Recorded phone call laws: the complete requirements guide

Last updated 2026-07-09

What are the federal laws that govern recorded phone calls?

Two federal statutes sit under all U.S. call recording law. The first is the Electronic Communications Privacy Act of 1986, specifically Title I, the federal Wiretap Act (18 U.S.C. § 2511). ^[1] The second, discussed less but still relevant for outbound marketing, is the Telephone Consumer Protection Act (47 U.S.C. § 227). ^[2]

The Wiretap Act makes it illegal to intentionally intercept any wire, oral, or electronic communication without authorization. The exemption that makes routine business call recording legal is 18 U.S.C. § 2511(2)(d), which says recording is permitted when "one of the parties to the communication has given prior consent." That is the federal one-party consent standard. If you are the one recording, you are a party to the call, so your own awareness of the recording satisfies the federal rule. You do not need to tell the other person.

The TCPA works differently. It governs how you reach people (autodialer use, prerecorded voice calls, SMS), not the act of recording itself. But prerecorded voice messages, which are recorded calls by definition, trigger TCPA requirements around prior express written consent before you can lawfully deliver them to a cell phone or residential landline. The FCC enforces the TCPA through rules codified at 47 C.F.R. Part 64. ^[3]

Federal law draws a clean line. One party consenting is enough to avoid federal wiretap liability. State law is where things get complicated fast.

Which states require all-party consent to record a phone call?

Eleven states require the consent of every party on a call before it can be lawfully recorded, as of mid-2026. People call these "two-party" or "all-party" consent states, though the second term is more accurate when more than two people are on the line.

State	Statute	Consent Standard	Max Civil Penalty (private suit)
California	Penal Code § 632	All-party	$5,000 per violation [4]
Connecticut	C.G.S. § 52-570d	All-party	Actual damages or $10,000
Florida	Fla. Stat. § 934.03	All-party	$100/day or actual damages [5]
Illinois	720 ILCS 5/14-2	All-party	$10,000 or actual damages
Maryland	Md. Code, Cts. & Jud. Proc. § 10-402	All-party	Actual damages + attorney fees [6]
Massachusetts	M.G.L. c. 272, § 99	All-party	Actual damages + punitive
Michigan	M.C.L. § 750.539c	All-party	Actual damages or $300
Montana	Mont. Code § 45-8-213	All-party	Civil and criminal
Nevada	N.R.S. § 200.650	All-party	Civil and criminal
New Hampshire	N.H. Rev. Stat. § 570-A:2	All-party	Civil and criminal
Pennsylvania	18 Pa. C.S. § 5703	All-party	$1,000/day or actual damages [7]
Washington	RCW § 9.73.030	All-party	$100/day, min $1,000 [11]

Oregon, which had pending changes discussed in 2024, remains a one-party consent state at the time of writing. State laws change. Check current statute text before finalizing any recording policy.

If your callers or your customers sit in any all-party state, you operate under that state's rule for calls touching that state. The safest practical approach for any national outbound team: treat every call as if it requires all-party consent. Give notice before you record. Done.

For a closer look at specific states, see our guides on pa call recording laws, maryland call recording laws, and georgia call recording law.

What is the "calls recorded" notice requirement and how do you give it?

Notice means you tell every party on a call, before it begins or at the very start, that the conversation may be recorded. It works as both a legal shield and a practical process step.

For inbound calls, a pre-call IVR announcement like "This call may be recorded for quality and training purposes" is standard and generally enough. For outbound sales calls, the agent should state the notice at the top of the call, before any real conversation starts. Many teams script it into the opener: "Hi, this is [name] with [company]. Just to let you know, this call may be recorded. Is now a good time?"

What counts as adequate notice changes by state. California's Penal Code § 632 requires that all parties be informed before the communication, and courts have read "before" strictly. ^[4] Pennsylvania requires that all parties get notice before recording begins. ^[7] Massachusetts has gone further in cases involving automatic recording systems, suggesting that beep tones alone may not satisfy the notification requirement.

For recorded marketing messages (prerecorded voice drops and ringless voicemails delivered by an autodialer), the TCPA requires that the message identify the business responsible and give a callback number. ^[2] FCC rules at 47 C.F.R. § 64.1200 add that prerecorded calls to cell phones require prior express written consent.

Say it out loud, say it first, and log when you said it.

Does the January 2026 recorded phone call law change anything?

"Jan 2026 recorded phone call law" circulates in compliance forums as shorthand for a set of FCC rule changes that took effect in January 2026. The biggest of those, rooted in the FCC's July 2023 Report and Order on TCPA consent, tightened the definition of prior express written consent for autodialed and prerecorded calls. ^[3]

Before January 2026, a single consent obtained through a lead-gen aggregator could be reused by multiple sellers. The FCC order ended that practice. Consent now has to be obtained one-to-one: one consumer, one seller, per consent event. The FCC stated that consent "must be limited to calls from one identified seller at a time" and cannot come from a form that bundles consent for multiple companies. ^[3]

What this means for recorded calls: if your outbound team uses prerecorded messages or auto-dialed calls, the underlying consent now needs to be seller-specific and documented. January 2026 was when enforcement of the one-to-one requirement became fully active, after a federal court challenge delayed it. Courts had put a hold on the rule. That hold resolved and the rule came into force.

Worth flagging: courts are still working out what counts as a "prerecorded voice" for TCPA purposes versus a live call that happens to be recorded. Recording a live agent call does not by itself trigger the TCPA prerecorded voice rules. Sending a voicemail drop without a live agent does. That distinction shapes how you build your outbound sequences.

This area is actively litigated. Verify any specific compliance question with a TCPA attorney, not a compliance blog post.

How does multi-state calling change which recording law applies?

This is the question every outbound team eventually gets wrong. You are in Texas. You call someone in California. Which law governs?

Most courts apply the law of the state where the parties sit, and when the states differ, courts tend to apply the more protective rule. California courts have consistently applied California Penal Code § 632 to calls involving a California resident, no matter where the caller is based. ^[4] Florida courts take a similar line under Fla. Stat. § 934.03. ^[5]

So a company headquartered in Texas, a one-party state, still has to give all-party notice when calling someone in California, Florida, Pennsylvania, Illinois, or any other all-party state. You cannot opt out of California law just because your office is elsewhere.

The cleanest fix is a blanket notice policy for every call, everywhere. Adding a four-second verbal notice to every call costs close to nothing. Getting it wrong in California costs $5,000 per violation. ^[4]

For multi-state teams, see our related guides on texas call recording laws and new york call recording law, two of the most commonly confused states for outbound operations.

What are the penalties for recording a call without consent?

Penalties split three ways: criminal, civil private suits, and regulatory fines.

On the criminal side, the federal Wiretap Act makes unlawful interception a felony carrying up to five years in prison. ^[1] State criminal penalties vary. California makes a first violation a misdemeanor but can charge a felony for repeat violations or recording in a medical or legal context. Pennsylvania and Florida treat violations as felonies.

Civil suits are where the real financial risk lives for businesses. Here is what the exposure looks like.

California: $5,000 per violation or actual damages, whichever is greater. Every single recorded call without consent is a separate violation. A 200-call campaign could in theory produce $1,000,000 in exposure before a case ever reaches trial. ^[4]

Florida: $100 per day the violation continues, or actual damages. Courts have sometimes read "per day" broadly. ^[5]

Pennsylvania: $1,000 per day or actual damages. ^[7]

Federal TCPA: for prerecorded calls without consent, $500 per call, trebled to $1,500 per call for willful violations. ^[2] The FCC can also impose separate administrative fines.

Class actions compound the risk. A single outbound campaign with a recording defect can turn into a class covering thousands of call recipients. The Ninth Circuit and California state appellate courts have repeatedly certified such classes.

For broader context on what TCPA exposure looks like, see our full guide on tcpa law.

Do employees or job applicants have the right to know calls are recorded?

Employment call recording is a separate layer on top of the consumer-facing rules, and it catches a lot of smaller teams off guard.

Under federal law, the business extension exception in 18 U.S.C. § 2511(2)(a)(i) lets employers monitor calls made on business phones without employee consent, as long as the monitoring stays within the ordinary course of business. ^[10] That exception is narrow. Courts have held it does not cover personal calls, and employees must get some form of notice that monitoring happens.

In all-party consent states, employees cannot have their workplace calls recorded without being told. California, for example, requires that employees be told monitoring may occur, usually through an acknowledgment in the employee handbook or onboarding documents. The California Labor Commissioner has treated undisclosed recording of employee calls as a Penal Code § 632 violation on top of a labor issue.

For hiring teams that record interviews over the phone or by video conference, the same state rules apply. Recording a phone interview with a candidate in Illinois without disclosing it first can expose you to liability under 720 ILCS 5/14-2.

Practical fix: put a recording disclosure in every offer letter, employment agreement, and vendor contract. One sentence does it.

How do you record calls legally for sales and quality assurance?

There is a clean, repeatable process that covers you under both federal and all-party state law. It has four steps.

First, configure your telephony platform (whatever you use, Dialpad, RingCentral, Aircall, or a custom VoIP stack) to play a pre-call disclosure before connecting. Something like: "This call may be recorded for quality assurance and training purposes." The message plays before the agent says a word. ^[3]

Second, script your agents. Even when the platform plays an automated disclosure, agents should note the recording out loud at the top of every outbound call. Yes, it takes three seconds. Yes, it is worth it.

Third, log the disclosure. Your call recording platform should time-stamp when a call began and whether the disclosure played. That log is your evidence if a plaintiff's attorney ever argues nobody warned them.

Fourth, give an opt-out path. In some all-party states, the cleanest approach lets the called party end the call or ask not to be recorded. If someone says they don't want to be recorded, stop recording or end the call. Do not push forward while recording someone who has objected.

LeadCompliant's free compliance kit includes a call disclosure script template and a recording policy checklist you can adapt for your telephony setup, at leadcompliant.com.

For teams doing SMS outreach alongside recorded calls, the consent rules overlap in ways that matter. See text message marketing facts for the SMS side of the picture.

Is it against the law to record a phone call without telling the other person?

At the federal level, recording without telling the other person is legal as long as you, the recorder, are a party to the call. That is what one-party consent means. You know about the recording, and that satisfies 18 U.S.C. § 2511(2)(d). ^[1]

In one-party consent states (the majority), the same logic holds. You can record without disclosure and face no state criminal or civil liability, as long as you are on the call.

In all-party consent states, recording without telling the other person is illegal even if you are on the call. In California, that is a misdemeanor on a first offense and can become a felony in aggravated circumstances. Civil liability attaches automatically under the statute. ^[4]

For businesses, the practical upshot is simple. "Legal at the federal level" is not the same as "safe." The moment your prospect pool includes California, Florida, Illinois, Pennsylvania, Washington, Maryland, or Connecticut residents, undisclosed recording is a liability, not a strategy.

For a broader plain-language breakdown, see is it against the law to record phone calls.

What records and documentation do you actually need to keep?

Documentation is the difference between a lawsuit that goes away quickly and one that costs you $500,000. Here is what to keep.

Consent records: for any call covered by TCPA (autodialed or prerecorded messages to cell phones or residential lines), you need written records of prior express written consent. The FCC's one-to-one consent rule that took effect in January 2026 means each consent record has to show clearly which seller it applies to. ^[3] Keep these records for at least four years, the TCPA statute of limitations under 28 U.S.C. § 1658 as applied by most courts.

Call recordings themselves: there is no universal federal retention period for call recordings. Best practice is to keep recordings tied to any customer complaint or dispute for the life of the potential claim plus two years. For general QA recordings with no complaint attached, 90 days is a common policy.

Disclosure logs: a timestamp showing that your pre-call disclosure ran before the call connected. Export these from your telephony platform monthly and store them somewhere tamper-evident.

DNC compliance records: if you scrub against the National Do Not Call Registry before calling, keep a dated record of each scrub. The FTC requires DNC-subscribed organizations to honor requests within 31 days and to re-scrub their lists every 31 days. ^[8]

Employee notices: a signed acknowledgment from every employee and contractor who makes or receives recorded calls, confirming they have been told that calls may be recorded.

For a look at state-specific quirks on recording in a group context, see georgia recording consent law group audio call.

How do wiretap laws apply to call center and third-party recording vendors?

Most outbound teams use a third-party call recording vendor, whether it is baked into their dialer or a standalone service. The question of vendor liability is real.

Under the federal Wiretap Act, a service provider that records communications on behalf of a subscriber can claim the service provider exception under 18 U.S.C. § 2511(2)(a)(ii), but only if the recording is incidental to providing the service and the provider has not disclosed the recordings to unauthorized parties. ^[10] That exception has limits. Courts have looked at whether the vendor can access recordings for its own purposes, and if it can, the exception may not apply cleanly.

Your vendor agreement matters. Your recording vendor's terms should: (a) confirm they do not use your recordings to train their own AI models or third-party analytics without your authorization, (b) confirm they comply with applicable state wiretap laws in the states where you operate, (c) specify data retention and deletion timelines, and (d) include an indemnification clause in case their recording infrastructure fails and produces an unlawful recording.

Some vendors will push back on the indemnification clause. That tells you how seriously they take compliance. The disclosure obligation is yours as the party initiating the call. The vendor is your technical agent. If their system fails to play a required disclosure, that failure is your legal problem.

Vetting your telephony vendor's recording architecture matters as much as scripting your agents correctly.

What about recording video calls and online meetings that start from a phone call?

This comes up constantly as sales teams run demos over Zoom, Teams, or Google Meet, sometimes kicked off by a phone call. The short answer: the same state consent rules apply.

Video conference recordings involve audio, and it is the audio recording component that triggers wiretap statutes, not the video. California Penal Code § 632 covers "confidential communication" broadly, which California courts have applied to video calls. Several plaintiff-side firms have filed suits over Zoom recordings made without all-party notice in California. ^[4]

Zoom, Teams, and Google Meet all have built-in consent features. When recording starts, participants get an on-screen notice, and most platforms make them acknowledge it before proceeding. Turning those features on by default is the right call.

If your rep calls a prospect on the phone and then sends a Zoom link mid-call, the transition to video does not carry the phone recording disclosure forward. You need a fresh disclosure at the start of the video session if you are recording it. Build this into your demo script.

For team calls and group audio conferences, consent requirements expand. If multiple parties are on a conference line and you are in an all-party state, all of them need notice. Indiana has specific rules around group calls worth reviewing at indiana call recording laws.

How do you build a call recording compliance policy that actually holds up?

A policy that holds up in litigation has four parts: clear scope, clear process, evidence of training, and a response plan.

Scope means defining exactly which calls your policy covers: all outbound sales calls, all inbound support calls, all calls in all-party consent states, or some mix. Do not write a vague policy that says "we comply with applicable law." Name the states. Name the statutes. ^{[4] [5] [7]}

Process means the step-by-step mechanics of how consent gets obtained and documented. Who turns recording on? When does the disclosure play? Where do logs live? What happens if the disclosure fails to play? Gaps in process are how companies lose cases even when their intent was clean.

Training evidence means records showing every person who makes or receives recorded calls was trained on the policy, with a date. If a plaintiff argues your agent broke the policy, you need to show the agent knew the policy existed and had been told to follow it.

A response plan means a written escalation path for when a call recipient objects to recording mid-call, when your recording platform fails, or when you get a demand letter or lawsuit. Having a TCPA attorney on retainer, or at least named in advance, saves you weeks of scrambling when something actually goes wrong.

LeadCompliant's compliance kit, free at leadcompliant.com, includes a recording policy template with state-specific consent language built in. A one-time setup like that pays for itself the first time you get a demand letter.

For teams dealing with telephone call recording requirements across multiple state contexts, the broader overview at telephone call recording laws covers additional nuances.

This article is for informational purposes only and is not legal advice. Consult a licensed attorney in your jurisdiction for advice specific to your situation.

Frequently asked questions

What is the one-party consent rule for recording phone calls?

Under federal law (18 U.S.C. § 2511(2)(d)), only one person on a call needs to consent to a recording, and that person can be the one doing the recording. So if you record a call you are on, you satisfy the federal rule without telling the other person. Most U.S. states follow this standard, but 11 states require all parties to consent before a call is recorded.

Which states are all-party consent states for call recording?

As of mid-2026, the all-party consent states are California, Connecticut, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, Nevada, New Hampshire, Pennsylvania, and Washington. In each of those states, recording a phone call without telling every participant is a civil and potentially criminal violation, regardless of where the person doing the recording is located.

What did the January 2026 recorded phone call law change?

The January 2026 date refers to when the FCC's one-to-one consent rule became fully enforceable. It requires that consent for autodialed or prerecorded calls be specific to one seller, not bundled across multiple companies through a lead-gen form. This affects businesses using purchased lead lists with shared consent, requiring seller-specific consent documentation for each prerecorded call campaign.

Can a business record calls without telling customers?

In one-party consent states, yes, as long as the business employee is a party to the call. In all-party consent states, no. For any national or multi-state outbound operation, undisclosed recording is a liability. The safest and cheapest fix is to play an automatic disclosure before every call connects, which takes about four seconds and costs nothing extra on most telephony platforms.

What is the penalty for recording a phone call illegally in California?

California Penal Code § 632 sets the civil penalty at $5,000 per violation or actual damages, whichever is greater. Each call recorded without consent is a separate violation. A criminal conviction for a first offense is a misdemeanor. Class action suits are common in California for systematic recording violations, and plaintiff attorneys actively seek these cases.

Does TCPA require consent to record a call, or just to make the call?

TCPA primarily governs how you reach people: autodialer use, prerecorded messages, SMS, and fax. It requires prior express written consent before sending prerecorded voice messages to cell phones or residential lines. It does not separately require consent to record a live call. That recording consent comes from state wiretap laws. Both sets of rules apply to outbound sales teams.

If I call from a one-party consent state to an all-party consent state, which law applies?

Courts generally apply the more protective law, which means the all-party consent state's rules apply if the person you are calling is in an all-party state. A business in Texas calling a customer in California must follow California's all-party consent rules. Jurisdiction follows the location of the parties, more than the caller.

How long do I need to keep call recordings for compliance purposes?

There is no single federal retention requirement for call recordings. The TCPA statute of limitations is generally four years, so keeping consent records and call logs for at least four years is prudent. Recordings related to customer complaints should be kept for the life of any potential claim. General QA recordings with no attached dispute can often be purged after 90 days under a documented retention policy.

Do I need to disclose recording on a Zoom or video call the same way as a phone call?

Yes. State wiretap laws cover audio recordings regardless of whether the call is over PSTN, VoIP, or a video conferencing platform. California courts have applied Penal Code § 632 to Zoom calls. Use your platform's built-in recording notification feature and add a verbal disclosure at the start of any recorded meeting. A phone call disclosure does not automatically carry over to a separate video session.

Can employees be recorded on work calls without consent?

Federal law has a business extension exception that lets employers monitor employee calls in the ordinary course of business. But in all-party consent states, employees must be informed that their calls may be recorded, typically through a written acknowledgment in their employment agreement or handbook. Recording employee calls without notice in California or Pennsylvania creates liability under both state wiretap law and potentially labor law.

What disclosure language actually satisfies call recording notice requirements?

There is no universal mandated script, but courts and regulators have accepted language like: "This call may be recorded for quality assurance and training purposes." It should be delivered before substantive conversation starts. For prerecorded outbound messages under TCPA, FCC rules at 47 C.F.R. § 64.1200 require identifying the business and providing a callback number. Verbal notice from a live agent plus an automated IVR disclosure offers the strongest protection.

What is the difference between recording a call and wiretapping under U.S. law?

Legally, they are treated under the same statute. The federal Wiretap Act (18 U.S.C. § 2511) covers both covert third-party interception (what most people think of as wiretapping) and the recording of calls you are a party to. The consent exception is what separates legal business recording from illegal interception. One-party consent covers the participant-recorder case; all-party consent states remove that flexibility.

Do robocall or ringless voicemail campaigns count as recorded phone calls under TCPA?

Yes. Ringless voicemail drops and prerecorded voice messages delivered via autodialer are subject to TCPA's prior express written consent requirement when sent to cell phones or residential landlines. The FCC confirmed in its 2023 Report and Order that this consent must now be one-to-one: tied to a specific seller, not a bundled list-sharing arrangement. State wiretap laws may apply separately depending on the state.

Are there any exemptions that let businesses record calls without consent in all-party states?

Very few. California Penal Code § 632 has limited exemptions: law enforcement under warrant, public utilities for safety purposes, and certain emergency contexts. For ordinary business recording, there is no blanket commercial exemption. Some courts have found that a clear and conspicuous pre-call automated disclosure, followed by the caller staying on the line, constitutes implied consent, but relying on implied consent in California is litigation risk, not a safe harbor.

Sources

1. Cornell Law School Legal Information Institute, 18 U.S.C. § 2511 (Federal Wiretap Act): Federal Wiretap Act one-party consent exception under 18 U.S.C. § 2511(2)(d); unlawful interception carries up to five years imprisonment
2. Cornell Law School Legal Information Institute, 47 U.S.C. § 227 (Telephone Consumer Protection Act): TCPA statutory text; $500 per violation, trebled to $1,500 for willful violations; prior express written consent for prerecorded calls to cell phones
3. California Legislative Information, Penal Code § 632: California all-party consent requirement; $5,000 civil penalty per violation or actual damages, whichever is greater
4. Florida Legislature, Fla. Stat. § 934.03: Florida all-party consent requirement for call recording; $100 per day civil penalty or actual damages
5. Maryland Courts, Md. Code, Cts. & Jud. Proc. § 10-402: Maryland all-party consent requirement for recording; actual damages plus attorney fees for violations
6. Pennsylvania Legislature, 18 Pa. C.S. § 5703: Pennsylvania all-party consent requirement; $1,000 per day or actual damages for violations
7. FTC, Complying with the Telemarketing Sales Rule (Business Guidance): FTC requires DNC-scrubbed organizations to honor requests within 31 days and re-scrub lists every 31 days
8. Cornell Law School Legal Information Institute, 18 U.S.C. § 2511(2)(a)(i) and (ii) (business extension and service provider exceptions): Federal business extension exception allowing employer monitoring of employee calls in ordinary course of business; service provider exception for vendors
9. Washington State Legislature, RCW § 9.73.030: Washington all-party consent requirement; $100 per day minimum $1,000 civil penalty