What is the Telephone Preference Service (TPS)?
The Telephone Preference Service (TPS) is the UK's official do-not-call register. It is a free service that allows individuals to register their phone numbers -- both landline and mobile -- to indicate that they do not want to receive unsolicited sales and marketing calls.
Once a number is registered on the TPS, it is unlawful for organisations to make unsolicited direct marketing calls to that number unless the person has given specific prior consent to be called by that particular organisation.
The TPS covers personal phone numbers used by individuals. Its corporate equivalent, the Corporate Telephone Preference Service (CTPS), covers business numbers. Together, they form the backbone of the UK's telemarketing compliance framework.
Registration is permanent. Unlike the CTPS, where businesses must reconfirm their registration annually, individuals who register with the TPS remain on the list indefinitely unless they choose to remove themselves.
Who runs the TPS?
The TPS is operated by The Telephone Preference Service Limited (TPSL), a wholly owned subsidiary of the Data and Marketing Association (DMA). TPSL has held the contract to run the TPS since 1999, having been awarded the contract by Ofcom on multiple occasions.
Responsibility for the TPS contract moved from Ofcom to the Information Commissioner's Office (ICO) in 2016. TPSL continues to manage the day-to-day operations of both the TPS and the CTPS under contract with the ICO.
It is important to understand the distinction between these bodies:
- TPSL (a subsidiary of the DMA) operates the register -- it maintains the database and processes registrations.
- The ICO is the regulator that enforces compliance. If a business calls TPS-registered numbers without consent, it is the ICO that investigates and issues penalties.
The TPS is funded by licence fees paid by organisations that access the register for screening purposes. Registration is free for consumers.
A brief history of the TPS
The concept of a telephone preference service in the UK dates back to the early 1990s, when the DMA created a voluntary scheme to manage consumer marketing preferences. Residential users were able to register their numbers from May 1999, when the Telecommunications (Data Protection and Privacy) Regulations 1999 gave the register statutory force.
The legal framework was strengthened significantly in 2003 with the introduction of the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), which remains the primary legislation governing unsolicited marketing calls in the UK today.
The Corporate Telephone Preference Service (CTPS) was launched in 2004, extending similar protections to business telephone numbers.
Since its inception, the TPS register has grown substantially. Millions of UK phone numbers are now listed -- a figure that continues to rise as public awareness of the service increases and frustration with unwanted calls persists.
What calls does the TPS cover?
The TPS applies specifically to unsolicited live direct marketing calls. This means calls made by a real person (not a recorded message) for the purpose of selling or promoting products, services, or aims.
Calls covered by TPS
- Cold calls promoting products or services
- Calls promoting a commercial aim, even if no immediate sale is intended
- Lead generation calls designed to identify potential customers
- Charity fundraising calls (where they involve asking for money)
- Calls made by third parties on behalf of another organisation
Calls NOT covered by TPS
- Market research calls -- genuine research calls that do not involve selling are exempt, though the boundary between research and marketing can be blurred
- Service calls -- calls about an existing contract, appointment reminders, or account notifications are not marketing
- Calls with prior consent -- if an individual has specifically told your organisation that they consent to receiving marketing calls from you, you may call them even if they are TPS-registered
- Automated marketing calls -- these are governed separately under Regulation 19 of PECR, which requires prior consent regardless of TPS status
- Overseas calls -- the TPS applies to calls made from within the UK, though businesses calling UK numbers from abroad are still expected to comply
The consent exception is important but frequently misunderstood. The consent must be specific to your organisation and specific to marketing calls. A generic opt-in such as "I agree to be contacted by third parties" is unlikely to be sufficient. And having an existing customer relationship with someone does not, by itself, override their TPS registration. Unlike the "soft opt-in" that exists for email marketing under PECR, there is no equivalent exemption for live marketing calls.
The legal basis: PECR and the ICO
The legal obligation to check the TPS before making marketing calls sits in Regulation 21 of the Privacy and Electronic Communications (EC Directive) Regulations 2003, commonly known as PECR.
Regulation 21 states that a person shall not use a public electronic communications service for making unsolicited calls for direct marketing purposes where the number called is listed on the TPS register, unless the subscriber has previously notified the caller that they consent to such calls being made.
In plain English: do not call TPS-registered numbers for marketing unless you have their specific consent.
What PECR requires you to do
- Screen your calling lists against the TPS and CTPS registers before making any marketing calls
- Maintain your own suppression list of people who have asked you directly not to call them
- Identify yourself to the person you are calling -- you must say who is calling and provide a contact number or address if asked
- Display your number -- you must allow your calling number (or an alternative contact number) to be shown to the person receiving the call
The role of the ICO
The ICO is the UK's independent authority responsible for enforcing PECR. When it comes to TPS compliance, the ICO:
- Investigates complaints from the public about unwanted marketing calls
- Assesses whether organisations had adequate screening processes in place
- Issues monetary penalties (fines) for breaches
- Issues enforcement notices compelling businesses to stop specific activities
- Publishes details of all enforcement actions on its website
The ICO does not proactively monitor every business that makes marketing calls. Investigations are typically triggered by complaints from the public, either made directly to the ICO or reported through the TPS itself.
How often must you check the TPS?
This is one of the most commonly misunderstood aspects of TPS compliance, and it is important to get it right.
PECR does not specify a checking frequency. The legislation requires that you do not call TPS-registered numbers without consent, but it does not say how often you must screen your lists.
The widely quoted "28-day rule" comes from two sources:
-
The TPS registration activation period. When someone registers with the TPS, it can take up to 28 days for that registration to appear on the register. Regulation 21 includes a statutory defence for calls made to numbers that have been listed for fewer than 28 days.
-
ICO guidance. The ICO recommends re-screening calling lists at least every 28 days, because any check older than that could miss numbers where registrations have since become active.
The 28-day re-check is therefore ICO guidance based on sound operational logic, not a statutory requirement written into PECR. However, it is guidance from the regulator that enforces the law, which makes it the practical standard against which your compliance processes will be judged.
For a detailed analysis of where the 28-day figure comes from and how to implement it, see our article: The 28-Day TPS Re-Check Rule Explained.
Penalties for non-compliance
The consequences of calling TPS-registered numbers without consent have always been serious. Since February 2026, they have become dramatically more so.
The old regime: fines up to £500,000
Until recently, the maximum fine the ICO could impose for PECR breaches was £500,000. While this was already enough to threaten the survival of many businesses, it was widely seen as inadequate for larger organisations.
The new regime: fines up to £17.5 million
The Data (Use and Access) Act 2025 received Royal Assent on 19 June 2025. Its enforcement provisions for PECR came into force on 5 February 2026, bringing maximum penalties into line with the UK GDPR regime.
The new maximum fine for PECR breaches is:
- £17.5 million, or
- 4% of annual global turnover
Whichever is higher.
This is a thirty-five-fold increase from the previous cap. Every enforcement case decided before February 2026 was subject to the old £500,000 limit. Under the new regime, the same conduct could attract penalties many times larger.
What enforcement looks like in practice
The ICO has a track record of taking action against businesses that ignore TPS rules. Recent cases include:
- Green Spark Energy Ltd and Home Improvement Marketing Ltd -- fined a combined £550,000 for instigating nearly 12 million unlawful marketing calls
- Outsource Strategies Ltd and Dr Telemarketing Ltd -- fined a combined £340,000 for 1.43 million calls to TPS-registered numbers, targeting elderly and vulnerable individuals
- Poxell Ltd and Skean Homes Ltd -- fined a combined £250,000 for 3.2 million unsolicited calls, with Poxell deliberately purchasing multiple phone lines to evade detection
All of these fines were issued under the old £500,000 cap. Under the new regime, the penalties for equivalent conduct could be significantly higher.
For a full analysis of ICO enforcement trends and real cases, see our article: What Happens If You Ignore TPS? ICO Fines, Enforcement, and Real Cases.
Beyond fines
Monetary penalties are only part of the picture. The ICO also issues enforcement notices (which carry criminal liability if breached), publishes the details of all enforcement actions publicly, and can pursue criminal prosecution in serious cases. The reputational damage of being publicly named as a TPS offender can be as costly as the fine itself.
TPS vs CTPS: what is the difference?
The TPS and CTPS serve the same fundamental purpose -- protecting phone users from unwanted marketing calls -- but they cover different types of subscribers.
| TPS | CTPS | |
|---|---|---|
| Covers | Individual consumers | Businesses (limited companies and PLCs) |
| Registration | Permanent (no renewal needed) | Must be reconfirmed annually |
| Launched | 1999 | 2004 |
| Governed by | PECR Regulation 21 | PECR Regulation 21 |
| Sole traders and partnerships | Register here | Cannot register on CTPS; use TPS |
If your business makes marketing calls to both consumers and businesses, you must screen against both registers. A single API call through TPSCheck checks both TPS and CTPS simultaneously, so there is no need to run separate checks.
How businesses check the TPS
There are three main approaches to screening phone numbers against the TPS and CTPS registers.
1. Manual checking through the TPS website
The TPS offers a web-based checking tool for organisations that hold a TPS licence. This is functional for small volumes but impractical for businesses that call regularly or manage large contact databases.
Limitations: slow, error-prone, no audit trail, no integration with your existing systems.
2. Bulk file checking
Some providers allow you to upload files of phone numbers and receive results in bulk. This is better for larger volumes but still involves manual steps -- exporting data, uploading files, downloading results, and importing them back into your systems.
Limitations: not real-time, manual process creates gaps, difficult to maintain a consistent 28-day re-check cycle.
3. API-based checking
The most reliable and scalable approach is to integrate TPS and CTPS checking directly into your existing workflows via API. With an API, you can:
- Check numbers in real time before calls are made
- Screen entire databases in bulk before campaigns launch
- Automate 28-day re-checking on a schedule
- Generate audit logs automatically for every check
- Receive additional data about each number alongside the TPS result
TPSCheck provides a REST API that supports both single-number and batch checking, returning TPS and CTPS status alongside phone intelligence data -- including line type (mobile or landline), carrier, and geographic location -- with every check.
POST /check
Authorization: Token your_api_key
{
"phone": "07700900123"
}
Response:
{
"tps": false,
"ctps": false,
"line": {
"type": "mobile",
"carrier": "EE",
"country": "GB"
}
}
See the full API documentation for integration details.
Building a TPS compliance process
Understanding TPS is one thing. Putting compliance into practice is another. Here is a straightforward framework for any business that makes marketing calls in the UK.
Step 1: Screen before you call
Check every phone number against both TPS and CTPS registers before making marketing calls. This is a legal requirement under PECR, not a suggestion. Do not call any number that is registered unless you hold specific, demonstrable consent from that individual.
Step 2: Re-screen regularly
Follow the ICO's guidance and re-check your calling lists at least every 28 days. People register with the TPS continuously, so a number that was safe to call last month may not be safe today. Automating this process through an API removes the risk of missed re-checks.
Step 3: Maintain your own suppression list
In addition to TPS and CTPS screening, keep your own internal list of people who have asked you directly not to call them. Screen against this list alongside TPS before every campaign.
Step 4: Keep records
Log when you checked each number, what the result was, and what action you took. If the ICO investigates, your audit trail is your evidence. A verbal assurance that "we check regularly" is not sufficient. TPSCheck's Pro plan and above include audit logs and downloadable compliance reports for exactly this purpose.
Step 5: Train your team
Everyone involved in marketing calls needs to understand TPS obligations -- from call centre staff to marketing managers to anyone managing third-party callers. You are responsible for calls made in your name, even if outsourced.
Frequently asked questions
Is TPS registration free?
Yes. Registering a phone number with the TPS is completely free for consumers. You can register online at tpsonline.org.uk or by calling 0345 070 0707.
How long does TPS registration take to become active?
It can take up to 28 days for a TPS registration to become active on the register. During this period, the number may still receive marketing calls. After 28 days, any unsolicited marketing calls to that number are unlawful unless the caller holds specific consent.
Does TPS stop all unwanted calls?
No. TPS only covers unsolicited live marketing calls made by UK-based callers. It does not prevent scam calls, calls from overseas, automated recorded messages, or calls from companies that are breaking the law intentionally. However, it does give you a legal basis to complain to the ICO if a legitimate UK business calls you for marketing purposes.
Can a business still call me if I am on the TPS?
Only if you have given that specific business your prior consent to make marketing calls to you. An existing customer relationship alone is not sufficient. The consent must be specific to that organisation and to marketing calls.
Does TPS apply to text messages?
No. Unsolicited marketing text messages and automated calls are governed by separate provisions in PECR (Regulations 19 and 22), which require prior consent regardless of TPS status. TPS specifically covers live (person-to-person) marketing calls.
What is the difference between TPS and the Do Not Call Register?
They are the same thing. The TPS is sometimes referred to as the UK's "do not call" register. There is no separate register -- TPS is the official and only do-not-call list in the UK.
How much does it cost to check numbers against TPS?
It depends on the service and volume. With TPSCheck, plans start with a free tier (50 checks per month) and scale from £29 per month for 10,000 checks. Pay-as-you-go credit packs are available from £4 for 1,000 checks with no subscription required.
Summary
The Telephone Preference Service is the foundation of telemarketing compliance in the UK. Every business that makes marketing calls has a legal obligation under PECR to screen its calling lists against the TPS and CTPS registers, and to respect the preferences of people who have opted out.
The key points to remember:
- TPS is the UK's official do-not-call register, operated by TPSL (a subsidiary of the DMA) under contract with the ICO
- PECR Regulation 21 makes it unlawful to call TPS-registered numbers for marketing without specific consent
- The ICO enforces compliance and can now impose fines of up to £17.5 million or 4% of global turnover under the Data (Use and Access) Act 2025
- The 28-day re-check is ICO guidance (not statute) based on the TPS registration activation period
- CTPS is the corporate equivalent, covering business numbers with annual re-registration required
- Screening is affordable and accessible -- there is no excuse for non-compliance
If you are not currently checking your calling lists against TPS and CTPS, or if you are relying on manual processes that leave gaps in your compliance, now is the time to fix that.
Start your free TPSCheck account -- 50 checks per month, no credit card required. Or explore our API documentation to see how TPS checking integrates with your existing systems.
TPSCheck is an independent commercial service operated by Visian Systems Limited. It is not affiliated with, endorsed by, or operated by the Information Commissioner's Office (ICO), TPS Limited, or the Data & Marketing Association (DMA).
