TCPA and Buying SSDI Leads: What Disability Firms Need to Check in 2026

This is a summary of the compliance landscape as we understand it, written for firms evaluating lead purchases. It is not legal advice, and the telephone consumer protection rules in particular have moved several times in the last two years. Confirm current requirements with your own counsel and your state bar before you rely on any of it.

Buying leads is permitted. The question is never whether a disability firm can buy leads, it is whether the specific arrangement in front of it satisfies three separate bodies of rules at once.

One, the telephone rules

The Telephone Consumer Protection Act governs how the claimant can be contacted, and it applies to you as the caller even though someone else generated the lead.

The relevant recent history is worth knowing because vendors still misdescribe it. The Federal Communications Commission adopted a rule requiring one to one consent for calls made using an automatic telephone dialing system or an artificial or prerecorded voice, under which a consumer would have to consent to each seller individually. In January 2025 the Eleventh Circuit vacated that portion of the order in Insurance Marketing Coalition Ltd. v. FCC, holding that the Commission's added consent restrictions conflicted with the ordinary meaning of prior express consent under the statute. The Commission subsequently repealed the rule.

What that means practically is that the older consent framework governs, not that consent stopped mattering. You still need prior express written consent for regulated calls and texts, the consent still has to name who may contact the consumer, and you still need to be able to prove it years later. Assume this area will move again.

What to ask a vendor:

1. Show me the consent language exactly as the claimant saw it, on the page they saw it on.
2. Is your firm named, or named within a disclosed list the claimant could review?
3. Is the consent checkbox required in order to submit the form? It should not be, because consent conditioned on service is weaker consent.
4. Do you supply an independent consent certificate, such as TrustedForm, on every lead, and does it include a session replay?
5. How long do you retain the certificate, and can I retrieve it if I am sued in three years?

If a vendor cannot answer all five in writing, the price is irrelevant.

Two, the professional conduct rules

Under ABA Model Rule 7.2, a lawyer may pay for lead generation services, provided the generator does not state or imply that it is recommending the lawyer, does not create the impression that it is making the referral without payment, and the lawyer complies with the fee and fee-sharing rules. Your state's version is what actually binds you, and states diverge more here than almost anywhere else in the rules. Some require specific disclosures, some regulate the generator's advertising directly, and a few require filing or pre-approval of advertising materials.

The practical translation is that the marketplace has to behave like an advertising channel, not like a referral service. A platform that ranks or endorses particular firms to the claimant is a different animal from one that delivers a lead you decide to contact.

Three, the Social Security specific rule

This one gets missed constantly. Section 1140 of the Social Security Act prohibits advertising that conveys a false impression of affiliation with, approval by, or endorsement from the Social Security Administration. It reaches the wording, the visual design, the domain name, and the general impression. The Social Security Administration's Office of the Inspector General enforces it with civil monetary penalties, and it has pursued companies whose marketing implied an SSA connection.

If you are buying leads, this matters to you even though someone else ran the ad. Ask to see the creative and the landing page that produced the lead. Government-style seals, official-sounding domains, and copy that reads as though it comes from the agency are all risks that attach to the claimant relationship you are about to enter.

A practical checklist before the first purchase

• Consent language reviewed and archived, with your firm identifiable in it.
• Independent consent certificate supplied per lead, with a documented retention period.
• Vendor creative and landing pages reviewed against Section 1140.
• Your state's advertising rule reviewed against the arrangement, in writing, by counsel.
• Exclusivity terms in the contract, not just in the sales conversation.
• A written return or credit policy for leads that fail the stated criteria, with a defined window.
• Internal call and text policy documented, including consent revocation handling.

None of this is exotic. It is a two hour exercise once, and it is the difference between a channel you can scale and a channel that becomes a problem the first time a claimant complains.