Also known as: Telephone Consumer Protection Act · TCPA meaning · TCPA insurance · TCPA insurance coverage · TCPA coverage · TCPA defense coverage · affirmative TCPA endorsement
The federal law restricting autodialed calls, prerecorded voice messages, texts, and unsolicited faxes sent without consent, which creates a per-message class-action exposure that most insurance policies exclude.
The Telephone Consumer Protection Act (TCPA), codified at 47 U.S.C. § 227, restricts how businesses contact consumers. It bars autodialed and artificial or prerecorded voice calls to mobile numbers and residential lines without prior express consent, unsolicited fax advertisements, and telephone solicitations to anyone on the national do-not-call registry. What makes the TCPA an insurance problem rather than just a compliance problem is its private right of action: a plaintiff can recover $500 per violation, which a court may treble to $1,500 per violation if the breach was willful or knowing. Damages accrue per message, so a single misconfigured campaign across a large list compounds into a class action with nine-figure exposure. In response to that litigation wave, most general liability, technology E&O, and cyber forms now exclude TCPA claims through an invasion-of-privacy or statutory-violation exclusion, meaning a claim can land with no coverage at all. Coverage has to be bought back deliberately through an affirmative TCPA endorsement, a provision that names the statute and states what the carrier will pay. Those endorsements vary sharply: some fund defense costs only, under a separate sublimit with no indemnity for statutory damages; others cover defense and settlement but carry a dedicated retention and conditions requiring documented consent capture and do-not-call scrubbing. The statute also provides an affirmative defense for do-not-call claims where a defendant has established and implemented reasonable practices to prevent violations, which is why underwriters scrutinize consent records before offering any coverage.
Source: 47 U.S.C. § 227 (Cornell LII)
TCPA stands for the Telephone Consumer Protection Act, a 1991 federal law codified at 47 U.S.C. § 227. It restricts autodialed calls, artificial and prerecorded voice messages, text messages, and unsolicited fax advertisements sent without the recipient's prior express consent, and it underpins the national do-not-call registry.
The Federal Communications Commission writes and enforces the TCPA rules, and state attorneys general can bring actions on behalf of residents. In practice most TCPA exposure comes from neither: the statute gives private plaintiffs their own right of action, so the bulk of financial risk arrives as class-action litigation brought by consumers and their counsel rather than as a regulatory penalty.
Usually not. Most general liability, technology E&O, and cyber liability forms carry an invasion-of-privacy or statutory-violation exclusion that sweeps in TCPA claims, and many carriers added explicit TCPA exclusions after the wave of class-action litigation. If you need the coverage, it generally has to be requested and negotiated as an affirmative endorsement at quote or renewal.
Some will cover defense costs, far fewer will indemnify the statutory damages themselves. Many affirmative endorsements are defense-only, and some carriers take the position that statutory penalties are uninsurable in certain states. When reviewing an offer, confirm in writing whether the sublimit applies to defense alone or to defense and settlement combined.
It is an endorsement that explicitly grants coverage for TCPA claims on a policy that would otherwise exclude them. Rather than relying on silence or arguing that a claim falls outside an exclusion, the endorsement names the statute and sets out what the carrier covers, typically defense costs and sometimes settlements, subject to a sublimit and a dedicated retention.
Any company that sends outbound messages at scale: SMS and notification platforms, marketing automation and CRM tools, lead-generation and sales-engagement products, fintech and healthcare apps sending reminders, and anyone using a dialer or prerecorded voice. If your product sends messages on a customer's behalf, you may also face claims arising from their campaigns, which raises the stakes on both your coverage and your consent-capture controls.
Definitions are educational and may be modified by your specific policy language, endorsements, and state rules. For regulatory guidance, refer to the California Department of Insurance or the NAIC.
Reviewed and maintained by RiskCube's licensed brokerage team.