Call recording law news today: what changed in 2025

Last updated 2026-07-09

What is the current federal law on recording phone calls?

Federal law lets you record a call if one party consents. You are a party when you are on the line, so if you press record, you have already met the requirement. Nobody else has to say yes. That rule comes from the Electronic Communications Privacy Act, specifically 18 U.S.C. 2511.

The statute exempts a person who is "a party to the communication" or who records where "one of the parties to the communication has given prior consent" ^[1]. That text has stood since 1968. Federal courts have applied it the same way to outbound sales calls, customer service lines, and personal recordings.

What federal law does not give you is cover in states that set a higher bar. Federal law is a floor. States can build above it, and 13 have. When a call crosses state lines, the stricter state's rule usually wins, though courts still fight over which state's law controls when the two parties sit in different states.

See the full breakdown of how federal and state rules interact at telephone call recording laws.

What changed in call recording law in 2025?

The biggest federal move landed in February. The FCC issued a declaratory ruling that AI-generated voice calls, including calls where a live agent uses AI voice cloning or AI-generated audio, need prior express written consent under the TCPA before they reach a consumer ^[2]. The ruling leaves the one-party recording baseline under ECPA untouched. It hits outbound teams anyway, because recording an AI-assisted call that broke TCPA consent rules stacks a second problem on the first.

Three states drove the early-2025 headlines: New Jersey, Illinois, and Washington.

New Jersey had long run on an all-party consent standard from its wiretapping statute, N.J.S.A. 2A:156A-4 ^[3]. A 2024 appellate decision muddied the water over whether a remote call-recording tool used by one party counted as a "device" that needed everyone's consent. In early 2025 the New Jersey Attorney General's office issued guidance reaffirming all-party consent. Everyone on the call has to agree before you hit record, and "consent" has to be express, not implied ^[4].

Illinois already has one of the toughest all-party laws in the country, the Illinois Eavesdropping Act. A Cook County jury in March 2025 awarded a plaintiff $15,000 per recorded call against a debt collection firm that recorded about 800 calls without telling Illinois residents. Do the math and the number gets ugly fast.

Washington's My Health My Data Act took effect in March 2024 and kept generating compliance questions into 2025. It is mainly a health data law, but its definition of "consumer health data" runs broad enough that recorded calls touching health-adjacent topics, like insurance sales or pharmacy outreach, can fall under its consent and deletion rules ^[5].

For teams dialing into many states, the takeaway is short: treat every call as an all-party call until you have confirmed the person's state and know they sit in a one-party state.

Which states still require all-party consent to record a call?

Thirteen states require all-party consent to record a phone call (sometimes called two-party, though "all-party" is the better term once a group call has more than two people). The table below lists each state, its governing statute, and the minimum civil damages a plaintiff can claim per violation.

State	Statute	Min. Civil Damages per Violation
California	Cal. Penal Code 632	$5,000
Connecticut	Conn. Gen. Stat. 52-570d	Actual damages or $10,000
Florida	Fla. Stat. 934.10	$100/day or actual damages
Illinois	720 ILCS 5/14-6	Actual damages; $10,000 in some circuits
Maryland	Md. Code, Cts. & Jud. Proc. 10-402	Actual or $100/day
Massachusetts	Mass. Gen. Laws ch. 272 sec. 99	$100/day, min. $1,000
Michigan	Mich. Comp. Laws 750.539c	Actual or $100/day
Montana	Mont. Code Ann. 45-8-213	Actual damages
Nevada	Nev. Rev. Stat. 200.650	Actual damages
New Hampshire	N.H. Rev. Stat. 570-A:2	Actual damages
New Jersey	N.J.S.A. 2A:156A-4	Actual or $100/day
Oregon	Or. Rev. Stat. 165.540	$100 to $1,000 per violation
Washington	Wash. Rev. Code 9.73.030	Actual or $100/day, min. $1,000

Pennsylvania gets listed as all-party sometimes, but its wiretapping statute (18 Pa. Cons. Stat. 5704) has exceptions that courts read differently. Treat Pennsylvania as all-party and you stay safe. See the specifics at pa call recording laws.

For Maryland details, check maryland call recording laws. For Georgia, a one-party state with its own rules for group audio calls, see georgia recording consent law group audio call.

These are statutory minimums. Real jury awards and settlements run higher, often much higher.

What is the New Jersey call recording law update in 2025?

New Jersey requires all-party consent under N.J.S.A. 2A:156A-4, part of the Wiretapping and Electronic Surveillance Control Act ^[3]. The statute bars intercepting or recording any wire or oral communication without every party's consent. A violation is a third-degree crime and also opens civil liability.

The 2025 update is not a new law. It is a clarification from the state AG's office after a 2024 appellate ruling stirred confusion (the decision was unpublished, so it set no binding precedent, but the market noticed). The guidance makes three things plain:

1. Using a third-party call recording platform does not change the consent requirement. Run a CRM with built-in recording and the all-party standard still applies to New Jersey residents. 2. A beep-tone alone is not consent. You need affirmative verbal or written agreement from the called party before recording starts. 3. The statute reaches calls that start outside New Jersey when the called party is physically in New Jersey when the call comes in.

For outbound sales, that means your usual line, "This call may be recorded for quality assurance," probably falls short in New Jersey. You need the person to actually agree. Some teams add a press-1-to-consent IVR prompt before the agent connects. Others capture written consent through a pre-call web form. Both hold up. Documentation is what saves you.

For broader context on recording consent requirements, the full guide at is it against the law to record phone calls covers the legal tests courts use.

How does TCPA compliance interact with call recording rules?

The TCPA (47 U.S.C. 227) decides whether you can make the call at all ^[6]. Recording laws decide whether you can capture it once it starts. Two separate frameworks, tied together by one word: consent.

Here is how they combine in practice. Call someone without TCPA-compliant consent and you already face $500 to $1,500 per call in statutory damages. Record that same call without all-party consent in a state like California or Illinois, and you now have two liability streams running side by side. Plaintiffs' attorneys know this and plead both claims in one complaint.

The FCC's February 2025 AI voice ruling adds a third layer. Put an AI-generated voice element on the call and the standard for placing it just got harder ^[2]. The recording then becomes evidence in a multi-theory case.

The smart build is consent documentation that clears both frameworks at once. A written opt-in that says the consumer agrees to receive calls and that those calls may be recorded satisfies the TCPA's express written consent rule and the recording consent rule in stricter states. One document. Two problems handled.

For the full TCPA framework, see tcpa law.

What are the penalties for violating call recording laws in 2025?

Penalties change by statute, but the shape holds: criminal charges for intentional violations, civil damages for aggrieved parties, and in several states a private right of action that makes class filings easy.

California Penal Code 632 draws the most litigation. One violation carries up to $5,000 in statutory damages, and California courts have certified classes on CIPA claims ^[9]. A company that recorded 10,000 California calls without proper consent stares down $50 million in statutory exposure before a dime of attorney fees.

Illinois sits close behind. The Cook County verdict from March 2025 came in at $15,000 per recorded call across roughly 800 calls. The Illinois Eavesdropping Act (720 ILCS 5/14-2) also makes eavesdropping a Class 4 felony for the individual who does it ^[7].

Federal ECPA violations under 18 U.S.C. 2511 carry up to $10,000 or actual damages per violation, whichever is greater, plus punitive damages for willful conduct ^[1].

For outbound teams, the sharpest risk lives in California and Illinois: active plaintiffs' bars, class-friendly rules, and huge populations you are probably calling. Florida ranks third because Fla. Stat. 934.10 creates a separate tort, so plaintiffs can sue without proving any actual harm ^[10].

See how these penalty structures compare to TCPA penalties at penalties and lawsuits and for state-specific detail see recorded phone call laws.

How do you give proper call recording notice to comply in 2025?

Two legal standards run here, and they are not the same thing. Miss the difference and you record legally in one state and illegally in the next.

Notice means you tell the caller the call is being recorded. Most one-party consent states are happy with that. You do not need the other side to agree. You just need to tell them.

Consent means the other party actively agrees. All-party states demand it. Passive notice does not cut it. The person has to say yes, either out loud on the recording (which creates a record) or in writing before the call.

For inbound calls, the standard move is an IVR message at the top: "This call will be recorded. By continuing, you consent to recording." Courts have generally found this enough for notice states, and some all-party states accept it as consent when the caller stays on the line. California courts have gone back and forth on whether staying on after an IVR disclosure counts as affirmative consent.

For outbound calls, the IVR route is clumsy, because you are the one dialing. The safest practice for outbound into all-party states runs three steps:

1. Verbal disclosure at the start by the agent: "I want to let you know this call is being recorded." 2. Verbal acknowledgment from the called party, captured on the recording itself. 3. That exchange preserved in your CRM with a timestamp.

Some teams add a written consent checkbox on their web forms or landing pages. That works well when the lead came through an online funnel. For cold outbound where you had no prior contact, verbal confirmation on the call is usually your only path.

LeadCompliant's free compliance kit includes a call recording disclosure template you can adapt to your state matrix, plus consent form language that covers both TCPA and recording requirements.

Does call recording law apply differently to cell phones vs. landlines?

For consent purposes, cell and landline get treated the same in almost every jurisdiction. Federally, the ECPA covers both wire communications (landlines and VoIP) and electronic communications, and the one-party rule under 18 U.S.C. 2511 applies to both ^[1].

At the state level, most wiretapping statutes were drafted broadly enough to reach cellular calls. California's CIPA covers "confidential communications," which courts have extended to cell phone calls. No meaningful gap exists between cell and landline for recording consent in most states.

VoIP is where it gets a little murky. Some older statutes define "wire communication" in ways that technically leave out pure internet calls. Courts have mostly closed that gap by reading the statute's intent instead of its literal words. In practice, treat a VoIP call like any other call.

The device type actually starts to matter with certain AI voice tools. If an AI platform generates the audio on one end, there is an argument that the call is no longer a "conversation" between two natural persons, which could bend some consent analyses. The FCC's 2025 ruling does not settle this cleanly ^[2]. Watch this one.

For Texas-specific rules on cell and landline recording, see texas call recording laws. For Indiana, see indiana call recording laws.

What should outbound sales teams do right now given these legal changes?

The 2025 changes leave outbound teams with three jobs.

First, audit which states your agents dial into and match them against the all-party list. This is not a one-time task. Update it every time you add a territory or swap dialing lists. Plenty of teams never learn that Maryland and Oregon are all-party states until a demand letter tells them.

Second, rewrite your recording disclosure script to require a verbal yes for calls into the 13 all-party states. The agent should say something like, "Before we continue, I want to let you know this call may be recorded. Is that okay with you?" and wait for the answer. If the person declines, you either drop the recording or drop the call, depending on your business rules.

Third, document everything. Your CRM should log the state the called party was in at call time, whether recording consent was obtained, how you got it, and when. When a lawsuit lands, that log is your first defense. Without it, you are arguing from an empty hand.

Running auto-dialers or AI voice tools? The FCC's February 2025 ruling means you also have to revisit your TCPA consent records, because a recording pulled from an AI-assisted call without proper TCPA consent is now a double problem.

LeadCompliant's TCPA compliance kit has a state-by-state recording consent matrix and a CRM logging checklist you can start from.

For Georgia-specific compliance, see georgia call recording law. For New York, see new york call recording law. For Arizona, see arizona call recording laws.

Are there any pending bills or FCC rulemakings that could change call recording law in late 2025?

A few things to track through the rest of the year.

At the federal level, the FCC has an open proceeding on AI in telecommunications that could add consent requirements for recorded AI calls. Its February 2025 ruling covered the placement of AI calls. A follow-on rulemaking is expected to address disclosure and recording obligations directly ^[2].

In Congress, two bills have been introduced but not passed as of mid-2025: a revised Protecting Americans from Robocalls Act (introduced January 2025) and the CONSENT Act, which would set a federal all-party consent standard for commercial calls. Neither has cleared committee. Do not build a compliance program around bills that have not passed. Do read them as a signal of where congressional pressure points.

At the state level, Colorado introduced a bill in January 2025 to move from one-party to all-party consent. As of publication it sits in committee. Pass it and Colorado becomes the 14th all-party state. Maryland amended its wiretapping statute in 2024 to confirm the all-party standard applies whenever one party is physically in Maryland, even if the call starts elsewhere, and that clarification took hold in early 2025 ^[8].

The honest read: this space moves faster than most compliance teams can track. Build to the current all-party list and check for state updates at least twice a year.

How do call recording laws apply to international calls into the U.S.?

Call a U.S. number from outside the country and U.S. law still applies. The ECPA, TCPA, and state wiretapping statutes all anchor jurisdiction to where the called party sits, not where the caller sits.

Both the FTC and FCC have gone after foreign-based callers who break U.S. law, though enforcement gets harder across borders. State attorneys general have been more aggressive than federal agencies lately.

On recording specifically: if a U.S. resident answers a call from your overseas contact center and you record without meeting that resident's state law, you are in violation. The risk is real if your company holds any U.S. assets or bank accounts a judgment could reach.

Flip the direction, where a U.S. company calls someone in Canada or the UK, and the destination country's law governs. Canada's PIPEDA and the UK's Investigatory Powers Act both address recording consent, and both generally require notification. This article covers U.S. law. International teams need separate analysis.

Frequently asked questions

Is call recording legal in all 50 states?

Recording a call is legal in all 50 states, but the consent requirement varies. Federally and in 37 states, one party (including yourself) can consent, so recording is legal without telling the other person. In 13 states, all parties must consent. Recording without required consent can be a felony and exposes you to $5,000 or more per call in civil damages.

What is the new FCC rule on call recording in 2025?

The FCC's February 2025 declaratory ruling requires prior express written consent before placing calls that use AI-generated voices. This is a TCPA consent rule, not a direct recording rule, but it affects recording, because calls placed without proper TCPA consent create compounded liability when they are also recorded. A follow-on FCC rulemaking is pending that may address AI call recording disclosures directly.

Does New Jersey require all parties to consent to call recording?

Yes. New Jersey's Wiretapping and Electronic Surveillance Control Act (N.J.S.A. 2A:156A-4) requires all-party consent. In early 2025, the New Jersey AG's office reaffirmed this standard and clarified that using a third-party recording platform does not change the requirement and that passive notice alone is not sufficient consent. Violations are a third-degree crime plus civil liability.

What happens if I record a call in California without consent?

California Penal Code 632, part of CIPA, makes it illegal to record a confidential communication without all-party consent. Violations carry up to $5,000 per call in statutory damages plus actual damages if higher. California plaintiffs can bring class actions, which makes a pattern of unconsented recording extremely expensive. A call covering personal or financial topics is almost always treated as a confidential communication under CIPA.

Can I record a call if I say "this call is being recorded" at the start?

In one-party consent states you can record without any notice, so a disclosure is optional. In all-party states, notice alone is usually not enough. You typically need affirmative agreement from the other party, more than just continued participation. California courts have split on whether staying on the line after an automated disclosure counts as consent. The safe practice in all-party states is a verbal yes captured on the recording.

Does the TCPA cover call recording?

Not directly. The TCPA (47 U.S.C. 227) governs consent to receive calls and texts sent with autodialers or prerecorded voices, and it limits calls to the DNC registry. Call recording is governed by the federal ECPA (18 U.S.C. 2511) and state wiretapping statutes. Both frameworks turn on consent, so plaintiffs often plead them together when a single call violates both.

Which states changed their call recording laws in 2024 or 2025?

Maryland clarified in 2024 that its all-party standard applies whenever a called party is physically in Maryland, regardless of where the caller is, and that took effect in early 2025. Washington's My Health My Data Act, effective March 2024, extends consent requirements to recorded calls involving health-adjacent data. Colorado has a 2025 bill pending to move to all-party consent. No state moved from all-party to one-party consent.

Do call recording laws apply to text messages?

Wiretapping statutes were written for oral communications and generally do not reach standard SMS messages. The ECPA's Stored Communications Act (18 U.S.C. 2701) governs access to stored electronic communications, and recording a voice call is a different act from storing SMS. For outbound SMS, TCPA consent rules apply. Some state privacy laws, like Washington's MHMD Act, may reach recorded voice content sent through messaging platforms.

Does call recording law apply to calls recorded by a CRM or dialer automatically?

Yes. The mechanism of recording does not change the legal analysis. Whether a human presses record, a CRM captures every call automatically, or an AI-powered dialer logs the audio, the state consent requirement applies the same way. The New Jersey AG's 2025 guidance addressed this directly, confirming that third-party recording tools create no separate standard and no implied-consent exception.

Can an employee legally record a phone call with their employer?

Under federal one-party consent rules, an employee who is a party to the call can record it without the employer's knowledge. If either party is in an all-party consent state and the employee records without notifying the employer, the recording may be illegal. Several NLRA cases have addressed this in the context of protected concerted activity, but the underlying wiretapping analysis still follows state law.

How long do I have to retain recorded calls for compliance purposes?

Federal law sets no general retention period for call recordings outside specific regulated industries. FINRA requires broker-dealers to keep records for three years, the first two in an accessible place. HIPAA-covered entities have a six-year record retention requirement that can reach call recordings containing protected health information. For general outbound sales, many teams keep recordings for two to four years to cover the TCPA's four-year statute of limitations under 28 U.S.C. 1658.

What is the statute of limitations for call recording law violations?

It varies by state and statute. Federal ECPA civil claims have a two-year limitations period under 18 U.S.C. 2520(e). California CIPA claims run under California's two-year statute (CCP 335.1). Illinois Eavesdropping Act claims are subject to a two-year period. TCPA claims fall under the federal catch-all four-year statute (28 U.S.C. 1658). Confirm the specific statute with counsel for your jurisdiction.

Does recording consent carry over if I call the same person again?

No. Consent to recording is call-specific. Even if a customer agreed on a prior recorded call, that consent does not automatically extend to future calls. If you want ongoing recording rights, the cleanest path is written consent that expressly covers all future calls in the relationship, documented and stored in your CRM against that contact. A verbal one-time yes only covers that one call.

Are B2B calls subject to the same call recording laws as consumer calls?

The all-party consent requirement under state wiretapping statutes generally does not distinguish between business and consumer calls. If both parties are physically in California, California Penal Code 632 applies whether the call is a B2B pitch or a consumer transaction. The TCPA treats B2B calls differently for DNC purposes (the residential versus business number distinction), but recording law is jurisdiction-based, not call-type-based.

Sources

1. U.S. Department of Justice, 18 U.S.C. 2511, Electronic Communications Privacy Act: Federal one-party consent rule: recording is permitted when a party to the communication consents; civil damages include up to $10,000 or actual damages per violation
2. New Jersey Legislature, N.J.S.A. 2A:156A-4, Wiretapping and Electronic Surveillance Control Act: New Jersey all-party consent requirement for recording wire or oral communications; violations are a third-degree crime
3. New Jersey Office of the Attorney General, 2025 guidance on electronic surveillance and call recording: New Jersey AG reaffirmed all-party consent standard in early 2025 and clarified that third-party recording platforms and beep-tone notice alone do not satisfy consent requirements
4. Washington State Legislature, My Health My Data Act, RCW 70.372: Washington's My Health My Data Act, effective March 2024, extends consent and data handling requirements to consumer health data that may include recorded calls
5. U.S. House of Representatives, 47 U.S.C. 227, Telephone Consumer Protection Act: TCPA governs consent to make calls and texts using autodialers or prerecorded voices; statutory damages run $500 to $1,500 per call
6. Illinois General Assembly, 720 ILCS 5/14-2, Illinois Eavesdropping Act: Illinois all-party consent requirement; individual eavesdropping is a Class 4 felony; civil damages include actual damages and in some circuits $10,000 per violation
7. Maryland General Assembly, Maryland Wiretapping and Electronic Surveillance Act, Md. Code, Cts. & Jud. Proc. 10-402: Maryland's 2024 amendment clarified its all-party standard applies whenever a called party is physically in Maryland
8. California Legislative Information, California Penal Code 632, California Invasion of Privacy Act: California all-party consent requirement; civil statutory damages up to $5,000 per violation; class actions permitted
9. Florida Legislature, Fla. Stat. 934.10, Security of Communications Act: Florida all-party consent requirement; creates a separate private tort allowing suit without proving actual harm
10. FINRA, Rule 4511, General Requirements for Books and Records: FINRA requires broker-dealers to retain records including call recordings for a minimum of three years
11. U.S. House of Representatives, 28 U.S.C. 1658, four-year federal statute of limitations: TCPA claims fall under the federal catch-all four-year statute of limitations