What FTC Safe Harbor means for auto-dialers

FTC Safe Harbor is a group of five requirements that the Federal Trade Commission built into its Telemarketing Sales Rule (TSR). Follow all five and you are allowed to use automated dialing equipment to reach consumers. Miss even one and every dropped call becomes a potential violation.

Why Safe Harbor exists

The FTC launched its federal Do-Not-Call list and the TSR in 2003. Predictive dialers, by design, occasionally dial more lines than agents are ready to answer. Safe Harbor does not ban that practice — it puts a ceiling on how often it can happen and requires callers to handle those moments in a specific way.

In August 2008, the FTC updated the TSR and changed how the Abandonment rate is calculated — moving from a daily calculation to a 30-day rolling window per campaign. In 2024 the FTC expanded TSR coverage to include business-to-business calls and updated record-keeping requirements.

The five Safe Harbor provisions

1. Transfer to agent within 2 seconds. Once a consumer finishes their greeting, the call must connect to a live agent within two seconds. Any call that does not make it counts as an Abandoned call.
2. No more than a 3% drop rate across all answered calls per campaign per 30-day period. Keep your Drop rate at or below this threshold.
3. Play a safe harbor message on dropped calls. The message must state your company name, reason for calling, and a callback number. In VICIdial this is configured through the Drop Action and Safe Harbor message fields on the Campaign Detail screen.
4. Maintain a company-specific DNC list. Consumers who ask not to be called again must be honored. In VICIdial, set the "Use Internal DNC List" campaign field to Y.
5. Ring a minimum of 15 seconds or 4 rings before hanging up. Set the Dial Timeout campaign field to a value above 15 seconds.
6. Keep calling records for 5 years. As of 2024, this includes campaign pre-recorded messages, carrier details, DNC compliance logs, and customer relationship records.

How the provisions connect in practice

flowchart TD
  A[Call answered by consumer] --> B{Agent ready within 2s}
  B -->|Yes| C[Live transfer - not a drop]
  B -->|No| D[Call counted as DROP]
  D --> E[Play safe harbor message]
  D --> F[Add to drop tally]
  F --> G{Drop rate over 3 percent in 30 days}
  G -->|Yes| H[Campaign out of Safe Harbor]
  G -->|No| I[Still compliant - continue dialing]

The diagram shows that a dropped call triggers two obligations at once: play the message and count the drop against your 30-day campaign total. Both must happen correctly.

VICIdial-specific setup

For the 2-second transfer window, VICIdial recommends setting the Drop Call Seconds field to 5. That gives the consumer about 3 seconds to finish their greeting, then the system waits an additional 2 seconds before classifying the call as a drop. The math lines up with the FTC's definition.

For dropped calls, set Drop Action to MESSAGE and point the Safe Harbor Exten campaign field at the extension holding your pre-recorded message. Without both settings configured, dropped calls play silence — which violates provision two.

**Heads up:** VICIdial tracks drop rate per campaign, not per the entire dialer. If you run multiple campaigns under one organization, each campaign has its own 30-day window. A campaign at 2.9% does not offset another running at 4%.

Next steps

Safe Harbor is only one layer of compliance. See the full picture at VICIdial compliance overview. For a deeper look at how the 3% threshold is calculated, read the 3% abandonment rule explained. Ready to run a compliant predictive dialer? See VICIfast pricing.