Do Not Call safe harbor
Do not call safe harbor defined: the conditions a caller must already have met before a call reaches a registered number, the six in the FTC rule, the five in the FCC rule, and the 31 day registry window both of them set.
A do not call safe harbor is a defence, not a permission. It applies after a call has already been placed to a registered number, and it works only if the caller can show that a specific set of procedures was already running as routine business practice before that call went out. Both the FTC and the FCC publish a version of it. Neither version can be assembled afterwards.
Six conditions in the FTC rule, and every one of them is prior
The Telemarketing Sales Rule sets the defence out at 16 CFR 310.4(b)(3). A seller or telemarketer is not liable for violating the do-not-call prohibitions at 310.4(b)(1)(ii) and (iii) if it can demonstrate, as part of routine business practice: written procedures implementing those paragraphs; personnel and any assisting entity trained in those procedures; a maintained and recorded list of numbers it may not contact; a process preventing calls to numbers on that list or on the Registry, employing a version of the Registry obtained from the Commission no more than thirty-one days before the call is made, with records documenting the process; monitoring and enforcement of the procedures; and that the offending call was the result of error.
The FCC standards cover the same ground in a different order
47 CFR 64.1200(c)(2)(i) lists five lettered standards, each with its own caption: written procedures, training of personnel, recording, accessing the national do-not-call database, and purchasing the national do-not-call database. The first four track the FTC items closely. The fifth has no FTC counterpart, and it restricts the database itself: the caller must use a process ensuring it does not sell, rent, lease, purchase or use the registry data for any purpose other than compliance. Error is placed differently too. The FTC makes it a sixth numbered condition, while the FCC writes it into the sentence introducing the five standards, so under the FCC rule error is the threshold a caller crosses before the list is even reached.
The registry window itself does not diverge. Both rules allow a version obtained no more than 31 days before the date any call is made, and both attach the records requirement to it in the same clause. Where the two regimes differ is in shape, not in that deadline.
Source: FTC Telemarketing Sales Rule, 16 CFR 310.4(b)(3) read in full including its lead-in and subparagraphs (i) through (vi) · FCC rules implementing the Telephone Consumer Protection Act, 47 CFR 64.1200(c)(2)(i) read in full including its lead-in and standards (A) through (E) · both texts fetched and compared on 20 September 2026 from two separate eCFR endpoints, which returned the thirty-one (31) day figure in 310.4(b)(3)(iv) and the 31 day figure in 64.1200(c)(2)(i)(D) identically.Which document decides the question
The thirty-one day window runs from the moment the caller obtained its version of the Registry to the date the call is made, so the age of the lead record never enters the test. A file bought this morning and a file bought last quarter are measured against the same copy of the Registry and the same window. Both rules also require records documenting that process in the same clause that requires the process, which makes the screening and the proof of the screening one condition rather than two.
Where the defence stops and the exceptions begin
Safe harbor is raised after the wrong number has already been dialled, and it speaks to the error rather than to the entitlement. Whether the number could lawfully be called at all is a different question, answered by an exception: a signed written agreement, or an established business relationship. Who is on the Registry, and why a purchased lead so often is, belongs to the National Do Not Call Registry. The durations attached to the relationship exception belong to established business relationship. A firm holding neither an exception nor the conditions above has no defence available, only a call it cannot account for.
One thing this page deliberately does not give you is a figure. Neither agency publishes how often the safe harbor is raised, how often it is accepted, or which condition fails most frequently. The rules state conditions; they do not report outcomes, and no primary federal source gives a number of that kind. Any such figure in circulation traces to commentary rather than to a document you can open, so none appears here.
Source: 16 CFR 310.4(b)(3) and 16 CFR 310.4(b)(1)(iii)(B) with its clauses (1) and (2) · 47 CFR 64.1200(c)(2)(i) · regulation text read 20 September 2026. These rules support the conditions listed above and the 31 day registry window in both regimes. They do not support any statement about how often the defence succeeds, and no such statement is made.Questions this page answers
It is a defence available to a seller or telemarketer whose call reached a number on the National Do Not Call Registry by mistake. Under 16 CFR 310.4(b)(3) the caller escapes liability only by demonstrating six things as part of routine business practice: written procedures, trained personnel, its own recorded do-not-call list, a process that screens against a recent copy of the Registry with records documenting it, monitoring and enforcement of those procedures, and that the call was the result of error. Every one of them has to predate the call.
No more than 31 days before the date the call is made, and the caller must keep records documenting the screening process. That window is identical in both regimes: 16 CFR 310.4(b)(3)(iv) writes it as thirty-one (31) days measured from the version obtained from the Commission, and 47 CFR 64.1200(c)(2)(i)(D) writes 31 days measured from the version obtained from the administrator of the registry. The clock runs on the copy of the Registry, not on the age of the lead record.
No. Safe harbor answers a call that has already gone wrong; it is not permission to place the call. Permission comes from an exception, either a signed written agreement naming the number under 16 CFR 310.4(b)(1)(iii)(B)(1) or an established business relationship under clause (2) of the same subparagraph. A firm with no exception and no procedures in place beforehand has no defence to fall back on, because the conditions cannot be assembled after the dial.
Buying questions rather than research ones are answered on the FAQ, and anything that is not there gets asked on a call.
More in Resources
Established business relationship
A Do Not Call exemption with a clock on it, the two durations that clock runs for, and the calls it does not cover at all.
GlossaryFirm offer of credit
The Fair Credit Reporting Act test that makes a prescreened solicitation lawful, the three conditions an offer may still carry, and the catch-all the statute does not give a lender.
GlossaryInternal do not call list
The list a company has to keep for itself, separate from the federal registry, the six standards it has to meet before a first call goes out, and the period the FCC fixes where the FTC fixes none.
GlossaryLead aggregator
The intermediary that buys leads collected by other companies' websites and resells them, why the borrower never heard its name, and what changes when your vendor bought the lead instead of generating it.
GlossaryMini-TCPA
State telemarketing statutes that sit alongside the federal rule, read in the published text of three of them, and the carve-outs that decide whether any of it reaches a record that came from a form.