Express Written Consent: What It Is and Why It Matters
If you send marketing texts and you are not crystal clear on express written consent, you are exposed. Not hypothetically. Legally.
The TCPA does not care about intent. It cares about documentation. Either you have valid consent, or you do not. Everything else is noise.
Most businesses think consent means someone gave you their phone number. Or checked a box. Or did not complain. That assumption is how companies end up writing six-figure settlement checks.
Let’s slow this down and decode what consent actually means under the TCPA.
What “Express Written Consent” Actually Means
Under the TCPA, express written consent is permission that meets very specific criteria. It is not casual. It is not implied. It is not verbal.
At minimum, express written consent requires:
- A clear affirmative action by the consumer
- Written authorization, which includes electronic forms and digital signatures
- Disclosure that the consumer agrees to receive marketing messages via autodialed texts
- Identification of the sender
- A statement that consent is not required as a condition of purchase
Miss one of these, and the consent is defective.
That last point matters more than people realize. If your opt-in even hints that texting is required to buy, register, or participate, you are already in trouble.
Why TCPA Consent Is So Strict
Because the penalties are brutal.
The TCPA allows statutory damages of $500 per message. If the violation is deemed willful or knowing, that jumps to $1,500 per message.
One campaign. One list. One mistake.
That is how businesses end up in class actions without ever intending to break the law. TCPA litigation is not about morality. It is about paperwork.
Common Opt-In Mistakes That Break Consent
Here is where most opt-ins quietly fail.
- Pre-checked boxes
- Vague language like “updates” or “notifications”
- Missing brand identification
- No mention of automated or marketing messages
- No record retention
Consent has to be provable. If you cannot show when, where, and how someone opted in, you should assume you cannot defend it.
Screenshots matter. Timestamps matter. The exact language used matters. Courts look at what the consumer saw at the moment they opted in, not what you meant later.
What a Bulletproof SMS Opt-In Looks Like
A compliant opt-in is boring. That is a good thing.
It should clearly say:
- Who is sending the messages
- What type of messages will be sent
- That messages may be sent using automated technology
- That consent is not required to purchase
- How to opt out
Then it requires an unambiguous action. Checking a box. Sending a keyword. Submitting a form with clear disclosures directly adjacent.
No tricks. No clever copy. Compliance beats conversion every time in this case.
Recordkeeping Is Not Optional
Consent is not just collected. It is stored.
You should be able to produce:
- The opt-in language
- The date and time of consent
- The source (web form, keyword, paper form)
- The phone number
- Any confirmation message sent
If your platform cannot do this reliably, that is not a feature gap. That is a liability.
Why This Still Matters in 2025
Enforcement is not slowing down. If anything, it is becoming more aggressive.
Carriers are stricter. Consumers are more aware. Plaintiff firms are more automated than ever.
Express written consent is not a legal technicality. It is the foundation of lawful SMS marketing. Without it, everything else you do is exposed.
If you want scale, you need compliance first. Always.