Last updated 2026-07-09
TL;DR
California Penal Code 632 requires consent from every party on a call before you record it. That makes California an all-party (two-party) consent state, one of the strictest in the country. A violation costs $5,000 per recorded call, or triple actual damages, plus possible jail time. Out-of-state callers get no pass if one party sits in California.
What is California's call recording law?
California Penal Code Section 632 is the statute that controls. It bars anyone from intentionally recording a confidential communication by phone without the consent of every party on the line. The law is not aimed only at businesses. It covers private individuals, journalists, and anyone else who picks up a phone.
The statute defines a 'confidential communication' as any communication carried on under circumstances that reasonably indicate any party to it desires it to be confined to the parties. That phrase reaches further than it sounds. Courts have generally held that ordinary phone calls between two people who don't expect to be recorded qualify as confidential. You can't argue the call wasn't confidential just because you personally disagree with that expectation. [1]
This is why California is called an all-party consent state, sometimes a two-party consent state when the call has exactly two people. Everyone on the call must know about the recording and agree to it before it starts. Silence isn't consent. Neither is a buried line in your terms of service that the caller never read.
The law has existed in some form since 1967, and California courts have read it broadly ever since. If your business makes or receives calls involving anyone physically located in California, the statute applies to you, no matter where your company is headquartered.
Is California a one-party or two-party consent state for recording calls?
California is an all-party consent state. That's the plain answer. Every participant has to consent before any party can lawfully record the call. [1]
Compare that to federal law. The federal Wiretap Act, 18 U.S.C. § 2511, requires only one-party consent, meaning a person who is part of the conversation can record it without telling anyone else. Most states follow that federal floor. California does not. It sets a higher bar than federal law, and state law governs inside its borders.
The table below shows how California stacks up against a few states people ask about most:
| State | Consent required | Key statute |
|---|---|---|
| California | All parties | Penal Code § 632 |
| Florida | All parties | F.S. § 934.03 |
| Michigan | All parties (with exceptions) | MCL § 750.539c |
| Arizona | One party | A.R.S. § 13-3005 |
| Texas | One party | Tex. Penal Code § 16.02 |
| Federal baseline | One party | 18 U.S.C. § 2511 |
The split matters a lot for outbound sales teams. A Texas call center dialing California residents can't fall back on Texas's one-party rule. The call touches California, so California's all-party requirement wins. [2]
For a wider view of how states divide on this, see call recording consent laws: one-party vs. all-party overview. Florida's similarly strict rule sits at florida call recording law: two-party consent statute 934.03.
What are the penalties for violating California's recording law?
Criminal penalties under Penal Code 632 run up to one year in county jail, a fine of up to $2,500 per violation, or both. [1] That's the criminal side. The civil side is usually what hurts businesses more.
California Penal Code Section 637.2 creates a private right of action. Anyone recorded without consent can sue and recover the greater of $5,000 per violation or three times the actual damages they suffered. [3] Actual damages for a recorded phone call are hard to pin down, so plaintiffs almost always claim the $5,000 statutory floor.
Now multiply that by the calls your team recorded. A sales team that records 200 calls a month without proper disclosures is sitting on a $1 million annual civil exposure, before you add attorneys' fees. Plaintiffs' lawyers know this math cold, and California recording violations have fed class litigation for years.
Section 637.2 also says a plaintiff doesn't need to prove actual damages. Proof of a violation is enough to collect the $5,000. That makes these cases unusually easy to bring and unusually hard to defend.
One more thing to know: the California Attorney General can bring enforcement actions under these provisions too. See california attorney general recording phone calls consent law for how that enforcement path works.
How do you properly get consent to record a call in California?
The common method is a spoken disclosure at the very start of the call. Something like: 'This call may be recorded for quality assurance and training purposes.' Every party hears it. Every party keeps talking. California courts have treated that continued participation as consent. [4]
The disclosure has to happen before recording begins. You can't start recording, then read the notice, then claim everyone consented from the moment they stayed on the line. Recording the disclosure itself is the problem. Many systems solve this by playing the notice before the agent connects, so recording starts only after the automated message finishes.
On outbound calls, the agent gives the disclosure at the opening. On inbound calls, an IVR message before the call reaches a live agent works fine. Either way, the disclosure should be clear and up front, not mumbled at the tail of a long legal recitation.
Written consent is valid too, but it's clumsy in a live call. If you run a platform where customers schedule callbacks or fill out lead forms, put consent language in that form. It has to name recording specifically, not lean on generic 'terms and conditions' acceptance. Courts have looked hard at buried consent and rejected it.
If a party objects after you give notice, you stop recording. California law gives you no mechanism to keep recording over someone's objection.
Does the California recording law apply to out-of-state callers and businesses?
Yes. Where the parties are, not where the business is, decides which state's law applies. California courts and the California Attorney General have consistently applied Penal Code 632 to calls where even one party sits in California at the time of the call. [1]
This catches a lot of remote and national sales teams off guard. Your company might be incorporated in Delaware, your servers in Ohio, your agents in Texas. If a customer in San Diego answers your call, California law covers that call.
The reverse holds in some cases too. If your agent dials from California to someone in another state, California law arguably covers that call because one party (the agent) is in California. Courts have generally read the statute to reach any call with a California party.
The safest policy for any team doing national outreach: treat every call as though California's all-party rule applies, unless you have a reliable way to identify and exclude California residents. Running two recording protocols, one for California and one for everyone else, is operationally messy and leaves gaps. Most compliance-minded teams just apply the California standard everywhere. It costs you a five-second disclosure. It saves you the exposure.
Are there exceptions to the California all-party consent rule?
A few narrow contexts are carved out. California Penal Code 633 exempts law enforcement from the consent requirement when acting under lawful authority. That exception does nothing for businesses. [1]
Public utilities regulated by the California Public Utilities Commission may record certain calls under specific conditions, but those rules apply narrowly to regulated utilities, not general commercial callers. [5]
There's also a slim exception for calls that aren't 'confidential communications.' If both parties have clearly established that the call is being recorded and neither holds any reasonable expectation of privacy, Section 632 doesn't apply. That exception has almost no practical use for sales or service calls, because the person receiving an unannounced call almost always expects they aren't being recorded.
Conferences, webinars, and multi-party calls where participants are told up front that the session is recorded generally fall outside the statute once proper notice is given. The mechanism is still consent: notice plus continued participation.
There's no exception for small businesses. None for calls under a certain length. None for B2B versus B2C. A call from one company to a business contact in California needs the same all-party consent as a consumer call.
How does federal wiretap law interact with California's recording law?
The federal Wiretap Act (18 U.S.C. § 2511) sets a floor: you need at least one-party consent to record an interstate call. California sets a higher ceiling: all-party consent. When a call touches California, both laws apply at once, and you have to satisfy the stricter one. [2]
Some people ask whether the TCPA (47 U.S.C. § 227) fits in here. It doesn't, at least not on recording. The TCPA governs whether you can make the call at all, with what equipment, to which numbers. It's separate from recording consent. A call can be fully TCPA-compliant and still violate Penal Code 632. These are parallel obligations, not alternatives. For the federal robocall framework, see robocall consent requirements federal law.
Federal law does not preempt California's recording statute. States are free to demand more than the federal minimum on wiretapping and recording, and many do. Courts have upheld California's right to apply its all-party rule to interstate calls involving California parties.
The federal one-party rule really only matters when no California party is involved. For anyone doing national outreach, California is the controlling standard, because it's the strictest.
What do businesses with outbound sales teams actually do to comply?
The cleanest approach is one universal disclosure policy: every call gets the notice, no matter the caller's state. The disclosure takes about five seconds. The alternative, a state-detection system that changes recording behavior based on area code or confirmed location, is fragile and creates audit liability.
Here's a practical checklist most compliance-focused teams run:
1. Script the disclosure. Put it in writing in your call guide. The agent or IVR says it at the start of every call, before any real conversation begins. 2. Confirm recording starts after the disclosure. Set your recording software to begin only once the notice finishes, never before. 3. Train agents to handle objections. If a prospect says 'I don't consent to being recorded,' the agent should shut off recording immediately and note the call log. 4. Document consent. Most platforms log the timestamp of the disclosure message. Keep that log. In litigation you want proof the notice played before recording started. 5. Review vendor agreements. If you use a third-party call center or telephony platform, get it in the contract that they follow California all-party consent for all calls. Liability can flow to the vendor and back to you.
LeadCompliant's free compliance checklist covers recording disclosure language and consent documentation for outbound teams. Run your current call flow against it and see where the gaps are.
For teams wondering how neighboring states differ, arizona call recording law: one-party consent and michigan call recording laws are good reference points.
Can recorded calls be used as evidence in California courts?
A recording made in violation of Penal Code 632 isn't automatically barred in every proceeding, but it creates real problems. Penal Code 632(d) states that evidence obtained through a violation of the section is not admissible in any judicial, administrative, legislative, or other official proceeding. [1]
That's a broad exclusion. If you recorded a call without consent and you want to use it to prove what a customer agreed to, a California court can throw it out. Your evidence vanishes at the worst moment.
The flip side matters just as much for plaintiffs. The fact that a recording was made unlawfully doesn't stop the plaintiff from introducing it to prove the violation. Courts have let plaintiffs use illegally obtained recordings to show that a recording happened, because the claim is about the act of recording, not about what was said.
For businesses, the inadmissibility rule is a live operational risk. Sales teams record calls partly to settle disputes over what a customer agreed to. If those recordings can't be used in a California court because you never got all-party consent, you've lost your best evidence exactly when you need it.
That's one more reason the five-second disclosure earns its keep.
What about recording calls on a cell phone or through a VoIP platform?
California Penal Code 632.7 extends recording restrictions to cellular and cordless phone calls. [6] It's a separate provision from 632, added because some people argued the original statute reached only landlines.
Section 632.7 carries the same all-party consent requirement and the same $5,000 civil penalty per violation. It covers calls where at least one party uses a cellular or cordless phone. Since most calls today happen on mobile devices, 632.7 is now the operative provision for most business calls.
VoIP calls through platforms like Zoom Phone, RingCentral, or a Salesforce dialer fall under either 632 or 632.7 depending on how the call terminates. The consent requirement is the same regardless of the technology. The platform doesn't change the law.
Some VoIP platforms have built-in disclosure features, prompts that play a tone or message before recording starts. Those features exist specifically to support compliance in all-party states. If your platform has them, turn them on. If it doesn't, build the disclosure into your agent script or IVR flow instead.
Real cases: what happens when companies get it wrong?
California recording cases have produced large settlements. A few publicly known examples show the risk, though exact settlement figures often stay confidential.
The pattern repeats. A plaintiff contacts a business. The call gets recorded without proper notice. The plaintiff finds out. A class action follows on behalf of everyone else recorded the same way. Class recovery in these matters has climbed into the millions of dollars. [7]
The FCC has also addressed call recording issues under the federal framework. Federal recording enforcement runs separately from California state law, but companies facing California class actions often draw parallel FCC scrutiny when the calls involved autodialed equipment or prerecorded messages. [8]
The California Supreme Court case Kearney v. Salomon Smith Barney, decided in 2006, is the most cited authority on the geographic reach of the statute. The court held that California's law applied to calls where a California resident was recorded, even though the recording business sat in Georgia and Georgia follows a one-party rule. [4] That ruling is exactly why out-of-state businesses can't wave off California's rules.
The lesson from the case record is plain. The litigation risk is not theoretical. It's systematic, well-funded by plaintiffs' firms, and predictable. The exposure per call is small. The exposure across a year of calls is not.
How does California compare to other all-party consent states?
California ranks among the strictest recording consent states, partly for the private right of action with a $5,000 statutory floor, partly for the broad definition of 'confidential communication.' [1]
Florida's statute (F.S. § 934.03) carries similar criminal penalties but a different civil damages framework. [9] Michigan requires all-party consent under MCL § 750.539c but reads some definitions more narrowly. Washington, Maryland, Connecticut, and Oregon also require all-party consent, with varying penalty structures.
What sets California apart is the combination of three features: the $5,000 per-call civil penalty, the private right of action (no need to wait for a government agency), and the geographic reach from Kearney. Most other all-party states have one or two of those. California has all three. [10]
For an outbound team building a compliance program, the right mental model is simple. Design for California, and you're covered in every all-party state. Design for Texas or another one-party state, and you leave a gap everywhere stricter rules apply. California is the high-water mark in the U.S.
If your business operates internationally, other jurisdictions run their own rules entirely. See uae law recording phone calls without consent illegal for how a different legal system handles it.
Frequently asked questions
Does California's recording law apply to text messages or only phone calls?
Penal Code 632 covers wire and electronic communications, including telephone calls. Text messages may fall under separate California privacy statutes, but 632 was written with voice communications in mind. California courts have read electronic communications protections broadly, so any outbound messaging program should be reviewed under both recording law and the California Consumer Privacy Act.
If I am calling from outside California, do I still need all-party consent?
Yes, if the person you're calling is in California. The California Supreme Court's 2006 Kearney v. Salomon Smith Barney decision established that Penal Code 632 applies whenever a California party is on the call, regardless of where the other party or the business sits. Operating from Georgia, Texas, or anywhere else does not exempt you.
Does a beep tone at the start of a recorded call satisfy California consent requirements?
Courts have not uniformly accepted a beep tone alone as valid all-party consent. A spoken or automated announcement that the call is being recorded is safer and more defensible. Some older telephony systems used a recurring beep as a technical notice, but Penal Code 632 requires actual consent, more than a signal. Use a clear spoken disclosure.
What is the statute of limitations for a Penal Code 632 violation?
For civil claims under Penal Code 637.2, the limitations period is generally three years under California Code of Civil Procedure 338, which covers statutory liabilities. For criminal charges under 632, the period is typically one year for misdemeanor offenses. Either way, a recording made today creates exposure that can last for years.
Can I record just my side of the call without capturing the other person's voice?
No. California's all-party consent requirement covers any intentional recording of a confidential communication. Even if you're technically recording only your own audio, capturing the conversation implicates the statute when the other party is in California and hasn't consented. This is not a recognized workaround in California case law.
Do B2B calls between businesses require all-party consent in California?
Yes. Penal Code 632 draws no line between consumer and business calls. A call from one company to a business contact physically located in California requires all-party consent before recording. There's no B2B exemption in the statute or in the case law interpreting it.
Does California's recording law apply to Zoom or video conference calls?
It can. If a Zoom or video call involves audio and a California participant, the audio recording falls under Penal Code 632 or 632.7 depending on the technology. Zoom displays a consent notice when recording starts for exactly this reason. In a multi-party conference, all participants must be notified and given the chance to consent or disconnect.
What language should I use for a compliant recording disclosure on a California call?
A standard compliant disclosure sounds like: 'This call may be recorded for quality and training purposes.' It should come at the very start of the call, before the agent speaks substantively. It doesn't need to be elaborate. It does need to be clear, audible, and delivered before recording begins. Log the timestamp of the disclosure in your call records.
Is California all-party consent the same as two-party consent?
In practice, yes, when only two people are on the call. 'All-party consent' is the precise term under California law: every party must consent, which is two people on a standard call. 'Two-party consent' is common shorthand but can mislead on conference calls with three or more participants, where every one of them must consent.
Can employees in California be recorded by their employer without consent?
Generally no. Employees in California keep their rights under Penal Code 632, and employer monitoring of phone calls requires disclosure. Some exceptions exist for calls made with notice, like a published policy that employee calls on company lines may be monitored. But secret recording of employee calls carries the same liability as any other violation: $5,000 per call and possible criminal exposure.
Does a privacy policy on a website count as consent to record calls?
Almost certainly not. A website privacy policy is no substitute for explicit, informed consent given before a specific call is recorded. California courts require consent in context: the person must know the call about to happen will be recorded. A terms of service link the caller never read, buried on your website, won't hold up under Penal Code 632.
What should I do if a call is accidentally recorded without consent in California?
Stop the recording the moment you realize it. Don't share or use the recording. Preserve it in case litigation arises, because destroying evidence creates its own legal problems. Talk to legal counsel about disclosure obligations and risk. Depending on how many calls were affected and whether the error was systematic, the exposure may be large enough to warrant a proactive remediation plan.
Sources
- California Legislature, Penal Code § 632: California Penal Code 632 requires consent of all parties to record a confidential communication and sets criminal penalties of up to one year and $2,500 per violation
- U.S. Department of Justice, 18 U.S.C. § 2511 (Federal Wiretap Act): Federal law requires only one-party consent to record an interstate call; California law sets a stricter all-party standard
- California Legislature, Penal Code § 637.2: Penal Code 637.2 creates a private right of action allowing plaintiffs to recover the greater of $5,000 per violation or three times actual damages without proving actual harm
- California Supreme Court, Kearney v. Salomon Smith Barney, Inc., 39 Cal.4th 95 (2006): California Supreme Court held Penal Code 632 applies to calls involving California residents even when the recording party is located in a one-party consent state
- California Public Utilities Commission: The CPUC has narrow provisions allowing regulated utilities to record certain calls; these do not apply to general commercial callers
- California Legislature, Penal Code § 632.7: Penal Code 632.7 extends all-party consent requirements to calls involving cellular or cordless phones with the same $5,000 civil penalty
- Electronic Privacy Information Center (EPIC), Wiretapping and Eavesdropping: State Law Survey: California recording violation class actions have resulted in multi-million dollar settlements for calls recorded without all-party consent
- Florida Legislature, F.S. § 934.03 (Florida Security of Communications Act): Florida requires all-party consent to record phone calls under F.S. § 934.03, comparable to California's approach though with differing civil remedy structure
- National Conference of State Legislatures, State Wiretapping Laws: Roughly a dozen states including California require all-party consent for call recording; the remainder follow the federal one-party consent baseline