Sources

Federal calling rules and court decisions

1. FCC, artificial-voice declaratory ruling, FCC 24-17: https://docs.fcc.gov/public/attachments/FCC-24-17A1.pdf
2. Current FCC delivery restrictions, 47 CFR 64.1200: https://www.ecfr.gov/current/title-47/chapter-I/subchapter-B/part-64/subpart-L/section-64.1200
3. FCC, consent-revocation waiver, DA 26-12: https://docs.fcc.gov/public/attachments/DA-26-12A1.pdf
4. FCC, September 2026 circulated revocation draft—not the adopted final order: https://docs.fcc.gov/public/attachments/DOC-424844A1.pdf
5. Orrick, report on September 2026 adoption—secondary corroboration: https://infobytes.orrick.com/2026-10-09/fcc-narrows-consent-revocation-rules-for-informational-robocalls-and-seeks-comment-on-further-changes/
6. Orrick, scope of January 2026 waiver—secondary corroboration: https://infobytes.orrick.com/2026-01-16/fcc-extends-robocall-consent-revocation-rule-waiver-to-january-2027/
7. Eleventh Circuit, Insurance Marketing Coalition v. FCC: https://media.ca11.uscourts.gov/opinions/pub/files/202410277.pdf
8. Supreme Court, McLaughlin Chiropractic Associates v. McKesson: https://www.supremecourt.gov/opinions/24pdf/23-1226_1a72.pdf
9. FCC, offshore call-centre proposal, FCC 26-16: https://docs.fcc.gov/public/attachments/FCC-26-16A1.pdf

State legislation and regulatory implementation

10. Pennsylvania, enacted Act 47 of 2026: https://www.legis.state.pa.us/WU01/LI/LI/US/HTM/2026/0/0047..HTM
11. Pennsylvania Senate, commencement announcement: https://www.pasenategop.com/news/new-brooks-law-cracking-down-on-robocalls-scam-texts-and-caller-id-spoofing-takes-effect/
12. Texas Attorney General, TRAIGA consumer AI rights: https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint/consumer-ai-rights
13. Utah Code, generative AI consumer-protection and disclosure provisions: https://le.utah.gov/xcode/Title13/Chapter77/C13-77-P1_2025050820250508.pdf
14. Colorado General Assembly, SB26-189 enacted summary: https://www.leg.colorado.gov/bills/SB26-189
15. Colorado Attorney General, ADMT and chatbot rulemaking: https://coag.gov/ai/
16. Colorado, signed HB26-1263, including statutory exclusions and approval date: https://www.leg.colorado.gov/bill_files/116851/download
17. California Privacy Protection Agency, final regulations announcement: https://cppa.ca.gov/announcements/2025/20250923.html
18. CalPrivacy, 2025 annual report and implementation dates: https://privacy.ca.gov/wp-content/uploads/sites/357/2026/02/Annual-Report-2025.pdf
19. Washington recording statute, RCW 9.73.030: https://app.leg.wa.gov/rcw/default.aspx?cite=9.73.030
20. Illinois Biometric Information Privacy Act: https://www.ilga.gov/Legislation/ILCS/Articles?ActID=3004&ChapterID=57&Print=True

Telemarketing evidence, healthcare and payments

21. FTC recordkeeping regulation, 16 CFR 310.5: https://www.ecfr.gov/current/title-16/chapter-I/subchapter-C/part-310/section-310.5
22. FTC, 2024 telemarketing amendments: https://www.ftc.gov/news-events/news/press-releases/2024/03/ftc-implements-new-protections-businesses-against-telemarketing-fraud-affirms-protections-against-ai
23. FTC, general TSR guide—contains legacy recordkeeping language, as discussed above: https://www.ftc.gov/business-guidance/resources/complying-telemarketing-sales-rule
24. HHS, HIPAA Security Rule proposal: https://www.hhs.gov/hipaa/for-professionals/security/hipaa-security-rule-nprm/index.html
25. Federal regulatory agenda, RIN 0945-AA22: https://www.reginfo.gov/public/do/eAgendaViewRule?RIN=0945-AA22&pubId=202510
26. HHS, business-associate guidance: https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/business-associates/index.html
27. HHS, cloud-computing guidance: https://www.hhs.gov/hipaa/for-professionals/special-topics/health-information-technology/cloud-computing/index.html
28. HHS, substance-use-disorder records and Part 2: https://www.hhs.gov/hipaa/part-2/index.html
29. PCI SSC, PCI DSS v4.0.1 and transition dates: https://blog.pcisecuritystandards.org/just-published-pci-dss-v4-0-1
30. PCI SSC, VoIP payment-data scope, FAQ 1153: https://www.pcisecuritystandards.org/faqs/1153/
31. PCI SSC, audio recordings and sensitive authentication data, FAQ 1210: https://www.pcisecuritystandards.org/faqs/1210/

AI governance standards

32. NIST, February 2026 AI Agent Standards Initiative announcement: https://www.nist.gov/news-events/news/2026/02/announcing-ai-agent-standards-initiative-interoperable-and-secure
33. NIST, AI Agent Standards Initiative: https://www.nist.gov/artificial-intelligence/ai-agent-standards-initiative
34. NIST, AI Risk Management Framework: https://www.nist.gov/itl/ai-risk-management-framework
35. ISO, ISO/IEC 42001:2023: https://www.iso.org/standard/42001

Outstanding primary-source verification: the final FCC 26-67 document was identified at https://docs.fcc.gov/public/attachments/FCC-26-67A1.pdf, but retrieval failed. The accessible current regulation, official circulated draft and secondary adoption report establish the issue to monitor; they do not complete final-text and effective-date verification.