Call Recording Consent by State: Outbound Compliance Map 2026

Recording a call in California without consent costs $5,000 per violation under Penal Code § 637.2. In Pennsylvania, it's a third-degree felony. In Florida, another third-degree felony. And if your prospect answers in one of those states while your sales rep sits in Texas, the stricter law still applies to you. Outbound teams get caught by this constantly.

This guide maps every state that requires all-party consent for phone call recording, explains the cross-state rule that most compliance teams miss, and gives you the exact disclosure language that works in every jurisdiction. It applies equally to human reps and AI voice agents.

Key Takeaways

• 11 states require all-party consent to record phone calls: California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Pennsylvania, and Washington.
• The federal baseline under 18 U.S.C. § 2511 (ECPA) is one-party consent -- the 39 remaining states follow this standard, meaning you can record your own calls without notifying the other party.
• Cross-state calls follow the stricter law. California Supreme Court established in Kearney v. Salomon Smith Barney (2006) that California's all-party consent rules apply even when the caller is in a one-party state.
• California's civil penalty for illegal recording is $5,000 per violation or 3x actual damages under Penal Code § 637.2 -- whichever is higher. Pennsylvania's statute can mean up to 7 years imprisonment.
• Saying 'This call may be recorded' before substantive conversation begins constitutes implied consent in most two-party states when the other party continues the call.

1. Which States Require Two-Party Recording Consent?

11 states require all-party consent before recording a phone call. The federal Electronic Communications Privacy Act (18 U.S.C. § 2511) sets a one-party baseline for the other 39 states, meaning only one participant in the call needs to know about the recording. But the 11 stricter states override that federal baseline for calls involving their residents.

A few nuances worth knowing. Illinois reformed its eavesdropping statute in 2015 after the original law was struck down as too broad. The current version (720 ILCS 5/14-2) requires the recording to be surreptitious -- if you openly announce you're recording, it doesn't trigger the all-party consent requirement in most court interpretations. Oregon is often listed as a two-party state but ORS 165.540 specifically carves out phone calls as one-party consent for outbound callers who are participants.

The federal baseline from 18 U.S.C. § 2511 applies everywhere federal law reaches, but state laws that are more protective of privacy override it for calls within those states. This is why the 11 stricter states matter.

2. Is One-Party Consent Enough for Outbound Calls?

One-party consent is enough if your prospect is in one of the 39 federal-baseline states. You (or your AI agent calling on your behalf) are a party to the call, and your knowledge of the recording satisfies the one-party standard. That covers the majority of US outbound calling. But if the person you're calling is in any of the 11 two-party states, one-party consent isn't enough -- you need theirs too.

The practical challenge for outbound teams: you don't always know which state your prospect is in before you dial. Area codes don't map cleanly to states anymore -- a California area code can be a forwarded number in Nevada. The safest option is to default to all-party consent disclosure on every call. Topcalls' secure call infrastructure includes recording disclosure as part of the standard campaign script template.

There's also a nuance with B2B calling. ECPA and most state wiretapping statutes apply to calls with a reasonable expectation of privacy. A call to a consumer's mobile phone generally carries that expectation. A call to a business main line or a direct-dial sales line may not. But courts vary on this, and the safest posture for any recorded call is disclosure regardless of line type.

3. What Happens When Callers Are in Different States?

The stricter state's law applies. The California Supreme Court settled this in Kearney v. Salomon Smith Barney, Inc. (2006). A Georgia-based brokerage (one-party state) was recording calls with California clients without disclosure. The court ruled California's all-party consent requirements applied, even though the calls originated outside California. The called party's state determines the standard.

This has real implications for outbound sales teams. If you're calling from Texas (one-party) into a list that includes California, Pennsylvania, and Florida prospects, you need two-party consent procedures for those calls. Commingling lists and using a single recording setting across all calls is how companies get into trouble.

The math matters here. A California-heavy list with 10,000 recorded calls without disclosure at $5,000 per violation = $50 million in potential civil exposure. Calculate the actual risk before deciding whether to add four seconds of disclosure to every call. Our ROI calculator can help you model the cost tradeoff.

4. How Do You Announce Call Recording Legally?

Deliver a verbal recording notice at the very start of the call, before any substantive questions begin. Most two-party states accept implied consent -- if the other party stays on the line after being told the call is being recorded, that generally satisfies the requirement. The disclosure must come first. A notice delivered after you've already qualified the prospect on budget and need is too late.

"This call may be recorded for quality assurance and training purposes. By continuing, you consent to the recording."

That language is enough for most two-party states. California's Penal Code § 632 accepts implied consent when the other party continues the conversation after a clear notification. Pennsylvania courts have recognized similar principles. If you're calling Massachusetts or Maryland -- states with particularly strict enforcement -- some lawyers recommend getting explicit verbal acknowledgment ('Do you consent to this call being recorded?') rather than relying on implied consent from continuation.

Two things that don't work: a beep tone alone (a telephone beep is not a verbal disclosure and doesn't meet any state's requirement) and embedding the disclosure in a terms-of-service email sent before the call (consent must occur on the call itself, at the call's start, under most state standards). Keep it verbal, keep it first.

5. Does AI Calling Change Recording-Consent Rules?

No. The same state laws apply whether a human or an AI agent is conducting the call. An AI voice agent counts as a party to the call for consent purposes -- it (acting on behalf of your company) knows the call is being recorded, which satisfies one-party consent in the 39 baseline states. But in the 11 two-party states, the AI must still obtain consent from the human prospect before recording begins.

There's an important sequencing point for AI calls. The FCC's 2024 ruling and California AB 2905 require AI disclosure before any substantive exchange. Recording disclosure also needs to come first. In practice, your call script opening should handle both in the same breath: AI identity + recording notice, then the call's purpose. See our guide on AI disclosure laws for phone calls for the full breakdown of what that opening must say.

Topcalls processes 63,000+ AI calls per day. Every campaign includes recording disclosure in the opening script by default. You can customize the wording, but the disclosure itself is required before the campaign goes live. That's not a platform preference -- it's what the law requires in roughly a third of US states by population. More on how AI voice agents handle this at scale.

When to Default to All-Party Consent Disclosure

The answer for most outbound teams is always. The cost of a universal disclosure is four seconds of audio per call. The cost of getting caught recording without consent in California is $5,000 per call. At any meaningful outbound volume, defaulting to all-party consent disclosure is the only rational choice -- and it doesn't hurt conversion. Topcalls campaigns with recording disclosure see no statistically meaningful difference in prospect hang-up rates compared to campaigns without it.

Recording consent is one layer of phone compliance, not the whole picture. You'll also need TCPA consent documentation for AI-generated calls, DNC Registry scrubbing before each campaign, and STIR/SHAKEN attestation to avoid spam labels. Our guide on STIR/SHAKEN attestation covers the carrier-level piece that affects answer rates.

11 states, one cross-state rule, and a four-second disclosure that covers almost all of them. The math isn't complicated. Add the recording notice to every call script, sequence it before substantive questions, and don't rely on beep tones or emailed terms of service. That's it.

Want to run compliant AI calling campaigns with built-in recording disclosure? Book a strategy call and we'll walk through your specific campaign setup and compliance requirements.