Does Twilio Require a Privacy Policy URL to Register an A2P 10DLC Campaign in 2026?

Yes. Starting June 30, 2026, Twilio requires a PrivacyPolicyUrl and a TermsAndConditionsUrl as part of any new A2P 10DLC campaign registration submitted through its Messaging REST API. Campaign-creation requests missing either field get rejected during review, so a marketing text campaign can't clear registration without both live URLs in place.

What This Actually Changes

The requirement applies to new campaign submissions, not retroactively to campaigns that were already registered and approved before June 30, 2026 — Twilio's own changelog specifies that existing campaigns are unaffected. If you're launching a new SMS marketing program or registering an additional campaign under an existing brand, you need working privacy-policy and terms-of-service URLs ready before you submit, not after.

Why This Fits Into a Bigger Pattern

A2P 10DLC registration has gotten progressively stricter since carriers began blocking unregistered traffic outright in February 2025, with no soft-filtering or warning period for traffic that was never registered. Twilio's privacy-policy and terms requirement is part of that same tightening: The Campaign Registry and mobile carriers have been pushing registrants toward more verifiable, carrier-checkable business information rather than self-attested details that can't be independently confirmed.

What Carriers Are Checking Beyond the URLs

Campaign reviewers increasingly verify that opt-in pages are live and carrier-checkable, and that sample messages submitted during registration genuinely match the type of marketing content a business plans to send — a sample marketing message mixed in with other message types, like account alerts or one-time passcodes, is a common rejection reason separate from the URL requirement.

Cost of Getting This Wrong

Registering a new A2P 10DLC campaign without complete documentation doesn't just add delay. Unregistered or improperly registered marketing SMS traffic has been blocked by carriers outright since February 2025, meaning messages don't reach phones at all rather than simply scoring lower in spam filters — a materially worse outcome than a deliverability dip.

What to Have Ready Before You Register

A live privacy policy page covering SMS data use, a live terms-of-service page covering the text program specifically, sample messages that match your actual marketing content and include opt-out instructions, and a verified business EIN are now the baseline documentation set carriers and Twilio expect before a new campaign clears review.

Other Providers Are Tightening Too

Twilio isn't the only messaging provider adding documentation checks to A2P 10DLC registration — other CPaaS providers that submit campaigns through The Campaign Registry have followed similar patterns as carriers push the entire registration ecosystem toward stricter, more verifiable business information. If you register SMS campaigns through a provider other than Twilio, check that provider's own changelog rather than assuming the June 30, 2026 date applies identically everywhere, since each provider sets its own API requirements on top of whatever The Campaign Registry mandates at the carrier level.

Bottom Line

Before registering a new SMS marketing campaign with Twilio after June 30, 2026, have a live privacy policy URL and a live terms-of-service URL ready to submit alongside your campaign details — missing either one now fails registration outright rather than just slowing it down.

Sources: Twilio Changelog, "A2P 10DLC Campaign Registration Will Require Privacy Policy and Terms and Conditions URLs" (effective June 30, 2026); Conduit, "A2P 10DLC Registration Step-by-Step for 2026.