Is AI Cold Calling Legal? TCPA, GDPR & B2B Compliance Guide 2026

The TCPA is most restrictive for consumer (B2C) calling, where prior express written consent is required for automated calls to mobile numbers. For business phone lines — the numbers on a company’s website, in their email signature, on their LinkedIn — the rules are materially different. You do not need prior consent to call a business phone number for business purposes.

That said, there are rules you must follow regardless of B2B status:

• Calling hours: You must call only between 8am and 9pm in the prospect’s local timezone.
• Opt-out: You must honor opt-out requests immediately and never redial a number that has opted out.
• National DNC Registry: Business numbers listed on the National Do Not Call Registry must not be called.
• AI disclosure: Best practice (and required in some states) is to disclose at the start of the call that the caller is AI. This also reduces legal risk significantly.

DialsDone enforces all of these automatically. Calling hours are timezone-aware. Opt-outs are logged and never redialed. AI disclosure is included by default on every call. See our full TCPA compliance documentation for details.

If you’re calling prospects in EU member states, GDPR applies. Under GDPR, cold calling to business contacts is generally permitted under the “legitimate interest” legal basis — you have a genuine business reason to contact the prospect, and the contact is relevant to their role or business.

Key GDPR requirements for AI cold calling to EU contacts:

• Identify that the caller is AI at the start of the call.
• Provide a clear opt-out mechanism on every call.
• Honor opt-outs immediately and permanently.
• Maintain records of consent (or legitimate interest basis) for audit purposes.
• Do not call contacts who have previously objected to being called.

DialsDone handles opt-out logging and call transcripts automatically. You are responsible for ensuring your contact lists were lawfully obtained under a legitimate interest basis for your specific use case.

Some states — California being the most prominent — require disclosure that a caller is AI. California’s AI disclosure laws apply even to B2B calls. Other states are actively legislating similar requirements. The legal landscape is evolving rapidly as AI calling becomes more common.

The safest and most professional practice is to always disclose that the caller is AI at the start of every call, regardless of jurisdiction. DialsDone includes an AI disclosure line by default in every call script — this protects you legally and, counterintuitively, often improves response rates because prospects appreciate the transparency.

The National Do Not Call Registry is maintained by the FTC. While business phone lines are generally not registered on the DNC, some are — and calling a registered number, even for B2B purposes, creates legal exposure. You are responsible for scrubbing your call lists against the DNC Registry before uploading them to DialsDone.

In addition to the national registry, DialsDone maintains a platform-level internal do-not-call list. Any prospect who opts out during a call is added to this list automatically and will never be redialed — including on future campaigns you run on the platform.

DialsDone is built so that compliance is the default, not an afterthought. Here’s what happens automatically on every campaign:

• Timezone-aware calling hours: The AI detects the prospect’s local timezone and only dials during the hours you configure (defaulting to 8am–9pm local).
• Built-in opt-out on every call: Every call includes a clear opt-out offer. Prospects who opt out are immediately added to the platform DNC list.
• Permanent DNC list: Opted-out numbers are never redialed on any future campaign.
• Full call recordings and transcripts: Every call is recorded and transcribed for audit trail purposes.
• AI disclosure included by default: Every call script includes an AI disclosure line at the start.

You remain responsible for ensuring your contact lists are lawfully obtained and DNC-scrubbed before upload. We recommend consulting your legal team for your specific industry and jurisdiction. See our FAQ and features page for more detail.