I've audited over a hundred VICIdial installations. Every single one had at least one TCPA compliance gap that could trigger a $1,500-per-violation penalty. Most had three or four.
The problem isn't VICIdial. The platform has every tool you need. The problem is that nobody reads 300 pages of FCC rulings and then cross-references them with VICIdial's 3,000+ settings to figure out which ones matter.
So here's the short version: the settings that will ruin your year if you get them wrong.
The Three FCC Changes That Broke Everything
The FCC rolled out three major rule changes in 2024-2025 that specifically target operations running predictive dialers.
One-to-One Consent (January 2025): A consumer must now consent specifically to calls from your company. That old lead-gen model where one form submission authorized calls from ten different buyers? Dead. If you're buying leads from aggregators, each lead needs proof the consumer named your company in the consent language.
Revocation via Any Channel (April 2025): Consumers can revoke consent by telling an agent on the phone, replying "stop" to a text, emailing, or basically any method they choose. You get 10 business days to process it. Most plaintiff attorneys argue 24-48 hours is "reasonable." Build your workflows accordingly.
STIR/SHAKEN Expansion: Calls without proper attestation are getting blocked outright now, not just labeled as spam. Your SIP provider must support A-level attestation for your outbound DIDs.
The Campaign Settings That Matter
Go to Admin, then Campaigns, then Campaign Detail. These are the ones that generate lawsuits:
Adaptive Dropped Percentage — Set this to 2.5% or lower. The legal limit is 3% of answered calls abandoned over a 30-day window. Running at exactly 3.0% means any spike pushes you into violation territory. Give yourself margin.
Safe Harbor Audio — Enable this. When a call drops (no agent available after the consumer answers), the TCPA requires a prerecorded message within 2 seconds identifying your company and providing an opt-out number. Without it, every dropped call is a violation.
Local Call Time — Set this to enforce TCPA hours (8 AM to 9 PM in the called party's time zone). Use TZCODE for timezone determination when possible — it's more accurate than area code lookup for ported numbers.
Use Internal DNC List and Use Campaign DNC List — Both must be enabled. VICIdial supports system-wide, campaign-specific, and national DNC checking. All three layers need to be active.
State Mini-TCPAs That Override Federal Rules
Federal TCPA is the floor. These states go further:
Florida (FTSA): 8 AM to 8 PM (one hour shorter). Maximum 3 calls per 24 hours to the same number. $500 per violation with a private right of action. This is the most aggressive state telemarketing law in the country.
Washington: 8 AM to 8 PM. Prior consent required for any automated call.
Virginia: Once a consumer requests no calls, you must maintain that opt-out for 10 years. Never purge Virginia DNC entries.
California: CCPA adds data privacy obligations on top of TCPA. 15 business day opt-out processing window.
Texas: Must register with the Secretary of State before conducting any telemarketing in Texas. Up to $10,000 per violation.
The 3% Drop Rate — How to Monitor It
The single most commonly violated provision. Run this query weekly against your VICIdial database to check your 30-day rolling drop rate per campaign:
SELECT campaign_id,
COUNT(CASE WHEN status = 'DROP' THEN 1 END) as drops,
COUNT(CASE WHEN status NOT IN ('NA','B','DC','N','AFTHRS','XDROP') THEN 1 END) as answered,
ROUND(COUNT(CASE WHEN status = 'DROP' THEN 1 END) /
NULLIF(COUNT(CASE WHEN status NOT IN ('NA','B','DC','N','AFTHRS','XDROP') THEN 1 END), 0) * 100, 2)
as rolling_30d_drop_pct
FROM vicidial_log
WHERE call_date >= DATE_SUB(NOW(), INTERVAL 30 DAY)
GROUP BY campaign_id;
If any campaign shows above 3.0%, take immediate action: reduce Adaptive Dropped Percentage to 1.5%, lower the Adaptive Maximum Dial Level, and add agents to absorb more connects.
The Checklist
Before you run any campaign:
- Adaptive Dropped Percentage at 2.5% or lower
- Safe Harbor Audio enabled with compliant message
- Local Call Time configured for TCPA hours with state overrides
- Internal DNC and Campaign DNC both enabled
- National DNC scrub current within 31 days
- State DNC scrubs current for all target states
- Consent records retrievable per lead
- Opt-out processing under 10 business days
- STIR/SHAKEN A-level attestation on all outbound DIDs
TCPA class actions hit 2,788 in 2024, up 67% year-over-year. Average settlement: $6.6 million. This isn't theoretical risk. It's an industry.
ViciStack audits every compliance-critical VICIdial setting as part of our managed service — timezone rules, DNC sync, abandon rates, state-specific configurations. At $150/agent/month, compliance management is included.
Originally published at https://vicistack.com/blog/vicidial-tcpa-compliance/
Top comments (0)