COMPLIANCECALL-RECORDINGTCPA

Two-Party Consent States: The Complete 2026 Map for Call Recording

SIPNEX ·

If you record phone calls — for quality assurance, compliance documentation, training, or dispute resolution — you are subject to federal and state wiretapping laws that dictate whether you need one person’s consent or everyone’s consent before pressing record. Get this wrong and you are not looking at a fine. You are looking at criminal charges in some states, civil lawsuits with statutory damages, and class action exposure that can reach eight figures.

This guide maps every state’s recording consent requirement as of 2026 and explains what operators need to build into their workflows to stay compliant. It is written by SIPNEX, an FCC-licensed carrier that provides call recording infrastructure as part of our SIP trunking and VICIdial carrier services. We provide the recording tools. You own the compliance policy around when and how to use them.

Federal wiretap law — the Electronic Communications Privacy Act (18 U.S.C. § 2511), originally enacted as the Wiretap Act of 1968 — establishes the baseline. Under federal law, recording a phone call is legal if at least one party to the call consents to the recording. That party can be you. If you are on the call and you decide to record it, you have provided one-party consent and the recording is legal under federal law. You do not need to tell the other person.

This is the one-party consent standard, and it is the federal minimum. States can be stricter than federal law but not more permissive. Thirty-five states and the District of Columbia follow the federal one-party consent standard — in these states, you can record a call as long as one participant (typically the person initiating the recording) consents.

The remaining states require two-party consent (sometimes called all-party consent). In these states, every person on the call must be informed that the recording is taking place and must consent to it, either explicitly or implicitly (by continuing the conversation after being informed). If you record a call in a two-party consent state without notifying all parties, the recording itself is illegal, and you may face criminal prosecution and civil liability.

The critical complication for call centers: you are subject to the laws of both the state you are calling from and the state you are calling to. If your agent is in Texas (one-party) and the person they call is in California (two-party), you must comply with California’s two-party consent requirement because one party to the call is in California. This interstate conflict is the reason most compliant call centers apply two-party consent to every call regardless of geography — it is the only approach that is safe in every combination of states.

The complete state-by-state breakdown

Two-party (all-party) consent states — you must inform and get consent from ALL parties:

California — Cal. Penal Code § 632. One of the strictest states. All parties must consent. Covers “confidential communications” — meaning calls where any party has a reasonable expectation of privacy. Criminal penalty: fine up to $2,500 and/or imprisonment up to one year for first offense. Civil damages: $5,000 per violation or three times actual damages, whichever is greater.

Connecticut — Conn. Gen. Stat. § 52-570d. All parties must consent. Criminal penalty: Class D felony (up to 5 years imprisonment). Civil action available for actual damages plus punitive damages and attorney fees.

Delaware — Del. Code Title 11, § 2402. All parties must consent. Criminal penalty: Class F felony. Civil liability for actual damages.

Florida — Fla. Stat. § 934.03. All parties must consent. Criminal penalty: felony of the third degree (up to 5 years imprisonment). This is one of the strictest criminal penalties for recording consent violations. Civil damages: $100 per day per violation or $1,000, whichever is higher, plus punitive damages and attorney fees.

Illinois — 720 ILCS 5/14-2. All parties must consent. The Illinois Eavesdropping Act was partially struck down and re-enacted. Current law requires two-party consent for private conversations. Criminal penalties apply. Illinois has been a particularly active jurisdiction for recording consent litigation.

Maryland — Md. Code, Courts & Judicial Proceedings § 10-402. All parties must consent. Criminal penalty: felony with up to 5 years imprisonment. Civil damages available.

Massachusetts — Mass. Gen. Laws ch. 272, § 99. All parties must consent. This is the strictest state — the statute prohibits “secret” recording regardless of whether the communication is private. Criminal penalty: fine up to $10,000 and/or imprisonment up to 5 years. Massachusetts has generated significant class action litigation around call recording.

Michigan — Mich. Comp. Laws § 750.539c. All parties must consent. Criminal penalty: felony with up to 2 years imprisonment.

Montana — Mont. Code § 45-8-213. All parties must consent. Criminal penalty: varies by offense type. Montana’s statute covers electronic communications broadly.

Nevada — Nev. Rev. Stat. § 200.620. Nevada is a special case: one-party consent for in-person conversations but two-party consent for telephone calls specifically. All parties on a phone call must consent. Criminal penalty: Category D felony (up to 4 years imprisonment).

New Hampshire — N.H. Rev. Stat. § 570-A:2. All parties must consent. Criminal penalty: Class B felony. Civil damages available.

Oregon — Or. Rev. Stat. § 165.540. All parties must consent for telephone calls. Oregon also has a specific provision requiring businesses to inform callers of recording at the beginning of the call. Criminal penalty: Class A misdemeanor.

Pennsylvania — 18 Pa.C.S. § 5704. All parties must consent. Criminal penalty: felony of the third degree (up to 7 years imprisonment). Pennsylvania has been one of the most active states for wiretap litigation related to call recording, with several high-profile class actions against businesses.

Vermont — 13 V.S.A. § 1051. All parties must consent. Vermont’s statute is broad and covers all electronic communications.

Washington — Wash. Rev. Code § 9.73.030. All parties must consent. Criminal penalty: gross misdemeanor. Washington requires that consent be announced at the beginning of each recording. The state has generated significant litigation around the adequacy of recording disclosures.

One-party consent states — only one party (which can be you) needs to consent:

Alabama, Alaska, Arizona, Arkansas, Colorado, Georgia, Hawaii, Idaho, Indiana, Iowa, Kansas, Kentucky, Louisiana, Maine, Minnesota, Mississippi, Missouri, Nebraska, New Jersey, New Mexico, New York, North Carolina, North Dakota, Ohio, Oklahoma, Rhode Island, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, West Virginia, Wisconsin, Wyoming, and the District of Columbia.

In these states, if you are a party to the conversation (or an agent acting on your behalf is a party), you can record without informing the other party. However, this does NOT mean recording is unregulated — you must still be a party to the conversation. Recording a conversation between two other people without being a participant is illegal wiretapping everywhere.

Interstate calls: which state’s law applies

This is the question that keeps compliance officers awake at night, and the honest answer is that there is no universal rule.

The conflict-of-laws problem. Your agent is in Texas (one-party consent). They call a consumer in Pennsylvania (two-party consent). The call is recorded. Which state’s law applies? Texas says one-party is sufficient. Pennsylvania says all parties must consent. The recording was legal in the state where the agent sat and illegal in the state where the consumer answered.

The conservative approach (recommended). Apply the stricter standard. If either party is in a two-party consent state, treat the call as requiring all-party consent. This approach is more restrictive than necessary for calls between two one-party states, but it guarantees compliance in every interstate combination. It is the approach recommended by virtually every telecom compliance attorney and the approach we recommend to every SIPNEX customer.

The legal landscape. Courts have applied different analyses. Some apply the law of the state where the recording device is located (which could be where the agent is, where the server is, or where the carrier’s recording infrastructure sits). Others apply the law of the state where the parties are located. Others apply the law of the state with the most significant relationship to the communication. The Ninth Circuit, which covers California, has applied California’s two-party consent law to calls where only one party was in California. This means that if you call anyone in California from anywhere in the country, California’s two-party consent law likely applies.

The practical conclusion. For any call center making interstate calls — which is virtually every call center — the only defensible approach is to inform all parties on every call and obtain consent before recording. The marginal cost of playing a recording disclosure is zero. The cost of a Pennsylvania or Massachusetts wiretap class action is catastrophic. Do not try to determine which state’s law applies on a per-call basis. Just disclose and record.

How to implement compliant call recording

Compliance is an operational process, not a legal conclusion. Here is how to implement recording consent in a dialer environment.

Pre-call disclosure. Play an automated message at the beginning of every call before connecting to an agent. The standard disclosure: “This call may be recorded for quality assurance and training purposes.” Some states (Washington, Oregon) require that the disclosure be given at the beginning of the call — not buried in a menu or delivered after the conversation has started. The disclosure should be clear, audible, and in the primary language of the called party if you have language data.

Implied consent vs explicit consent. In most two-party consent states, continuing the conversation after hearing the recording disclosure constitutes implied consent. The person heard the disclosure, they chose to stay on the line — that is consent. Some states and some compliance programs require explicit verbal consent (“Do you consent to this call being recorded? Please say yes to continue.”). Explicit consent is more defensible but adds friction to the call flow. The conservative approach: use explicit consent for the strictest jurisdictions and implied consent (disclosure + continued conversation) for the rest.

VICIdial implementation. Configure an IVR or AGI script to play the recording disclosure before the call connects to the agent. In VICIdial, this is typically done through the campaign’s IVR settings or through a custom AGI that plays a recording file, waits for the message to complete, and then transfers to the agent queue. The recording should start after the disclosure plays. Log the consent event in the CDR — timestamp of the disclosure, timestamp of the call connection, and whether the called party remained on the line or disconnected.

Opt-out handling. If the called party objects to recording after hearing the disclosure, your system must be able to respond. Options: transfer the call to a non-recorded line, stop the recording for that specific call while continuing the conversation, or end the call. In VICIdial, recording can be controlled at the agent level — an agent can pause or stop recording for a specific call through the agent interface. Build the opt-out process into your agent training so they know how to respond when a consumer says “I don’t want to be recorded.”

Documentation and retention. Keep records of: the recording disclosure language (exact script), the date ranges each version of the script was in use, the recording files themselves (linked to CDR data with timestamps), and any consent events or opt-out events. Retain these records for the longer of your state’s statute of limitations for wiretap claims or your industry’s record retention requirements. For most states, wiretap claims can be brought within 2 to 5 years. SIPNEX provides CDR data with timestamps and call metadata that supports your documentation requirements.

The consequences of recording without proper consent are not theoretical. They are severe and actively enforced.

Federal penalties. Violations of the federal Wiretap Act (18 U.S.C. § 2511) carry criminal penalties of up to 5 years imprisonment. Civil liability includes the greater of actual damages or $100 per day per violation (with a minimum of $10,000), plus punitive damages, attorney fees, and litigation costs. The recording itself is inadmissible as evidence and subject to suppression.

State criminal penalties vary but include felony charges. California: up to $2,500 fine and/or 1 year imprisonment. Florida: felony of the third degree, up to 5 years. Maryland: felony, up to 5 years. Massachusetts: up to $10,000 fine and/or 5 years. Pennsylvania: felony of the third degree, up to 7 years. These are not administrative fines — they are criminal charges that can be brought by state attorneys general or local prosecutors.

Civil class action exposure. This is where the real financial risk lives. Wiretap class actions against businesses that record calls without proper consent have produced settlements in the tens of millions of dollars. The class is easy to certify — every consumer who was recorded without consent is a class member, and the statutory damages make the math straightforward. A company that recorded 100,000 calls without proper consent in Massachusetts faces potential statutory damages of $1 billion (100,000 calls × $10,000 minimum per violation). In practice, cases settle for far less, but the exposure is real enough to drive seven- and eight-figure settlements.

Recent enforcement trends. Plaintiffs’ attorneys now use technology to identify companies that record without disclosure. They call businesses, listen for (or note the absence of) recording disclosures, document the interaction, and file class actions. Some firms employ people specifically to call businesses and document recording practices for litigation purposes. The message: if you are recording without disclosing, someone is going to find out, and the resulting litigation will cost far more than implementing a disclosure process would have.

Frequently asked questions

Which states require two-party consent for call recording?

As of 2026, the following states require all-party consent for recording phone calls: California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, Nevada (telephone calls specifically), New Hampshire, Oregon, Pennsylvania, Vermont, and Washington. All other states and the District of Columbia follow the federal one-party consent standard. Note that Nevada has a split rule — one-party for in-person conversations, two-party for telephone calls. State laws can change, and several states have had bills introduced to move from one-party to two-party consent. Always verify current law for your specific jurisdictions.

What happens if I record a call without consent?

Consequences vary by state but can include criminal prosecution (felony charges in Florida, Maryland, Massachusetts, and Pennsylvania with imprisonment up to 5-7 years), civil lawsuits with statutory damages ($5,000 per violation in California, $10,000 minimum in Massachusetts), and class action exposure that can reach tens of millions of dollars. The recording itself is typically inadmissible as evidence and may need to be destroyed. Even in one-party consent states, recording a conversation without being a party to it is illegal federal wiretapping. For businesses, the most common consequence is a class action lawsuit — plaintiffs’ attorneys actively target companies that record without proper disclosure.

Does “this call may be recorded” count as getting consent?

In most two-party consent states, yes — playing a clear recording disclosure at the beginning of the call and continuing the conversation constitutes implied consent. The disclosure must be audible, clear, and delivered before recording begins. Some states require more specific language or require the disclosure at the very beginning of the interaction. Washington requires that consent be announced at the start of the recording. Massachusetts requires that all parties consent to the “secret” recording — the disclosure eliminates the “secret” element. The safest approach: play a clear disclosure before recording starts and before the agent connects, use straightforward language (“This call is being recorded”), and log the disclosure event in your call records.

Do call recording laws apply to VoIP calls?

Yes. Federal and state wiretap laws apply to all electronic communications, including VoIP calls. The medium of transmission (copper, fiber, IP) does not change the consent requirements. A VoIP call between two SIP endpoints is subject to the same recording consent laws as a call between two landlines or two cell phones. Some early legal arguments attempted to distinguish VoIP from traditional telephony for wiretap purposes, but courts have consistently held that the laws apply to any real-time voice communication regardless of the underlying technology. If you are recording calls on your SIP trunk, you need the same consent framework as any other phone system.

How do I handle recording consent in VICIdial?

Configure an IVR or AGI script to play a recording disclosure before connecting calls to agents. In VICIdial, use the campaign IVR settings to route inbound calls through a disclosure message before agent connection. For outbound campaigns, configure an AGI script that plays the disclosure after the called party answers and before the agent connects. Start recording after the disclosure completes. Log the disclosure event in the CDR with a timestamp. Train agents on the opt-out process — VICIdial allows agents to pause or stop recording through the agent interface if a consumer objects. For the recording disclosure audio file, use professional voice talent and keep the message under 5 seconds to minimize call abandonment.


SIPNEX provides call recording infrastructure as part of our SIP trunking and VICIdial carrier services — carrier-level recording with CDR integration and timestamp documentation. We give you the tools. You own the compliance policy. Talk to an operator or see our rates.

SIPNEX

FCC-licensed carrier with its own STIR/SHAKEN SP certificate. Operator-owned. SIP trunks built for operators who dial at volume.