Regional compliance
What changes by market when a digital worker contacts people: US TCPA and Do-Not-Call, EU and UK GDPR, Canada CASL, and which obligations stay with you.
Outbound obligations change by market, and the differences are material enough to affect which channels you can run where. This page describes what to configure and consider, not what the law requires of you.
This is not legal advice. Requirements differ by country, and in the US by state, and they change. Get sign-off from whoever owns compliance at your company before enabling any channel in any market. The governing documents are the autodial terms, terms, and privacy policy.
The platform rule that applies everywhere
Per the 11x autodial terms, subscribers must obtain prior express written consent from recipients before initiating communications regulated under telemarketing laws. The terms explicitly prohibit cold outbound calls and texts without proper consent.
This is a contractual obligation on you, not only a legal one, and it is stricter than many teams assume. Email outbound and regulated calling and texting are not the same thing. A cold email programme can be entirely legitimate while cold dialling the same list is not permitted.
Where responsibility sits
| Responsibility | Owner |
|---|---|
| Obtaining and evidencing consent | You - sole responsibility per the terms |
| Compliance with TCPA, TSR, Do-Not-Call rules | You |
| Informing recipients that calls may be recorded | You |
| Lawful basis for processing and outreach | You |
| Platform certifications and infrastructure security | 11x |
| Providing tools for lawful use | 11x |
The terms state subscribers assume full liability for communications sent through the platform. 11x provides tools intended for responsible and lawful use; verification sits with the subscriber.
What differs by market
Calling and texting are the regulated surface. Consider TCPA, the Telemarketing Sales Rule, and Do-Not-Call obligations, plus state-level rules that can be stricter than federal.
Call recording consent also varies by state - some require all-party consent. Configure your recording disclosure in the call flow accordingly.
The centre of gravity is lawful basis for processing rather than a dialling rule. Relevant to:
- Prospect data used for targeting and research
- Website visitor tracking, where identifying individuals and then contacting them has a materially different profile from the US
- Data processing agreements - custom DPAs are an Enterprise capability
11x maintains DPAs for EU-based customers and aligns retention with GDPR protocols.
CASL governs commercial electronic messages and is generally stricter on consent than US email rules. Treat Canadian contacts as a distinct segment rather than folding them into a North America list.
Channel preference also varies independently of law - WhatsApp is the default business channel in much of EMEA, LATAM, and APAC. See multichannel.
How to configure for multiple markets
Segment by geography
Not by continent. Canada and the US need different treatment despite sharing a market in most GTM plans.
Enable channels per segment
Do not run one global channel mix. Email-only is a legitimate configuration for markets where you cannot evidence calling consent.
Map consent state per channel into the CRM
So exclusions can enforce it. See opt-outs and suppression.
Configure recording disclosure per jurisdiction
Including all-party-consent states.
Exclude markets you cannot support
Cleaner than running a channel you cannot justify there.
Get sign-off before launch, not after
From whoever owns compliance.
Frequently Asked Questions
Next steps
Consent and calling compliance
The configuration detail.
Opt-outs and suppression
Making consent enforceable.
Audit and oversight
Evidencing what happened.
Security and compliance
Certifications for procurement.
Need help?
Email support@11x.ai, or book time with the team.