Lead-Gen Compliance Glossary

SB 362 (2023), which amended California’s data-broker law, moved registration to the California Privacy Protection Agency, and created DROP — a single platform for consumers to request deletion across all registered brokers.

California’s Delete Request and Opt-out Platform. It launched January 1, 2026 (consumers can submit requests); registered data brokers must begin processing deletion requests by August 1, 2026 and check the platform at least every 45 days.

Under California’s Delete Act (Civ. Code § 1798.99.80(c)), “a business that knowingly collects and sells to third parties the personal information of a consumer with whom the business does not have a direct relationship.” Many lead aggregators fall squarely within it.

The National Do Not Call Registry and the scrubbing obligation that comes with it: telemarketers must generally avoid calling registered numbers and maintain an internal DNC list, absent consent or a qualifying exemption.

A relationship based on a consumer’s prior purchase or inquiry that can, in defined circumstances, support certain calls. An EBR is narrower than many operators assume and does not substitute for prior express written consent where the TCPA requires it.

The Fair Credit Reporting Act (15 U.S.C. § 1681 et seq.), the federal law governing how consumer reports may be furnished and used — including the prescreen/firm-offer exception at § 1681b(c).

Under FCRA § 603(l), an offer of credit or insurance that will be honored if the consumer meets pre-selected criteria. It supplies the “permissible purpose” that historically made prescreened trigger-lead solicitations lawful without consumer consent.

The Gramm-Leach-Bliley Act. To the extent information or activity is covered by GLBA (or FCRA), it is exempt from California’s data-broker definition — but the exemption attaches to the covered activity, not to the company as a whole.

The Homebuyers Privacy Protection Act — H.R. 2808, Public Law 119-36, signed September 5, 2025, effective 180 days later (≈ March 4, 2026). It restricts when credit bureaus may sell a mortgage trigger lead to a third party.

A state telemarketing statute that is stricter than the federal TCPA — for example Florida’s and Oklahoma’s. These laws can impose their own consent standards and private rights of action, so federal compliance alone is not enough.

The FCC rule that would have required a consumer’s TCPA consent to name a single specific seller. It was vacated by a federal appeals court in 2025 before taking effect — but state mini-TCPAs and the underlying PEWC standard still govern.

The FCRA requirement that a consumer report may only be furnished for an enumerated reason. A “firm offer of credit or insurance” not initiated by the consumer is one such permissible purpose.

A consumer’s right to opt out of prescreened firm-offer solicitations under Regulation V (12 CFR § 1022.54) and the FTC rule (16 CFR Part 642), via 1-888-5-OPT-OUT / optoutprescreen.com. HPPA did not change this right.

The TCPA standard for autodialed or prerecorded marketing calls and texts to a mobile number: a signed written agreement, with clear disclosures, that authorizes the specific caller to contact that number. It is the spine of clean telemarketing.

The documented record that a consumer agreed to be contacted — the form, the disclosure language shown, a timestamp, and the originating page. Tools like TrustedForm and Jornaya capture it so you can produce it when a plaintiff, buyer, or regulator asks.

The Telephone Consumer Protection Act, the federal law restricting certain telemarketing calls and texts — most notably autodialed or prerecorded marketing calls to mobile numbers without the consumer’s prior express written consent.

The FTC rule governing telemarketing, covering do-not-call compliance, required disclosures, calling-time limits, and prohibited practices. It operates alongside — not instead of — the TCPA.

A lead generated when a consumer applies for a mortgage and the lender pulls credit; the bureau detects the hard inquiry and sells the consumer’s contact info to other lenders, who solicit them — often within hours.