10DLC by provider · Twilio · Critical
Twilio 10DLC rejected: Privacy policy missing or does not mention SMS
Your Twilio registration came back rejected and it points to privacy policy missing or does not mention SMS. Twilio did not make that call. Here is what the reason means and exactly how to fix it.
Twilio showed your A2P 10DLC campaign as rejected, and the reason maps to "Privacy policy missing or does not mention SMS". The part that trips people up: Twilio did not decide this. It submitted your brand and campaign to The Campaign Registry (TCR) and the carriers, they returned the rejection, and Twilio is relaying it back to you.
That is good news for the fix. Because "Privacy policy missing or does not mention SMS" is a carrier and TCR requirement rather than a Twilio rule, the correction is the same no matter which provider you registered through: The brand website must host a privacy policy stating that mobile information is not sold or shared with third parties for marketing.
Where Twilio shows this rejection
In the Twilio Console, the campaign's status and the returned rejection reason appear under your Messaging / A2P 10DLC section, on the campaign that failed. The text you see there is the reason relayed from TCR or the carrier.
Twilio is the messenger, not the decider
Note the difference between a registration rejection and a sending error. A rejected campaign is a registration decision you resolve by fixing the package and resubmitting. A send-time error on an unregistered number is a symptom of registration not being complete, not a separate campaign rejection. If you are unsure which you are seeing, the rejection reason text is the tell.
The fix
Publish a privacy policy on the website that explicitly states SMS opt-in data is not shared/sold, and link it from the opt-in flow.
Same rejection, different provider?
The reason is identical no matter who you registered through.
Common questions
Did Twilio reject my 10DLC campaign for privacy policy missing or does not mention SMS?
No. Twilio submitted your campaign to The Campaign Registry and the carriers, who returned the rejection. Twilio relays the reason. You resolve the underlying issue and resubmit through Twilio. The fix here: Publish a privacy policy on the website that explicitly states SMS opt-in data is not shared/sold, and link it from the opt-in flow.
What does a 10DLC SMS privacy clause need to say?
That mobile information collected through SMS opt-in is not sold or shared with third parties for marketing purposes, alongside your normal privacy disclosures. It must be published on your live site and linked from the opt-in.
How do I resubmit after a Twilio rejection?
Correct the issue, then resubmit the campaign for review through Twilio. Every resubmission is re-reviewed and re-review typically takes one to four weeks, so fix every problem before you resend rather than resubmitting to test it.