The consent exception in the Electronic Communications Privacy Act lets you legally record or intercept a wire, oral, or electronic communication when at least one party to that communication has agreed to it. For private citizens, the authority comes from 18 U.S.C. § 2511(2)(d), and it carries one significant catch: the recording cannot be made for the purpose of committing a criminal or tortious act. Without a valid consent basis (or another statutory exception), intercepting a private communication is a federal felony punishable by up to five years in prison.
One-Party Consent Is the Federal Rule
If you are on the phone call, in the meeting, or part of the text exchange, you can record it under federal law without telling anyone else. Being a party to the communication is itself the consent the statute requires. This covers wire communications like phone calls, oral communications like face-to-face conversations, and electronic communications like emails and instant messages.
You can also record a conversation you are not part of if one of the actual participants has given you prior permission. Either way, the statute is satisfied by a single participant’s agreement.
This federal rule is a floor, not a ceiling. States are free to demand more, and roughly a dozen have done so by requiring every participant to agree before a conversation can be recorded. Federal law does not preempt those stricter state statutes, which matters the moment a call crosses a state line.
The Criminal or Tortious Purpose Limit
Section 2511(2)(d) protects private recorders only if the recording is not made “for the purpose of committing any criminal or tortious act in violation of the Constitution or laws of the United States or of any State.” Record a business partner to preserve evidence for a contract dispute, and you are inside the exception. Record the same partner to set up an extortion scheme, and the exception disappears — even though you were a party to the conversation in both cases. Courts have pointed to torts like intrusion upon seclusion and conversion as purposes that can void consent. What matters is the interceptor’s intent at the moment of recording, though how the recording is later used is often the clearest evidence of what that intent was.
What Actually Counts as Consent
When someone other than you provides the consent, the form of that agreement matters. The ECPA recognizes both express and implied consent, but each has to be real.
Express Consent
Express consent is a clear, affirmative agreement: a signed document, a recorded verbal “yes,” or a click-through box that the user actively agrees to before proceeding. To hold up, the language has to be specific about what will be intercepted and why. A vague line stating “we may monitor your activities,” with no mention of which channels or interactions are covered, invites challenge. A consent form buried inside a 40-page terms-of-service document that never says the word “recording” is far weaker than a standalone disclosure placed prominently before the conversation begins.
Implied Consent
Implied consent arises from circumstances a reasonable person would read as notice that monitoring is happening. The familiar example is the automated message at the start of a customer service call: “This call may be recorded for quality assurance purposes.” If you stay on the line, courts treat continued participation as consent.
The bar is higher than many people assume. The mere possibility that a communication could be monitored is not enough. There must be an actual, clear indication that monitoring is taking place. A workplace with no signs posted, no verbal warnings, and no written policy on recording does not generate implied consent just because the equipment could support it. Courts are skeptical of arguments that try to manufacture consent from silence.
Consent Has a Scope, and It Can Be Withdrawn
Consent is not open-ended. As the Eleventh Circuit put it in Watkins v. L.M. Berry & Co., “consent within the meaning of section 2511(2)(d) is not necessarily an all or nothing proposition; it can be limited.” Permission to record a specific meeting does not extend to later phone calls, unrelated conversations, or future emails. Consent given years ago under different circumstances may not cover current communications if the relationship or purpose has changed.
Consent can also be revoked at any time. The moment someone says they no longer want to be recorded, the legal protection for the person doing the recording ends. Continuing after that is a direct ECPA violation. The statute does not require revocation to be written or to follow any particular format; a clear verbal statement is enough. If you are relying on consent to justify ongoing monitoring, keep records of when it was given, what it covered, and whether it has been withdrawn.
Interstate Calls and Stricter State Laws
One-party consent is simple when everyone is in the same state. It gets complicated fast on a call that crosses into a jurisdiction requiring all-party consent. States with all-party rules include California, Florida, Illinois, Maryland, Massachusetts, New Hampshire, Pennsylvania, and Washington.
There is no uniform federal answer to which state’s law governs an interstate call. The most widely cited ruling is the California Supreme Court’s decision in Kearney v. Salomon Smith Barney, Inc., which held that California’s all-party consent law applied to calls between California residents and out-of-state callers, even where the out-of-state party sat in a one-party consent state. The court warned that out-of-state companies doing business in California are on notice that California law applies to calls made to or received from the state.
The workable rule for anyone recording across state lines is to comply with the more restrictive law. If any participant is in an all-party state, get everyone’s agreement before you start. Asking costs nothing; guessing wrong can cost a great deal.
Workplace Recording Under Consent
Employers usually secure consent through technology-use policies in employee handbooks, login banners on company networks, or standalone monitoring agreements signed during onboarding. When you sign a handbook acknowledgment or click past a screen stating that communications on the system are subject to monitoring, that is the consent covering emails, instant messages, and calls made through company equipment.
Personal messages sent through company systems are generally covered too, as long as the policy explicitly says all communications on those systems may be monitored. Real-time listening on phone calls sits in a different bucket: even on a company line, an employer’s authority to listen to a clearly personal call is not unlimited. In Watkins, the court held that an employer may briefly listen to determine whether a call is personal or business-related, but must stop once the personal nature is clear.
What a Bad Recording Costs
A recording that violates the ECPA is not just illegal to make; under 18 U.S.C. § 2515, it is inadmissible. No part of an illegally intercepted wire or oral communication, and no evidence derived from it, may be used in any trial, hearing, or proceeding before any court, grand jury, or government body. That exclusion applies in both federal and state proceedings, which removes most of the practical reason someone would have made the recording in the first place.
The victim can also sue. Under 18 U.S.C. § 2520, damages are the greater of: actual damages plus the violator’s profits, or statutory damages calculated at $100 per day of violation or $10,000, whichever of those two is larger. Courts can add reasonable attorney fees, litigation costs, and punitive damages in appropriate cases. Even a single interception with no provable financial harm carries a $10,000 statutory floor.
Criminal penalties under 18 U.S.C. § 2511(4) run up to five years in prison plus fines. Prosecution is less common than civil litigation, but the felony exposure is real.
Two Boundaries Worth Knowing
The consent exception does not answer every recording question. Two situations get mistaken for it and are governed by different rules.
Recording a minor child’s calls is not squarely addressed by the ECPA. A federal district court in Thompson v. Dulaney recognized a narrow doctrine of “vicarious consent” allowing a parent or guardian to consent on a minor’s behalf when the parent has “a good faith basis that is objectively reasonable for believing that it is necessary to consent on behalf of her minor children” and is acting in the children’s best interests. Not every jurisdiction has adopted this, and some courts have rejected it. Treat it as unsettled, and understand that the parent’s motive is what courts scrutinize.
Employer monitoring of business calls on standard office equipment, and interception by phone companies or internet service providers for maintenance or fraud prevention, are permitted through separate statutory exceptions — the business extension exception at 18 U.S.C. § 2510(5)(a) and the service provider exception at 18 U.S.C. § 2511(2)(a)(i) — not through consent. If you are relying on one of those, the consent analysis in this article is not the framework that governs your conduct.