Real Estate Stack · Chapter 09 of 10

Compliance and the never-list

This is an operating document, not a law review. Every row below is a rule, what you actually do about it, and where it came from, so you can run the business without reading the statute yourself.

Nothing in this chapter is legal advice. It's operational guidance built from the rules current as of 2026-09-03, written so you know what to do day to day and, just as important, when to stop and call a lawyer instead of guessing. Rules move; a few of the items below are pending rulemaking or corroborated by secondary sources rather than a government page you can pull up yourself, and that's noted in the source column each time.

Texting and calling

Rule	What you do about it	Chip	Source
TCPA requires prior express written consent before marketing texts or calls to a number	Text or call only a number with a documented consent record: name, number, timestamp, and the exact disclosure language shown	report	[1]
Revocation rule: honor any reasonable opt-out (STOP, QUIT, END, REVOKE, CANCEL, UNSUBSCRIBE) within 10 business days, effective since April 11, 2025	Treat every reasonable-sounding opt-out as valid the moment you see it; log it and stop, don't wait for the "magic word"	report	[2]
The FCC's one-to-one consent requirement was vacated (Jan. 2025) and formally removed (Sept. 2025); one signature can again cover multiple sellers if clearly disclosed	Don't rely on the loosened rule as cover; keep documenting exactly what the consumer agreed to and from whom	report	[3]
McLaughlin v. McKesson (June 2025): district courts no longer must defer to FCC interpretations of the TCPA	Assume more litigation unpredictability, not less; keep consent records strong regardless of how a court might read a given FCC rule	verified	[4]
A2P 10DLC: carriers block unregistered business texting to mobile numbers outright, since Feb. 1, 2025	Register your brand and campaign with The Campaign Registry through your texting platform before sending any bulk lead texts	claim	[5]
National DNC Registry: scrub call lists at least every 31 days; cold calls to registered numbers need prior express written consent or an existing 18-month business relationship	Scrub monthly on a calendar reminder, and don't cold-call a DNC number without a documented exception	report	[6]
Quiet hours: telemarketing calls only between 8:00 a.m. and 9:00 p.m. local time of the person called	Have Claude check the recipient's local time zone before it drafts or schedules anything, not yours	report	[7]
Statutory damages: $500 per violation, up to $1,500 if willful, no proof of harm required	Treat every unconsented text or call as real dollar exposure; a "just this once" send is not worth it	report	[8]

Email

Rule	What you do about it	Chip	Source
CAN-SPAM: accurate From/To/Reply-To and routing information	Never let Claude draft a header that hides or fakes who's actually sending	verified	[9]
Honest, non-deceptive subject lines; ads must say they're ads	Have Claude write the subject last, from the finished body, and label anything promotional	verified	[9]
A valid physical postal address in every commercial email	Bake your brokerage's mailing address into the email template once, not per message	verified	[9]
A working, one-click opt-out honored within 10 business days	Test your unsubscribe link quarterly; don't let it silently break	verified	[9]
Penalty: up to $53,088 per separate violating email	One bad send to a large list is not a small mistake; treat list hygiene as a real cost center	verified	[9]

Advertising

Rule	What you do about it	Chip	Source
Arizona R4-28-502 (amended December 13, 2025): every ad identifies the employing broker's legal or dba name clearly and prominently; an electronic medium "such as the Internet, Artificial Intelligence, or web site technology" aimed at Arizona residents is advertising; online ads must meet every requirement "without the need to scroll"; the designated broker is responsible for all advertising	Put the brokerage name in every template header, above the fold on every page, and in anything Claude drafts that will be published	verified	[30]
Texas Rules 535.154 and 535.155: alternate, team and assumed names registered with TREC before use; team names end in "team" or "group"; the broker's name in every ad at least half the size of the largest contact information; no license number required	Check your team name is TREC-registered before it goes on any ad, and size the broker's name against your largest contact line	verified	[31]
Florida: brokerage name must be prominent, not fine print; team or group name print size can't exceed the brokerage name's	Set the brokerage name at least as large as any team branding on Florida ads	report	[12]
License-number-in-advertising rules vary by state (Texas, for one, does not require it); no consolidated 50-state list exists	Confirm your own state's rule directly rather than assuming Texas practice or a national norm applies	inference	[11]

AI-generated media

Rule	What you do about it	Chip	Source
NAR Code of Ethics SOP 12-5: disclose when a listing photo is digitally altered in a way that materially changes the property (added furniture, removed items, changed paint or flooring)	Assume any generated or staged image needs a disclosure unless it's just color or exposure correction	report	[13]
ARMLS Rule 8.23: a "[Digitally Altered]" MLS watermark paired with the original image, effective May 28, 2026, $200 fine per violation once enforcement starts December 2026	Pair every AI-edited or staged photo with the untouched original and the exact watermark text	verified	[14]
CRMLS Rule 11.5.2 (tracking California AB 723): original image immediately before or after the altered one, labeled "digitally enhanced," "digitally altered," or "virtually staged"; AI-generated landscaping is prohibited outright; $250 fine after an uncorrected warning	Never publish an AI-altered image alone; always pair it with the original and the exact required label wording	verified	[15]
Bright MLS: "VIRTUALLY STAGED" in all caps, on the image or in the caption; media violations carry a $250 sanction, sharing access credentials $500	Use the exact all-caps phrase Bright requires, not a paraphrase	verified	[16][32]
New Jersey N.J.S.A. 56:18-2: anyone using a bot to communicate about a real estate sale must disclose it's a bot, clearly and at the outset	Any chatbot or AI-driven text thread touching a New Jersey listing or lead states up front that it's AI, before the conversation goes further	verified	[17]
California DRE AI Advisory (March 17, 2026): reiterates the AB 723 disclosure duty, warns against AI giving legal advice or interpreting documents, requires broker supervision, fair-housing bias monitoring, and CCPA compliance for any AI tool touching consumer data	Treat this as your California checklist: disclosure, no legal interpretation from the AI, human supervision, bias awareness, data-handling review	verified	[18][33]

Contracts and signatures

Rule	What you do about it	Chip	Source
NAR settlement: a written buyer agreement, specifying compensation, must be signed before touring a home, effective August 17, 2024	No showing, in person or virtual, without a signed buyer agreement on file first	verified	[19]
NAR Code of Ethics updates effective January 1, 2026: Article 7 disclosure narrowed, Standard of Practice 17-4 revised for the direct-payment model	Review your disclosure language against the current Code of Ethics text, not a pre-2026 template	report	[20]
Unauthorized practice of law: most states bar non-lawyer licensees from drafting custom contract or addendum language beyond filling in blanks on approved forms	Claude fills in blanks on the forms your brokerage already uses; it never writes a new clause or explains what a clause legally means	report	[21]
ESIGN/UETA: an "electronic agent" (software, including AI) can compile or transmit a record, but the resulting transaction is attributed to the human or entity that deployed it; the AI cannot be the signing party	A human is always the one whose signature or initial is actually captured; Claude never clicks sign	report	[22]
E&O insurance is a license condition in 13 states (CO, IA, KY, LA, MS, MT, NE, NM, ND, RI, SD, TN, WY)	Confirm your coverage is current if you're licensed in one of those states, and don't assume your carrier's policy language addresses AI use specifically, since no insurer bulletin on that was found	report	[23]

Fair housing

Rule	What you do about it	Chip	Source
Fair Housing Act: no ad may state a preference, limitation, or discrimination based on a protected class, whoever or whatever wrote it	Describe the property, never who should live in it; run every listing description through the fair housing word list before it's posted	report	[24]
The widely cited "banned words" list traces to a 1989 HUD memo that was withdrawn and never formally replaced; HUD still uses it informally in enforcement	Treat the common word list as risk-reduction guidance, not binding statute text, and still avoid every word on it	report	[25]
HUD's 2024 guidance on AI-driven tenant screening and algorithmic ad targeting was withdrawn in 2025; disparate-impact rulemaking to remove the underlying regulations is proposed but not final as of this research	Don't read the guidance withdrawal as permission; the Fair Housing Act's intentional-discrimination liability is fully in force regardless	report	[26]

Data

Rule	What you do about it	Chip	Source
GLBA / FTC Safeguards Rule applies to "financial institutions," which the FTC interprets broadly enough to potentially sweep in agents handling borrower nonpublic financial information in closing-adjacent roles	If your CRM stores pre-approval letters, income documents, or bank statements, get counsel to confirm whether GLBA applies to you	verified	[27]
Texas TDPSA has no revenue or data-volume threshold, only an SBA employee-count exemption, unlike California's CCPA/CPRA	Don't assume "we're too small" if you do business with Texas residents; check the SBA small-business exemption specifically	report	[28]
Texas TRAIGA (HB 149) adds AI-specific data-processor obligations to the TDPSA, effective January 1, 2026	If you're using AI tools on Texas resident data, review this amendment before assuming your existing TDPSA compliance still covers you	report	[29]

Two moments where compliance is the whole job

Texting a new lead. Trigger: a new lead's contact info lands in your CRM and you want a personalized follow-up text. What Claude prepares: a draft that respects the recipient's local quiet hours and references only facts you've verified. What the human checks and does: confirms a documented consent record exists for that exact number, then sends it. What is never automated: the send itself, and the consent record it depends on.

A virtually staged listing photo. Trigger: a vendor delivers a staged or AI-edited image for a live listing. What Claude prepares: the required disclosure caption and a check that the original unaltered photo is ready to pair with it. What the human checks and does: confirms the exact label wording your MLS requires (they differ, see the table above) and publishes both images together. What is never automated: publishing the altered image without the label and the original side by side.

The never-list

These are the things Claude never does in this business, no matter how well a workflow is running. Each one names the rule it comes from.

Never sends a message. Every text and email is drafted, then sent by a human, because TCPA consent and revocation and CAN-SPAM opt-out obligations attach to the sender, not the drafting tool.
Never signs or initials. ESIGN and UETA attribute an electronic agent's actions to the human who deployed it, but the AI itself can never be the signing party of record.
Never writes to the MLS or CRM unattended. MLS credential-sharing and data-accuracy rules treat unattended or bulk automated entry as a violation risk; every write gets a human look first.
Never invents a fact or a number. A made-up comp, price, or date is a fair-dealing and UPL problem before it's anything else, and it directly conflicts with Anthropic's Usage Policy duty of qualified human review on financial and housing-eligibility content.
Never gives legal or tax advice, or drafts contract language beyond filling in approved forms. Most states treat custom contract drafting or legal interpretation by a non-lawyer licensee as unauthorized practice of law, a risk California's March 2026 DRE advisory calls out by name for AI tools specifically.
Never contacts a person without consent on file. TCPA prior express written consent and the National DNC Registry's 31-day scrub requirement both attach to the number, not the intent behind the message.
Never claims to be a human. Anthropic's Usage Policy bars presenting AI output as human-generated to convince someone they're talking to a person, and New Jersey law separately requires a bot to disclose itself at the outset of any real estate conversation.
Never quotes an outcome or a value as fact. A CMA opinion of value, a net sheet estimate, or a buyer's qualification note is a high-risk category under the Usage Policy; it goes to the client as a professional's reviewed opinion, not a guaranteed number.
Never handles credentials or payment details. Claude in Chrome is explicitly blocked at the extension level from inputting sensitive data and from stock trading or investment transactions, and it's built to ask permission before acting on financial sites.
Never targets ads by protected class. The Fair Housing Act's discrimination liability applies to ad delivery and targeting, not just the words in the ad, regardless of what HUD's current guidance posture is.

What to disclose, and when

AI-assisted drafting. When a listing description, market update, or client-facing document was AI-drafted, say so; it's the operational read of NAR's Code of Ethics material-fact duty and its October 2025 AI guidance.
Digitally altered images. Disclose per your MLS's exact wording (ARMLS "[Digitally Altered]", CRMLS/California's "digitally enhanced/altered/virtually staged," Bright's "VIRTUALLY STAGED") and keep the original attached alongside it.
Bot conversations in New Jersey. Any AI-driven chat or text thread touching a New Jersey real estate sale discloses it's a bot clearly, at the very start of the interaction, not buried later.
The Anthropic high-risk disclosure rule. Legal, financial, healthcare, employment, housing, and academic-testing content requires disclosing AI's use to the person affected, and a qualified professional's review before it's finalized or sent.

When to call counsel

Before texting any purchased, transferred, or "reactivated" contact list where the original consent chain isn't documented.
Before using any custom contract or addendum language that goes beyond filling in blanks on an approved form.
The moment a fair housing complaint, formal or informal, is raised against you or your listing.
If your CRM stores lender pre-approval letters, income documents, or bank statements, to confirm whether GLBA applies to your specific setup.

What stays human

Every consent record: who agreed to what, when, and in what exact words.
Every send, sign, and MLS or CRM write.
The final wording and label on every AI-altered or staged image.
Any decision that touches a fair housing complaint, a custom contract clause, or GLBA-covered documents.
The choice to call counsel, made early rather than after something has already gone out.

Do this today

Pull your current consent records for the last 50 texted or called leads and confirm each one has a name, number, timestamp, and disclosure language on file.
Check your MLS's current AI-photo disclosure rule against the table above and fix any live listing that's missing the label or the original image.
Print or save the never-list and keep it next to your Claude Project instructions from Chapter 08.

Sources

bclplaw.com TCPA opt-out rules alert; womblebonddickinson.com 2026 robocall alert, retrieved 2026-09-03
bclplaw.com TCPA opt-out rules alert, retrieved 2026-09-03
mofo.com Eleventh Circuit TCPA analysis; consumerfinanceinsights.com FCC final rule coverage, retrieved 2026-09-03
law.cornell.edu, McLaughlin Chiropractic v. McKesson, 606 U.S. __ (2025); consumerfinancialserviceslawmonitor.com summary, retrieved 2026-09-03
txtimpact.com A2P 10DLC registration guide; apten.ai 2026 compliance blog, retrieved 2026-09-03
dnc.com real estate DNC compliance blog; redx.com TCPA guide, retrieved 2026-09-03
floridarealtors.org Do Not Call library page, retrieved 2026-09-03
recordinglaw.com TCPA damages and lawsuits page, retrieved 2026-09-03
ftc.gov CAN-SPAM Act Compliance Guide for Business, retrieved 2026-09-03
regulations.justia.com Arizona R4-28-502; aaronline.com brokerage-name-in-advertising article, retrieved 2026-09-03
trec.texas.gov Rule 535.154 explainer page, retrieved 2026-09-03
floridarealtors.org Realtor advertising rules page, retrieved 2026-09-03
nar.realtor Code of Ethics governing-documents page, retrieved 2026-09-03
armls.com/digitally-altered-media, retrieved 2026-09-03
kb.crmls.org digitally-altered-image guidance FAQ, retrieved 2026-09-03
Bright MLS Rules PDF (effective Aug. 14, 2024), retrieved 2026-09-03
law.justia.com, N.J.S.A. 56:18-2, retrieved 2026-09-03
dre.ca.gov Advisory 2026-03-17, AI in California Real Estate, retrieved 2026-09-03
nar.realtor newsroom, practice-change reminder (Aug. 17, 2024 effective date), retrieved 2026-09-03
jamilacademy.com, NAR settlement 2026 Code of Ethics explainer, retrieved 2026-09-03
ncrealtors.org, unauthorized-practice-of-law explainer; dre.ca.gov Advisory 2026-03-17, retrieved 2026-09-03
ironcladapp.com, ESIGN Act §101(h) summary, retrieved 2026-09-03
theclose.com, best E&O insurance for real estate, retrieved 2026-09-03
hud.gov fair housing ad-campaign page (via secondary summary), retrieved 2026-09-03
Industry compilations citing the withdrawn 1989 HUD memo, retrieved 2026-09-03
archives.hud.gov 2024 guidance archive; federalregister.gov disparate-impact proposed rule, retrieved 2026-09-03
ftc.gov Safeguards Rule page; ftc.gov Safeguards Rule notification-requirement blog, retrieved 2026-09-03
usercentrics.com Texas TDPSA knowledge hub, retrieved 2026-09-03
recordinglaw.com Texas data privacy laws page (TRAIGA amendment), retrieved 2026-09-03
Arizona Administrative Code, 4 A.A.C. 28, R4-28-502, Supp. 25-4 (amended effective December 13, 2025), apps.azsos.gov/public_services/Title_04/4-28.pdf, retrieved 2026-09-04
22 TAC 535.154 (txrules.elaws.us) and TREC advertising rules article on 535.155, trec.texas.gov, retrieved 2026-09-04
Bright MLS, Policy on Rules Enforcement, Schedule 1, assets.ctfassets.net PDF, retrieved 2026-09-04
California DRE, Advisory: Artificial Intelligence in California Real Estate, March 17, 2026, dre.ca.gov, retrieved 2026-09-04

← Previous · All chapters · Next →

Starting from zero? Use the field manuals first.

02 · BEFORE YOU BUY SOFTWARE
If you're still choosing the buyer, offer, stack, agents, content, customers, and delivery, don't start with a tool: start with the manuals. These create local worksheets only: no checkout, outreach, or account setup.

Find the first manual

Not sure which guide to open first? Start from your stuck point and let the finder recommend the next manual and the first worksheet question. No personal data is collected: it just points you at the right starting move.

Open the guide finder →

Work the starter pack

Move through buyer, offer, stack, agents, content, customers, and delivery as a sequence of short local worksheet sessions. One artifact at a time, in order, so you build the business instead of browsing for it.

See the Business Path →

See what "done" looks like

Read a fully worked field manual before writing your own version, so the output feels concrete: a real, numbered workflow with the risky steps gated, not a fake proof claim.

Open a sample field manual →