
What this means for you
- B2B calls and texts are not exempt from TCPA. dnc.com states plainly that both carry the same wireless-consent restrictions as consumer outreach.
- The trigger is the method (autodialed, prerecorded, or automated) not who's on the other end. Prior express written consent is required regardless of B2B status.
- SMS carries the identical wireless-consent requirement as calls, per dnc.com. Shifting a BD cadence to text doesn't remove the requirement, it changes what the consent record needs to show.
- Penalties run $500 to $1,500 per call under TCPA, up to $51,744 per violation under the FTC's Telemarketing Sales Rule, and Florida's FTSA adds its own $500 to $1,500 per call or text with a private right of action.
Sources
The external data in this guide draws on the sources below. Figures described in the text as estimates or industry triangulations are directional and are not attributed to a single dataset.
- dnc.com, Are B2B Calls Exempt From TCPA Regulations?
- LeadCompliant, Business-to-Business Telemarketing Rules
- SparkToro / Paddy Moogan, State of Digital Agencies 2025
