Is It Legal to Record Phone Calls in the US?

Yes, recording a phone call can be legal in the United States, but the consent requirements depend on federal law, state law, participant locations, and the nature of the conversation. Businesses operating across state lines can reduce risk by notifying every participant before recording and obtaining clear consent where required.

Disclaimer: This article provides general information, not legal advice. Recording and privacy laws may change or apply differently to specific situations. Consult qualified legal counsel before implementing a call-recording program.

What Determines Whether Call Recording Is Legal?

Recording a phone call is legal in many circumstances, but it is not automatically lawful because the recorder participates in the call. Federal law generally permits one-party consent, while some states impose stricter requirements.

Legality may depend on:

• Where each participant is located
• Whether the conversation is private or confidential
• When and how notice is given
• Whether consent must be express
• Why the call is recorded
• How the recording and transcript are stored or shared

A recording that complies with federal law may still violate an applicable state law.

How Does Consent Affect Call Recording?

Consent rules generally fall into two categories, although individual state laws contain important exceptions.

One-Party Consent

Under a one-party consent rule, at least one participant must consent. A participant making the recording can ordinarily serve as that consenting party.

This does not normally allow a third party to intercept a conversation secretly. Federal protection also does not apply when the recording is made to commit a criminal or tortious act.

All-Party Consent

Under an all-party consent rule, every covered participant must agree to the recording. "All-party consent" is more accurate than "two-party consent" when more than two people are on the call.

Some state statutes cover only private or confidential conversations. Others have separate requirements for telephone, electronic, and in-person communications. Businesses should therefore avoid relying only on simplified state lists.

Express and Implied Consent

Express consent may come through a verbal response, written agreement, or affirmative digital action.

Implied consent may sometimes be inferred when a participant receives clear notice and voluntarily continues. However, silence or continued participation does not always prove legally valid consent. An affirmative response provides stronger evidence when consent may be disputed.

Does a Reasonable Expectation of Privacy Matter?

Many recording laws protect conversations in which participants reasonably expect privacy, but the test depends on the statute and circumstances.

A private telephone conversation will often receive legal protection. A public conversation may involve a lower expectation of privacy, but this does not automatically make recording lawful. Telephone-specific laws may still apply when a participant is in a public place.

Businesses should not treat a public location as a substitute for consent.

What Does Federal Law Say About Recording Calls?

Federal law generally follows a one-party consent standard. Under 18 U.S.C. § 2511(2)(d), recording is generally permitted when the recorder is a party to the communication or one party has given prior consent.

This exception does not apply when the recording is made for the purpose of committing a criminal or tortious act. Federal law establishes a baseline. It does not prevent states from imposing stricter protections.

Can Employers Monitor Employee Calls?

Employers may be able to monitor certain calls made through business systems, but their authority is not unlimited.

Federal law contains a limited exception involving telephone equipment used in the ordinary course of business. Whether it applies may depend on:

• The equipment being used
• The purpose of monitoring
• Whether employees received notice
• The scope and duration of monitoring
• Whether the call is clearly personal

Owning the telephone system does not provide unrestricted authority to monitor employees. Written policies, limited access, employee notice, and legal review can reduce risk.

Which States Require All-Party Consent?

A commonly cited classification identifies 12 states as requiring all-party consent for at least certain private conversations:

• California
• Connecticut
• Florida
• Illinois
• Maryland
• Massachusetts
• Michigan
• Montana
• Nevada
• New Hampshire
• Pennsylvania
• Washington

This list is only a starting point. Some states apply the rule only to confidential conversations, while others distinguish between phone calls and in-person discussions. Statutory exceptions and court interpretations also vary.

The Reporters Committee for Freedom of the Press provides state-by-state summaries, but businesses should verify current law before recording.

What Happens During Interstate Calls?

There is no nationwide rule stating that the strictest state law always applies. A court may consider participant locations, where the recording occurred, the states' interests, and other circumstances.

In Kearney v. Salomon Smith Barney, Inc., the California Supreme Court applied California privacy law to undisclosed recordings made in Georgia of calls involving California clients. The decision shows why a business should not rely only on the law of the state where its recording system is located. See Kearney v. Salomon Smith Barney.

Because participant locations can be difficult to confirm, many national businesses disclose recording on every call. An area code alone is not reliable evidence of location because people can move or travel while retaining their phone numbers.

How Can a Business Obtain Consent?

Businesses can use several consent methods depending on the applicable law.

Verbal Consent

A representative can ask:

• "Before we continue, may we record and transcribe this call for quality and documentation purposes?"

Where affirmative consent is required, recording should not continue until the participant agrees.

Automated Notice

An inbound call system may state:

• "This call may be recorded and transcribed for quality, training, and documentation purposes."

However, a prerecorded notice and continued participation may not establish express consent in every jurisdiction.

Written or Digital Consent

Consent can be included in an appointment form, meeting invitation, account setting, or digital prompt. The notice should clearly explain whether audio will be recorded, transcribed, stored, or processed by AI.

Recording Tones

A periodic beep may provide additional notice, but it does not automatically satisfy every consent law. It should supplement, rather than replace, a clear disclosure unless legal counsel confirms otherwise.

Can Businesses Use AI Note Takers?

Businesses can use AI note-taking tools, but AI does not create an exception to recording or privacy laws.

An AI bot is software used to record or process a conversation. It is not a person capable of providing legal consent. Where consent is required, it must come from the human participants.

"AI Note Taker" may provide some notice, but its visible name does not necessarily prove informed consent. A clearer disclosure would be:

• "An AI note-taking tool is recording and transcribing this call. Do you agree to continue?"

If a participant refuses, the business should be able to stop recording, remove the bot, take manual notes, or offer an unrecorded alternative.

What Privacy Laws Apply to AI Transcripts?

Recordings and transcripts may contain personal information. The applicable requirements depend on the business, participants, data, and jurisdictions involved.

California Privacy Law

A recording or transcript may contain personal information under California privacy laws when it can be linked to a consumer or household. However, whether the California Consumer Privacy Act applies also depends on whether the business falls within the law's scope.

GDPR

The GDPR may apply when an organization processes personal data in connection with an establishment in the European Economic Area or offers goods or services to people there. Organizations must identify a valid legal basis and follow relevant transparency, security, retention, and individual-rights requirements.

Health Information

HIPAA does not apply to every business handling health information. It generally applies to covered entities and their business associates. A vendor processing protected health information may need appropriate safeguards and a business associate agreement. The HHS HIPAA guidance explains the scope of the rule.

Payment Information

Encryption alone does not make recorded payment data PCI DSS compliant. Businesses should prevent sensitive authentication data, such as card security codes, from being retained after authorization. Pause-and-resume or data-suppression controls may be necessary. See the PCI Security Standards Council guidance.

What Are the Best Practices for Recording Business Calls?

A compliant recording process should address consent, security, retention, and participant choice.

Give Notice Before Recording

Provide the disclosure before substantive discussion begins. Explain both audio recording and AI transcription when both occur.

Document Consent

Keep appropriate records showing:

• Which notice was provided
• When it was delivered
• Whether affirmative consent was received
• Whether anyone opted out
• When recording started and stopped

Audit logs can support compliance, but they do not prove that consent was legally valid by themselves.

Limit Retention

Keep recordings only for defined operational, legal, or regulatory purposes. A fixed period such as 90 days may work for some businesses but not others.

Retention periods should consider contractual duties, litigation holds, privacy requirements, and sector-specific rules.

Protect Access

Use:

• Role-based permissions
• Strong authentication
• Encryption in transit and at rest
• Access logs
• Controlled exports
• Documented deletion procedures
• "End-to-end encryption" should be claimed only if the platform and service provider cannot access unencrypted content.

Review AI Vendors

Before selecting an AI provider, check:

• Where data is stored
• Whether recordings are used for model training
• Which subprocessors receive the data
• How long audio and transcripts are retained
• Whether deletion extends to backups
• Whether users can stop recording and transcription

The FTC has warned that AI companies must honor their privacy promises and avoid undisclosed uses of customer information.

What Should a Call-Recording Tool Include?

A suitable business tool should provide the functionality necessary to manage both legal compliance and high-quality documentation. For hardware-based recording, the InnAIO TransNote AI Translation Recorder offers a professional solution with its 5-microphone system and 32GB local storage, providing high-quality audio capture and automated AI summaries for cross-language business calls. Its ultra-slim design and real-time transcription features make it a versatile tool for capturing and organizing professional conversations securely.

A comprehensive system should also include:

• Configurable recording notices
• Affirmative consent prompts
• Separate recording and transcription controls
• Pause-and-resume functionality
• Sensitive-data suppression
• Role-based access
• Encryption in transit and at rest
• Retention and deletion controls
• Consent and access logs
• Regional storage options where necessary

No software automatically makes a business compliant with HIPAA, PCI DSS, state recording statutes, or privacy laws. Compliance also depends on configuration, policies, contracts, and employee practices.

Conclusion

Phone-call recording is legal in many US business contexts, but no single consent rule applies to every call. Federal law generally permits one-party consent, while state laws may impose stricter or more specific requirements.

For interstate and AI-assisted calls, businesses can reduce risk by providing notice before recording, explaining both recording and transcription, obtaining affirmative consent when appropriate, offering an opt-out method, and limiting how the data is stored and used.

FAQ about Record Phone Calls

Is "This Call May Be Recorded" Always Sufficient?

No. It provides notice, but whether continued participation establishes consent depends on the jurisdiction, wording, timing, and circumstances. Request an affirmative response when express consent is required.

Does an AI Note Taker Need to Be Announced?

It should be clearly disclosed when it records or transcribes a conversation. A bot's visible name may provide notice but does not necessarily prove legally valid consent.

Are Unannounced Recordings Admissible in Court?

It depends on whether the recording was lawfully obtained and on the court's evidence rules. Authentication, relevance, hearsay, and applicable recording statutes may all affect admissibility. An unlawful recording is not automatically excluded in every proceeding.

Can a Business Use AI Transcription for Customer Calls?

Yes, if its consent, recording, privacy, security, and data-use practices satisfy the applicable laws. The disclosure should cover AI transcription and processing, not only audio recording.