{"id":3765,"date":"2026-01-07T08:19:53","date_gmt":"2026-01-07T08:19:53","guid":{"rendered":"https:\/\/www.cartboss.io\/blog\/?p=3765"},"modified":"2026-01-07T08:19:53","modified_gmt":"2026-01-07T08:19:53","slug":"expressed-written-consent","status":"publish","type":"post","link":"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/","title":{"rendered":"Expressed Written Consent: A Clear Guide to SMS Marketing Compliance"},"content":{"rendered":"<p>When it comes to SMS marketing, <strong>expressed written consent<\/strong> is the undisputed king. It\u2019s the highest, clearest level of permission a customer can give you, making it the gold standard for compliance. Think of it as an <em>explicit<\/em>, <em>verifiable<\/em>, and <em>unambiguous<\/em> green light to send them marketing messages.<\/p>\n<p>This isn&#8217;t just about ticking a box; it&#8217;s about having a rock-solid, documented record that proves a user gave you their permission.<\/p>\n<h2>Decoding Expressed Written Consent<\/h2>\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/cdn.outrank.so\/92ffc327-9296-4ff3-bd85-4be6e9f36fa8\/4b16296d-43cb-498b-bbea-43fc4646484a\/expressed-written-consent-digital-consent.jpg\" loading=\"lazy\" alt=\"A person uses a stylus to sign a digital document on a tablet, showing written consent.\" \/><\/figure>\n<p>Imagine consent as a conversation with your customer. A casual nod or the simple fact they bought something from you isn&#8217;t enough to start hitting them with promotional texts. <strong>Expressed written consent<\/strong> is like your customer saying, &#8220;Yes, I absolutely want you to send me marketing messages at this phone number,&#8221; and then signing off on it.<\/p>\n<p>Now, this doesn&#8217;t mean they need to whip out a pen and sign a physical contract. In our digital world, this &#8220;signature&#8221; is an electronic action.<\/p>\n<p>It could be:<\/p>\n<ul>\n<li>Actively checking an <em>unchecked<\/em> box on a website form.<\/li>\n<li>Replying &#8220;YES&#8221; to a text message to confirm their subscription.<\/li>\n<li>Typing their phone number into a field specifically for signing up for texts.<\/li>\n<\/ul>\n<p>The common thread here is that the customer has to take a clear, deliberate action to opt in, <em>after<\/em> you&#8217;ve told them exactly what they&#8217;re signing up for.<\/p>\n<h3>Why This Level of Consent Is a Big Deal<\/h3>\n<p>Without this specific permission, you&#8217;re not just risking annoying your audience\u2014you&#8217;re flirting with serious legal violations. It&#8217;s the difference between being a welcome guest in their inbox and an unwanted spammer.<\/p>\n<p>Getting proper consent builds a foundation of trust that can turn casual browsers into loyal, engaged customers. It&#8217;s so important that it&#8217;s often a legal requirement in other areas, too, such as with <a href=\"https:\/\/www.bizlawpro.com\/what-is-a-liability-waiver\/\">explicit written agreements like liability waivers<\/a> where clear acceptance is non-negotiable.<\/p>\n<p>This consent-first approach is the bedrock of modern SMS marketing for a reason: it works. A recent analysis found that <strong>72% of consumers<\/strong> have made a purchase after receiving texts from a brand they trust. When you get permission the right way, SMS becomes a powerful revenue driver. You can dig deeper into how <a href=\"https:\/\/www.intradyn.com\/text-message-compliance-insights-2025\/\">text message compliance drives revenue recovery by reading the full report<\/a>.<\/p>\n<h3>Comparing the Different Tiers of Consent<\/h3>\n<p>To really nail this down, it helps to see how expressed written consent stacks up against its less formal cousins. Let&#8217;s break it down.<\/p>\n<h4>Forms of Consent in Marketing<\/h4>\n<table>\n<thead>\n<tr>\n<th>Consent Type<\/th>\n<th>What It Looks Like<\/th>\n<th>Best Use Case<\/th>\n<th>Legal Risk<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Implied Consent<\/strong><\/td>\n<td>A customer gives you their phone number to get a shipping update.<\/td>\n<td>Transactional messages (e.g., order confirmations, shipping alerts).<\/td>\n<td><strong>High<\/strong> for marketing. You can&#8217;t use this for promotional texts.<\/td>\n<\/tr>\n<tr>\n<td><strong>Express Consent<\/strong><\/td>\n<td>A customer says &#8220;yes&#8221; over the phone to receiving marketing calls.<\/td>\n<td>Verbal agreements, customer service interactions.<\/td>\n<td><strong>Medium<\/strong> for SMS. It&#8217;s better than implied, but lacks a written record for compliance.<\/td>\n<\/tr>\n<tr>\n<td><strong>Expressed Written Consent<\/strong><\/td>\n<td>A customer checks a box or replies &#8220;YES&#8221; to an opt-in text.<\/td>\n<td><strong>SMS and email marketing.<\/strong><\/td>\n<td><strong>Low<\/strong>. This is the gold standard and your best legal protection.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>As you can see, the other forms just don&#8217;t cut it for SMS marketing campaigns. For instance, <strong>express consent<\/strong> can be verbal, like saying &#8220;yes&#8221; on a call, but it lacks the crucial written record you need. We explore this more in our guide on <a href=\"https:\/\/www.cartboss.io\/blog\/what-is-expressed-consent\/\">what expressed consent means<\/a>.<\/p>\n<blockquote><p>The fundamental difference is the paper trail. Expressed written consent creates an auditable record that proves exactly when and how a customer agreed to get your marketing messages. This record is your best defense against any potential legal challenges.<\/p><\/blockquote>\n<p>By securing this clear, documented permission, you&#8217;re not just protecting your business. You&#8217;re also ensuring that you&#8217;re only talking to people who actually want to hear from you. This leads to better campaign performance, higher conversions, and a much healthier, more profitable relationship with your customers.<\/p>\n<h2>Getting to Grips with the Big Three: TCPA, GDPR, and CCPA<\/h2>\n<p>Understanding what &#8220;expressed written consent&#8221; means is the first step. The real challenge is applying that knowledge across a patchwork of different laws. When it comes to SMS marketing, several major regulations aren&#8217;t just suggestions\u2014they&#8217;re the rulebook. Ignoring them is simply not an option, and the penalties can be severe.<\/p>\n<p>For any e-commerce brand, three frameworks are absolutely critical: the <strong>Telephone Consumer Protection Act (TCPA)<\/strong> in the U.S., the <strong>General Data Protection Regulation (GDPR)<\/strong> in Europe, and the <strong>California Consumer Privacy Act (CCPA)<\/strong>. They each have a slightly different focus, but they all circle back to one core idea: <strong>customers have the right to control who messages them and how.<\/strong><\/p>\n<p>If you don&#8217;t comply, the fines are genuinely business-crippling. We&#8217;re talking penalties that can climb from <strong>$500 to $1,500 for a single text message<\/strong> under the TCPA. Over in Europe, GDPR violations can cost you up to <strong>\u20ac20 million or 4% of your global annual revenue<\/strong>, whichever is higher. These aren&#8217;t just scary numbers; they represent a real financial threat.<\/p>\n<h3>The TCPA: The Rulebook for Automated Texts<\/h3>\n<p>The Telephone Consumer Protection Act is the main federal law in the U.S. that governs telemarketing calls and, more importantly for us, texts. It gets especially strict when you&#8217;re using automated technology to send messages, which covers pretty much every SMS marketing platform out there.<\/p>\n<p>The TCPA demands that you get <strong>prior express written consent<\/strong> <em>before<\/em> sending a single marketing text using an autodialer. This isn&#8217;t a casual &#8220;okay.&#8221; The law wants to see a clear, undeniable choice from the consumer to receive your promos. A verbal nod or a past purchase just doesn&#8217;t cut it.<\/p>\n<p>One of the TCPA&#8217;s biggest gotchas is its &#8220;quiet hours&#8221; rule. The law generally restricts marketing messages to between <strong>8 a.m. and 9 p.m.<\/strong> in the <em>recipient&#8217;s<\/em> local time zone. Mess that up, and you could be facing a class-action lawsuit, even if you had consent. For a deeper dive, check out our guide on <a href=\"https:\/\/www.cartboss.io\/blog\/tcpa-and-text-messages\/\">TCPA and text message marketing compliance<\/a>.<\/p>\n<h3>GDPR: Consent is King in Europe<\/h3>\n<p>Across the pond, the General Data Protection Regulation sets the global benchmark for data privacy for anyone in the European Union. While the TCPA is all about the <em>act<\/em> of sending a message, GDPR is about the <em>handling of personal data<\/em>\u2014and yes, a phone number is personal data.<\/p>\n<p>Under GDPR, consent has to be:<\/p>\n<ul>\n<li><strong>Freely given:<\/strong> You can&#8217;t pressure or trick someone into saying yes.<\/li>\n<li><strong>Specific:<\/strong> Consent for one thing (like order updates) doesn&#8217;t mean consent for another (like weekly ads).<\/li>\n<li><strong>Informed:<\/strong> People need to know exactly what they&#8217;re signing up for.<\/li>\n<li><strong>Unambiguous:<\/strong> The user has to take a clear, positive action, like ticking an empty checkbox. Pre-checked boxes are a big no-no.<\/li>\n<\/ul>\n<blockquote><p>The heart of GDPR is that consent must be an active, deliberate choice. Silence or just ignoring a notice doesn&#8217;t count. You also have to make it just as easy for someone to withdraw their consent as it was to give it in the first place.<\/p><\/blockquote>\n<p>This is a high bar. Any gray area in how you collect consent could land you in hot water. You need to be able to prove, for every single person on your list, that they gave you clear, affirmative permission for the exact messages you&#8217;re sending.<\/p>\n<h3>CCPA: California&#8217;s Push for Transparency<\/h3>\n<p>The California Consumer Privacy Act (CCPA), now beefed up by the California Privacy Rights Act (CPRA), might be a state law, but its waves are felt across the country. It gives California residents powerful rights over their personal information, like the right to know what data you&#8217;ve collected and the right to tell you to stop selling it.<\/p>\n<p>For SMS marketing, the CCPA is all about transparency. You have to clearly tell people <em>at or before<\/em> the moment you collect their phone number what you&#8217;re gathering and why. This means your opt-in forms need to be upfront and honest about the fact that their number will be used for marketing texts.<\/p>\n<p>And it doesn&#8217;t stop there. The legal world is always shifting, and you have to keep an eye on regional privacy laws, such as <a href=\"https:\/\/blog.franfunnel.com\/2025\/08\/28\/texas-sb-140-what-franchise-brands-need-to-know-about-the-new-sms-rules\/\">new SMS rules like Texas SB 140<\/a>, which add even more layers of compliance.<\/p>\n<p>Getting all of this right might feel like a headache, but it\u2019s actually a huge competitive advantage. Brands that nail their consent process see way better engagement. Think about it: SMS has an almost unbelievable <strong>98% open rate<\/strong>, and <strong>95% of those messages are read within three minutes<\/strong>. A compliant list isn&#8217;t just a safe list\u2014it&#8217;s one of your most powerful sales channels. At the end of the day, respecting your customers&#8217; consent isn&#8217;t just a legal chore; it&#8217;s just plain good business.<\/p>\n<h2>How to Collect Expressed Written Consent the Right Way<\/h2>\n<p>Building a solid SMS marketing list isn\u2019t about sneaking past the rules; it&#8217;s about being upfront and earning your customers&#8217; trust. Getting <strong>expressed written consent<\/strong> is the absolute first step. Nail this from the beginning, and you&#8217;ll not only protect your business but also build a list of people who are genuinely excited to hear from you.<\/p>\n<p>Think of your opt-in process as a friendly, straightforward handshake. Your customer needs to know exactly what they\u2019re signing up for, who you are, and how they can leave the conversation anytime they want. This isn&#8217;t just polite\u2014it&#8217;s the law.<\/p>\n<p>The major legal frameworks that dictate how you get this consent are the TCPA, GDPR, and CCPA. Each has its own focus, but they all circle back to the same core idea.<\/p>\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/cdn.outrank.so\/92ffc327-9296-4ff3-bd85-4be6e9f36fa8\/3db57a24-004a-448b-be58-2f51cbd7a707\/expressed-written-consent-consent-laws.jpg\" loading=\"lazy\" alt=\"A process flow diagram illustrating three consent laws: TCPA, GDPR, and CCPA, with corresponding icons.\" \/><\/figure>\n<p>As you can see, while the laws might have different origins and specifics, they all demand clear, positive action from the user. No ambiguity allowed.<\/p>\n<h3>The Essential Elements of a Compliant Opt-In<\/h3>\n<p>To get valid <strong>expressed written consent<\/strong>, your sign-up forms, pop-ups, and checkout fields need to use language that&#8217;s crystal clear. Every single opt-in point should feel like a mini-contract where all the terms are laid out in plain sight.<\/p>\n<p>Here are the non-negotiables your disclosure must include:<\/p>\n<ul>\n<li><strong>Business Identity:<\/strong> Say who you are. Don&#8217;t hide behind a vague brand name; use your official business name so people know exactly who will be texting them.<\/li>\n<li><strong>Message Purpose:<\/strong> Be direct about what you&#8217;ll be sending. Let them know they&#8217;ll get promotional and marketing messages, like sale alerts, new product drops, or cart reminders.<\/li>\n<li><strong>Message Frequency:<\/strong> Give them a ballpark idea of how often they&#8217;ll hear from you. Simple phrases like &#8220;Msg frequency varies&#8221; or &#8220;Up to 4 msgs\/month&#8221; work perfectly.<\/li>\n<li><strong>&#8220;Msg &amp; Data Rates May Apply&#8221; Clause:<\/strong> This is a mandatory heads-up. It tells users that their mobile carrier might charge them for the texts they receive from you.<\/li>\n<li><strong>Opt-Out Instructions:<\/strong> Make it easy to leave. Provide dead-simple instructions like &#8220;Reply STOP to cancel&#8221; and a way to get help, such as &#8220;Reply HELP for help.&#8221;<\/li>\n<\/ul>\n<blockquote><p><strong>Crucial Takeaway:<\/strong> If you remember one thing, make it this: consent requires an <em>affirmative action<\/em>. This means the user has to physically check an empty box. <strong>Pre-checked boxes are a huge no-go<\/strong> under TCPA and GDPR because they don&#8217;t prove someone consciously and willingly said &#8220;yes.&#8221;<\/p><\/blockquote>\n<h3>The Gold Standard: Using a Double Opt-In Process<\/h3>\n<p>While a single opt-in (like checking a box) meets the minimum legal bar, the <strong>double opt-in<\/strong> process is the undisputed champion for creating a bulletproof record of consent. It just adds one quick, extra step that confirms the user&#8217;s phone number and their intent to subscribe.<\/p>\n<p>It\u2019s a simple three-step dance:<\/p>\n<ol>\n<li><strong>Initial Opt-In:<\/strong> A user pops their phone number into a form and checks the consent box on your website.<\/li>\n<li><strong>Confirmation Text:<\/strong> Right away, they get an automated text asking them to confirm. Something like, &#8220;Reply YES to confirm you want to receive marketing texts from [Your Brand Name].&#8221;<\/li>\n<li><strong>Final Confirmation:<\/strong> Once they text back &#8220;YES,&#8221; they&#8217;re officially on your list. Now you have a timestamped, undeniable record that they agreed to be there.<\/li>\n<\/ol>\n<p>This two-step verification almost completely wipes out the risk of typos, accidental sign-ups, or someone pranking their friend by signing up their number. That extra step is your best defense for proving you have clear <strong>expressed written consent<\/strong>. For more tips on building your list the right way, check out our deep dive into the <a href=\"https:\/\/www.cartboss.io\/blog\/sms-opt-in\/\">SMS opt-in process<\/a>.<\/p>\n<h3>Adapting to Global Preferences<\/h3>\n<p>It\u2019s also smart to remember that what feels normal for consent can change depending on where your customers are. For instance, consumers in the APAC region, which makes up a massive <strong>30% of the global SMS market<\/strong>, have a strong preference for less frequent messages\u2014ideally just one per week. They also expect crystal-clear consent methods before any marketing texts land on their phone.<\/p>\n<p>By building your SMS list on these solid principles, you create a high-quality, engaged audience that actually wants to hear from you. Suddenly, compliance isn&#8217;t a chore; it&#8217;s a powerful tool for boosting conversions.<\/p>\n<h2>Automating Compliance for Cart Recovery<\/h2>\n<p><iframe style=\"aspect-ratio: 16 \/ 9;\" src=\"https:\/\/www.youtube.com\/embed\/lXylV56JJkY\" loading=\"lazy\" width=\"100%\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\n<p>Knowing the rules of <strong>expressed written consent<\/strong> is one thing. Actually trying to manage every opt-in, timestamp, and legal disclosure for a busy e-commerce store by hand? That\u2019s a recipe for disaster. This is where technology steps in, transforming compliance from a constant headache into a process that just runs in the background.<\/p>\n<p>This is especially true for abandoned cart recovery. A text that lands without permission feels like spam, pure and simple, and can seriously damage your brand&#8217;s reputation. But a message sent with clear, prior consent feels like a genuinely helpful reminder\u2014a welcome service, not an intrusion.<\/p>\n<h3>Letting Technology Handle the Details<\/h3>\n<p>Platforms built specifically for compliance, like CartBoss, have these legal requirements baked into their DNA. Instead of forcing you to become a legal expert overnight, the tool does the heavy lifting. It collects and manages consent records, making sure every single message you send is on solid legal ground. It&#8217;s the key to turning those lost sales into revenue without stepping on any toes.<\/p>\n<p>These systems put several critical compliance tasks on autopilot:<\/p>\n<ul>\n<li><strong>Compliant Opt-In Language:<\/strong> They automatically generate the specific legal disclosures you need on your checkout pages and pop-ups.<\/li>\n<li><strong>Timestamping Consent:<\/strong> A verifiable, digital record is created the exact moment a customer says &#8220;yes.&#8221;<\/li>\n<li><strong>Effortless Unsubscribes:<\/strong> &#8220;STOP&#8221; requests are processed instantly, honoring opt-outs and keeping your list clean and engaged.<\/li>\n<\/ul>\n<p>By automating these steps, you slash the risk of human error and build a rock-solid, auditable trail of consent for every subscriber. This is a huge reason why using a dedicated <a href=\"https:\/\/www.cartboss.io\/blog\/auto-sms-responder\/\">auto SMS responder<\/a> is so much safer and more effective than trying to juggle this stuff manually.<\/p>\n<h3>Features That Build Trust and Drive Sales<\/h3>\n<p>But modern cart recovery tools are about more than just staying out of trouble. They weave in features that make the entire consent process a breeze for both you and your customer, which directly leads to a better user experience and, you guessed it, higher conversion rates.<\/p>\n<p>This screenshot shows how features like GDPR and CCPA compliance are built right into the system, working hand-in-hand with tools that make the customer&#8217;s journey smoother. It proves that compliance and performance aren&#8217;t enemies; they actually boost each other. For example, things like pre-filled checkouts and automatic language detection make it dead simple for customers to finish their purchase, while built-in compliance ensures you have the <strong>expressed written consent<\/strong> needed to ping them if they get distracted.<\/p>\n<blockquote><p>When a customer receives a cart reminder they explicitly agreed to, it reinforces trust. They feel respected and understood, which is crucial for building long-term loyalty and encouraging them to complete the purchase.<\/p><\/blockquote>\n<p>This focus on a trust-based relationship isn&#8217;t just a nice-to-have; it&#8217;s just good business. Companies that prioritize clear compliance are the ones that convert abandoned carts at higher rates because their messages are both wanted and welcome. Ultimately, automating compliance isn\u2019t just about avoiding fines\u2014it&#8217;s about building a sustainable, high-performing marketing channel built on a foundation of customer trust.<\/p>\n<h2>Best Practices for Managing Consent Records<\/h2>\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/cdn.outrank.so\/92ffc327-9296-4ff3-bd85-4be6e9f36fa8\/134dbf7e-339d-4afe-8a13-491ca5350dbd\/expressed-written-consent-audit-app.jpg\" loading=\"lazy\" alt=\"A tablet displaying an 'Audit Ready' application with colorful icons and data tables on a wooden desk.\" \/><\/figure>\n<p>Getting that <strong>expressed written consent<\/strong> is a great first step, but it&#8217;s only half the battle. The real challenge\u2014and what truly protects your business\u2014is being able to prove you have it.<\/p>\n<p>Think of it this way: meticulous recordkeeping isn&#8217;t just a defensive move. It\u2019s the sign of a mature, responsible, and trustworthy SMS marketing program. Without a clear and organized log, your claim to have consent is just that\u2014a claim.<\/p>\n<p>If you ever face a legal challenge or an audit, the burden of proof is squarely on your shoulders. You\u2019ll need to produce undeniable evidence that a specific customer gave you the green light to send them marketing texts. This is why being &#8220;audit-ready&#8221; at all times isn&#8217;t just a good idea; it&#8217;s non-negotiable.<\/p>\n<h3>Creating an Audit-Proof Consent Log<\/h3>\n<p>Your consent records are your shield. Each entry needs to tell the complete story of a user&#8217;s opt-in journey, leaving zero room for doubt. A vague or incomplete log won\u2019t hold up under scrutiny, so precision is everything.<\/p>\n<p>For every single person on your list, you need to capture and securely store these key data points:<\/p>\n<ul>\n<li><strong>Subscriber\u2019s Phone Number:<\/strong> The unique ID for each consent record.<\/li>\n<li><strong>Timestamp of Consent:<\/strong> The exact date and time the user opted in, right down to the second.<\/li>\n<li><strong>Source of Consent:<\/strong> The specific URL where the opt-in happened (e.g., checkout page, a pop-up, or a dedicated landing page).<\/li>\n<li><strong>IP Address:<\/strong> The user&#8217;s IP address at the moment they signed up, which adds another layer of verification.<\/li>\n<li><strong>Exact Opt-In Language:<\/strong> A screenshot or a copy of the precise disclosure language the user saw when they consented.<\/li>\n<\/ul>\n<p>That last point is absolutely critical. You have to be able to show exactly what the customer agreed to, including all the details about message frequency and purpose.<\/p>\n<blockquote><p>Maintaining this detailed log transforms consent from an abstract idea into a concrete, verifiable fact. It\u2019s the digital equivalent of a signed contract, giving you the hard evidence you need to defend your marketing practices with confidence.<\/p><\/blockquote>\n<h3>Record Retention and System Integrity<\/h3>\n<p>Keeping these records isn&#8217;t a one-and-done task. You should hold onto consent logs for as long as a subscriber is active and for a good while after they unsubscribe. A common recommendation is to keep them for at least <strong>four years<\/strong> to cover the statute of limitations for legal claims, like those under the TCPA.<\/p>\n<p>This is where a platform like CartBoss becomes invaluable. It automates this entire process for you. The moment a user opts in, it systematically captures and archives every piece of required information, ensuring your records are always complete and audit-ready. This approach eliminates the risk of human error and builds your <a href=\"https:\/\/www.cartboss.io\/blog\/sms-marketing-compliance\/\">SMS marketing compliance<\/a> on a rock-solid foundation.<\/p>\n<h2>Frequently Asked Questions About SMS Consent<\/h2>\n<p>Even when you feel like you&#8217;ve got a handle on the rules, the nitty-gritty of <strong>expressed written consent<\/strong> can still throw a few curveballs your way. Let&#8217;s tackle some of the most common questions we see from e-commerce store owners.<\/p>\n<p>Think of this as your quick-reference guide for making sure every part of your SMS strategy is buttoned up and compliant. Getting these details right is what separates a trustworthy, effective marketing channel from a risky one.<\/p>\n<h3>Is a Pre-Checked Box Considered Valid Consent?<\/h3>\n<p>Nope, not even close. This is one of the most common compliance slip-ups we see, and it&#8217;s a clear violation under both TCPA and GDPR. Consent has to be a conscious, &#8220;yes, I want this&#8221; action from your customer.<\/p>\n<p>When a box is already checked, the user isn&#8217;t actively choosing to opt in\u2014they&#8217;re just failing to opt out. Regulators see right through that. To stay in the clear, that checkbox must always start empty, forcing the user to physically click it themselves.<\/p>\n<h3>How Long Does Expressed Written Consent Last?<\/h3>\n<p>Legally speaking, <strong>expressed written consent<\/strong> doesn&#8217;t have an expiration date. It&#8217;s good until the customer decides to revoke it by unsubscribing. But that doesn&#8217;t mean you should just collect it and forget it.<\/p>\n<p>The best practice is to treat your SMS list like a garden that needs tending. Every so often, it&#8217;s smart to re-engage your subscribers and make sure they still want to hear from you. This simple step helps you keep a clean, active list of people who are actually interested and shows you\u2019re serious about compliance.<\/p>\n<blockquote><p>A key principle here is that permission should be ongoing, not just a one-time thing. Regularly confirming interest ensures you\u2019re only messaging a receptive audience, which boosts campaign performance and builds real trust.<\/p><\/blockquote>\n<h3>Can I Text Customers About Their Order Without It?<\/h3>\n<p>Yes, you can\u2014but only for purely transactional messages. Things like order confirmations, shipping updates, or delivery notifications are considered informational, and you don&#8217;t need marketing consent for them.<\/p>\n<p>The line gets crossed the second you mix in any promotion. If your shipping confirmation also includes a &#8220;10% off your next purchase&#8221; coupon, it instantly becomes a marketing message. For any text that blends the two, you absolutely must have prior <strong>expressed written consent<\/strong>.<\/p>\n<h3>What If My SMS List Was Built Without Proper Consent?<\/h3>\n<p>If you have even the slightest doubt about how your list was built, the safest move is to stop sending it marketing texts immediately. Continuing to message a list that isn&#8217;t compliant is just asking for trouble, opening your business up to huge legal and financial risks.<\/p>\n<p>The right way to fix this is with a re-permissioning campaign. You send one final, purely informational message asking subscribers to explicitly opt-in again (e.g., &#8220;Reply YES to keep getting exclusive deals from us&#8221;). Sure, you might lose some subscribers, but you&#8217;ll be left with a smaller, fully compliant list of people who have actively told you they want to be there.<\/p>\n<hr \/>\n<p>Ready to turn abandoned carts into revenue without the compliance headaches? <strong>CartBoss<\/strong> automates SMS marketing the right way, with built-in features to manage expressed written consent effortlessly. <a href=\"https:\/\/www.cartboss.io\">Start recovering lost sales today<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Learn expressed written consent best practices for SMS marketing and stay compliant with TCPA, GDPR, and CCPA while building trust.<\/p>\n","protected":false},"author":4,"featured_media":3766,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19,1],"tags":[],"class_list":["post-3765","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-gdpr-legal","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Expressed Written Consent: A Clear Guide to SMS Marketing Compliance - CartBoss<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Expressed Written Consent: A Clear Guide to SMS Marketing Compliance - CartBoss\" \/>\n<meta property=\"og:description\" content=\"Learn expressed written consent best practices for SMS marketing and stay compliant with TCPA, GDPR, and CCPA while building trust.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/\" \/>\n<meta property=\"og:site_name\" content=\"CartBoss\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/CartBoss.io\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-01-07T08:19:53+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.cartboss.io\/blog\/wp-content\/uploads\/2026\/01\/thumbnail-4.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1820\" \/>\n\t<meta property=\"og:image:height\" content=\"1024\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Tadej Bogataj\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Tadej Bogataj\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"16 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/\"},\"author\":{\"name\":\"Tadej Bogataj\",\"@id\":\"https:\/\/www.cartboss.io\/blog\/#\/schema\/person\/b8b99f1f292bcce6338c7bc882eac6dc\"},\"headline\":\"Expressed Written Consent: A Clear Guide to SMS Marketing Compliance\",\"datePublished\":\"2026-01-07T08:19:53+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/\"},\"wordCount\":3653,\"publisher\":{\"@id\":\"https:\/\/www.cartboss.io\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.cartboss.io\/blog\/wp-content\/uploads\/2026\/01\/thumbnail-4.jpg\",\"articleSection\":[\"GDPR\/Legal\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/\",\"url\":\"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/\",\"name\":\"Expressed Written Consent: A Clear Guide to SMS Marketing Compliance - CartBoss\",\"isPartOf\":{\"@id\":\"https:\/\/www.cartboss.io\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.cartboss.io\/blog\/wp-content\/uploads\/2026\/01\/thumbnail-4.jpg\",\"datePublished\":\"2026-01-07T08:19:53+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/#primaryimage\",\"url\":\"https:\/\/www.cartboss.io\/blog\/wp-content\/uploads\/2026\/01\/thumbnail-4.jpg\",\"contentUrl\":\"https:\/\/www.cartboss.io\/blog\/wp-content\/uploads\/2026\/01\/thumbnail-4.jpg\",\"width\":1820,\"height\":1024},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.cartboss.io\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Uncategorized\",\"item\":\"https:\/\/www.cartboss.io\/blog\/category\/uncategorized\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Expressed Written Consent: A Clear Guide to SMS Marketing Compliance\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.cartboss.io\/blog\/#website\",\"url\":\"https:\/\/www.cartboss.io\/blog\/\",\"name\":\"CartBoss\",\"description\":\"Blog\",\"publisher\":{\"@id\":\"https:\/\/www.cartboss.io\/blog\/#organization\"},\"alternateName\":\"Recover abandoned carts with SMS\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.cartboss.io\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.cartboss.io\/blog\/#organization\",\"name\":\"CartBoss\",\"url\":\"https:\/\/www.cartboss.io\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.cartboss.io\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.cartboss.io\/blog\/wp-content\/uploads\/2024\/11\/logo-black.png\",\"contentUrl\":\"https:\/\/www.cartboss.io\/blog\/wp-content\/uploads\/2024\/11\/logo-black.png\",\"width\":1318,\"height\":273,\"caption\":\"CartBoss\"},\"image\":{\"@id\":\"https:\/\/www.cartboss.io\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/CartBoss.io\/\",\"https:\/\/www.linkedin.com\/company\/cart-boss\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.cartboss.io\/blog\/#\/schema\/person\/b8b99f1f292bcce6338c7bc882eac6dc\",\"name\":\"Tadej Bogataj\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/a4c9df84b93d121b6410aee2290a39c4d32b73208761377b6d41468ba586d4c8?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/a4c9df84b93d121b6410aee2290a39c4d32b73208761377b6d41468ba586d4c8?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/a4c9df84b93d121b6410aee2290a39c4d32b73208761377b6d41468ba586d4c8?s=96&d=mm&r=g\",\"caption\":\"Tadej Bogataj\"},\"description\":\"Tadej Bogataj is aa entrepreneur and the co-founder of CartBoss, a leading SaaS solution designed to recover abandoned shopping carts through automated and personalized SMS campaigns. With years of experience in the eCommerce industry, Tadej has dedicated his career to optimizing online shopping experiences and helping businesses boost their revenue with innovative and user-friendly solutions. Tadej's journey into eCommerce began with a passion for technology and problem-solving. Recognizing the limitations of traditional email-based recovery methods, he and his team developed CartBoss, a plug-and-play tool that simplifies cart recovery for online stores. Their solution leverages the immediacy and personalization of SMS to reconnect with customers in real time, achieving higher conversion rates and enhancing user engagement. Today, CartBoss serves clients worldwide, offering seamless integration with platforms like WooCommerce, Shopify, and Magento. In addition to his work with CartBoss, Tadej is a thought leader in the field of SMS marketing, sharing valuable insights on topics such as cart abandonment recovery, customer engagement strategies, and the future of eCommerce. He has been featured in podcasts, webinars, and articles, highlighting the power of automation and simplicity in solving complex business challenges. When Tadej isn\u2019t innovating in the tech space, he enjoys collaborating with businesses of all sizes to understand their unique needs and craft tailored solutions. His vision is to empower eCommerce businesses to grow by removing barriers and enhancing customer communication. Stay tuned to Tadej's articles on our blog for expert advice, actionable tips, and the latest trends in eCommerce optimization and SMS marketing. Whether you're an eCommerce veteran or just starting out, Tadej's insights are sure to help you take your online store to the next level.\",\"url\":\"https:\/\/www.cartboss.io\/blog\/author\/tadej\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Expressed Written Consent: A Clear Guide to SMS Marketing Compliance - CartBoss","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/","og_locale":"en_US","og_type":"article","og_title":"Expressed Written Consent: A Clear Guide to SMS Marketing Compliance - CartBoss","og_description":"Learn expressed written consent best practices for SMS marketing and stay compliant with TCPA, GDPR, and CCPA while building trust.","og_url":"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/","og_site_name":"CartBoss","article_publisher":"https:\/\/www.facebook.com\/CartBoss.io\/","article_published_time":"2026-01-07T08:19:53+00:00","og_image":[{"width":1820,"height":1024,"url":"https:\/\/www.cartboss.io\/blog\/wp-content\/uploads\/2026\/01\/thumbnail-4.jpg","type":"image\/jpeg"}],"author":"Tadej Bogataj","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Tadej Bogataj","Est. reading time":"16 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/#article","isPartOf":{"@id":"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/"},"author":{"name":"Tadej Bogataj","@id":"https:\/\/www.cartboss.io\/blog\/#\/schema\/person\/b8b99f1f292bcce6338c7bc882eac6dc"},"headline":"Expressed Written Consent: A Clear Guide to SMS Marketing Compliance","datePublished":"2026-01-07T08:19:53+00:00","mainEntityOfPage":{"@id":"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/"},"wordCount":3653,"publisher":{"@id":"https:\/\/www.cartboss.io\/blog\/#organization"},"image":{"@id":"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/#primaryimage"},"thumbnailUrl":"https:\/\/www.cartboss.io\/blog\/wp-content\/uploads\/2026\/01\/thumbnail-4.jpg","articleSection":["GDPR\/Legal"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/","url":"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/","name":"Expressed Written Consent: A Clear Guide to SMS Marketing Compliance - CartBoss","isPartOf":{"@id":"https:\/\/www.cartboss.io\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/#primaryimage"},"image":{"@id":"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/#primaryimage"},"thumbnailUrl":"https:\/\/www.cartboss.io\/blog\/wp-content\/uploads\/2026\/01\/thumbnail-4.jpg","datePublished":"2026-01-07T08:19:53+00:00","breadcrumb":{"@id":"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/#primaryimage","url":"https:\/\/www.cartboss.io\/blog\/wp-content\/uploads\/2026\/01\/thumbnail-4.jpg","contentUrl":"https:\/\/www.cartboss.io\/blog\/wp-content\/uploads\/2026\/01\/thumbnail-4.jpg","width":1820,"height":1024},{"@type":"BreadcrumbList","@id":"https:\/\/www.cartboss.io\/blog\/expressed-written-consent\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.cartboss.io\/blog\/"},{"@type":"ListItem","position":2,"name":"Uncategorized","item":"https:\/\/www.cartboss.io\/blog\/category\/uncategorized\/"},{"@type":"ListItem","position":3,"name":"Expressed Written Consent: A Clear Guide to SMS Marketing Compliance"}]},{"@type":"WebSite","@id":"https:\/\/www.cartboss.io\/blog\/#website","url":"https:\/\/www.cartboss.io\/blog\/","name":"CartBoss","description":"Blog","publisher":{"@id":"https:\/\/www.cartboss.io\/blog\/#organization"},"alternateName":"Recover abandoned carts with SMS","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.cartboss.io\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.cartboss.io\/blog\/#organization","name":"CartBoss","url":"https:\/\/www.cartboss.io\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cartboss.io\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.cartboss.io\/blog\/wp-content\/uploads\/2024\/11\/logo-black.png","contentUrl":"https:\/\/www.cartboss.io\/blog\/wp-content\/uploads\/2024\/11\/logo-black.png","width":1318,"height":273,"caption":"CartBoss"},"image":{"@id":"https:\/\/www.cartboss.io\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/CartBoss.io\/","https:\/\/www.linkedin.com\/company\/cart-boss\/"]},{"@type":"Person","@id":"https:\/\/www.cartboss.io\/blog\/#\/schema\/person\/b8b99f1f292bcce6338c7bc882eac6dc","name":"Tadej Bogataj","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/a4c9df84b93d121b6410aee2290a39c4d32b73208761377b6d41468ba586d4c8?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/a4c9df84b93d121b6410aee2290a39c4d32b73208761377b6d41468ba586d4c8?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a4c9df84b93d121b6410aee2290a39c4d32b73208761377b6d41468ba586d4c8?s=96&d=mm&r=g","caption":"Tadej Bogataj"},"description":"Tadej Bogataj is aa entrepreneur and the co-founder of CartBoss, a leading SaaS solution designed to recover abandoned shopping carts through automated and personalized SMS campaigns. With years of experience in the eCommerce industry, Tadej has dedicated his career to optimizing online shopping experiences and helping businesses boost their revenue with innovative and user-friendly solutions. Tadej's journey into eCommerce began with a passion for technology and problem-solving. Recognizing the limitations of traditional email-based recovery methods, he and his team developed CartBoss, a plug-and-play tool that simplifies cart recovery for online stores. Their solution leverages the immediacy and personalization of SMS to reconnect with customers in real time, achieving higher conversion rates and enhancing user engagement. Today, CartBoss serves clients worldwide, offering seamless integration with platforms like WooCommerce, Shopify, and Magento. In addition to his work with CartBoss, Tadej is a thought leader in the field of SMS marketing, sharing valuable insights on topics such as cart abandonment recovery, customer engagement strategies, and the future of eCommerce. He has been featured in podcasts, webinars, and articles, highlighting the power of automation and simplicity in solving complex business challenges. When Tadej isn\u2019t innovating in the tech space, he enjoys collaborating with businesses of all sizes to understand their unique needs and craft tailored solutions. His vision is to empower eCommerce businesses to grow by removing barriers and enhancing customer communication. Stay tuned to Tadej's articles on our blog for expert advice, actionable tips, and the latest trends in eCommerce optimization and SMS marketing. Whether you're an eCommerce veteran or just starting out, Tadej's insights are sure to help you take your online store to the next level.","url":"https:\/\/www.cartboss.io\/blog\/author\/tadej\/"}]}},"menu_order":0,"_links":{"self":[{"href":"https:\/\/www.cartboss.io\/blog\/wp-json\/wp\/v2\/posts\/3765","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cartboss.io\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cartboss.io\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cartboss.io\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cartboss.io\/blog\/wp-json\/wp\/v2\/comments?post=3765"}],"version-history":[{"count":2,"href":"https:\/\/www.cartboss.io\/blog\/wp-json\/wp\/v2\/posts\/3765\/revisions"}],"predecessor-version":[{"id":3774,"href":"https:\/\/www.cartboss.io\/blog\/wp-json\/wp\/v2\/posts\/3765\/revisions\/3774"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cartboss.io\/blog\/wp-json\/wp\/v2\/media\/3766"}],"wp:attachment":[{"href":"https:\/\/www.cartboss.io\/blog\/wp-json\/wp\/v2\/media?parent=3765"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cartboss.io\/blog\/wp-json\/wp\/v2\/categories?post=3765"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cartboss.io\/blog\/wp-json\/wp\/v2\/tags?post=3765"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}