AI receptionists and California call-recording consent (CIPA): what to know

If your business is in California and you're using — or considering — AI to answer and record calls, the call-recording rules deserve a careful look. California is stricter than most states, and the regulatory environment around AI phone agents has sharpened in the last 18 months.

California is a two-party (all-party) consent state

Under California's Invasion of Privacy Act (CIPA, Penal Code §§ 631/632), recording a 'confidential communication' without the consent of all parties can be both a crime and a civil tort. Penalties are real: civil exposure is commonly cited at $5,000 per violation or three times actual damages.

Notice alone may not be enough

A passive 'this call may be recorded' disclaimer is the bare minimum and, per legal commentary, may not constitute consent. Best practice is affirmative consent captured at the start of the call — a clear disclosure followed by the caller agreeing (a verbal 'yes' or a keypress) — with the consent timestamp and transcript logged as an auditable record.

The risk is not theoretical

In 2025, a federal court allowed a CIPA class action against an AI phone vendor to proceed — the caller alleged her call to a California business was intercepted and recorded by the AI without her knowledge. That fact pattern is exactly what a well-designed consent flow is meant to prevent.

AI disclosure is a separate, stacking obligation

Beyond recording consent, there's a growing expectation (and, in California, legislative movement) that callers be told they're speaking with an automated assistant rather than a person. The cleanest approach combines both into a single, brief call opener.

• Disclose at the very start that the caller is speaking with an AI assistant.
• Ask for affirmative recording consent before capturing anything sensitive.
• Log the consent timestamp and transcript.
• Offer a no-record path if the caller declines.

What to ask any AI receptionist vendor

• Does every call open with both AI disclosure and a recording-consent request?
• Is affirmative consent captured and logged — not just a passive disclaimer?
• Is there a path to continue without recording if the caller declines?
• For healthcare, is there a signed BAA chain across every vendor touching patient information?

WithConnect was built California-first: a single combined opener handles AI disclosure and affirmative recording consent on every call, with the consent logged — and a no-record fallback when a caller declines.