A new federal lawsuit could significantly reshape how businesses, AI platforms, and telecommunications providers share responsibility for unsolicited marketing messages under the Telephone Consumer Protection Act (TCPA).
In Lowry v. OpenAI, et al., a Virginia consumer is seeking to hold OpenAI and Twilio directly liable for marketing text messages that he says he received from a third-party company called Fresh Start Group. The messages, according to the complaint, were generated using OpenAI’s platform and delivered through Twilio’s telephony infrastructure.
The novel feature of the case is not the messages themselves. It is the legal theory: that the AI platform and the communications provider can be liable for the actions of a downstream business customer.
The legal theory in plain language
Under the TCPA, a party can be liable if it ’causes’ a call or text to be initiated — not only if it dials the number itself. The Lowry complaint argues that, by providing the AI tools that drafted the messages and the telephone numbers that delivered them, OpenAI and Twilio each played a role in causing the communications and should share liability with the company that actually sent them.
The proposed class is large. It would include every consumer in the United States who received a marketing message generated using the OpenAI platform when the recipient’s number was registered on the National Do Not Call list and OpenAI did not have consent to send the message. With statutory damages of $500 per call and a four-year TCPA lookback period, the theoretical exposure runs into the trillions of dollars.
Regulatory context
The Federal Communications Commission has been moving in the same direction for several years. In 2024, the FCC unanimously ruled that AI-generated voices used in calls are subject to the TCPA, treating them the same as conventional prerecorded voice. Twilio received an FCC cease-and-desist letter in 2024 related to allegedly enabling illegal robocall traffic on its network. The Lowry case extends that pressure from regulators to the courts.
What businesses should take away
Even businesses that have no direct relationship with OpenAI or Twilio should pay attention. If the platform-liability theory succeeds — even partially — it will reshape vendor relationships across the technology stack. Some likely effects:
— AI and communications providers will tighten their customer contracts, requiring more rigorous consent attestation and audit rights into customer data.
— Businesses using AI to scale outbound communications will face more pressure to document, in detail, the consent basis for every number contacted.
— Insurance carriers may reprice cyber and tech-errors policies to reflect the expanded scope of potential platform-side liability.
— Plaintiffs’ attorneys will continue moving up the technology stack, naming more vendors and infrastructure providers in TCPA complaints to capture larger settlement pools.
Steps businesses can take now
Regardless of how the Lowry case ultimately resolves, businesses that send marketing calls or texts can take several concrete steps to reduce risk:
— Maintain comprehensive, time-stamped records of consent for every number in any outbound campaign, including the source, the channel of consent, and the scope of that consent.
— Regularly scrub call and text lists against the National Do Not Call Registry, internal do-not-call lists, and known TCPA litigator databases.
— Audit any use of AI-generated communications to confirm that the underlying contact list has consent appropriate to the channel (call, voicemail, text) and to the type of message (marketing vs. transactional).
— Review vendor contracts with CPaaS, AI, and lead-generation providers to understand who bears liability if a regulator or plaintiff’s attorney comes calling.
For businesses that depend on phone or text outreach — from local service providers to national brands — basic list hygiene has become a core compliance step. TCPALitigatorList.com provides an industry database of known TCPA litigators and serial plaintiffs that companies can use to screen call and text lists before they dial. Catching a handful of high-risk numbers up front is a far cheaper alternative than defending a class action after the fact.
A pivotal moment for AI-era marketing
The Lowry v. OpenAI lawsuit is a significant test of how the TCPA — a statute drafted in 1991, long before generative AI or modern CPaaS platforms existed — will be applied to a layered, vendor-driven outbound communications stack. Whether the case ultimately succeeds, settles, or is dismissed, it has already established that platform-liability theories are available to plaintiffs’ attorneys.
For businesses using AI-driven communications, the prudent course is to assume the legal landscape has shifted and to build consent, recordkeeping, and vendor-management practices that would survive a Lowry-style challenge.
Sources
National Law Review: TCPA Complaint Against OpenAI and Twilio
Henson Legal: AI Voice Agent Compliance and Platform Liability
FCC: TCPA Applies to AI-Generated Voices