You run a lead-gen agency. You dial for clients. Maybe you cold-call on behalf of solar installers, physio clinics, finance brokers, or trade contractors. You know the Do Not Call Register exists. You tick the box in your CRM that says "DNCR compliant". Then you hand the list to an offshore dialler or a cheap AI voice tool, cross your fingers, and hope ACMA never knocks.

Hope is not a compliance strategy. The Do Not Call Register Act 2006 is strict, the fines are real, and the agencies we talk to every week get five things consistently wrong. Here is what actually matters if you dial outbound on behalf of Australian clients.

1. You think washing the list once is enough

The DNCR is not static. Numbers get added daily. A consumer can register a mobile or landline at any time, and once it is on the register you have 30 days to stop calling it unless you hold an exemption. Most agencies scrub their list once at campaign start, then dial the same pool for weeks.

That is a breach waiting to happen. If you call a number registered 10 days ago, the fact you washed the list a month earlier means nothing. You need to re-scrub before every fresh outbound batch, or at minimum weekly if you are running continuous campaigns. The register lookup is free via the industry portal. There is no excuse.

2. You assume existing business relationship covers everything

Section 11 of the Act gives you an exemption if the person you are calling has an existing business relationship with your client, or if they gave express consent. Agencies lean hard on this, often too hard.

Existing business relationship means the recipient has bought goods or services from your client, or made a written inquiry, within the last four months for goods or within the last 12 months for donations. If your client is a solar installer and the prospect filled out a form 14 months ago, that relationship has expired. You are back to needing explicit consent or facing a potential breach.

Express consent must be clear and documented. A checkbox buried in terms and conditions does not count. If you cannot prove the person agreed to receive telemarketing calls, do not dial.

3. You ignore state-based dial-hour restrictions

Federal law sets minimum standards. State and territory laws add their own hours. You cannot call before 9am or after 8pm on weekdays, or before 9am or after 5pm on weekends and public holidays, anywhere in Australia. But some states go further.

In Queensland, South Australia, and Western Australia, you cannot call before 9am or after 8pm any day of the week. In Tasmania, you cannot call on Sundays at all. If your AI agent dials a Hobart number at 10am on a Sunday, you just broke Tasmanian law even if the number is not on the DNCR.

Most cheap diallers do not gate by state or apply public holiday calendars. VoxReach does, because we built the platform in Sydney and understood from day one that AU compliance is not optional. If you use a tool that does not enforce dial hours per jurisdiction, you are rolling dice with every campaign.

4. You fail to offer an in-call opt-out mechanism

Even if the number is not on the DNCR and you hold a valid exemption, the law requires you to let people opt out during the call. That means your AI agent must recognise phrases like "take me off your list", "stop calling me", or "I want to opt out", then immediately end the call and flag the number as do-not-contact.

We listened to a call last Tuesday where a prospect said "no thanks, not interested, do not call again" twice in 15 seconds. The AI kept talking. That is not just bad customer experience. It is a compliance failure. The agent must be trained to detect opt-out language in real time and honour it without argument.

Your audit log must record every opt-out. If ACMA investigates, you need to show the date, time, and transcript of the moment the person asked to stop receiving calls, plus proof you suppressed the number immediately.

5. You do not keep proper call records

Section 23 requires telemarketers to keep records of every call for two years. That includes date, time, duration, the number dialled, the purpose of the call, and whether consent or an exemption applied. If you use an AI dialler that does not log this automatically, you are exposed.

ACMA can request records during an investigation. If you cannot produce them, the assumption will work against you. The fine for an individual breach is up to 200 penalty units, and ACMA has issued infringement notices to agencies that could not prove compliance even when they claimed good intent.

Your AI platform should store full transcripts, not just call summaries. You need searchable logs that show which numbers were scrubbed, which exemptions applied, and which opt-outs were honoured. If your current tool does not do this, you are flying blind.

What to do now

First, audit your current dialling process. When did you last scrub your list? Can you prove express consent for every number? Does your AI enforce state dial hours and recognise opt-out phrases? Do you have two years of call logs?

Second, fix the gaps before ACMA finds them. Re-scrub your active lists today. Set up weekly DNCR washes. Implement dial-hour gating. Train or replace your AI agent if it cannot handle in-call opt-outs.

Third, use a platform built for Australian compliance. VoxReach enforces DNCR scrubbing, state-based dial windows, public holiday rules, and automatic opt-out detection. Every call is logged with full transcript, and the system flags potential breaches before they leave the queue. Sign up at app.voxreach.com.au/signup and run a compliant outbound campaign in 20 minutes.

The Do Not Call Register is not a suggestion. Treat it like the legal obligation it is, or stop dialling for Australian clients.