

Illustrative example, Daily scan: Calls and texts checked, Recording notices checked, New chat widget · for review.
The compliance officer samples a few calls a quarter. Nobody notices a new chat widget that sends conversations to a vendor with no business associate agreement.
Calls, texts and new pages are checked against your consent, AI-disclosure and recording rules. A new widget is flagged on the next daily scan, with the evidence.
Your compliance officer decides what happens next. Legal questions stay with counsel.
Full detail, measures and sources
- What we measure
- Share of interactions checked, consent captured, opt-outs honored within 10 business days, and open findings by age.
- Common systems
- Your EHR audit log · phone and texting platforms · your website · your policy library · exclusion lists (OIG LEIE and SAM)
- Formats
- TCPA consent and opt-outs · AI-voice disclosure · call-recording notice · HIPAA authorizations
- AI-generated voices count as artificial voices under the TCPA. FCC declaratory ruling 24-17, 2024.
- A person can revoke consent by any reasonable means, and the request must be honored within 10 business days. 47 CFR 64.1200(a)(10), via Cornell LII.