Compliance Guide
DNC registry compliance for AI voice agents.
Do-Not-Call rules apply to AI voice agent campaigns just as they do to traditional telemarketing. Here's what the National DNC Registry requires, how internal suppression lists work, and how Workforce Wave helps enforce them.
Last reviewed: May 2026
DNC Compliance Framework
Six components of a DNC-compliant calling program.
DNC compliance is not a single check — it's a multi-layer framework covering federal lists, state lists, internal suppression, and ongoing maintenance.
National DNC Registry Check
Calling lists must be checked against the National DNC Registry using a subscription no more than 31 days old. Numbers registered for 31+ days must be suppressed from telemarketing calls.
State Registry Compliance
Many states operate their own DNC registries with independent requirements. Multi-state calling programs must check all applicable state lists, not just the federal registry.
Internal Suppression List
Any consumer who requests not to be called again must be added to your company-specific internal DNC list. This obligation applies even if the number is not on the National Registry.
Established Business Relationship (EBR)
An existing customer relationship may exempt a number from National DNC requirements for 18 months after the last purchase, or 3 months after an inquiry. EBR rules are narrow — legal counsel should confirm applicability.
Scrubbing Cadence
Best practice is monthly scrubbing against the National Registry. Some state registries require more frequent access. Scrubbing more frequently than required reduces exposure during high-volume campaign periods.
Opt-Out Honoring
Federal rules require honoring DNC requests within 30 days. State laws may require faster compliance. A campaign system should suppress a number immediately upon receiving an opt-out request, not at next scrubbing cycle.
The two-list framework: National DNC and internal suppression.
A compliant outbound calling program must maintain two distinct suppression mechanisms that operate independently of each other. The first is compliance with the National Do-Not-Call Registry — the federal database administered by the FTC under the Telemarketing Sales Rule (TSR) and reinforced by the TCPA. The second is an internal company-specific suppression list that captures opt-outs and do-not-call requests directed specifically at your business.
The National Do-Not-Call Registry
The National DNC Registry allows any consumer to register a residential or wireless phone number to opt out of unsolicited telemarketing calls. Businesses engaging in telephone solicitations must subscribe to the registry, download the list for their geographic area(s), and scrub their calling lists against it before each campaign. A number that has been registered for at least 31 days must be suppressed from telemarketing calls.
The 31-day window means a business must use a version of the list that is no more than 31 days old. In practice, this requires active management: lists downloaded more than 31 days ago are stale and cannot be used for compliance purposes. High-volume calling programs typically access the registry more frequently than the minimum required cadence to reduce exposure.
Internal suppression: the company-specific DNC obligation
Separate from and in addition to the National Registry, federal telemarketing rules require companies to maintain an internal DNC list. When a consumer asks your company specifically not to call them — regardless of whether their number is on the National Registry — that number must be added to your internal suppression list and honored within 30 days (often faster under state law). This obligation is permanent: there is no expiration on a company-specific DNC request unless the consumer voluntarily re-establishes contact and consents to be called again.
How Workforce Wave supports DNC suppression
Workforce Wave is built with DNC integration to help businesses prevent calls to registered and suppressed numbers. Calling lists can be validated against the National DNC Registry and your internal suppression list before campaign launch. Opt-out requests made verbally during a call are detected and the number is added to your suppression list in real time — without requiring a manual update after the call. Campaign-level reporting provides visibility into suppressed contacts so your compliance team can audit coverage.
These features support your DNC compliance program but do not replace your obligation to maintain an active National DNC subscription, perform required list scrubbing, and check applicable state registries. Legal counsel should review your specific program design.
Common Questions
DNC registry compliance questions.
What is the National Do-Not-Call Registry?
The National Do-Not-Call Registry is a database maintained by the FTC that allows consumers to register their phone numbers to opt out of unsolicited telemarketing calls. Businesses engaged in telemarketing — including AI-assisted outbound calling — are generally required to check their calling lists against the registry before dialing and to honor registrations within a specified period. Registration on the National DNC Registry does not expire; once a consumer registers, they remain listed unless they remove themselves.
Which businesses must comply with DNC rules?
Most businesses that engage in telephone solicitations — calls that promote the purchase of goods or services — must comply with DNC rules enforced by the FTC and FCC. There are limited exemptions: calls to existing customers with whom the business has an established business relationship (EBR), calls where the consumer has given express written consent to be contacted, calls from certain nonprofits, and purely informational calls (not promoting a purchase) may be treated differently. However, the applicability of exemptions depends on specific facts and legal counsel should confirm whether an exemption applies to your program.
How often must businesses scrub their calling lists against the DNC Registry?
FTC rules require that telemarketers access and use a version of the National DNC Registry that is no more than 31 days old when making calls. As a practical matter, most compliance programs scrub calling lists monthly or more frequently. Accessing the registry requires a paid subscription for commercial telemarketers (small sellers have a free access tier). State DNC registries may have different scrubbing cadences — some states require more frequent access.
What is an internal Do-Not-Call list and when is it required?
An internal do-not-call list — sometimes called a company-specific DNC or suppression list — is a record of individuals who have asked your specific company not to call them again. FTC rules require that companies maintain an internal DNC list and honor requests promptly (within 30 days under federal rules; some state laws require faster honoring). Internal DNC obligations are separate from National DNC obligations: a consumer who is not on the National Registry but who asked you specifically not to call must still be suppressed on your internal list.
Do state DNC registries add obligations beyond the National Registry?
Yes. Many states maintain their own do-not-call registries with independent registration and compliance requirements. A consumer registered only on a state registry — but not the National Registry — still must be suppressed for calls to numbers in that state. State registries often have additional restrictions: different scrubbing cadence requirements, different calling-hour windows, different exemptions, and in some states, stricter penalties than federal law. A multi-state calling program must account for all applicable state registries.
How does Workforce Wave support DNC suppression?
Workforce Wave is built with DNC integration to help prevent calls to registered numbers. Before outbound campaigns, contact lists can be validated against the National DNC Registry and your internal suppression list. Verbal opt-out requests made during a call — such as 'do not call me again' — are detected and the number is added to the internal suppression list automatically. These are technical guardrails that support your compliance program; they do not replace your obligation to maintain a current DNC subscription and conduct periodic list audits.
What are the penalties for DNC violations?
The FTC can seek civil penalties of up to $51,744 per violation under the Telemarketing Sales Rule. The FCC can seek penalties for TCPA-related DNC violations. State attorneys general can bring enforcement actions under state telemarketing laws, which often carry independent penalties. Private rights of action exist under the TCPA for calls to numbers on the National DNC Registry that receive more than one such call in a 12-month period. As with TCPA violations generally, class action suits can aggregate per-call damages rapidly.
Run campaigns with DNC suppression built in.
Workforce Wave helps your outbound AI calling programs validate lists against the National DNC Registry and your internal suppression list before every campaign.