CIPP-US - Limits on Private-Sector Collection and Use of Data - Section 2.5

Identify obligations under the Telephone Consumer Protection Act, Telemarketing Sales Rule, and CAN-SPAM Act for marketing communications.

Identify the TCPA's prior express written consent requirement for autodialled or prerecorded calls and texts, and the Do Not Call Registry obligations under the Telemarketing Sales Rule. Compare CAN-SPAM's opt-out, identification, and subject-line requirements for commercial email with the stricter consent-first approach of the TCPA for voice and text channels.

TCPATelemarketing Sales RuleCAN-SPAMDo Not Call Registry

Practice question for this objective

Free sampleLimits on Private-Sector Collection and Use of Datamedium

A retailer plans a marketing push that sends promotional SMS text messages using an automatic dialling platform to mobile numbers it gathered through online sign-ups. The compliance lead reasons that because the messages are written, they fall under the email marketing statute and require only accurate headers, an opt-out link, and a postal address. Which assessment of the governing law for these autodialled marketing texts is correct?

  • ACAN-SPAM governs the texts because it covers all electronic commercial messages, so accurate headers, an opt-out link, and a postal address are the complete compliance set.
  • BThe Telemarketing Sales Rule governs the texts and requires the retailer to scrub the recipient list against the national Do Not Call Registry before sending.
  • CThe TCPA governs these autodialled marketing texts and requires prior express written consent, so treating SMS as if CAN-SPAM's email rules alone applied understates the obligation. Correct
  • DNo federal statute governs marketing text messages, so the retailer need only follow the platform vendor's terms of service to send the campaign lawfully.
Autodialled marketing text messages are governed by the TCPA and its prior express written consent standard, not by CAN-SPAM's email rules alone. Autodialled or pre-recorded marketing texts to wireless numbers are regulated as calls under the TCPA, which requires prior express written consent, so a marketer cannot satisfy its obligations merely by following CAN-SPAM's header, opt-out, and postal-address requirements for email.

Why A is wrong: Tempting because texts are electronic and written, but CAN-SPAM centres on commercial email; autodialled marketing texts are regulated as calls under the TCPA, so CAN-SPAM's checklist is not the complete or controlling standard.

Why B is wrong: Tempting because the TSR addresses telemarketing, but the Do Not Call registry and TSR framework target voice sales calls, and the consent standard for autodialled marketing texts comes from the TCPA, so naming the TSR as governing is incorrect.

Why C is correct: Correct: the FCC and courts treat autodialled marketing text messages as calls under the TCPA, which demands prior express written consent for such messages, so leaning solely on CAN-SPAM's email duties misses the controlling and stricter standard.

Why D is wrong: Tempting because text-specific rules feel like a gap, but the TCPA squarely covers autodialled marketing texts; relying on a vendor's terms instead of federal consent law would leave the campaign unlawful, so this is wrong.

See more CIPP-US practice questions, answers explained.

More in this domain

Back to all Limits on Private-Sector Collection and Use of Data objectives, or the CIPP-US cert hub.

Examworthy is not affiliated with or endorsed by IAPP. Original, blueprint-aligned practice material only.