Outbound Campaign Compliance
Check Security and Privacy Compliances @a user
Draft: For Internal Use
Important Notes:
Internal Requirements: SIP Trunk & EF CC Discussion
- DNC List pre-requirements
- Legality of doing outbound campaigns in Europe and US (and Australia)
- Will this be ready in Q1 2025?
- Discuss the above with @a user
__________________________________________________________________________________________________________________________________________________________
Overview
Campaign Compliance
Initiating campaigns while aligning with the legal standards. More details: Meeting notes | DNC/-List-Management
DNC List
Do Not Call refers to the rules and regulations set by governing bodies that require businesses conducting outbound campaigns to maintain a list of individuals who do not wish to be contacted. This list ensures the business refrains from including those individuals in any future outbound efforts.
Do not call customers on the National Do-Not-Call list unless you have an exemption or consent. DNC prohibit calls to a consumer who has asked not to be called again.
Unlike inbound calls, the use of predictive dialers is regulated by various state and federal laws, depending on the intent of the outbound call. For businesses involved in telemarketing, adhering to Do Not Call registries has evolved from being a voluntary internal practice to a requirement under state and federal regulations.
Telephone Consumer Protection Act
A U.S. federal law was enacted in 1991 to regulate telemarketing communication. The Act (TCPA) restricts the use of pre-recorded voice messages, automated dialing systems, as well as SMS and fax communications.
Key provisions:
Calls can only be made between 8:00 AM and 9:00 PM local time for the recipient.
Obtain prior express consent, honoring Do Not Call (DNC) lists,
Provide a clear opt-out mechanism
Track and maintain records of consent
Telemarketing Sales Rule
The Telemarketing Sales Rule (TSR), enforced by the Federal Trade Commission (FTC), works in conjunction with the Telephone Consumer Protection Act (TCPA) and sets specific guidelines for telemarketing activities.
Key guidelines:
Avoid contacting individuals who have registered their numbers on the National Do Not Call (DNC) list unless they have prior written consent.
Calls can only be made between 8:00 AM and 9:00 PM local time for the recipient.
Disclose certain information during calls, including the seller’s identity, the purpose of the call and any terms related to the promotion/sales.
Prohibits misinterpretation of products, services and offers.
Set payment restrictions for the sale of certain goods and services.
Requires companies to keep business records (sales, customer information) for 24 months.
Exemptions to Federal Regulations
While most organizations that use outbound dialing are subject to the TCPA, TSR, and the Federal Do Not Call Registry, there are certain circumstances where these federal regulations do not apply.
Banks, telephone companies, airlines and non-profit organizations are exempt from TSR. However, third-party companies providing marketing services for these entities are still required to comply with the TSR regulations.
Exemptions include:
Written consent is an exemption to both the National Do-Not-Call list and the state DNC list. An individual can be on the National DNC list; they can be called if they have given written permission to make telemarketing calls.
If someone gives new written consent, they can be removed from the internal opt-out list and resume telemarketing to them.
Established business relationship exemption (EBR) is defined as when the consumer has bought something from the company or paid the company within the last 18 months (transaction EBR) or has made a product or service inquiry within the previous three months (inquiry EBR). These customers can be contacted even if they’re on the National DNC list.
Business-to-business calls: depends on the type of B2B solicitation (for example, do not call the business with an intent to sell to individual employees). Business phones may not be registered on the Federal Do Not Call Registry.
Managing DNC in dialer see Meeting notes | DNC/-List-Management
Australian Communications and Media Authority (ACMA)
Business Requirements
The objective is to ensure that all campaigns adhere to relevant regulations, including Do Not Contact (DNC) lists, opt-in/opt-out requirements, and data privacy laws.
Personas
Internal List Management
internal phone books and call transfer functionality
DNC List integration
The system should cross-reference outbound campaign contact lists with updated DNC lists to block any numbers registered as "Do Not Contact."
Must comply with national DNC regulations, such as,
NDNC in India
TPS in the UK
ACMA in Australia
Consent Tracking
The system must track the consent status of each contact. Only contacts who have opted in to receive marketing communications can be included in campaigns
Audit Logging
A comprehensive audit trail should be maintained, recording all campaign interactions, consents, and opt-outs.
Real-Time Compliance Monitoring
The system should monitor compliance in real-time during campaign execution
Real-time list access and synchronization, especially for importing and comparing lists with DNC lists to ensure compliance.
Contact List Upload and Validation
Ensure the system automatically checks for:
duplicates
missing fields, and
invalid entries (e.g., invalid phone numbers) when uploading CSV files for campaigns.
Differentiate customer lists and other types of lists, such as public directories and CRM lists.
Custom Fields & Contact Attributes
the system should support custom fields for contacts, ensuring only necessary and relevant information is stored in compliance with data minimization principles.
TECHNICAL REQUIREMENTS
API Integration with DNC Services
The system should integrate with external DNC list providers via API to ensure real-time list updates.
Encrypted Data Storage
All stored data should be encrypted to ensure compliance with data security laws
Compliance Dashboard
Provide a dashboard that tracks the compliance status of ongoing campaigns, displaying key metrics such as:
DNC list matches,
consented contacts, and
flagged issues.
TEAMS INTEGRATION (High priority)
Teams notifications
Show real-time information such as presence status and calendar entries for call transfer.
Integration with:
external calendars, and
internal phone directories is required for accurate call transfers.
A widget for searching and transferring calls.
synchronize lists, detect duplicates, and compare lists against DNC lists
APIs for integration with third-party applications