When the 11th Circuit gutted the FCC's 1-to-1 rule last year, half the lead-gen vendors I know acted like they'd just been let out of detention. The FCC made it official in September. The phone calls started immediately.
Looser consent flows.
Broader category language.
Volume targets ticking up for next quarter's wave.
I get the relief. I also can't shake what comes next.
If you've held your consent capture to the old FCC standard even after the rule got walked back, this piece isn't really for you. You already see it.
For everyone else, there's a math problem hiding inside the regulatory rollback.
What actually died, precisely
The FCC's September 15, 2025 rule killed exactly two things.
One. The requirement that consent be obtained for one specific seller at a time.
Two. The "logically and topically related" restriction on consent obtained through lead-gen forms.
That's it. The TCPA itself? Untouched. Section 227 still requires "prior express consent" for autodialed calls to wireless numbers, and "prior express written consent" for telemarketing. The damages still range from $500 to $1,500 per violation. The four-year clock still runs. The class-action posture didn't change.
What changed is the scaffolding. The agency rule everyone pointed at in fights over what valid consent looks like? Gone. And the Supreme Court's 2025 decision in McLaughlin v. McKesson means even the FCC orders that survived are persuasive authority now, not binding.
For a defendant on the receiving end of a mass arb wave, that's worse, not better. Judges interpret the statute directly now. Some will read "prior express consent" narrowly. Some won't. The variance is the risk.
Why this hits mass arb harder than a single TCPA case
Mass arbitration runs on volume. The leverage comes from filing thousands of similar claims at once and forcing the defense into fee shock. The whole model assumes your claimants are real, your consent is documentable, your intake is bulletproof.
Strip out the federal scaffolding and every individual claimant's consent record becomes its own little question of statutory interpretation. That's manageable on one TCPA case.
It's a structural problem when you're bringing five thousand.
Here's a back-of-napkin scenario most case P&Ls don't run. Say 8% of your cohort has a sloppy consent record. On a 5,000-claimant matter, that's 400 cases the defense can challenge individually under the Process Arbitrator framework AAA put in place in January 2024.
The challenges don't have to win.
They just have to stall the matter and bump you out of the fee tier you priced in.
AAA's consumer mass arb per-case fees drop from $125 (first 500 cases) to $75 once you cross 1,500. Cull your first 500 down to 380 and you don't get to back into the cheaper bracket. The defense saves money. You don't.
The new compliance perimeter is higher, not lower
The firms doing this right in 2026 aren't loosening anything. They're tightening past where the FCC ever required.
What that looks like in practice.
Consent language that names a defined set of sellers or narrow categories. Not "marketing partners." Something a judge can read once and understand.
Disclosure of autodialer and prerecorded use, visually conspicuous on the page where the user actually clicks.
Real affirmative agreement. Checkbox, OTP, "reply Y." Pre-checked boxes are bait, and a Process Arbitrator will treat them that way.
Full session capture. HTML snapshot of the page, timestamp, IP, device fingerprint, exact consent text shown to that user. Stored for the full four-year limitations window, minimum.
Opt-out and revocation logging. The FCC's cross-context revocation rule got waived to January 31, 2027 by the agency's January 2026 second extension order, but only for one narrow informational-call scenario. Every other revocation still binds.
This is more expensive than what most lead vendors will sell you. It's also the only intake that survives a defense Process Arbitrator challenge on a per-claimant basis.
What to do this week
Two things.
First, audit your vendor's consent capture. Pick a random claimant out of your pipeline. Ask for the full session record. If they can't produce it (the HTML page, timestamp, IP, exact consent text), you have a portfolio risk you aren't pricing in. Get the audit done before your next filing wave, not after.
Second, stop assuming written consent is overkill. Bradford v. Sovereign Pest Control (5th Cir. 2026) and Bradley v. DentalPlans (D. Md.) both held that oral consent can satisfy the TCPA. That's a defense argument. It doesn't help you when you're the one proving your claimant base is real. Written, timestamped, individually attributable consent is still the strongest evidence you can hand a Process Arbitrator. Keep it.
The firms winning mass arb in this environment are the ones who built their consent capture for the old FCC rule and never relaxed when the FCC walked it back. The ones reading the rollback as a green light to buy cheaper leads are about to find out their intake doesn't hold up under defense scrutiny.
The 1-to-1 rule was a constraint.
Its absence isn't freedom.
It's variance.
If you want to stress-test your next mass arb wave against the new TCPA landscape before you file, that's the kind of math we run for plaintiff firms. Reach Kasia at (800) 800-4045 or visit massarb.groupsettle.com.