Call recording law is state by state in the US and country by country everywhere else. A disclosure at the start of every call keeps the team compliant in every jurisdiction.
Call recording consent is the legal permission required to record a phone call. In the United States, 12 states require all parties on the call to consent before recording, while the rest require only one party (usually the recorder). Outside the US, most jurisdictions require all-party consent. Sales teams default to all-party consent as the safe practice, with a clear disclosure at the start of every recorded call.
Six legal shapes cover almost every call recording scenario a sales team will face. The practical answer is almost always the same: disclose and get consent, regardless of jurisdiction.
Thirty-eight US states plus DC follow one-party consent rules, meaning as long as one person on the call (typically the person recording) consents, the recording is legal. The caller can record without informing the other party in these jurisdictions, though many companies choose to disclose anyway.
California, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, Nevada, New Hampshire, Oregon, Pennsylvania, and Washington require all parties to consent before a call is recorded. These states carry civil and sometimes criminal penalties for noncompliance. Sales teams calling into any of these states should default to all-party consent.
If a call crosses state lines (common in sales), the safest practice is to follow the stricter rule. A call from a one-party state to a two-party state should be treated as a two-party call, with consent obtained from the other party. The alternative is a legal gamble with real downside.
The United Kingdom, European Union, Canada, Australia, and most other developed economies require all-party consent for call recording in business contexts. GDPR adds additional data-protection requirements on top. International sales teams default to all-party consent and transparent disclosure, which satisfies most jurisdictions by design.
A compliant disclosure says the call is being recorded, states the purpose (training, quality assurance, record-keeping), and gives the other party a clear option to decline. The disclosure happens at the start of the call, before any substantive conversation. Burying it mid-call does not satisfy consent requirements in most jurisdictions.
The CRM record for the call should include the fact that disclosure was given and that the other party consented (or did not). A simple field on the activity captures the signal. Teams that rely on verbal consent without any record of it have no evidence if a complaint arises later.
The twelve all-party consent states have differing specifics (some apply to in-person conversations, others to electronic communications, others to both). The pragmatic rule for sales teams is to treat any call touching a listed state as all-party.
California Penal Code 632 requires all-party consent for recording confidential communications. California has active enforcement and real penalties. Any sales team with California prospects should default to disclosure and consent on every call. The state tech sector concentration makes this a common scenario.
Both states treat recording without all-party consent as a potential criminal offense in business contexts, in addition to civil liability. Sales teams calling into Florida and Illinois should document consent clearly. The disclosure script is the same, but the stakes are higher if the documentation is missing.
Both states apply all-party consent to conversations where parties have a reasonable expectation of privacy, which covers most sales calls. Written agreements that cover consent in advance (sometimes in email signatures or MSAs) can satisfy the requirement without a verbal disclosure on every call.
Both apply standard all-party consent rules to electronic communications including phone calls. Disclosure at the start of the call, consent captured, and the recording follows the same standards as the stricter states. Washington is particularly active in tech-sector enforcement.
These five rounds out the all-party consent list. Each has nuances (Nevada applies to in-person as well as calls, Montana has specific exceptions for public meetings), but the practical rule for sales teams is the same: disclose and get consent before recording.
The remaining 38 states and DC follow one-party consent, meaning the sales rep (as a party to the call) can record without informing the other party. Many companies choose to disclose anyway, as a trust-building and legal-safety practice. The disclosure costs nothing and prevents a lot of possible disputes.
International sales teams face stricter consent rules in most jurisdictions. The combination of all-party consent requirements plus data protection law (GDPR, CCPA where applicable, country-specific statutes) means the compliant posture is default disclosure with explicit consent.
GDPR treats call recordings as personal data. Processing requires a lawful basis (consent, legitimate interest, contract), appropriate notice, and respect for data subject rights (access, deletion). National laws add additional specifics. The practical standard is all-party consent plus a privacy notice.
UK GDPR applies the same framework as EU GDPR. Ofcom guidance on business call recording requires informing the caller that the call may be recorded, stating why, and giving an option to continue or disconnect. Most UK sales teams build this into their phone greeting.
Canadian federal privacy law (PIPEDA) and provincial statutes (particularly in Quebec, BC, and Alberta) require consent for call recording in commercial contexts. The standard is similar to all-party consent in US states, with additional data protection requirements on top.
Federal law in Australia requires all-party consent for recording, with state-level variations. Business call recording is permitted with disclosure and consent, following standard patterns similar to UK or Canadian compliance.
Most other developed economies (Japan, Singapore, Brazil, Mexico) have call recording laws that require some form of consent and often additional data protection compliance. The practical standard for a global sales team is default all-party consent with disclosure, which satisfies most jurisdictions by design.
Rather than mapping jurisdictions call-by-call, most sales teams adopt all-party consent as a global default. The compliance posture is simpler, the legal risk is minimized, and the disclosure cost is a few seconds at the start of each call. Trust-building is a bonus.
A compliant call recording practice combines a disclosure script, a consent capture in the CRM, retention rules, and access controls. The pattern below is what disciplined sales teams actually do, not an aspirational version.
The disclosure script is 10 to 20 words at the start of the call: "This call is being recorded for quality and training purposes. If you prefer not to be recorded, please let me know and I will stop the recording." Trained into every rep, delivered consistently, logged in the CRM.
The CRM activity (call log) includes a consent field: disclosed and accepted, disclosed and declined, or not disclosed. The field provides the audit trail. Teams that skip this field have no evidence of compliance if a complaint arises, even when the rep did everything right.
If the other party declines to be recorded, the recording stops immediately and the call continues without it. The rep still logs the activity, notes that recording was declined, and takes manual notes. Reps have to know they can stop a recording in real time; the capability has to be one click, not a workflow.
A documented retention policy (90 days, 180 days, 1 year) applies consistently. Longer retention invites discovery risk. Shorter retention loses training value. Most teams land at 180 to 365 days, with longer retention for recordings tied to disputes or compliance holds.
Role-based access controls determine who can listen to recordings: the rep who made the call, their manager, the admin team, and specific compliance roles. Broad access to recordings creates privacy risk. Narrow access with audit logging is the pattern that holds up to review.
Under GDPR, CCPA, and similar frameworks, individuals can request deletion of their call recordings. The CRM has to support finding every recording with a given individual and deleting them on request. Teams without this capability take on compliance risk that compounds over time.
Strkr tracks per-contact consent and preferences across every send channel, with field history on every change and role-based access on sensitive records. 14-day trial on paid plans. HIPAA compliant with BAA available. SOC 2 Type II in progress with target 2026-Q4.
Call recording consent is the legal permission required to record a phone call. In most US states, only one party on the call (typically the recorder) needs to consent. In 12 states and most international jurisdictions, all parties on the call must consent. The safe practice for sales teams is to default to all-party consent with a clear disclosure at the start of every call.
Twelve US states require all parties to consent: California, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, Nevada, New Hampshire, Oregon, Pennsylvania, and Washington. The remaining 38 states and DC follow one-party consent. For cross-state calls, the safe practice is to follow the stricter rule, which usually means all-party consent.
In one-party consent states, no. The sales rep is a party to the call and their own consent is sufficient. In two-party consent states, yes. Internationally, yes in most jurisdictions. Many sales teams default to disclosure and consent on every call regardless of jurisdiction, both for legal safety and for the trust-building benefit of transparency.
A short, clear statement at the start of the call that the call is being recorded, the purpose (quality, training, record-keeping), and an option to decline. Example: "This call is being recorded for quality and training purposes. If you prefer not to be recorded, let me know and I will stop the recording." Delivered consistently, logged in the CRM, trained into every rep.
In 38 US states and DC, legally yes, because those jurisdictions follow one-party consent. In 12 US states and most international jurisdictions, no. In practice, recording without disclosure creates reputational risk even where it is legal. Most professional sales teams disclose and get consent on every call as a matter of policy.
In two-party consent states, unauthorized recording can trigger civil liability (damages) and in some states (Florida, Illinois) criminal penalties. The recording also becomes inadmissible as evidence in most legal proceedings. Beyond the legal risk, discovery that a call was recorded without consent damages trust and often ends the business relationship.
Most sales teams retain recordings for 180 to 365 days as a baseline, with longer retention for recordings tied to disputes, compliance holds, or active deals. Shorter retention reduces discovery risk; longer retention preserves training value. The retention policy should be documented, consistently applied, and support deletion requests under GDPR, CCPA, and similar frameworks.
No sales call, no migration consultant, no four-month implementation. Enter your card, get 14 days of the full Pro tier, cancel any time before day 14 with zero charge. Spin up a workspace, import your CSV, and have something useful before lunch.
