The FCC’s new TCPA revocation rules are final, but several of the biggest questions have been reopened based on comments filed by the American Bankers Association (ABA), National Consumer Law Center (NCLC), and ACA International and the agency is asking the public to help answer them. Comments on the FCC’s Further Notice of Proposed Rulemaking (FNPRM) are due November 25, 2026, with reply comments due December 28, 2026.
If your organization calls or texts consumers, sharing your operational realities can help shape the rule before it is written.
Where the Final Rules Landed
In our October 1 post, FCC Finalizes New TCPA Revocation Rules, we walked through the Commission’s rulemaking. The final rule was published in the Federal Register on October 26 and takes effect on November 25, 2026.
As a refresher, the final rules do four things:
- Narrower informational revocations. A request to stop one category of informational calls or texts, such as payment reminders, can be treated as covering only that category. Marketing works differently: a revocation of prior express written consent for marketing communications still cancels all future marketing consent.
- One designated way to revoke. Callers may designate a single exclusive revocation method from a Commission-provided list: an automated key-press option, a standardized text reply, or a dedicated website or phone number, so long as the method is clearly disclosed. Callers that do not make and disclose that choice must still honor any reasonable revocation request.
- More room on fraud alerts. Financial institutions can now source numbers for fraud and security alerts from reliable sources beyond what the customer provided, including numbers from an authorized family member on the account.
- A plain-language rewrite. The FCC also directed its Consumer and Governmental Affairs Bureau to reorganize the TCPA’s robocall rules in plain language, without changing the underlying obligations imposed by the rules.
Questions the FCC Is Asking
The FNPRM, titled Modernizing the Ability of Consumers to Control Robocalls, reopens parts of the framework that drew the most debate. Nothing in it is final, and the FCC says it wants to hear about costs, burdens, and tradeoffs before it decides.
Five key issues sit at the center of the notice:
- A “revoke all” option. The FCC asks whether callers should be allowed to treat a revocation request as applying to the category of call that prompted the revocation only if it also offers a single method to revoke consent for all types of messages for which consent is required, and should that method be automated? It also asks whether revocations should be limited to the specific number rather than every number tied to a customer account, and whether treating silence in response to a clarifying message as a blanket revocation goes too far.
- Affiliates and business lines. Today’s do-not-call rules apply to affiliates only if a consumer would reasonably expect it to. The FCC wants to know whether that approach still fits for affiliates and separate divisions, and whether it should apply to all robocalls.
- Timeframe for honoring revocation requests. Currently, callers have a reasonable time up to ten business days to honor a revocation request. The FCC asks whether that outer limit should shrink to seven business days unless a caller can show a longer period is necessary, and whether the deadline should differ for callers that designate an exclusive revocation method. It also asks whether different deadlines would confuse consumers.
- Two-way texting. The FCC asks whether to eliminate the existing allowance for one-way texting protocols that offer a separate opt-out method such as a phone number or website, and instead require two-way texting protocols that let recipients revoke consent by reply text. And should this requirement apply only to marketing messages and not informational messages?
- Shortening the list of standardized opt-out words. The notice also invites comment on trimming the list of standard words that count as revocation, eliminating the rebuttable presumption about whether a revocation method was reasonable, and allowing a confirmation call or text in response to a revocation request.
The FNPRM grew out of a June 30, 2026 joint letter from the ABA, the NCLC, an ACA International, so financial services voices are in the record. But the proposals touch operations well beyond any single trade group’s priorities, and the FCC’s own regulatory flexibility analysis lists commercial banks, credit unions, consumer lenders, loan brokers, and collection agencies among the entities that could be affected, along with schools, health care providers, real estate firms, and telemarketers.
For banks and lenders, the affiliate question deserves particular attention. A financial group that services accounts through several entities, or that markets through one affiliate while collecting through another, needs to know whether a revocation to one will bind them all. The “revoke all” and per-number questions raise similar design issues for customers with multiple accounts or phone numbers. And because the final rule just widened the fraud-alert exemption, institutions have a ready-made opportunity to explain how fast, reliable alerting depends on getting these details right.
Collectors and servicers, meanwhile, should look closely at the shortened timeline and confirmation-message proposals. Those details determine how quickly systems must suppress a number and whether a quick “just to confirm” text is permitted.
How to File, and What Makes a Comment Useful
Comments go in through the FCC’s Electronic Comment Filing System under CG Docket No. 02-278. Initial comments are due November 25, and reply comments are due December 28. The proceeding is “permit-but-disclose,” so meetings with FCC staff are allowed but must be disclosed in the record.
The most persuasive comments are concrete. The FCC has asked about compliance costs, burdens on small entities, and the practical consequences of each proposal, including for businesses with fewer than 25 employees. Explaining how your systems process revocations today, how long a change would take to build, and where a proposed rule could produce unintended revocations gives the Commission something it can actually use. A trade association filing is one option, but a direct filing from a company with operational detail can carry real weight.
Two Tracks to Run at Once
November 25 is a double deadline: the revised rules take effect, and initial comments on the FNPRM are due. Compliance teams should be finalizing disclosures, revocation routing, and fraud-alert sourcing for the new rules while deciding whether to file, who needs to be in the room, and what operational data to share. With less than two weeks left, the time to settle those questions is now.
If you would like help evaluating how the new revocation rules fit your current consent and compliance workflows, or support preparing comments or reply comments on the Further Notice, please reach out.
