Virginia Telemarketing Law 2026: Insurance Agent Guide

A Virginia lead who filled out a form for a Medicare Advantage quote on a Tuesday afternoon doesn’t care what statute governs the callback. But the agency calling them back does, or should, because as of January 1, 2026, the rules for that call changed. Virginia’s Telephone Privacy Protection Act, amended by Senate Bill 1339, narrows when you can call, requires you to honor an opt-out for a full decade, and for the first time makes the seller, not just the person dialing, answerable for the call. Eight months into the new law, most of the insurance agencies working Virginia leads still haven’t looked at what it actually says.

This piece walks through exactly what changed, what counts as a telephone solicitation under Virginia’s statute, the calling window, the opt-out and caller ID rules, what the new joint liability provision means if you buy leads from a vendor, what a violation costs, and the full method for building a Virginia-compliant, fast follow-up system, whether you build it yourself or use something that builds it in.

What Changed in Virginia’s Telemarketing Law on January 1, 2026?

Virginia’s Telephone Privacy Protection Act isn’t new; it’s been on the books since 2001. What changed is Senate Bill 1339, patroned by state Sen. Dave Marsden and signed into law as Chapter 626 of the 2025 Acts of Assembly, which took effect January 1, 2026, after passing with bipartisan support. According to McGuireWoods Consulting’s review of the bill, the amendments were written to close ambiguities in the existing statute, particularly around opt-out timing and caller identification, that had generated a wave of technical, loophole-driven lawsuits against businesses that were largely trying to comply.

For an insurance agency, the practical effect is threefold: the opt-out duration is now explicit rather than implied, caller ID requirements got sharper teeth, and a new joint liability section changes who’s on the hook when a call goes out on your behalf but isn’t dialed by your own staff. None of that touches the calling-hours rule, which was already in the statute and already matched federal law; what’s genuinely new is what happens after a Virginia consumer says no, and who besides the dialer can be sued for it.

That last definition, established business relationship, matters more than it looks. An 18-month transaction window or a 3-month inquiry window is a specific, checkable date, not a vibe. If your CRM doesn’t record the exact date of a prior sale or the exact date a Virginia consumer first inquired, you can’t actually tell whether a given lead still falls inside that relationship or has aged out of it.

Who Counts as a “Telephone Solicitor” Under Virginia’s Law?

Virginia’s statute answers this broadly on purpose: a telephone solicitor is anyone who makes or causes a telephone solicitation, on their own behalf or a seller’s, and a telephone solicitation is any call or text to a Virginia number offering insurance, or any other property or service, for sale. That definition, in Code of Virginia Section 59.1-510, doesn’t carve out an exception for licensed insurance producers, captive agents, independent marketing organizations, or the vendor who sold you the lead in the first place. If the call offers coverage for sale to a Virginia consumer, it’s a telephone solicitation under this statute, full stop.

The definition does carve out an exemption that matters for follow-up work: an established business relationship, defined as a transaction within the past 18 months or an inquiry or application within the past 3 months, changes what’s required for certain contact, though it doesn’t override a prior opt-out request. In practice, that means a client you wrote a policy for 14 months ago is on different legal footing than an aged lead who inquired about a quote 11 months ago and never became a client. One is inside the relationship window; the other isn’t.

The Calling Window: 8 AM to 9 PM, and Why It’s Not Actually New

Code of Virginia Section 59.1-511 prohibits a telephone solicitor from calling a Virginia number “at any time other than between 8:00 a.m. and 9:00 p.m. local time at the contacted person’s location,” unless the solicitor already has that person’s consent to call outside the window. That’s the entire rule: no calls before 8 a.m., none after 9 p.m., measured by the recipient’s clock, not yours.

If that window sounds familiar, it should. The federal Telemarketing Sales Rule, at 16 CFR Section 310.4(c), sets the identical restriction: telemarketing calls to a residence are prohibited outside 8:00 a.m. to 9:00 p.m. local time at the called person’s location. Virginia didn’t tighten the clock past what federal law already required; it wrote the same window into state statute, which means a violation can now be pursued under Virginia’s civil remedy structure in addition to whatever federal exposure already existed.

The practical read: the clock rule almost certainly isn’t your exposure if you were already following the TCPA and TSR. What changed is everything downstream of that clock, the opt-out duration, the identification standard, and above all, who can be sued when something goes wrong.

Opt-Outs Now Last a Decade — What That Means for Your CRM

Section 59.1-514 requires a telephone solicitor to honor a request not to be called “for at least 10 years from the time such request is made.” That applies to a spoken opt-out on a call and to a text reply of STOP or UNSUBSCRIBE. The statute also gives solicitors an affirmative defense if they can show they maintained a version of the National Do Not Call Registry no older than 31 days and used reasonable practices to prevent unlawful contact, but that defense is about process, not a substitute for tracking an individual’s own opt-out.

Ten years is a long time in CRM terms. Most contact-suppression logic defaults to something shorter, or worse, ties suppression to a record’s active status rather than a durable flag that survives a contact being merged, archived, or re-imported from a new list purchase. If your suppression list can be accidentally cleared by a database cleanup, a CRM migration, or someone re-uploading an old spreadsheet, it doesn’t actually meet a 10-year standard no matter what your written policy says.

Caller ID Can’t Lie Anymore

Section 59.1-513 requires a telephone solicitor to transmit its phone number and, where available through the carrier, its name, and that transmitted number has to accept opt-out requests during business hours. The statute separately prohibits intentionally blocking or falsifying caller ID information, though it does allow a solicitor calling on a client’s behalf to substitute the client’s own name and customer service number instead of its own, which is directly relevant if you’re a marketing vendor or IMO placing calls that benefit a licensed agency’s book of business.

For an agency working with an outside dialer, lead vendor, or BPO, this section is worth reading literally: whatever number shows up on a Virginia consumer’s phone has to actually route to something that can process an opt-out during business hours. A caller ID that displays a working agency number but routes replies to a disconnected line, an unmonitored voicemail box, or a vendor’s internal extension nobody checks doesn’t satisfy the requirement just because the number itself is technically accurate.

Joint and Several Liability: Why “That’s My Vendor’s Problem” Doesn’t Work Anymore

This is the section of the amended statute that actually changes an insurance agency’s risk calculus, more than the calling hours or even the opt-out duration. Section 59.1-514.1 makes the seller and the telephone solicitor jointly and severally liable for violations of the chapter, and it creates a rebuttable presumption that a telephone solicitation offering a seller’s property or services was made on that seller’s behalf, whether or not any agency relationship actually exists between the two.

Read plainly, that means if a lead vendor, call center, or independent marketing organization places a call selling your agency’s coverage and that call violates the statute, wrong hours, no working opt-out, misleading caller ID, the presumption runs against you as the seller, not for you. The vendor being the one who actually dialed the phone doesn’t automatically shield the agency whose product was being sold. Overcoming that presumption requires clear and convincing evidence that you neither retained nor requested the solicitor and had no knowledge of or control over the calls, which is a real defense but not a low bar, and not one you want to be building for the first time after a complaint arrives.

What a Violation Actually Costs

Under Section 59.1-515, an individual harmed by a violation can sue to enjoin the conduct and recover damages: $500 for a first violation, $1,000 for a second, and $5,000 for each one after that, plus reasonable attorney fees and court costs. A court can raise damages for a willful violation to as much as $5,000 for a first or second offense at its discretion. Separately, Section 59.1-517 gives the Attorney General, Commonwealth’s attorneys, and local attorneys authority to bring their own enforcement actions, recover the same tiered civil penalties, and additionally recover the government’s investigation and litigation costs; penalties from state actions go to Virginia’s Literary Fund, and penalties from local actions go to that locality’s general fund.

Multiply the low end of that tier by even a modest run of complaints and the numbers stop looking like rounding error. A single willful violation carries the same maximum, $5,000, as a monthly Agency plan’s minute allowance would cost at roughly 27,000 minutes of AI-answered calls at $0.18 a minute; put differently, one avoidable statutory violation can cost more than a full month of managed calling at scale. That’s not a reason to panic, it’s a reason to make the compliance mechanics boring and automatic rather than something a busy team remembers to do most of the time.

Does This Apply to Medicare and ACA Calls Specifically?

Yes, without any product-line exception written into the statute. Virginia’s definition of telephone solicitation covers a call or text offering property, goods, or services for sale, and insurance coverage, Medicare Advantage, ACA marketplace plans, life, final expense, all of it, fits that definition the same way a home warranty pitch or a solar sales call would. There’s no carve-out in Chapter 44 for licensed insurance producers or the products they sell.

For Medicare specifically, Virginia’s rules stack on top of, rather than replace, CMS’s Medicare Communications and Marketing Guidelines, which separately require the TPMO disclaimer, govern unsolicited contact, and set call recording and retention requirements for Medicare-related sales calls. An agency working Virginia’s Medicare market in 2026 has three layers to satisfy at once: the federal TCPA and TSR, Virginia’s amended VTPPA, and CMS’s Medicare-specific marketing rules. None of the three substitutes for the others, and a call that’s clean under one can still violate another.

How to Build a Compliant Speed-to-Lead System in Virginia

None of this requires buying anything. Here’s the full method for building compliant, fast follow-up on Virginia leads, whether you do it by hand or with a platform that automates the mechanics.

1. Record the exact date on every Virginia contact. Store the date of last transaction and the date of first inquiry as real fields, not notes, so you can actually calculate whether a lead sits inside the 18-month or 3-month established-relationship window before you call it.
2. Build a suppression list that can’t be accidentally cleared. An opt-out flag needs to survive a CRM migration, a duplicate merge, and a fresh import of the same phone number from a new lead file, for a full 10 years, not until the next database cleanup.
3. Gate every outbound call through the suppression list and the clock, automatically. Don’t rely on a human remembering to check the time or the opt-out status before dialing; build the gate into the dialer or workflow itself so a call outside 8 a.m.–9 p.m. or to a suppressed number simply can’t fire.
4. Confirm your caller ID actually routes somewhere staffed. Whatever number displays on the call has to reach a line that can process an opt-out during business hours, whether that’s your own number or, per Section 59.1-513’s exception, a client’s number you’re authorized to substitute.
5. Get vendor calling practices in writing before you sign. If a lead vendor, IMO, or BPO calls Virginia consumers on your agency’s behalf, put their calling-hour compliance, opt-out handling, and caller ID setup in the contract, and ask for evidence, not just a promise.
6. Update the National Do Not Call Registry on a schedule, and document it. Pulling a version no older than 31 days and keeping a record that you did is the statute’s own affirmative defense; treat it as a monthly task with a paper trail, not an occasional one.
7. Log every opt-out with a timestamp, immediately, at the point of contact. Whether it comes by voice or text, the record needs to exist the moment the request is made, not after a batch review days later.
8. Audit your own list once a quarter from the caller’s side. Pull a sample of Virginia contacts, confirm suppression flags held, confirm caller ID resolves correctly, and confirm nothing outside the 8-to-9 window went out. A written policy that’s never been tested against your actual system is a guess, not a control.

Where TheAffordableAI Fits

We don’t write your compliance policy and we’re not a law firm; the method above works whether you build it in-house or not. What we run is the calling layer underneath it: an AI voice agent that dials and answers within the hours you configure, checks a suppression list before every call, and logs every disposition, including an opt-out, to the contact record the moment it happens.

What You Actually Get

A Virginia lead comes in at 7:52 on a Tuesday morning. Instead of a rep manually checking the clock and a spreadsheet before dialing, the system already knows the window doesn’t open for eight more minutes and holds the call until 8:00 sharp. When it fires, the caller ID resolves to a real, staffed number, the AI identifies itself, asks what the caller needs, and if they say stop at any point in that conversation or in a later text, the suppression flag is set immediately, before the next contact attempt could ever go out. None of that requires a person to remember a rule; the rule is the system.

What “Good” Compliance Coverage Looks Like

Where This Is the Wrong Tool

Be straight about the limits here. If your Virginia call volume is small, a handful of leads a week, a manual checklist and a disciplined team member checking the clock and a suppression spreadsheet by hand may genuinely be enough, and paying a monthly platform fee plus a per-minute rate is more infrastructure than the problem justifies. And no calling system, AI or human, fixes a legal problem that already exists in how your leads were sourced or consented; if the underlying list itself was built without proper consent, the fix is upstream of anything a dialer can do. This piece is about how you call once you have a legitimate lead. If the lead itself is the problem, look there first, and talk to counsel before you dial anything.

Virginia’s amended telemarketing law didn’t move the calling-hour goalposts insurance agencies were already supposed to be following under federal law. What it did was make the opt-out duration explicit, sharpen the caller ID standard, and, with the new joint liability provision, put the seller, not just whoever dialed the phone, on the hook for getting it wrong. If your agency works Virginia leads at any real volume, the fix isn’t a new policy document nobody reads twice; it’s a system where the calling window, the suppression list, and the opt-out log are enforced automatically instead of remembered occasionally. Price that against a $500 first violation and a $5,000 willful one, and decide from there.