Skip to content
AI Operations

AI Lead Generation: Where It Helps, What to Keep Human, and the Consent Rules

AI lead generation works best in research, enrichment, scoring, drafting and follow-up. What to keep human, the CAN-SPAM and TCPA rules, and how to measure it.

Sales coordinator reviewing a printed prospect list and drafted emails with a pen before approving them

Field note

Illustrative image, AI-generated. It is not a client, dashboard or result. How we use imagery.

By XenGrowth EditorialPublished Reviewed 10 min read

Share this

Key takeaways

  • AI lead generation helps most with the preparation and follow-up work around a sales conversation: research, enrichment, scoring, drafting and reminders.
  • Keep a person in charge of who gets contacted, what is claimed, anything sent to a regulated audience and every real conversation.
  • CAN-SPAM covers commercial email with no business-to-business exception, and the TCPA restricts calls using automated dialing or artificial or prerecorded voices without consent.
  • Measure by qualified opportunities and cost per opportunity against a manual baseline, not by messages sent.

01

Where does AI lead generation actually help?

AI lead generation helps most in five jobs that precede or follow a human conversation: researching accounts, enriching records, scoring leads, drafting messages and prompting follow-up. All five are reading, sorting and writing tasks on structured information, which language models handle reasonably well when a person checks the output.

It helps least where the task depends on judgement about a relationship or on facts the model cannot see. Choosing which strategic accounts to pursue, setting a price, or deciding whether a lead is a good fit for your capacity still sits with people. Treat the tools as a way to give your salespeople more of their day back, not as a replacement for the part of selling that customers notice.

Scoring deserves a closer look because it is where AI is most often oversold. A scoring model, whether rules or machine learning, learns from the past: the leads you pursued and the ones that became customers. If your history is thin or biased toward one type of buyer, the scores repeat that bias. Start with simple, transparent fit and behaviour rules you can read, and test any model against them.

Where does AI lead generation actually help? comparison table
JobWhat AI doesWhat a person still does
ResearchSummarises a company website and public news into a short briefChecks the facts and decides whether the account is worth pursuing
EnrichmentFills gaps such as industry or size from public sourcesSpot-checks accuracy; removes data you have no basis to hold
ScoringRanks leads by fit and behaviour using rules you defineReviews the rules and a sample of low scores for misses
DraftingWrites first drafts of emails and replies from approved factsEdits, approves and sends; owns every claim
Follow-upPrompts reminders, summarises call notes, proposes next stepsHolds the conversation and decides the next step

02

What should stay human?

Four things should stay with a named person. First, the decision about who is contacted and why. Second, any claim about results, pricing or capability, since you are accountable for each statement you publish or send. Third, anything going to audiences with special rules, such as patients, borrowers or students. Fourth, every live conversation, because an enquirer who finds a bot where they expected a person usually notices fast.

A workable rule is that AI drafts and people send. Hold a sample review each week of what the system produced, including the leads it scored lowest, because errors in a scoring model are invisible unless someone looks for them. The FTC has said there is no AI exemption from the laws on the books, in an announcement of enforcement actions against deceptive AI claims. That applies to your marketing claims as much as to vendors'.

Consent and expectation also belong to people. A prospect who gave their details for a guide did not necessarily agree to a daily sequence. Decide, in plain words, what each form promises, and make the follow-up match it. A drafted message that references something a person never told you, scraped from somewhere they did not expect, can feel invasive even when it is lawful.

03

What do CAN-SPAM and the TCPA require?

CAN-SPAM applies to all commercial email, including business-to-business. The FTC lists the requirements: accurate header information, non-deceptive subject lines, a clear statement that the message is an ad, your valid physical postal address, a working opt-out and honouring opt-outs within 10 business days. You also remain responsible when another company, or a tool, sends on your behalf.

The Telephone Consumer Protection Act, at 47 U.S.C. 227, restricts certain calls, including calls to cellular phones, made with an automatic telephone dialing system or an artificial or prerecorded voice without the called party's prior express consent, with further requirements for other calls. The FCC's rule at 47 CFR 64.1200 adds detail, including prior express written consent in specified cases. Whether a given AI voice or automated text workflow falls within those provisions is a legal question, so get counsel to review before you automate calls or texts. Outside the US, rules such as GDPR and PECR differ and are not covered here.

  • Email: accurate sender details, honest subject lines, ad identification, postal address, opt-out honoured within 10 business days.
  • Phone and text: record consent, with the date, wording and source, before any automated or prerecorded contact.
  • Data: only enrich with information you have a lawful basis to hold, and delete on request.
  • Vendors: you cannot contract away responsibility for what a tool sends in your name.

04

How should you set it up?

Begin with one job, not five. Follow-up is a good first choice: a prompt that summarises the last interaction and proposes a reply for a person to approve. It uses information you already hold, carries low risk and shows results quickly. Add research or scoring once that is stable and you can compare it to the manual version.

Give the model approved facts to draw from, such as your service descriptions, pricing rules and proof you can document, and tell it not to state anything outside them. Log what was drafted, what was edited and what was sent. Do not publish content in bulk to attract leads, either: Google's spam policies cover scaled content abuse, which means producing many pages mainly to manipulate rankings without adding value for readers.

A simple pilot is enough to learn from. Choose one segment, split it into a manual group and an AI-assisted group of similar size, and run both for a month or two. Record the time spent, the replies, the qualified opportunities and any complaints. If the assisted group performs no better and costs more review time, you have learned that cheaply, and nobody had to take a vendor's claims on trust.

05

How do you measure whether it works?

Compare against what you did before. Pick a baseline period or a comparable group handled manually, and track qualified opportunities, time from enquiry to first reply, and cost per qualified opportunity including tool and review time. Messages sent, drafts produced and open rates show activity, not results.

Also track the failure side: opt-outs, spam complaints, bounced addresses and replies saying the message was irrelevant. If complaints rise while volume rises, you are scaling a problem. This investment is not worth it for a business with a handful of leads a month; a good CRM reminder and a prompt personal reply will do more than a model.

Give the pilot a stopping rule before it starts: for example, review after eight weeks and continue only if cost per qualified opportunity is no worse than the manual baseline and complaints stay flat. Pre-agreed criteria stop a hopeful team from explaining away a flat result, and they make it easy to scale up the parts that earn their keep.

06

What are the risks beyond the law?

Quality risk comes first. Language models can state things that sound right and are not, so a drafted email may claim a feature you do not have or describe a prospect's business wrongly. One wrong detail in an opening line costs more than the time saved on ten drafts. The control is dull: approved facts as input, a person reading the output before sending.

Reputation risk follows. Prospects now recognise templated outreach quickly, and a sequence that feels automated trains your market to ignore you. Sender reputation is a practical concern too: high complaint rates can push your domain toward spam folders, which affects every email you send, including to existing customers.

Finally, there is data risk. Pasting customer records into a public tool may breach your privacy notice or your contracts. Check what each vendor does with inputs, restrict the fields you send, and keep a record of the tools in use. In regulated sectors such as health or finance, ask your compliance lead before any pilot, because sector rules sit on top of the general ones.

Was this useful? Send it to someone who owns this problem.

Primary sources and further reading

Use the source material to validate details against your own context and current platform configuration.

This field note follows the XenGrowth editorial policy: primary sources where available, visible limitations, material review dates, and no invented first-hand experience.

Stay with the problem

Explore AI & automation