Service Department Blog for Car Dealerships

Car Dealership TCPA Compliance: A Guide to Texting

Written by Marjorie Latulippe | Oct 7, 2026

Last updated: October 7, 2026

Quick answer: The TCPA is the US federal law that sets the rules for calling and texting your customers. For a service department, the main line is between informational texts and marketing texts. A plain reminder about an existing appointment needs less consent than a promo. Add a sale to that reminder and you may need prior express written consent. Damages run $500 per violation, up to $1,500 if willful. This guide is not legal advice.

"Thanks for your service appointment! While you're here, check out our new models at special rates!"

This harmless-looking text could cost your dealership up to $1,500 per recipient if it goes out without the right consent. The service reminder isn't the risk. The risk is how easily a promo slips in and turns a compliant message into a possible TCPA violation.

Your store runs on these messages:

  • Service reminders
  • Follow-ups
  • Promotional offers
  • Recall notices

They keep your bays full. But under consumer protection law, one misstep can turn a helpful reminder into an expensive legal problem.

The Telephone Consumer Protection Act (TCPA) protects consumers from unwanted telemarketing calls and texts. Here's what it means for your service lane.

One note before we start: this is a practical overview, not legal advice. Check your own setup with your counsel.

What is the TCPA?

The TCPA dates back to 1991, when telemarketing meant a landline ringing during dinner. The law is old. It still shapes how your dealership can text today.

It sets rules for how businesses can contact consumers by phone call, text message and fax. It mostly targets telemarketing, meaning calls or texts meant to get someone to buy, rent or invest in goods or services. The legal language gets technical. The basics don't.

Key TCPA concepts every dealership should know

  • Automatic Telephone Dialing System (ATDS): A system that can dial numbers automatically, without a person. The definition can be broader than you'd think.
  • Telemarketing: Any call or message meant to encourage the purchase of goods or services, like that "friendly reminder" about your sales event.
  • Established Business Relationship (EBR): A relationship created by a transaction (valid for 18 months) or an inquiry (valid for 3 months). Some states have stricter rules, so check yours.
  • Prior Express Written Consent (PEWC): The strongest protection. Written permission from the consumer before you send marketing messages through automated systems.
  • Unsolicited Advertisements: Any marketing message sent without the recipient's express consent.
  • Artificial or Prerecorded Voice: Messages that use a recorded voice instead of a live person. These need explicit consumer consent.

Important TCPA restrictions

  • No-go zones: Never use an ATDS or prerecorded messages to reach emergency lines or hospital rooms.
  • Residential lines: Prerecorded calls need prior express consent unless it's an emergency or the FCC exempts them.
  • Fax machines: Unsolicited ads to fax machines are generally prohibited.

How do you keep your dealership TCPA compliant?

The line between "keeping in touch" and "marketing" is thin. That service reminder that mentions your oil change special? It just moved from informational to promotional, and the consent bar went up.

Here's a scenario any fixed ops department could face. A customer bought a car from you two years ago. You have their number. A plain maintenance reminder? Generally fine. Add "while you're here, check out our new models at special financing rates"? Now you're in PEWC territory.

So what does that look like day to day?

1. Create clear consent mechanisms

If one word should sit at the center of how your store texts, it's "consent." The type you need depends on what you send:

  • Prior Express Written Consent (PEWC): Required for marketing calls or texts sent with automated systems. It must be clearly disclosed, not required to make a purchase, and signed.
  • Express Oral Consent: Allowed, but weaker, because it's harder to prove.
  • Prior Express Consent (PEC): Covers non-marketing messages that are closely related to the existing business relationship.

Write your consent language in plain words, not fine print. When customers fill out a form online or at the counter, make the consent line easy to see and specific about what they'll receive.

2. Set up a reliable opt-out process

Every text should include an easy way to opt out (like "Reply STOP"). Every call should tell customers they can ask to go on your do-not-call list.

When someone opts out, process it right away. Don't let it sit in a queue for weeks.

3. Audit your third-party lead sources

The "lead generator loophole" is still open (more on that below), but that doesn't take the responsibility off you. Audit your lead providers regularly. Ask for documentation of how they get consent, and read it.

4. Train your team continuously

Your compliance is only as strong as your least-informed employee. Make sure your team understands the TCPA rules and knows how to use your texting tools the right way.

Training should cover the basics and the real situations your staff will run into at the counter.

Training your techs and advisors to do clear, transparent vehicle inspections builds trust too. Our video MPI guide covers how.

5. Document everything

In TCPA litigation, your dealership carries the burden of proving consent was obtained. Keep records of:

  • When and how consent was obtained
  • The exact wording of your consent statements
  • Every opt-out request and how you handled it
  • Regular audits of your compliance process

Important considerations for all communications

  • Clearly identify your dealership.
  • Always give a clear way to opt out.
  • Contact customers only during acceptable hours (8 AM to 9 PM).
  • Keep every message truthful.

What does a compliant text look like?

Here's how the rules play out in three common situations.

Scenario 1: The service reminder

Risky: "Hi John, reminder about your service appointment tomorrow. While you're here, check out our tire sale. 20% off this week only! Reply STOP to opt out."

Why it's risky: The marketing content turns it into a message that needs PEWC.

Safe: "Hi John, this is Riverdale Motors reminding you of your scheduled service appointment tomorrow at 10:00 AM. Reply STOP to opt out."

Why it's safe: Purely informational, existing relationship, clear opt-out.

Scenario 2: The web inquiry follow-up

Risky: Automated message: "Hello! Thanks for your interest in our vehicles. We have amazing deals this month! Press 1 for sales."

Why it's risky: A prerecorded marketing message sent by an automated system without PEWC.

Safe: A salesperson calls back after an online inquiry: "Hello Sarah, I'm calling about your interest in the 2023 Highlander. Do you have any questions I can answer?"

Why it's safe: A person responding directly to the customer's inquiry, within the EBR window.

Scenario 3: The past customer reach-out

Risky (without PEWC): The same message below, sent without proper consent.

Why it's risky: A marketing text sent by an automated system requires PEWC.

Safe (with PEWC): "Hi Miguel, Riverdale Motors here with a special trade-in offer this month. We're offering above-market value for your 2019 Accord. Text STOP to opt out."

Why it's safe: It's marketing, but the customer gave prior express written consent.

Why does compliance matter to your customers?

TCPA compliance isn't only about avoiding lawsuits. It's about respecting what your customers asked for.

When your consent practices are clear and you honor opt-outs fast, customers notice. You're showing respect for their boundaries, and that builds loyalty over time. Plenty of stores treat compliance as a legal hurdle. You can treat it as part of the experience.

The stores that do this well don't see consent as an obstacle. They see it as a chance to be transparent.

What changed with the TCPA in 2025?

The "lead generator loophole" is a gap in how consumer consent is handled when someone's information goes to several sellers through one form, usually on comparison shopping or lead generation websites.

The FCC planned to close it in January 2025 with a "one-to-one consent" rule. Each consumer would have had to consent separately to autodialed calls or texts from each specific seller.

In January 2025, the Eleventh Circuit vacated that rule and found the FCC exceeded its authority.3 The practical effect? The loophole stays open, and dealerships keep more flexibility when consent comes through comparison shopping sites.

What this means for your dealership:

The ruling gives you some breathing room. It isn't a long-term strategy. Getting clear, direct consent whenever you can is still the safer practice.

How can texting software help you stay compliant?

The right tool makes the rules easier to follow every day. The Dealership Engagement System (DES)™ is built for dealership service departments. With Kimoby, you can:

  • Manage and document customer consent.
  • Include clear opt-out instructions in your text messages automatically.
  • Track opt-out requests and act on them quickly.
  • Keep texting connected to your DMS, so every conversation sits on the customer's record.

What software won't do: decide for you whether a message counts as marketing, or replace your legal review. That part stays with you and your counsel.

See how it works as your dealership texting software, or book a demo and we'll walk through your consent flow with you.

Conclusion

The TCPA demands real attention from car dealerships. Staying compliant avoids expensive lawsuits and builds trust with your customers. This guide is not a substitute for legal advice. Talk to an attorney who knows the TCPA and the related FCC rules before you change how your store texts.

Frequently asked questions

My dealership is located in Canada. What are the requirements?

Canadian dealerships must follow the National Do Not Call List (DNCL) rules, which means registering properly and keeping an internal opt-out list. You're also responsible for what your employees, agents and third-party lead generators do. Check with your counsel for your province.

Does a customer providing their phone number imply consent?

Generally yes, but that consent has to match the type of message you send. A number given for "service updates" doesn't automatically allow marketing messages.

Can consent be revoked?

Yes. Customers can revoke consent at any time by any reasonable method, like texting "STOP" or asking verbally to opt out.

What's the worst that could happen if I violate the TCPA?

Damages run $500 to $1,500 per violation, which adds up fast when you send hundreds or thousands of messages. Add legal fees and possible class actions, and it becomes a serious financial hit.

Can I send service reminders without written consent?

Yes, as long as the messages are purely informational and include no marketing content. The moment you add a promotion, you're in PEWC territory.

Do I need separate consent for each message I send?

Not necessarily. Initial consent usually covers ongoing messages about the same transaction or inquiry, as long as the customer hasn't opted out.

Sources
[1] Telephone Consumer Protection Act, 47 U.S.C. § 227.
[2] Faegre Drinker, Internal DNC Policies Not Prerequisite to Using EBR Defense, Ohio Southern District Holds (2022).
[3] Insurance Marketing Coalition Ltd. v. FCC, No. 24-10277 (11th Cir. January 24, 2025).