How does call-recording consent affect licensing your data?

Many companies play "this call may be recorded for quality and training" at the start. In several states a notice is how consent works: Connecticut accepts a recorded verbal notification, Montana a warning, Washington a recorded announcement. Massachusetts only bars secret recording. Pennsylvania courts find consent when a party knew, or reasonably should have known, the call was recorded, and New Hampshire courts when the circumstances show the party knew.

But a notice only shows callers knew they were being recorded. Whether it also reaches handing the content to a third party for AI training is unsettled, and we don't assume the answer is yes.

Vendors add a second layer. In February 2025 a federal court in California let a lawsuit go forward against a cloud provider whose AI processed customer-service calls, on the theory that a vendor able to use call content for its own purposes can be an eavesdropper under California law. That was an early-stage ruling, not a final decision. Read your phone and call-recording vendors' terms on third-party and AI use.

If you record calls for clients, as a contact center or outsourced support team does, the recordings usually belong to the client under your service contract. They need the client's written authorization before anyone licenses them, on top of the consent rules above.

Raw audio carries a voice, plus everything said aloud: names, street addresses, phone numbers, claim numbers. A transcript with identifiers removed keeps what most buyers use, which is the intent, the objections, the vocabulary and whether the job got booked or the problem got solved, and leaves the voice out. That largely sidesteps the biometric questions below, though the consent questions above still apply to the content.

Some buyers, such as those building speech models, ask for audio. That's an exception to weigh with your counsel, on tighter terms. Otherwise you choose transcripts with identifiers removed, leaving calls out, or leaving out calls without a documented recording notice, and the choice goes into the license.

A voiceprint is a template built to recognize who is speaking. Several states regulate them:

• Illinois (BIPA): names voiceprint as a biometric identifier, requires written notice and a signed release before collection, bars selling or profiting from one, and lets people sue for $1,000 (or actual damages, if higher) per negligent violation and $5,000 per intentional or reckless one. A 2024 amendment counts repeat collection of the same identifier from the same person, by the same method, as one violation.
• Texas (CUBI): a voiceprint captured for a commercial purpose needs notice and consent, and the attorney general can seek up to $25,000 per violation. Since January 1, 2026, the law exempts AI training unless the system is used or deployed to uniquely identify a specific individual.
• Washington: voiceprint counts, but the law excludes audio recordings and data generated from them.
• Colorado: since July 1, 2025, voiceprint is a biometric identifier under the Privacy Act, and plain recordings are excluded unless used for identification.

Plain call audio is not automatically a voiceprint. The risk starts when someone extracts speaker identifiers or builds a voice model. So every license we offer bars voice cloning and re-identification, you can add a ban on building voiceprints when calls are in scope, and calls from Illinois deserve your counsel's attention first.

1. List where calls are recorded: phone system, call tracking, dialer, contact-center platform, video meetings with clients, in-home sales app.
2. Note the states your callers, customers and staff are in.
3. Find your notice: its wording, whether it plays on inbound and outbound calls, and the date you started.
4. Read your vendors' terms on third-party and AI use.
5. Pick a scope: transcripts only, calls with a documented notice, or one-party-state calls until counsel clears the rest.
6. Have counsel review it all before you sign.

Our intake asks whether you record calls, whether callers hear a disclosure and where you operate. Calls recorded without one get flagged, with transcripts only or leaving them out as the suggested fix. The decision is yours and your counsel's. This is not legal advice.