CallComply
Regulation8 min read8 July 2026

The Do Not Call Register: what Australian businesses actually have to do

If your business makes outbound sales calls, the Do Not Call Register is not optional. Here is what the law requires, in plain English, and why a washed list is only half the job.

If your business makes outbound sales calls to Australian consumers, the Do Not Call Register is not a nice-to-have or a best practice. It is the law, it is enforced, and the obligation sits on you even when someone else does the dialling. Most businesses know the register exists. Fewer know exactly what it requires, and fewer still can prove they did it.

Here is the plain-English version.

What the register is

The Do Not Call Register is a national database where people opt their Australian phone, mobile and fax numbers out of receiving most unsolicited telemarketing. Registration is free, takes effect once, and lasts indefinitely unless the number owner removes it. As at the ACMA's own figures, there are around 12.2 million numbers on it, so this is not a fringe list. For a great many of the people your sales team dials, being on the register is the default.

The register is managed by the ACMA under the Do Not Call Register Act 2006, supported by the Do Not Call Register Regulations 2017 and the Telecommunications (Telemarketing and Research Calls) Industry Standard 2017. Those three instruments, not a single rulebook, are where your obligations actually live.

One point that trips businesses up: the register does not technically block your call. It does not stop the phone from ringing. It defines which numbers you are not allowed to call, and it leaves the compliance to you. Calling a registered number, or arranging for one to be called, is what breaks the law, not the register failing to intercept you.

Does it even apply to you? Usually, yes

The Act defines a telemarketing call as a voice call with a commercial-type purpose: offering, supplying, advertising or soliciting goods or services, land, a business or investment opportunity, or donations. If your outbound calls pitch a product or service, you are squarely inside the definition.

A few call types are carved out and are not treated as telemarketing, including calls about a product recall, fault verification, appointment reminders or rescheduling, payments, and genuinely solicited calls responding to a customer's own order, request or enquiry. The distinction is purpose. A follow-up a customer asked for is not telemarketing. A cold pitch dressed up as a courtesy call is.

The core obligation: wash your list

The central rule is straightforward. You must not make a telemarketing call to a number on the register unless you have consent. To know which numbers are on it, you check, or "wash", your calling list against the register through the industry portal, after opening an account and buying a subscription.

The timing rule is the one to burn into your process. A wash is valid for 30 days. If you washed your list within the 30 days before a call, and the register did not flag that number, you are not in breach even if the number was in fact registered. Let the wash go stale past 30 days and that protection lapses. For any business calling continuously, this means washing is not a one-off setup task. It is a recurring discipline, and every list that ages past its window has to be rewashed before it is used again.

There is also a narrow safety net for genuine errors. If a call is made to a registered number by mistake, and you took reasonable precautions and exercised due diligence to avoid it, you will not be penalised for that mistake. "Reasonable precautions and due diligence" is the operative phrase, and it is not satisfied by hoping. It is satisfied by a documented, current washing process you can actually show.

Consent has a shelf life

Where you rely on consent instead of washing, know that consent is not permanent. Express consent, where someone specifically agrees to be contacted, is treated as expiring three months after it was given, unless it was given for a set period or indefinitely.

Consent can also be inferred from an existing relationship, but the boundary is tighter than businesses like to assume. Someone holding an XYZ Bank credit card might reasonably expect calls about other XYZ Bank products. That same person receiving a cold call from a separately branded subsidiary is a different matter, and a corporate relationship on an org chart does not manufacture consent. And the moment a person says they do not want to be contacted, inferred consent ends immediately. It cannot be inferred again.

The obligation follows you to your outsourcer

This is the part that catches businesses who thought they had offloaded the risk. If you engage a third party, an onshore call centre or an overseas one, to make calls on your behalf, the obligation does not transfer with the work. Both the party making the call and the business on whose behalf it is made must comply. The Act goes further: it places a positive obligation on you to write compliance requirements into the contract with your telemarketer, and there are potential penalties simply for failing to include those provisions.

The ACMA is explicit that the register's rules apply no matter where the call originates. A telemarketer dialling from overseas is bound the same as one dialling from Melbourne. And where an overseas operator breaches the rules, the ACMA pursues the Australian business behind the arrangement. Outsourcing the dialling does not outsource the liability. It just puts a layer between you and the calls you are still answerable for.

Exemptions exist, but read them narrowly

Some organisations sit outside parts of the prohibition. The exempt categories include registered charities, educational institutions, government bodies, registered political parties, and social researchers or opinion pollsters conducting genuine research. Even then, those callers remain subject to the telemarketing and research call industry standards, so "exempt" does not mean "unregulated".

If you think you qualify, confirm it against the Act rather than assuming, because the exemption is category-specific and the edges matter. For the overwhelming majority of commercial sales operations, no exemption applies and the full obligation stands.

Washing the list is half the job. Proving compliance is the other half.

Here is where the real exposure sits, and it is not where most businesses look.

Washing a list is a data task, and it is largely solved: you wash, you get a validity window, you rewash. What that process does not tell you is what your salespeople actually said and did on the live calls. Did the agent identify the business and the purpose of the call at the top, as the industry standard requires? Did they end the call the moment someone asked them to stop? Did a call go out to a number that should have been suppressed because a list was used a day past its window? Did anyone lean on a "relationship" to infer consent that had already been withdrawn?

When the ACMA acts, it acts on complaints and on evidence about what happened on calls. "Our list was washed" answers one question. It does not answer whether your team, on the specific call that generated the complaint, did what the rules require. And if you review calls the traditional way, by sampling a small percentage, you are hearing a fraction of your calls, and it is never the fraction that produced the problem.

We know this pattern from the inside. In a multi-brand education group we built and scaled across Australia and Canada, a three-person compliance team checked around 5% of calls across more than 50 salespeople. The other 95% went out unheard. The system that replaced that team checks 100% of calls, to one consistent standard, with the evidence attached, and compliance went up, not down.

That is the point of full-coverage checking against your Do Not Call obligations. Not to wash the list, which you already do, but to confirm on every call that the obligations attached to that call were met, and to have the record when someone asks. Washing keeps the wrong numbers off your list. Checking every call is how you know the calls you did make were made the way the law requires.

If you run outbound sales and want to see what checking all of your calls, against your own obligations, inside your own environment, would look like, that is what the discovery call is for.

Book a free discovery call →

General information about the regulatory environment, not legal advice.

Book a free discovery call →