Call recording consent splits into one-party and two-party rules across 50 states. See which 12 states require two-party consent in 2026 and how to comply.
Call recording consent decides whether you need a yes before you hit record — and in 12 states, saying nothing before the beep is a wiretapping violation, not a formality.
TL;DR
Call recording consent splits into two regimes: one-party consent (38 states, you can record if you're a party to the call) and two-party consent (California, Florida, Illinois, and 9 others require every party to agree).
California Penal Code 632 sets statutory damages up to $5,000 per violation for recording without consent in a two-party state.
Federal law under the Wiretap Act is one-party consent, but state law overrides it whenever it's stricter.
For outbound AI calling in 2026, consent capture has to happen before recording starts and has to match the called party's state, not the caller's.
Why this matters
Call recording consent isn't a compliance footnote — it's a per-call liability decision, and outbound calling programs make that decision thousands of times a day.
Every enterprise running phone-based sales, collections, or service at volume records calls for QA, dispute resolution, or training. The question is whether the law where the recipient sits requires their agreement first. Get it wrong in a two-party state and you're exposed to statutory damages, not just a bad review.
This matters more in 2026 because outbound AI calling volume is higher and faster than manual dialing ever was. An autonomous agent placing hundreds of calls an hour across multiple states needs the right consent disclosure triggered automatically per state — a human rep forgetting once is a mistake, an AI system misconfigured once is a pattern across every call it makes that day.
How this breaks down
Consent law splits on one question: does every party on the call need to agree to recording, or just one?
One-party consent means if you're on the call, you can record it without telling the other side. This is the federal default under the Wiretap Act (18 U.S.C. § 2511) and the law in 38 states.
Two-party consent — sometimes called all-party consent — requires every participant to agree before recording starts. Twelve states hold this standard as of 2026: California, Connecticut, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, Nevada, New Hampshire, Pennsylvania, and Washington.
The rule that catches people: for cross-state calls, courts generally apply whichever state's law is stricter. Call someone in California from a one-party state, and California's two-party rule controls the call.
The two-party states, ranked by enforcement risk
California — the strictest and most litigated. California Penal Code Section 632 makes recording a confidential communication without consent a civil violation carrying up to $5,000 in statutory damages per call, plus potential criminal exposure. California has the highest volume of wiretapping class actions of any two-party state. Verdict: Two-Party State — Get Explicit Consent Every Call.
Florida — felony-level exposure. Florida Statute 934.03 classifies illegal interception as a third-degree felony. Florida courts have applied this to recorded customer service and collections calls where no verbal disclosure was given. Verdict: Two-Party State — Get Explicit Consent Every Call.
Illinois — rewritten but still strict. Illinois' Eavesdropping Act (720 ILCS 5/14) was struck down and rewritten in 2014 after a state supreme court ruling, and the current version still requires all-party consent for private conversations, including most business calls. Verdict: Two-Party State — Get Explicit Consent Every Call.
Pennsylvania — private right of action built in. The Pennsylvania Wiretapping and Electronic Surveillance Act (18 Pa.C.S. § 5703) gives individuals the right to sue directly, which has made Pennsylvania a common venue for recording-consent litigation against call centers. Verdict: Two-Party State — Get Explicit Consent Every Call.
Washington — broad definition of private conversation. RCW 9.73.030 defines "private conversation" broadly enough that Washington courts have applied two-party consent to many routine business calls, not just clearly confidential ones. Verdict: Two-Party State — Get Explicit Consent Every Call.
The other seven — Massachusetts, Michigan, Montana, Nevada, Connecticut, Maryland, New Hampshire. Each requires all-party consent, though enforcement intensity and case law maturity vary. Nevada's courts have issued split rulings on what counts as consent, which is why legal teams increasingly treat Nevada as two-party by default rather than testing the gray area. Verdict: Two-Party State — Get Explicit Consent Every Call.
The 38 one-party states — the federal baseline. Outside the 12 states above, you can record a call you're a party to without disclosure and stay within the law. That doesn't mean skip disclosure — most enterprise QA and legal teams disclose everywhere anyway, because it's cheaper than tracking which caller crossed which state line. Verdict: One-Party State — Federal Baseline Applies, Disclosure Still Recommended.
Outbound programs that call across state lines at scale — collections especially — can't rely on knowing where a rep sits. They need the system to know where the recipient sits, every single call.
Comparison: consent type by governing law
California
Consent Type: Two-party
Governing Law: Penal Code 632
Penalty Exposure: Up to $5,000 civil per violation
Verdict: Get Explicit Consent
Florida
Consent Type: Two-party
Governing Law: Fla. Stat. 934.03
Penalty Exposure: Third-degree felony
Verdict: Get Explicit Consent
Illinois
Consent Type: Two-party
Governing Law: 720 ILCS 5/14
Penalty Exposure: Criminal + civil
Verdict: Get Explicit Consent
Pennsylvania
Consent Type: Two-party
Governing Law: 18 Pa.C.S. § 5703
Penalty Exposure: Private right of action
Verdict: Get Explicit Consent
Washington
Consent Type: Two-party
Governing Law: RCW 9.73.030
Penalty Exposure: Civil + criminal
Verdict: Get Explicit Consent
MA, MI, MT, NV, CT, MD, NH
Consent Type: Two-party
Governing Law: State-specific statutes
Penalty Exposure: Varies by state
Verdict: Get Explicit Consent
Remaining 38 states
Consent Type: One-party
Governing Law: Federal Wiretap Act baseline
Penalty Exposure: Low if disclosed
Verdict: Federal Baseline Applies
How to operationalize call recording consent
Trigger consent language before recording starts, not after. A disclosure read mid-call or after the fact doesn't satisfy two-party consent law — the agreement has to precede the recording.
Match the disclosure to the called party's area code and state, not your call center's. A single national script assumes one-party consent everywhere, which is the exact assumption that creates California and Florida exposure.
Keep a timestamped, exportable audit trail of the consent moment itself, not just a flag in your CRM. If a recording gets challenged, the consent record is the evidence, and it needs to hold up on its own. Review what a vendor should demonstrate on SOC 2 and HIPAA requirements before you hand them your outbound program.
Outbound programs running high call volume across state lines need this built into the call flow itself, not bolted on after a compliance review flags it. Read the full outbound AI calling compliance playbook for how consent, TCPA, and call-time windows fit together in one system.
See compliance-first voice AI in action
Sub-400ms voice agents with consent logic built into every call.
FAQ
What is call recording consent?
Call recording consent is the legal requirement to get agreement from call participants before recording a conversation. In one-party consent states, only one participant needs to agree; in two-party states, everyone on the call does.
What's the difference between one-party and two-party consent?
One-party consent means any single participant, including the recorder, can agree to recording. Two-party consent, active in 12 states as of 2026, requires every participant on the call to agree before recording starts.
Which states require two-party consent in 2026?
California, Connecticut, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, Nevada, New Hampshire, Pennsylvania, and Washington require two-party consent in 2026. All other states follow one-party consent as the default.
Is it legal to record a call without telling the other party?
It depends on the state. In the 38 one-party consent states it's legal if you're a participant on the call. In the 12 two-party consent states, recording without disclosure to every participant is a civil and sometimes criminal violation.
What happens if you record a call without consent in a two-party state?
You face civil liability and, in states like Florida and Illinois, criminal exposure. California Penal Code 632 sets statutory damages up to $5,000 per violation, separate from any actual harm the recipient can prove.
Does TCPA cover call recording consent?
No. The TCPA governs call timing, frequency, and consent to be called or texted, not consent to be recorded. Call recording consent is governed separately by federal wiretap law and state-specific statutes.
Do AI voice agents need to disclose recording?
Yes, in any two-party consent state, and as standard practice everywhere else. The disclosure needs to trigger before recording starts and match the law where the call recipient is located, not where the calling system is hosted.
How do enterprises stay compliant with call recording consent across multiple states?
Enterprises match consent scripts to the recipient's state automatically, log the consent moment with a timestamp, and keep that record exportable for audit. Manual, one-script-fits-all approaches are the most common source of two-party consent violations.
One last thing
The part most teams miss: courts apply the stricter state's law on cross-state calls by default, which means a call center in Texas — a one-party state — calling a customer in California still has to follow California's two-party rule. Your headquarters' law doesn't travel with the call; the recipient's does. Build consent logic around where you're calling, not where you're calling from.