What the TCPA and Evolving Lead Gen Regulations Mean for PI Firms

The FCC's one-to-one consent rule, which took effect in January 2025, is not just a compliance update. It is a structural shift in how lead generation works for personal injury firms. The rule changes the economics of lead aggregation, the risk profile of buying third-party leads, and the leverage firms have — or don't have — when negotiating vendor contracts.

If your firm buys leads from aggregators, this regulation directly affects your cost per case, your vendor portfolio, and potentially your liability exposure. Understanding the regulatory environment is no longer optional for marketing directors or managing partners. It is a core part of managing your lead generation spend.

What the One-to-One Consent Rule Actually Changes

Prior to this rule, a consumer who filled out a single web form could have their information sold to multiple advertisers under a single, broadly worded consent disclosure. A person searching for a personal injury attorney might submit one form and receive calls from five or six firms — none of which they specifically asked to hear from.

The FCC's update to the Telephone Consumer Protection Act now requires that consent be granted on a one-to-one basis. A consumer must give explicit, prior express written consent to be contacted by each specific company. Blanket consent covering multiple parties is no longer sufficient to meet the legal standard for robocalls and autodialed calls under the TCPA.

This is a meaningful change for three reasons:

• Lead aggregators can no longer sell the same lead to multiple buyers under a single consent. Each buyer needs its own documented consent from the consumer, naming that specific firm.
• The compliance burden shifts downstream. Firms purchasing leads now carry co-liability risk if the consent behind those leads does not meet the one-to-one standard.
• Volume economics change fundamentally. Aggregators built on the model of collecting one consent and selling it to five buyers must restructure their entire acquisition process — or exit the market.

What This Means for Lead Aggregators and Pricing

The business model of many lead aggregators depended on selling each lead multiple times. A consumer form submission that cost $30 to acquire could be sold to four firms at $80 each, generating $320 on a $30 investment. That margin funded the aggregator's ad spend, its sales team, and its growth.

Under one-to-one consent, that same form submission can only be sold once — to the one firm the consumer explicitly consented to hear from. The aggregator's revenue per lead drops by 60 to 80 percent unless they restructure their forms, their disclosure language, and their consumer acquisition flow.

The downstream effects are already visible:

• Some aggregators have exited the market. Smaller operators whose margins depended on multi-sale economics are shutting down or pivoting to other verticals. This reduces supply.
• Remaining aggregators are raising prices. If each lead can only be sold once, the per-lead price must increase to cover acquisition costs. PI firms should expect 30 to 50 percent price increases from aggregators that previously sold shared leads.
• Lead volume is declining from some sources.Aggregators that haven't yet adapted their consent flows are generating fewer compliant leads. Some are still selling leads under the old consent model — which creates liability risk for buyers.
• Quality may improve — but not automatically.Exclusive leads with proper one-to-one consent should, in theory, convert better because the consumer specifically chose your firm. But that improvement only materializes if the aggregator's consent process is genuinely transparent and the consumer's intent is real.

Vendor Compliance as a Scorecard Criterion

Most PI firms evaluate lead vendors on volume, cost per lead, and conversion rate. Those metrics still matter. But the regulatory shift makes compliance posture a fourth criterion that belongs on every vendor scorecard — and arguably the most important one.

Here is what a compliance evaluation should include:

• Consent documentation.Can the vendor provide, on demand, the specific consent record for each lead they deliver? That record should include the consumer's name, the date and time of consent, the exact language the consumer agreed to, and confirmation that your firm was specifically named.
• Form and disclosure review. Have you actually seen the web form or landing page where the consumer grants consent? Is your firm clearly identified? Is the consent language compliant with current FCC guidance?
• Certification and indemnification.Does the vendor's contract include representations that their leads comply with TCPA one-to-one consent requirements? Does it include indemnification language that protects your firm if a lead turns out to have been obtained without proper consent?
• Audit rights. Can you audit or request compliance documentation at any time? Vendors who resist transparency on consent records are vendors you should not be buying from.

This is not a one-time evaluation. Consent practices can change as vendors adjust their acquisition strategies. A vendor that was compliant six months ago may not be compliant today. Quarterly compliance reviews should be part of your vendor management process.

Co-Liability Risk: Why This Matters to Managing Partners

The TCPA is a strict liability statute with statutory damages of $500 per violation, trebled to $1,500 per willful violation. Class actions under the TCPA are common, lucrative for plaintiffs' attorneys, and notoriously expensive to defend — even when the defendant prevails.

The critical issue for PI firms buying third-party leads is this: the firm that makes the call bears liability for the consent behind that call. If your intake team calls a lead that was obtained without valid one-to-one consent, your firm is exposed — not just the vendor who sold you the lead.

“We bought the lead in good faith” is not a defense. The FCC has been clear that the caller is responsible for ensuring valid prior express written consent exists before making the call. Relying on a vendor's assurance without verifying their consent practices creates a liability gap that no amount of indemnification language fully closes.

For managing partners evaluating marketing spend, this changes the risk calculus. A vendor delivering leads at $70 per lead with questionable consent practices is not cheaper than a vendor delivering leads at $120 per lead with documented, auditable one-to-one consent. The $70 lead carries a tail risk that the $120 lead does not.

How to Prepare: A Practical Framework

The firms that navigate this regulatory shift well will be the ones that treat it as an operational reality rather than a legal abstraction. Here is a practical sequence for getting ahead of the disruption.

1. Audit Every Active Lead Vendor

Start with your current vendor list. For each vendor, determine whether they are delivering leads under one-to-one consent or still operating under legacy broad-consent practices. Ask directly. Request sample consent records. If a vendor cannot produce them or is evasive, treat that as a red flag.

2. Update Your Vendor Contracts

Work with your compliance counsel to add TCPA one-to-one consent representations and warranties to every lead vendor contract. Include indemnification provisions. Include audit rights. These are standard asks in the current regulatory environment — any vendor who pushes back on them is telling you something about their compliance posture.

3. Diversify Away from Aggregator Dependence

If 40 percent or more of your lead volume comes from third-party aggregators, the one-to-one consent rule creates concentration risk. When aggregator supply contracts or prices spike, you need alternative channels that are less affected. Direct digital campaigns — your own Google Ads, your own SEO, your own content — generate first-party leads where consent is inherently one-to-one because the consumer came to you.

4. Build the Data Infrastructure to Measure Impact

Regulatory shifts like this one don't announce their impact in a press release. They show up in your numbers — gradually, then suddenly. You need to be tracking cost per case by vendor, by month, with enough granularity to detect when a vendor's economics are changing. If a vendor's cost per lead increases 35 percent but their conversion rate stays flat, your cost per case just increased 35 percent. If their volume drops 40 percent, you need to see that in context — not discover it when your signed case count drops at the end of the quarter.

Revenue intelligence platforms exist precisely for this kind of monitoring. When your vendor landscape is shifting underneath you, the firms that see the change first are the firms that respond first.

5. Treat Regulatory Awareness as a Competitive Advantage

Most PI firms are not paying close attention to FCC rulemaking. They will experience the effects — higher prices, fewer leads, vendor exits — without understanding the cause. That creates an opportunity for firms that do understand the cause.

When you know why lead costs are rising, you can negotiate from a position of knowledge rather than frustration. When you know which vendors have adapted their consent practices and which have not, you can make portfolio decisions that your competitors are making blindly. When you can quantify the co-liability risk of non-compliant leads, you can justify the premium for compliant ones — and explain that justification to partners in terms they understand.

The Bottom Line

The TCPA one-to-one consent rule is not a minor compliance footnote. It is restructuring the economics of lead generation for personal injury firms. Aggregators are exiting, prices are increasing, and the firms that buy leads without verifying consent practices are carrying risk they may not fully appreciate.

The practical response is not to panic and not to ignore it. It is to audit your vendors, update your contracts, diversify your lead sources, and build the measurement infrastructure to detect when the market shifts beneath you.

Cost per case remains the metric that matters. But in a regulatory environment where your vendor landscape can change in a single FCC ruling, knowing your cost per case by vendor — and watching it in real time — is no longer just good practice. It is risk management.