Two Instruments, Two Questions
Australian outbound calling compliance looks complicated and is actually quite tidy once you see the structure. Two instruments do all the work, and each answers a different question.
| Instrument | Answers | Covers |
|---|---|---|
| Do Not Call Register Act 2006 (Cth) | Who may you call? | The Register itself, which numbers can be listed, the prohibition on calling listed numbers, and the washing mechanism that keeps you compliant |
| Telecommunications (Telemarketing and Research Calls) Industry Standard 2017 | When and how may you call? | Permitted hours, calling line identification, what information you must provide, and the obligation to end a call on request |
The ACMA monitors compliance with the Register, which has operated since May 2007. So this is not novel or emerging regulation — it is a settled framework that a great many businesses have simply never read, because outbound calling usually starts as an informal activity rather than a project with a compliance step.
Why this matters more than it used to
Two reasons. First, the ACMA has named scam disruption and consumer protection among its enforcement priorities, and legitimate outbound calling that behaves badly is harder to distinguish from the thing being disrupted. Second, and more practically: Australians now answer very few calls from unknown numbers. Compliance and effectiveness have converged. Presenting a real number, calling at a sensible hour and saying immediately who you are is both what the rules require and the only thing that gets a call answered at all.
Who You May Call
The Register works by prohibition: if a number is on it, a telemarketing call or marketing fax to that number is not permitted. So the first question is which numbers can be on it.
| Can it be registered? | Type of number |
|---|---|
| Yes | Australian numbers used for private or domestic purposes — the main category, covering household landlines and personal mobiles |
| Yes | Australian numbers used exclusively by government bodies, and emergency service numbers |
| Yes | Australian numbers used exclusively for transmitting and receiving faxes |
| No | General business telephone numbers used for ordinary business operations |
The registration side has its own timing rule that is easy to overlook from the caller’s side: when someone registers a number, telemarketers and fax marketers have 30 days to recognise that registration and stop contacting it. A person who registers today should notice a reduction after about a month, not immediately. That grace period is the mirror image of the washing rule below.
The Business Numbers Surprise
This deserves its own section because it is the single most misunderstood point in Australian outbound calling, and it cuts both ways.
General business telephone numbers cannot be registered on the Do Not Call Register. If you sell business-to-business and you are calling a company’s published main line, the Register does not prohibit that call.
Four reasons that is not a licence
1. The Industry Standard still applies in full. Hours, calling line identification, disclosure and the obligation to stop when asked do not depend on the Register. This is the mistake that gets businesses into trouble: they establish that B2B calling is permitted and conclude that nothing applies.
2. Sole traders blur the line. An enormous number of Australian businesses run on a personal mobile. If a number is used for private or domestic purposes it can be registered, and “it was in a business directory” is not a reliable defence about how a number is actually used.
3. A recipient can still complain. Not being able to register a number does not remove someone’s ability to complain about conduct that breaches the Standard.
4. It still has to work. A decision-maker who has been called at 7:55pm from a withheld number by someone who will not say who they work for is not a prospect. Legality is the floor, not the strategy.
The practical position for a B2B caller: wash anyway. Washing a list is inexpensive and it removes the sole-trader mobiles that are genuinely at risk. Treating the Register as irrelevant because your market is business is how a compliant campaign acquires a non-compliant tail.
The 30-Day Washing Rule
“Washing” means submitting your calling list to the Register operator, which returns it marked with which numbers are listed. The mechanism is what makes compliance achievable at all, because it gives you a defined reliance period.
30 days
How long you may rely on a washed list, from the date it was returned to you
30 days
How long marketers have to action a newly registered number
May 2007
When the Register began operating
2006
The Act that established it
The rule in plain terms: if you washed your list within the 30 days before making the call, and the Register did not indicate the number was listed, you are not in breach for having called it. The reliance runs from when the washed list was returned to you, not from when you submitted it.
Record the return date, not the submission date
Your 30 days start when the list came back. If you log the day you submitted it, you will overstate your window by however long the wash took — and the last few days of a campaign will be uncovered.
Wash on a schedule, not per campaign
A campaign that runs six weeks outlives a single wash. Either wash again mid-campaign or set a standing monthly wash so no call is ever made against data older than 30 days.
Keep the evidence
Retain the washed file and its return date. If a complaint is ever made about a specific call on a specific day, that record is the entire answer — and reconstructing it later is not possible.
Wash the list you dial, not the one you bought
Lists get merged, enriched and appended. The file that matters is the one the dialler actually loads. A wash of an earlier version proves nothing about the numbers you called.
Maintain your own suppression list too
Someone who asks you not to call again must be suppressed by you, regardless of the Register. This is your own list and it is permanent.
Be careful with purchased data
A vendor's assurance that a list is “DNC cleaned” is not your compliance. You need a wash you can date and evidence, tied to the file you are dialling.
When You May Call
The Industry Standard sets permitted hours, and it distinguishes between telemarketing calls and research calls. The difference matters because the Sunday position is not the same.
| Day | Telemarketing calls | Research calls |
|---|---|---|
| Monday to Friday | 9:00am – 8:00pm | 9:00am – 8:30pm |
| Saturday | 9:00am – 5:00pm | 9:00am – 5:00pm |
| Sunday | No calls | 9:00am – 5:00pm |
| Public holidays | No calls | No calls |
Three traps in that table, all of which produce breaches without anyone intending one.
The hours mistakes that actually happen
Time zones. The hours apply to the person you are calling, not to your office. A campaign dialling from Sydney at 8:15pm AEST is calling Perth in the afternoon — fine — but a campaign dialling from Perth at 5:15pm AWST is calling Sydney at 7:15pm, and one dialling Perth from Sydney at 9:15am AEST reaches Perth at 6:15am, well before the window opens. Both directions bite, and daylight saving makes it worse for half the year.
Public holidays are not national. Australia has state and regional public holidays. A dialler that only knows national holidays will call Melbourne on the Friday before the AFL Grand Final and Brisbane during the Ekka. The calendar has to be per state.
The last call of the day. A call attempted at 7:58pm that connects at 8:01pm started inside the window. But an autodialler that keeps placing attempts until 8:00pm exactly will place some after it. Stop the dialler with a margin — 7:45pm is a sensible operational cutoff.
A related note on the boundary between a telemarketing call and a research call: it is determined by what the call actually is, not by what you name the campaign. A “customer research survey” that concludes with an offer is doing telemarketing, and calling it research does not buy you the Sunday window.
The Number You Must Present
This one is unambiguous and frequently breached by accident. Callers must ensure that calling line identification (CLI) is enabled at the time they make or attempt to make a call.
So withheld or blocked numbers on outbound campaigns are not permitted. And there is a second, less-known obligation attached: a return contact number must remain available for at least 30 days from the original call.
| Requirement | What it means operationally | Common failure |
|---|---|---|
| CLI enabled on every call | Every outbound attempt presents a number | A trunk or dialler configured to withhold CLI, often inherited from a default setting nobody reviewed |
| A reachable return number | Somebody who calls the presented number back gets somewhere useful | Presenting an outbound-only number that rings out, or a number with no voicemail and no queue behind it |
| Available for at least 30 days | The number stays live and answered for a month after the call | Campaign numbers decommissioned the week the campaign ends |
The practical design that satisfies all three: present a single, permanent, answered business number on all outbound calling, and keep a queue or at minimum a voicemail behind it. Rotating numbers per campaign creates a 30-day obligation on each one, and rotating numbers to avoid being recognised is precisely the pattern the ACMA’s scam-disruption work is aimed at. If you want callbacks to reach the right team, route by the number dialled rather than by using disposable numbers — 1300 and 1800 numbers covers the options.
What You Must Say, and When to Stop
The Standard requires specific information to be provided, and the requirements differ slightly between telemarketing and research.
| Call type | You must provide |
|---|---|
| Telemarketing | The name of your employer, the purpose of the call, and who authorised the call |
| Research | The name of your employer and the purpose of the call |
The third element for telemarketing — who authorised the call — is the one routinely omitted, particularly where an agency or contractor is calling on behalf of a brand. If a call centre is dialling for a client, the person on the phone needs to be able to say on whose behalf they are calling.
Then the obligation that overrides everything else in your script: a caller must terminate the call immediately if the recipient asks, or indicates that they do not wish to continue.
"Indicates" is broader than "asks"
The obligation is not limited to someone saying the words “please take me off your list”. If a person indicates they do not want to continue the call, it ends. That means no rebuttal scripts deployed after a clear signal to stop, no “before you go, can I just”, and no handing the call to a supervisor to try again. Train to it explicitly, because standard sales training teaches the opposite reflex and the two are in direct conflict here. Log the request and add the number to your own permanent suppression list at the same time.
Exemptions and Their Limits
Certain callers and call types sit outside the telemarketing prohibition — broadly, categories recognised as serving a public interest, such as government bodies, charities and charitable institutions, religious organisations, educational institutions contacting their own communities, and political parties, representatives and candidates.
The critical limit on every exemption
An exemption from the Register’s prohibition is not an exemption from the Industry Standard. Permitted hours, calling line identification, the information you must provide and the requirement to stop when asked still apply. A charity calling donors at 9pm on a Sunday from a withheld number is not compliant merely because the Register does not prohibit it from calling. If you work in one of these sectors, this is the point worth taking away, because the exemption is often understood far more broadly than it actually operates.
Two further boundaries that come up constantly in ordinary business:
An existing customer relationship is not a general exemption. Whether a call to an existing customer is a telemarketing call depends on what the call is doing. A genuine service call — confirming an appointment, advising of a delivery, following up a fault — is a different animal from a call selling an additional product. If the purpose is to sell, treat it as telemarketing regardless of how long they have been a customer.
Consent is not a bypass of the Standard. Consent goes to whether you may contact someone. It does not extend your permitted hours, permit a withheld number, or relieve you of the obligation to identify yourself. The Standard governs the conduct of the call irrespective of how the number was obtained.
What Happens When an AI Makes the Call
This is the current live question, and the answer is simpler than the debate around it: the rules attach to the call, not to whether the voice on it is human.
An AI voice agent placing an outbound call is making a call. The Register applies to who it may call. The Industry Standard applies to the hours, the CLI, the disclosure and the obligation to stop. Nothing in either instrument turns on whether a person or a system is speaking.
Hours apply, and are easier to get right
An AI dialler observes a schedule perfectly if configured correctly — and observes a misconfigured schedule perfectly too, at scale. The configuration review matters far more than with human callers who would notice it was dark.
Disclosure applies in full
The employer's name, the purpose, and who authorised the call all have to be delivered by the agent. Build it into the opening turn rather than making it conditional on the person asking.
Stopping on request is the hard part
The obligation triggers when someone indicates they do not wish to continue — not only on an exact phrase. An agent must recognise a broad range of refusals and end the call, not attempt to re-engage.
Say what it is
Not because a specific rule on this page compels the disclosure, but because it is the defensible position: people who discover mid-call they have been speaking to a system react badly, and the transparency direction of Australian AI policy is one-way.
Scale is the risk multiplier
A human making a compliance error makes it a few dozen times. An automated system makes it thousands of times before anyone notices. Test the configuration against the rules before volume, not after.
Log everything
Automated calling makes evidence easy: every attempt timestamped, every opt-out recorded. Use that. Good logs turn a complaint into a two-minute answer.
The honest broader point: outbound AI calling is the application where the reputational risk is highest and the goodwill thinnest. Inbound AI — answering calls people chose to make — is a far safer place to start. Which calls to automate and AI voice agent cost and ROI both take that position, and it holds here too.
Making the Phone System Enforce It
Here is the argument this whole article has been building towards. Every rule above can be complied with by careful people remembering things, and that approach fails eventually, because people work late and campaigns get handed over.
Nearly all of it can instead be enforced by configuration, where it holds permanently.
| The rule | The configuration that enforces it |
|---|---|
| Permitted calling hours | Dial windows set per state, derived from the destination number rather than the caller's location, with an operational cutoff before the legal one. The system simply will not place the call outside the window |
| Public holidays | A per-state holiday calendar maintained once a year that blocks outbound campaigns. Not a note in someone's diary |
| CLI enabled | Presented number locked at the platform level so it cannot be withheld or overridden per campaign or per user |
| Reachable return number for 30 days | One permanent business number on all outbound calling, with a queue or voicemail behind it. No disposable campaign numbers |
| Stop on request | A one-click suppression action on the agent's screen that writes to a permanent do-not-contact list, checked automatically before any future dial |
| Washed within 30 days | A standing monthly wash of the dialling list, with the return date recorded and the washed file retained as evidence |
| Required disclosures | Scripted into the first ten seconds of the opening, and included in call-quality review rather than left to habit — AI call scoring can check every call rather than a sample |
| Evidence if challenged | Call logs with timestamps, recordings where lawful and consented, opt-out records, and washed-list history. Retained together |
Two closing observations worth more than the compliance value.
First, everything on that list also improves results. A real, answered number gets called back. A sensible calling hour reaches someone who can talk. Immediate identification beats the three seconds of ambiguity that makes people hang up. Honouring opt-outs stops you burning list you paid for. There is no trade-off here between compliant and effective, which is unusual and worth exploiting.
Second, the rules are the floor. Nothing in the Act or the Standard prevents a legal, well-configured campaign from being an unwelcome interruption. The businesses that do well on the phone in Australia in 2026 are mostly not the ones with the best-configured diallers — they are the ones being called back, because they answered properly the first time. Compliance keeps you out of trouble. It does not substitute for having a reason to call.