Federal law and most states allow a call to be recorded if one party to it consents, and that party can be the business doing the recording. A minority of states require the consent of everyone on the call, and when a call crosses state lines the safer course is to follow the strictest state involved. For most businesses the practical baseline is a short announcement at the start of every call that it may be recorded, with a matching approach for outbound calls.
This is general information, not legal advice. Recording laws differ from state to state, courts interpret them, and they change. Check the current law for every state your callers and staff are in, and talk to counsel about your own program, especially in healthcare, finance, collections or anywhere calls involve sensitive information.
The two consent models
| One-party consent | All-party consent (often called two-party) | |
|---|---|---|
| Who must agree | At least one person on the call, which can be the person recording | Everyone on the call |
| Where it applies | Federal law and most states | A minority of states, in some or all situations |
| Examples | New York and Texas generally follow one-party consent | California, Florida and Illinois generally require all parties' consent |
| In practice | A business can usually record its own calls without telling the other side, though many announce it anyway | Everyone must be told, and a caller who stays on the line after a clear notice is commonly treated as consenting |
The list of all-party states is shorter than many people expect, but it is not tidy. Some states apply the stricter rule only to certain kinds of conversations, some have statutes and court decisions that pull in different directions, and several have changed their laws or how they are read over the years. Lists you find online, including any we could give you, go out of date. Use them as a starting point and confirm the current position for each state that matters to you.
Calls that cross state lines
A business in a one-party state takes calls from all over the country. If the caller is in an all-party state, whose rule applies? There is no single clean answer, and courts have reached different results. California's courts, for example, have applied California's all-party rule to calls recorded outside the state when a California resident was on the line. The approach most businesses settle on is simple: treat every call as if the strictest rule applies, and announce recording to everyone.
The same logic covers remote staff. If an employee works from home in an all-party state, the calls they handle take place, at least in part, in that state.
Video meetings and voicemail
The same consent questions apply to recorded video meetings, which is why most meeting platforms show a banner or play a tone when recording starts. Do not switch those notices off. Voicemail is simpler: a caller who chooses to leave a message knows it is being recorded. Voicemail transcripts, though, are still recordings for the purposes of storage, access and retention, so treat them the same way as call recordings.
What the announcement should cover
- Put it first. Play it before any conversation starts, as part of the greeting or the auto attendant.
- Say it plainly. "This call may be recorded for quality and training purposes" is the familiar form for a reason. If recordings are also used for something else, such as transcription, analytics or AI summaries, consider saying so.
- Cover every route in. The main number, direct lines, queues, after-hours paths, and calls answered by an AI receptionist or an answering service.
- Cover outbound calls. When staff call out on a recorded line, the person who answers has not heard your greeting. Play a short message when the call connects, or have staff say it.
- Offer an alternative where it matters. Some businesses let callers ask not to be recorded, and stop or pause recording when they do.
Recording your own employees
Recording calls for quality and training is common, but tell staff in writing which calls are recorded, why, who can listen, and how long recordings are kept, and have them acknowledge the policy. Personal calls are a separate question; a policy that says business lines are for business use, and that recording applies to them, avoids most problems. Some states also have rules about electronic monitoring of employees that go beyond call recording. New York, for example, requires employers to give written notice of electronic monitoring. That is one more reason to check each state where your staff actually work.
Recording, AI and third parties
Call recording used to mean a file on a server in the back office. Now it often means audio sent to a cloud platform for transcription, summaries, sentiment scoring or quality review, sometimes by a separate software vendor. That raises questions courts are still working through. In California in particular, there has been litigation over whether a vendor that analyzes calls on a business's behalf counts as a third party listening in. The law here is unsettled and moving.
The practical steps are the same either way. Make the announcement match what really happens to the call. Know which vendors receive recordings or transcripts, and under what contract. Ask each one where data is stored, how long it is kept, who can access it and whether it is used to train models. Our AI receptionist page lists the same questions for calls answered by AI.
Storing and protecting recordings
- Card numbers. If customers read card numbers over the phone, those numbers should not end up in recordings. Payment card industry rules generally mean pausing recording while card details are taken, or using a payment method that keeps the numbers out of the call entirely.
- Health information. For practices covered by HIPAA, recordings that contain patient information are protected health information. The platform storing them should sign a business associate agreement before recording starts.
- Retention. Keep recordings as long as you need them for quality, training or legal reasons, then delete them on a schedule. Some industries have minimum retention rules; many businesses are better served by short retention.
- Access. Limit who can listen and download, and keep a log of who does.
A worked example
Hypothetical: the business and its setup are invented to show the method. It is not a legal opinion on any state's law.
A property management company is based in New York, generally a one-party state, and records all calls on its cloud phone system. It manages buildings in New Jersey and Florida, and two of its staff work from home in Connecticut. Tenants call from everywhere.
Because Florida generally requires every party's consent, and because Connecticut has rules of its own that the company's counsel wants to review, the company applies the strictest approach to every call:
- A recording notice plays at the start of every inbound call, on every number, including the after-hours line.
- Outbound calls from the phone system play a short notice when answered.
- Staff sign a recording and monitoring policy, which also serves as New York's electronic monitoring notice.
- Recordings are kept for 12 months and then deleted automatically. Two managers can download them.
- Card payments are taken through a payment link, not read over the phone.
The settings took an afternoon on the phone platform, and counsel reviewed the wording once. Nothing about the setup depends on guessing where each caller is.
Setting it up on your phone system
Most cloud phone platforms make recording a setting per user, per queue or per number, with announcement prompts you can record or upload. Check these points when you configure it, or when comparing platforms through our voice and UCaaS page:
- Can the announcement play on every route, including direct lines and after-hours paths?
- Can recording be paused and resumed mid-call, by staff or automatically?
- Where are recordings stored, and how long are they kept by default?
- Can recordings be deleted automatically after a period you choose?
- Who can access recordings, and is that access logged?
- Are recordings sent to any other company for transcription or analysis?
If you run a queue-based team, our guide to small call center phone systems covers how recording fits with reporting and quality review, and UCaaS vs CCaaS explains where recording features differ between the two kinds of platform.
Questions to settle before you turn recording on
- Which states are our callers, staff and offices in, and what does each currently require?
- Does our announcement reach every inbound and outbound call?
- Do we need recordings at all, or only for some teams?
- What will we do with recordings, and does the announcement reflect that?
- How are card numbers and health information kept out of recordings, or protected in them?
- Who reviews our policy, and how often?
Getting the phones set up right
We price cloud phone systems across providers and will walk through how each one handles recording, announcements, retention and access, so the platform makes your policy easy to follow. We are not lawyers and do not give legal advice, but we can make sure the settings match what your counsel decides. Providers pay FiberX, so there is no markup, the consultation is free, and you usually hear back the same day. Phil Morales is your one point of contact. Compare hosted phones, get in touch, call 478-758-8091 or text (347) 870-0965.
