Definition (what it is, who it is for, when to use it)
The Telephone Consumer Protection Act (TCPA) is a U.S. federal law that regulates certain types of calls and text messages sent to consumers. For dispensaries, it primarily affects how you collect consent and how you send marketing text messages.
This page is for dispensary operators, marketing managers, compliance officers, and technical teams responsible for sending customer text messages. It applies whether you send order updates, loyalty messages, winback campaigns, or mass promotions.
This guide is educational information, not legal advice. Dispensaries should consult qualified counsel to interpret how TCPA and state laws apply to their specific business.
Blackleaf requirements: explicit recipient consent and age confirmation are required before any text, including service and support. In the message flow, the intended recipient verifies by selecting the birthday on file; never disclose the saved birthday. These company requirements are separate from legal and provider review. See age and intended-recipient checks. Blackleaf Texting is available with supported existing POS systems without a POS switch.
Why TCPA matters for dispensaries
Dispensaries operate in a regulated category with high complaint sensitivity. TCPA violations can expose businesses to statutory damages per message, which means mistakes at scale can become expensive quickly.
Beyond legal exposure, weak consent practices often lead to:
High opt-out rates
Carrier filtering and blocked messages
Consumer complaints
Deliverability instability
Consent records and current suppression support program review; they do not guarantee legal compliance, delivery or revenue. If you are building or auditing your program, start with opt-in and consent for dispensaries and align with SMS opt-in best practices.
Marketing vs Transactional Messages Under TCPA
Message purpose is one part of legal review. Counsel should assess the TCPA, state-law and do-not-call rules for the actual sending technology, audience and message. Calling a text transactional does not by itself establish permission.
Scroll the table horizontally on a small screen. Keyboard users can focus the region and use the arrow keys.
| Message Type | Example | Primary Purpose | Review before sending |
|---|---|---|---|
| Transactional | Your order is ready for pickup | Operational update tied to a customer action | Confirm applicable consent and current eligibility |
| Marketing | 20% off all flower today | Promote products or drive sales | Review marketing consent and advertising rules |
| Mixed | Your order is ready. Show this text for a discount | Operational plus promotional | Review promotional content and consent scope |
If you mix promotional language into order flows, you may shift a message from transactional to marketing. Keep order-related texts aligned with order alerts and separate promotional campaigns into properly consented marketing sends.
Step-by-Step: Building a TCPA-aware SMS Program
-
Document how you collect consent. Capture where, when, and how a customer opted in. Checkout, online forms, and keyword opt-ins must clearly state they are signing up for text messages.
-
Align consent language with message type. If you plan to send marketing texts, the consent must reflect that expectation. Review consent standards for dispensaries.
-
Implement functional opt-out handling. Hold further sending when a revocation arrives. STOP is not the only valid method; review other clear requests and apply current suppression across the relevant workflows. Do not manually re-add opted-out contacts.
-
Separate operational and marketing systems. Keep transactional flows isolated from marketing campaigns to reduce classification risk.
-
Monitor frequency and behavior. Excessive messaging increases complaints and carrier scrutiny. Review mass texting strategy and avoid over-sending.
-
Confirm A2P registration posture. Confirm that the provider permits your actual business, geography and message purpose, then review applicable 10DLC for dispensaries requirements. For example, Twilio prohibits cannabis/CBD business SMS and MMS in the U.S. and Canada regardless of wording. This is one provider’s restriction, not a claim about Blackleaf’s route. An API key, successful request or sender registration does not create consent or override a prohibited use case.
-
Track deliverability trends. If complaints increase, deliverability may decline. Use SMS deliverability and carrier filtering diagnostics.
Common TCPA Mistakes in Dispensary Texting
Assuming a phone number equals consent. Collecting a number for receipts does not automatically grant permission for marketing messages.
Weak or vague opt-in disclosures. Consent language must match what you send.
Ignoring opt-out signals. STOP must function consistently across systems.
Over-sending after opt-in. Frequency should align with customer expectations.
Importing purchased or third-party lists. If you cannot prove how consent was obtained, you increase legal and deliverability risk.
Illustrative dispensary scenarios
Scenario 1: Checkout Receipt Collection. A dispensary collects numbers for digital receipts but does not clearly state that marketing texts will follow. Later, the store sends promotional campaigns. This creates consent mismatch risk. Fix by clarifying opt-in language and separating receipt collection from marketing subscription.
Scenario 2: Loyalty Program Enrollment. A customer joins loyalty in-store. Membership alone does not establish texting permission. Confirm the actual disclosure, recipient action, scope and current eligibility before adding the customer to a messaging workflow.
Scenario 3: Order Confirmation with Discount. An order-ready message includes a new promotional offer. That mixed message may be treated as marketing. Keep operational flows aligned with order alerts and move promotions into properly consented campaigns.
Scenario 4: Winback Campaign After Long Inactivity. A store texts inactive customers without verifying prior marketing consent. This increases complaint risk. Always confirm consent scope before launching automation or campaigns.
Metrics That Matter
Opt-out rate per campaign: Sudden spikes may indicate consent mismatch.
Complaint indicators: Even indirect complaint signals can affect filtering.
Delivery rate trends: Declines may reflect enforcement or filtering pressure.
Consent documentation coverage: Percentage of contacts with documented opt-in source.
Frequency per subscriber: Monitor how often individual customers are messaged.
FAQ
Question: Does TCPA apply to text messages?
Answer: Yes. Courts have treated text messages similarly to calls for TCPA purposes when sent using certain automated systems.
Question: Do dispensaries need written consent for marketing texts?
Answer: Marketing texts typically require a higher level of consent than purely transactional messages. Consult legal counsel to determine what standard applies to your program.
Question: Are order updates covered by TCPA?
Answer: Some non-marketing messages can fall within TCPA rules. A customer action and an operational label are not a blanket exemption. Review the actual flow with counsel. Blackleaf’s consent, age and recipient requirements still apply.
Question: What happens if a customer texts STOP?
Answer: Hold further sending and apply current suppression. STOP is not the only reasonable way to revoke consent. Review other clear requests and resolve their scope under the approved process; do not treat an older import as renewed permission.
Question: Does 10DLC replace TCPA requirements?
Answer: No. 10DLC registration relates to carrier identity and routing expectations. TCPA addresses consent and consumer protection. Review 10DLC for dispensaries for identity alignment.
Question: Can I text customers who gave me their number in-store?
Answer: A number by itself is insufficient. Blackleaf requires explicit recipient consent and age confirmation before any text, including service and support. Verify the intended recipient through birthday selection without disclosing the saved birthday, and retain the actual permission evidence. Legal and provider review remain separate.
Question: Does TCPA apply only to marketing?
Answer: No. Certain non-marketing calls and texts are also covered. Applicability depends on the facts and rules; ask counsel to review your sending system and message purpose. Blackleaf requires recipient consent and age confirmation for all texts, including service and support.
Question: How does TCPA affect deliverability?
Answer: Legal compliance and delivery are different checks. Neither sender registration nor a delivered status proves lawful permission. Review consent records using dispensary opt-in standards and monitor SMS deliverability.
Sources and Further Reading
Federal rule and provider restriction reviewed October 29, 2026. The eCFR displayed Title 47 as current through October 27, 2026. Check the current rule and obtain advice for your actual program.
47 CFR § 64.1200 contains the federal regulations implementing the TCPA.
FCC Telemarketing and Robocalls Guidance summarizes TCPA-related consent requirements and enforcement principles.
CTIA Messaging Principles and Best Practices outlines industry standards that influence carrier enforcement.
FTC Advertising and Marketing Guidance explains truth-in-advertising expectations relevant to promotional texts.