Lawyer Marketing Laws in 2026: How Colorado, California, and Texas Rewrote the Rules

For thirty years, lawyer marketing was governed by bar rules — ethics opinions, Rule 7.1, the occasional disciplinary action. Slow, professional, and largely toothless against the third parties actually running the machine.

That era is over. In eighteen months, three states moved lawyer marketing out of the ethics rules and into consumer protection statutes — with private rights of action, five- and six-figure penalties, and in one case, felony exposure. The enforcers are no longer bar committees. They're attorneys general, district attorneys, competitors, and the consumers on your lead list.

Colorado SB 26-174: An Outright Ban on Legal Lead Generation

Colorado didn't regulate legal lead generation. It banned it.

The bill itself states that "lead generation legal marketing for legal services is inherently misleading" and "typically uses 'bait-and-switch' tactics…to target injured or vulnerable consumers who are in need of legal representation."

Governor Polis signed SB 26-174 on June 3, 2026. Effective August 12, new C.R.S. 6-1-741 makes "lead generation legal marketing" a deceptive trade practice: any arrangement where an attorney pays a third party — per-lead, per-case, by subscription, or through intermediaries and affiliates — to receive a potential client's contact information or legal issue.

Three things make this law different. First, the buyer is liable. A firm that pays for Colorado leads violates the statute the same as the seller. Second, enforcement is private: consumers and competing law firms can sue for $10,000 per violation plus fees. Third, the act expressly invites criminal prosecution — impersonation, fraud, racketeering.

What survives is marketing where the attorney is clearly identified to the consumer: SEO, PPC, TV, billboards, directories, and agencies working on behalf of a named, Colorado-licensed firm. The dividing line is identity, not channel.

California SB 37: Identity Requirements That Function Like a Ban

California's SB 37 took effect January 1, 2026. It doesn't prohibit legal lead generation by name. It does something quieter: every legal advertisement must name at least one California-licensed attorney (or firm, or certified referral service) responsible for it, and disclose a bona fide office location. Guarantees and outcome predictions are banned outright.

A lead generator running generic "injured in an accident?" campaigns has no attorney to name and no office to list. The disclosure requirement is the prohibition.

The enforcement mechanism: consumer-initiated complaints with statutory damages from $5,000 to $100,000 per violation — and attorneys are on the hook for what their vendors publish. You can't outsource the liability with the marketing anymore. I wrote a full breakdown here: California's SB 37: A New $100,000 Risk for Legal Lead Generators.

Texas Barratry Law and SB 140: Digital Solicitation Becomes a Felony

Texas ran a two-front campaign in 2025, both effective September 1.

Front one: barratry. HB 4325 raised the civil barratry penalty from $10,000 to $50,000 per violation, plus actual damages and fees. HB 2733 expanded criminal barratry under Penal Code § 38.12 to expressly cover electronic solicitation — cold texts, social media DMs, click-to-sign funnels. It's a third-degree felony, and it reaches every participant in the pipeline: the marketer who sends the DM, the aggregator who sells the case, and the lawyer who knowingly accepts it.

Front two: telemarketing. SB 140 expanded Texas's mini-TCPA to cover marketing texts, triggering registration with the Secretary of State ($200 fee, $10,000 bond) and making violations actionable under the DTPA — attorney fees, mental anguish damages for knowing violations, treble damages for intentional ones. A November 2025 settlement narrowed the registration requirement for genuine opt-in programs, but the private right of action stands. (If your texting program touches Texas, start with the fundamentals in our TCPA compliance guide for lead-gen and platforms.)

Put the two fronts together and the message is plain: in Texas, a mass-tort text campaign isn't an ethics question. It's a felony question with a DTPA chaser. And this is already showing up in the demand letters. I've seen TCPA demand letters where the claimant stacks a barratry charge on top to inflate the demand, which in turn raises the number they'll settle for.

The Pattern: Identity, Consent, and Accountability

Lay the three states side by side and the through-line is hard to miss.

Identity. Colorado and California both turn on the same question: does the consumer know which lawyer they're actually talking to? This can often comes down to whether the parties are being disclosed in a clear and conspicuous manner. Marketing that answers yes will survive. Marketing that harvests a consumer's story behind a generic brand doesn't.

Consent. Texas's SB 140 and the barratry amendments police the channel — who you may contact, how, and with what permission. The consent language, which has always been important in lead generation, becomes critical in Texas for law firms.

Accountability moves up the chain. Every one of these laws reaches the buyer, not just the vendor. Colorado makes paying for leads a violation. California holds attorneys strictly liable for vendor content. Texas makes knowingly accepting a solicited case criminal. The "our vendor handles compliance" defense is dead in all three.

And legal won't be the last vertical. Colorado's legislative findings — bait-and-switch, look-alike ads, leads resold to multiple buyers — describe the lead generation model, not the legal industry. Legislatures copy-paste. Insurance, mortgage, solar, and home services operators should read these statutes as a preview.

What To Do Now

If you're a law firm buying leads: map your lead sources by state. Colorado purchases stop by August 12. California sources must name your attorney and office in the creative — pull the actual ads and check. Texas sources need a consent trail you can produce. Not sure what "a consent trail you can produce" looks like? Start with the three questions to ask before buying leads.

If you're a lead generator in the legal vertical: the agency model is the survival path. Work on behalf of named, licensed firms, clearly identified in every consumer touchpoint. It changes your economics and your contracts. It's also the only structure that works in Colorado and California simultaneously. And if your intake or qualification runs on an AI caller, layer in AI voice compliance requirements before you scale it.

If you're either: reread your contracts. Indemnification, audit rights, compliance-with-law warranties, and termination rights were drafted for a world where the worst case was a TCPA class action. The worst case now includes a $100,000 statutory claim in California and a felony referral in Texas.

The firms and vendors that treat this as a redesign problem will keep operating. The ones that treat it as a PR problem will become the enforcement examples.

If you're not sure which side of these lines your marketing stack sits on — that's a 30-minute conversation worth having before an attorney general, a competitor, or a plaintiff's lawyer maps it for you.