Last updated 2026-07-09
TL;DR
California is an all-party consent state under Penal Code Section 632. Everyone on a call must agree before you record it. The Attorney General can prosecute, but most cases come as private civil suits, and damages run the greater of $5,000 per recorded call or three times actual harm. Federal TCPA rules don't override this. Disclose at the very start of the call.
What is California's phone call recording consent law?
California Penal Code Section 632 is the statute that matters. It makes recording a confidential phone call without the consent of everyone on it a crime. Not one party. All parties.
Most states run a one-party rule. You can record a call you're on without telling the person on the other end. California does the opposite. It is one of roughly twelve states that require every person on the line to know about the recording and agree to it before it starts. [2]
The statute covers telephone calls, in-person conversations, and electronic communications carrying a reasonable expectation of privacy. For an outbound sales or marketing team, the phone part is the whole ballgame.
Section 632 only protects a "confidential" communication, and California courts read that term wide. A call between a salesperson and a consumer almost always counts. If either person on the call reasonably expected it to be private, the call is confidential. That describes nearly every B2C cold call you'll ever place.
For a wider look at how these rules touch daily sales operations, read our full california call recording laws guide.
Does the California Attorney General actually enforce call recording violations?
The Attorney General can enforce Penal Code 632 as a criminal matter and can bring actions on behalf of the state. [3] But here's the honest picture: most recording violations in California get fought out in private civil suits, not AG prosecutions.
That doesn't make the AG a bystander. The office has taken privacy enforcement actions against companies where unauthorized recording rides along with California Consumer Privacy Act (CCPA) claims. Record millions of calls without disclosure and you're a candidate for both tracks at once.
The Invasion of Privacy Act, the umbrella statute that holds Section 632, gives any injured person the right to sue on their own. [4] Plaintiffs don't wait for the AG. That's why plaintiffs' firms file call-recording class actions far more often than prosecutors file indictments. The civil exposure is huge, and these cases certify as a class without much trouble.
So the phrase "California Attorney General recording phone calls consent law" points at the right worry. The pressure on outbound teams just comes mostly from private lawyers, not a state prosecutor.
What does all-party consent actually require you to do on a call?
You have to get consent before the recording starts. The standard move is an oral disclosure at the very top of the call, something like "This call may be recorded for quality and training purposes." If the person stays on the line after that notice, California courts have generally treated continued participation as implied consent. [5]
A few things to get right.
The disclosure comes before any real conversation. If your rep pitches for three minutes and then slips in "oh, by the way, we record calls," you have a problem covering those first three minutes.
Silence alone is not clean consent under some readings. The safest signal is a verbal acknowledgment or a clear yes, especially on B2B calls where the other side is also a business. On consumer calls, continued participation after a clear disclosure has held up in most California cases, though there's litigation risk at the edges.
An automated disclosure on inbound calls works well. A recorded message that plays before the agent picks up is consistent and creates a log. Many contact centers run it this way.
Written consent beats oral every time. If you gather consent through a web form before dialing, a checkbox that says "calls may be recorded" can serve as prior written consent. It helps on the TCPA side too. Our robocall consent requirements federal law article shows how federal consent stacks on top of state recording rules.
What are the penalties for recording a call without consent in California?
Penalties hit from two directions, criminal and civil.
Criminally, a first violation of Penal Code 632 is a misdemeanor. Repeat violations can be charged as a felony. [1] Prosecution of a call center is rare, but it has happened, and the risk is real for egregious or intentional conduct.
Civilly, the Invasion of Privacy Act lets a private plaintiff recover the greater of $5,000 per violation or three times actual damages. [4] In class actions, "per violation" usually means per recorded call. Record 100,000 calls without consent and the arithmetic turns ugly fast.
California doesn't cap aggregate statutory damages the way some statutes do, so class exposure in recording cases routinely lands in the tens of millions. Several California recording settlements have cleared $10 million, though I won't hold up any one case as typical because outcomes swing hard on facts.
Here's the penalty structure at a glance:
| Penalty Type | Amount / Consequence |
|---|---|
| Civil statutory damages | Greater of $5,000 per call or 3x actual damages [4] |
| Criminal (first offense) | Misdemeanor, up to 1 year county jail |
| Criminal (repeat offense) | Felony, up to 3 years state prison |
| Injunctive relief | Court can order recording to stop |
| AG enforcement | Civil and criminal referral authority |
Florida runs a similar all-party model with its own criminal and civil penalties. Our florida call recording law two-party consent statute 934.03 guide walks through where Florida's structure parts ways with California's.
Does California's recording law apply to interstate calls?
This is the trap for out-of-state teams. You're dialing into California from Texas. Does California's law reach you? Generally, yes.
California courts have held that if any party to the call sits in California, Penal Code 632 applies to that call. [5] Your call center living in another state doesn't insulate you. You can't wave your home state's one-party law like a shield when the prospect answers in Sacramento.
Give the disclosure no matter where your dialer lives.
This differs from how some federal rules work. The TCPA applies nationwide with no state-choice analysis. Recording law is different: the location of the people on the call decides which state's rules govern. California's rule carries extra weight because the state has about 39 million residents and is a massive B2C market. Any national outbound program calls into California constantly. [6]
One practical note. Some companies kill the ambiguity by giving all-party-style disclosures on every call, whatever the called party's state. That's the clean answer. It adds maybe ten seconds and erases a whole category of litigation risk.
How does Penal Code 632 interact with TCPA federal law?
They run on separate tracks. The TCPA (47 U.S.C. § 227) governs consent for placing calls and sending texts with automated dialing systems, and separately covers prerecorded messages. [7] It doesn't preempt state recording laws. The FCC has said repeatedly that states can set stricter requirements than federal law.
So you can be fully TCPA-compliant, holding proper express written consent to dial the number with an autodialer, and still violate Penal Code 632 by recording that same call without disclosure.
Two distinct obligations live here:
1. Consent to be called (TCPA and state cold-calling rules) 2. Consent to be recorded (California Penal Code 632 and the Invasion of Privacy Act)
You need both. A signed lead form that authorizes a call does not authorize a recording unless the form says so. If you want prior written consent to cover recording, spell out recording in the opt-in language.
For teams building consent infrastructure, LeadCompliant's compliance kit includes template disclosure language for call recording that covers the TCPA layer and state all-party rules like California's.
Want the national picture on one-party versus all-party states? See our call recording consent laws one-party all-party overview.
Does California's call recording law change in 2026?
Penal Code Section 632 is unchanged for 2026 as of this writing. No enacted amendment is scheduled to take effect that alters the all-party consent requirement for standard telephone calls.
What's shifted is the enforcement climate, not the statute. The AG's office has expanded its CCPA enforcement division, and recording practices now surface as pieces of larger privacy investigations rather than standalone prosecutions. [3] Under California law, recordings of consumer calls count as personal information, so a recording problem can pull in CCPA obligations too. [9]
Legislators have floated proposals across recent sessions aimed at AI-generated calls and synthetic voice, and some touch consent and disclosure. None had become law affecting Section 632's core all-party rule as of mid-2026.
If you're searching "california phone call recording consent law 2026" because you heard something changed, here's the straight answer. The consent requirement itself didn't move. The penalty environment around privacy got more aggressive.
Confirm current statute text at the California Legislative Information site, which publishes the current enrolled version of every statute. [1]
What if the other party is a business, not a consumer?
B2B calls get no blanket pass. Section 632 protects "confidential communications," and the test is whether there was a reasonable expectation of privacy, not whether one side happens to be a company.
California courts have found plenty of B2B calls confidential. A negotiation, a vendor discussion, a customer service escalation with a business client, all can carry a privacy expectation even between two companies.
Give the recording disclosure on every call, B2B or B2C. It takes seconds. Skipping it because you assume a B2B exception applies is a bet many companies have lost.
There's one sensible carve-out worth knowing. If both parties are in a setting where recording is expected and routine, like a formal conference line that opens with a recorded announcement, the consent argument is far stronger. A rep cold-calling a business decision-maker is not that setting.
How do other states' consent rules compare to California's?
California sits in the minority that requires all-party consent. Most of the country runs a one-party rule, where only one person on the call needs to know about and agree to the recording.
The states matching California's all-party standard (often called two-party states, though the rule reaches every party when there are more than two) include Florida, Illinois, Maryland, Massachusetts, Montana, Nevada, New Hampshire, Oregon, Pennsylvania, and Washington, among others. [2]
The difference bites operationally. Dial into Arizona, a one-party state, and your rep can record without telling the other party. See [arizona call recording law one party consent.] Dial into California from the same system and you need the disclosure. Michigan is another one-party state, so calls into Michigan don't require all-party disclosure. See [michigan call recording laws.]
Managing this state by state is genuinely hard for a national team. The simplest sound answer is to standardize on all-party disclosures everywhere. You lose nothing by disclosing in a one-party state. You dodge enormous exposure by disclosing in an all-party state. If one script covers every market, use it.
Curious how other countries handle it? Our uae law recording phone calls without consent illegal article shows how strict foreign rules can get.
What should outbound teams actually do to comply right now?
This is the working checklist. None of it is legal advice. If you're facing actual litigation, call a California-licensed attorney.
1. Add a recording disclosure to every outbound script. Put it first, before any real conversation. "This call may be recorded for quality purposes." Done.
2. If you use an auto-dialer with a pre-connect message, drop the disclosure into that message so it plays before the agent speaks.
3. Update your opt-in forms. If you collect consent to call on a web form, add explicit recording language. "By submitting this form, you agree that calls may be recorded." That builds a paper trail.
4. Train your reps. The disclosure goes first, every time. One rep who forgets on 200 calls is 200 potential $5,000 violations.
5. Audit your CRM and recording platform. Log which calls carried a disclosure. If a suit lands, your ability to prove disclosure matters enormously.
6. Check your recording vendor's compliance settings. Some platforms auto-insert a beep or a recorded disclosure. Turn that on.
7. Flag California numbers in your dialer if you can't standardize across all states. Always disclosing is better, but if you run state-specific scripts, the flag has to be reliable.
LeadCompliant's free TCPA compliance checker at leadcompliant.com helps you spot gaps in your consent flow before a plaintiff's attorney does.
For the exact text of Penal Code 632 and its subsections, confirm at the California Legislative Information portal. [1]
Frequently asked questions
Is California a one-party or two-party consent state for phone call recording?
California is an all-party consent state, sometimes called two-party, under Penal Code Section 632. Every person on the call must consent to the recording before it starts. The rule covers telephone calls, in-person conversations, and electronic communications where there's a reasonable expectation of privacy. "Two-party" is technically imprecise when more than two people are on the line, since every party must agree.
What is the penalty for recording a phone call without consent in California?
Civil damages under the California Invasion of Privacy Act are the greater of $5,000 per violation or three times actual damages. Criminally, a first offense is a misdemeanor and repeat violations can be a felony. In class actions, aggregate exposure has reached the tens of millions because the $5,000 figure applies per recorded call, not per lawsuit.
Can I record calls with California customers if I'm calling from another state?
Yes, you still need all-party consent. California courts apply Penal Code 632 based on where the parties are, not where your call center sits. If your prospect is in California, California law governs the call. Operating from Texas, Florida, or any one-party state doesn't exempt you from giving the disclosure before recording a call into California.
Does saying 'this call may be recorded' at the start of a call satisfy California law?
Yes, in most cases. A clear oral disclosure at the very start, before any real conversation, is the standard way to obtain implied consent under Penal Code 632. Continued participation after the disclosure is treated as consent. The disclosure has to come first. A retroactive notice mid-call does not cover the earlier part of the conversation.
Does California's call recording law apply to B2B calls?
Generally yes. Section 632 covers any confidential communication, and business-to-business calls qualify if there was a reasonable expectation of privacy. Courts have not created a blanket B2B exemption. The safest practice is to give the recording disclosure on every call, whether the other party is a consumer or a business decision-maker.
Does TCPA consent to be called also cover consent to record the call?
No. These are separate obligations. TCPA consent lets you call someone using an autodialer or prerecorded message. California Penal Code 632 consent covers recording that call. You need both. A signed TCPA opt-in does not authorize recording unless it explicitly says the call may be recorded. If you want prior written consent for recording, add clear recording language to your opt-in forms.
Has California's call recording law changed for 2026?
The core all-party consent requirement in Penal Code Section 632 has not changed for 2026. The privacy enforcement climate has grown more aggressive because of expanded CCPA enforcement, and call recordings count as personal information under California law, but the consent standard for recording itself is the same. Verify current statute text at the California Legislative Information portal.
Can the California Attorney General sue my company for recording calls without consent?
Yes. The AG has authority to bring criminal and civil actions under the Invasion of Privacy Act. In practice, most recording violations get litigated by private plaintiffs in civil class actions rather than through AG prosecution. But the AG also has investigative authority and can open enforcement as part of broader privacy investigations, including CCPA matters.
Does California's recording law apply to text messages?
Penal Code 632 aims mainly at spoken communications. Text messages generally aren't "confidential communications" in the 632 sense because they're written records by nature. California has other statutes, and CCPA provisions, that affect how you handle text content and data. For outbound SMS, the TCPA and California's anti-spam rules are the more relevant compliance layer.
What is the California Invasion of Privacy Act?
The California Invasion of Privacy Act runs from Penal Code Sections 630 through 638. It holds the all-party consent recording rule at Section 632, the wiretapping prohibition, and related privacy protections. Section 637.2 creates the private right of action that lets individuals sue for the greater of $5,000 per violation or three times actual damages, without proving actual harm.
Do I need to disclose recording on every call or just the first call with a customer?
Every call. Consent under Penal Code 632 attaches to each specific recorded communication, not to a relationship or account. If you record every call with a customer, you need the disclosure on every one. Consent from a prior call does not carry over. Consistent script discipline is the only reliable way to stay covered.
Is a beep tone at the start of a call sufficient consent for recording in California?
A beep tone alone is generally not enough to meet California's consent standard. It may put a sophisticated party on notice, but California courts have not uniformly accepted the beep as equal to a verbal disclosure. The reliable approach is an explicit verbal or recorded announcement that the call may be recorded, followed by the caller's continued participation.
Sources
- California Legislative Information, Penal Code Section 632: California Penal Code Section 632 makes it a crime to record a confidential communication without the consent of all parties; first offense is a misdemeanor, repeat violations can be a felony
- National Conference of State Legislatures, recording law overview: Approximately twelve states require all-party consent to record phone calls, as opposed to the one-party consent majority
- California Department of Justice, Privacy Enforcement and Protection: The California Attorney General's office enforces privacy statutes including the Invasion of Privacy Act and CCPA; enforcement actions can include civil and criminal referrals
- California Legislative Information, Penal Code Section 637.2: Section 637.2 of the California Invasion of Privacy Act creates a private right of action allowing recovery of the greater of $5,000 per violation or three times actual damages
- Kearney v. Salomon Smith Barney, 39 Cal.4th 95 (2006), California Supreme Court: California Supreme Court held that California's all-party consent law applies when any party to the call is located in California, and that continued participation after disclosure constitutes implied consent
- U.S. Census Bureau, California state population estimates: California has approximately 39 million residents, making it the most populous U.S. state and a major market for any national outbound calling program
- California Legislative Information, Penal Code Section 630 (California Invasion of Privacy Act, legislative declaration): The California Invasion of Privacy Act at Penal Code Section 630 declares the legislative intent to protect the right of privacy of all people in California in their telephone communications
- California Office of Administrative Law, CCPA enforcement regulations: Call recordings constitute personal information under CCPA, meaning companies that record California consumer calls face both Section 632 and CCPA obligations