Call Recording Consent: What Contact Centers Need to Know

Recording calls is standard practice in contact centers. Recordings support training, quality reviews, dispute resolution, and compliance. But recording a conversation without the right consent can break the law, and some states allow people to sue for damages.

This guide explains the basics in plain English.

This guide is for general information only and isn’t legal advice. Recording laws vary and change, so confirm your requirements with a qualified attorney.

Federal law: one-party consent

In the United States, federal law generally allows a call to be recorded as long as at least one person on the call consents. If your agent is on the call and your company records it, that one-party requirement is usually met.

But federal law is only the minimum. States can set stricter rules, and many contact centers serve customers in every state.

State law: one-party vs. all-party consent

Most states follow the one-party rule. A smaller group requires the consent of everyone on the call, often called “all-party” or “two-party” consent.

According to the Reporters Committee for Freedom of the Press recording guide, states that require all-party consent for recording phone calls include:

• California
• Connecticut
• Delaware
• Florida
• Illinois
• Maryland
• Massachusetts
• Michigan (with some legal nuance about who is doing the recording)
• Montana
• Nevada
• New Hampshire
• Pennsylvania
• Washington

Some states have different rules for phone calls and in-person conversations, and courts sometimes interpret these laws in different ways. Lists from different sources may vary slightly for these reasons, which is another reason to get legal advice for your situation.

What about calls across state lines?

Contact centers often take calls from customers in many states. When the agent and customer are in different states with different rules, the stricter rule often applies.

A well-known example: in Kearney v. Salomon Smith Barney, the California Supreme Court held that a company outside California that recorded calls with California customers had to follow California’s all-party consent law.

Adding to the challenge, you can’t always tell where a caller is. Area codes don’t reliably show location, since people keep their phone numbers when they move.

The simple solution: announce recording on every call

Because of these complications, most contact centers follow one practice: tell every caller, on every call, that the call may be recorded.

Common approaches:

• A recorded message at the start of inbound calls, such as: “This call may be recorded for quality and training purposes.”
• An agent statement at the start of outbound calls, such as: “Before we begin, I want to let you know this call is being recorded.”
• Online notices for chat and video, such as a line in the chat window, along with your privacy policy

When customers are clearly told about recording and continue the call, that’s generally treated as consent. For extra protection, some businesses ask for a verbal “yes.”

When a customer doesn’t want to be recorded

Have a plan for customers who object:

• Offer to stop recording for that call, if your system allows it.
• Offer another channel, such as email or a callback without recording.
• Make sure agents know what to say and what options are available.

Recording your own employees

Agents are on every call, too. Make sure your employee policies clearly explain that calls are recorded and monitored, and how recordings are used. Have employees acknowledge the policy in writing. Employment laws vary by state, so review your policy with an attorney.

Recordings, AI, and transcripts

Many contact centers now use AI to transcribe, summarize, and analyze recorded calls. A few things to keep in mind:

• Your recording notice and privacy policy should cover how recordings and transcripts are used, including analysis by AI tools.
• Know where your vendors store recordings and transcripts, and whether they use them to train their own systems.
• Some states have additional rules about voice data and AI. Check current requirements before launching new tools.

Protecting recordings

Consent is only the first step. Recordings often contain sensitive personal information, so you also need:

• Limited access: only people who need recordings for their work should be able to hear them.
• Secure storage: with encryption and access logs.
• A retention schedule: how long you keep recordings, and when they’re deleted. Some industries have specific requirements.
• Payment protection: card numbers should never be captured in recordings. Most centers pause recording or use secure payment tools. See Taking payments by phone (PCI).
• Health information protection: if you handle health information, special rules apply. See Healthcare calls (HIPAA).

Customers outside the United States

If you serve customers in other countries, different rules apply. For example, privacy laws in the European Union and United Kingdom require a clear legal reason for recording and specific notice to callers. Get advice before recording international calls.

Quick checklist

• Recording announcement on all inbound calls
• Agent script for announcing recording on outbound calls
• Recording notice for chat and video, and in your privacy policy
• A plan for customers who don’t want to be recorded
• Employee policy on recording and monitoring, signed by staff
• Card payments kept out of recordings
• Limited, logged access to recordings
• A written retention and deletion schedule
• Vendor contracts that cover recording storage, security, and AI use
• Legal review of your recording practices

What to read next

• Taking payments by phone (PCI): keeping card data out of recordings
• Outbound calling rules (TCPA): what’s required before calling customers
• Outsourcing contract checklist: compliance terms for outsourcing partners

Sources

• Reporters Committee for Freedom of the Press, Reporter’s Recording Guide
• Kearney v. Salomon Smith Barney, Inc., 39 Cal. 4th 95 (2006)