A compliant “this call is being recorded” script announces the recording before any real conversation starts, says why the call is recorded, and gives the other party a clear way to consent or hang up. Federal wiretap law only requires one party on the line to know about the recording, but roughly a dozen states require everyone on the call to agree, and a botched disclosure can trigger statutory damages of $10,000 per violation under federal law alone.1Office of the Law Revision Counsel. 18 U.S. Code 2520 – Recovery of Civil Damages Authorized Because most call centers handle calls that cross state lines, the safest scripts are written to satisfy the strictest rule: all-party consent, delivered before any substantive exchange.
Every version of the disclosure should hit three points. The call is recorded. Why it’s recorded. What the caller should do if they object.
Inbound Customer Service Script
Inbound calls usually rely on an automated message played before the caller reaches an agent. There’s no one on your side to hear a verbal “yes,” so this format leans on implied consent through continued participation:
“Thank you for calling [Company Name]. This call is recorded for quality assurance and training purposes. If you do not wish to be recorded, please hang up now. Otherwise, please stay on the line for the next available representative.”
The hang-up line is what makes the implied consent stick. It confirms the caller had a real chance to opt out. Skip it, and a plaintiff can argue the recording started before any meaningful choice existed.
Some states accept an automated tone as a substitute for spoken disclosure. California’s Public Utilities Commission allows a repeating audible beep at regular intervals, and Connecticut accepts an automatic signal every 15 seconds as an alternative to explicit agreement.2Justia. Recording Phone Calls and Conversations – 50-State Survey Most businesses still prefer a spoken disclosure because it doubles as evidence in any later dispute.
Outbound Sales or Service Script
When your team dials out, an agent delivers the disclosure directly, and in all-party consent states you want an explicit response rather than silence:
“Hello, this is [Agent Name] calling from [Company Name]. I need to let you know this call is being recorded for quality and training purposes. Are you okay with that?”
If the answer is no, stop recording immediately or end the call. Train agents to treat a “no” as final rather than negotiating around it. One-party consent states technically accept a disclosure without asking for agreement, but running the same explicit-consent script everywhere eliminates the risk of an agent guessing wrong about which rule applies to a given number.
AI-Assisted and Automated Call Script
If your system uses AI-generated voices or automated transcription, disclosure expectations are shifting. The FCC proposed a rule in late 2024 that would require callers to disclose at the start of any call whether it uses an AI-generated voice.3Federal Register. Implications of Artificial Intelligence Technologies on Protecting Consumers From Unwanted Robocalls Congress has introduced legislation to set standards for AI-generated voice systems in telecommunications.4Congress.gov. H.R. 334 – 119th Congress Neither is binding law as of early 2026.
A forward-looking script combines both disclosures:
“Thank you for calling [Company Name]. This call is recorded and may use AI-assisted technology for quality, training, and transcription purposes. By remaining on the line, you consent to this recording. To speak with a live representative without AI assistance, press zero.”
When to Play the Disclosure
Timing decides whether the script works. The disclosure has to come before any substantive conversation. If a customer starts describing a billing dispute and only hears the notice 30 seconds later, you’ve already captured content without proper consent. Play or read the disclosure as the first thing after the greeting.
Delivery quality matters as much as timing. A notice buried under hold music, spoken too quickly, or played at low volume may not satisfy consent requirements even if it technically plays. The standard is whether a reasonable person would actually understand they’re being recorded.
Repeat the disclosure on transferred calls. When a caller moves from one department to another, a new recording system or agent may pick up, and a brief restatement closes the gap: “Just a reminder, this call continues to be recorded for quality purposes.” Five seconds, and one of the more common compliance holes disappears.
Consent Rules That Shape the Wording
Federal wiretap law permits recording as long as at least one person on the call knows about it and isn’t recording for an illegal purpose.5Office of the Law Revision Counsel. 18 U.S.C. 2511 – Interception and Disclosure of Wire, Oral, or Electronic Communications Prohibited If your company is on the call and consents internally, the federal standard is met. Most states follow the same one-party framework.
A smaller group demands consent from every person on the line. All-party consent states include California, Florida, Illinois, Maryland, Massachusetts, New Hampshire, Pennsylvania, and Washington, among others. A few apply all-party rules only to certain communications, such as phone calls but not in-person conversations.2Justia. Recording Phone Calls and Conversations – 50-State Survey The list changes as legislatures update their wiretap statutes, so verify your state’s current law before locking in a script.
When a call crosses state lines, follow whichever state has the stricter rule. Courts have held that an all-party consent state’s law can reach into a one-party state when one participant is located there.2Justia. Recording Phone Calls and Conversations – 50-State Survey For most nationwide operations, that means every script should be built to satisfy all-party consent regardless of where the agent sits.
Implied consent has its limits. Some all-party states, including Washington, treat consent as obtained the moment one party announces the call is about to be recorded and the other stays on the line.2Justia. Recording Phone Calls and Conversations – 50-State Survey Others expect more. Connecticut generally requires prior consent in writing or recorded at the start of the call for civil liability protection. Where you’re not sure, ask for an explicit response.
Industry Rules That Change What You Can Record
Baseline consent law is the floor. Certain industries face additional rules that reshape what your script can capture and how the recording is stored.
Healthcare
Any call recording that captures patient health information over a digital system like VoIP or a mobile app creates electronic protected health information subject to the HIPAA Security Rule. The recording has to be included in your organization’s risk analysis, with encryption evaluated as a safeguard for stored files and transmissions.6U.S. Department of Health & Human Services. Guidance on How the HIPAA Rules Permit Covered Health Care Providers and Health Plans to Use Remote Communication Technologies for Audio-Only Telehealth One narrow carve-out: calls made over a traditional landline with no digital technology are not covered by the Security Rule.
HIPAA treats encryption as “addressable” rather than mandatory, so you can skip it only if you document why it isn’t reasonable and put an equivalent safeguard in place. Most organizations just encrypt.
Payment Card Processing
Call centers that handle credit card payments cannot store the three- or four-digit card verification code (CVV, CVC2, or CID) in any audio recording after the transaction is authorized. Encryption doesn’t save you. The PCI Data Security Standard classifies those codes as sensitive authentication data that must never be retained in digital audio.7PCI Security Standards Council. Protecting Telephone-Based Payment Card Data
Compliant options include pausing the recording while the customer reads the card number, using DTMF tone masking so the digits never enter the audio stream, or routing payment collection to a separate system that doesn’t record. Your disclosure script doesn’t need to explain any of this to the caller, but your internal process has to guarantee the verification code never lands in a stored file.
Telemarketing
Telemarketers face the Telephone Consumer Protection Act on top of the baseline consent rules. The TCPA creates a private right of action worth $500 per violation, and courts can triple that to $1,500 for willful violations.8Federal Communications Commission. Telephone Consumer Protection Act 47 U.S.C. 227 TCPA class actions routinely settle in the seven figures.
Recording Employee Calls
Recording internal calls or monitoring staff conversations with customers triggers a separate analysis. Federal wiretap law applies the same one-party consent standard, so an employer who is a party or who has one participant’s consent satisfies the federal baseline.5Office of the Law Revision Counsel. 18 U.S.C. 2511 – Interception and Disclosure of Wire, Oral, or Electronic Communications Prohibited State all-party rules still apply.
The practical policy is transparency. Tell employees in writing that calls are monitored, include the notification in the handbook, and play a disclosure for every external caller. Blanket notice avoids later disputes about who knew what.
What Noncompliance Costs
Civil exposure is the immediate threat. Federal law lets anyone whose communications were illegally intercepted sue for the greater of actual damages plus the violator’s profits, or statutory damages of $100 per day or $10,000, whichever is larger. Punitive damages and attorney’s fees stack on top.1Office of the Law Revision Counsel. 18 U.S. Code 2520 – Recovery of Civil Damages Authorized State wiretap statutes layer on their own remedies, with per-violation damages generally running from $1,000 to $5,000.
There’s a second cost people miss. Illegally obtained recordings are generally inadmissible as evidence. If you record customer calls to protect against disputes and the recordings were captured without proper consent, you lose the evidence and gain a lawsuit. The recording meant to prove you did everything right becomes proof you broke the law.
Keeping the Consent Record
Compliance doesn’t end when the call disconnects. Under the FTC’s Telemarketing Sales Rule, sellers and telemarketers must retain telemarketing scripts, call records, and consent documentation for five years. Scripts are kept for five years after they are last used, not five years from creation. Consent records must include the name and phone number of the person who consented, the purpose of the consent, and the date.9eCFR. 16 CFR 310.5 – Recordkeeping Requirements
Outside telemarketing, retention logs are still smart practice. If a caller later claims they never agreed to be recorded, a timestamped log showing the disclosure played at the start of the call is your strongest defense. Store the disclosure audio alongside the recording itself so you can show exactly what the caller heard and when.
State privacy laws are expanding consumer rights over recorded data, including the right to request deletion. A retention policy with defined time limits and a working deletion process keeps you ahead of those requests and limits your exposure if stored recordings are ever caught in a breach.