10DLC by provider · Bandwidth · Critical
Bandwidth 10DLC rejected: Privacy policy missing or does not mention SMS
Your Bandwidth registration came back rejected and it points to privacy policy missing or does not mention SMS. Bandwidth did not make that call. Here is what the reason means and exactly how to fix it.
Bandwidth showed your A2P 10DLC campaign as rejected, and the reason maps to "Privacy policy missing or does not mention SMS". The part that trips people up: Bandwidth did not decide this. It submitted your brand and campaign to The Campaign Registry (TCR) and the carriers, they returned the rejection, and Bandwidth is relaying it back to you.
That is good news for the fix. Because "Privacy policy missing or does not mention SMS" is a carrier and TCR requirement rather than a Bandwidth rule, the correction is the same no matter which provider you registered through: The brand website must host a privacy policy stating that mobile information is not sold or shared with third parties for marketing.
Where Bandwidth shows this rejection
Bandwidth shows brand and campaign registration status in its Dashboard (and via the Dashboard API), including the reason for a rejected registration. That reason comes from TCR or the carriers.
Bandwidth is the messenger, not the decider
As a direct carrier-connectivity provider, Bandwidth passes registry and carrier decisions straight through. Treat the rejection text as the carriers' words: it maps to one of the known 10DLC rejection reasons, and that is what you fix before resubmitting.
The fix
Publish a privacy policy on the website that explicitly states SMS opt-in data is not shared/sold, and link it from the opt-in flow.
Same rejection, different provider?
The reason is identical no matter who you registered through.
Common questions
Did Bandwidth reject my 10DLC campaign for privacy policy missing or does not mention SMS?
No. Bandwidth submitted your campaign to The Campaign Registry and the carriers, who returned the rejection. Bandwidth relays the reason. You resolve the underlying issue and resubmit through Bandwidth. The fix here: Publish a privacy policy on the website that explicitly states SMS opt-in data is not shared/sold, and link it from the opt-in flow.
What does a 10DLC SMS privacy clause need to say?
That mobile information collected through SMS opt-in is not sold or shared with third parties for marketing purposes, alongside your normal privacy disclosures. It must be published on your live site and linked from the opt-in.
How do I resubmit after a Bandwidth rejection?
Correct the issue, then resubmit the campaign for review through Bandwidth. Every resubmission is re-reviewed and re-review typically takes one to four weeks, so fix every problem before you resend rather than resubmitting to test it.