A retail company wants to launch an SMS campaign in the United States to promote a flash sale.
They have a list of customer phone numbers collected during online checkout.
What is the most critical first step they must take to comply with the Telephone Consumer Protection Act (TCPA)?