Do AI call transcription tools need extra consent?

Why an AI vendor can change the consent picture#

An AI vendor can change the consent picture because recording laws ask who is listening, not only whether a recording exists. When a plumbing company records its own calls on its own phone system, the company is a party to the conversation. When an outside service receives the audio, transcribes it and analyzes it, the question becomes whether that service is simply the company's tool or a separate listener.

Plaintiffs have used state wiretap and privacy statutes, including the California Invasion of Privacy Act, often called CIPA, to bring claims against businesses and their technology vendors over software that captures conversations. Courts have looked at the vendor's role in different ways. Some ask whether the vendor simply works as the business's tool, much like a recording device; others ask whether the vendor is capable of using the content for its own purposes, such as training or improving its models. Results have not been uniform, which is why counsel review matters.

For a contractor, the practical takeaway is that switching on an AI feature inside an existing phone system can change the analysis even though nothing about the call itself looks different to the customer.

The baseline rules, and what an AI vendor adds#

The baseline is the familiar split between one-party and all-party consent rules, and an AI vendor adds a question that split does not answer. Under one-party rules a participant can agree to the recording; under all-party rules everyone on the call must agree, which in practice means a clear disclosure before the conversation starts.

Both rules were built around the people on the call. When a vendor receives the audio, the open question is whether that vendor counts as part of your side of the conversation or as an outsider listening in, and the answer may turn on its contract terms and data use rather than on which state the caller is in. Home services companies that take calls from several states commonly apply the stricter disclosure standard to every call, then deal with the vendor question separately.

How common call setups compare#

Call setups in home services range from a basic recorded line to an AI receptionist that answers alone. Each setup changes who hears or stores the conversation and which consent questions are worth raising with counsel.

Vendor terms worth reading line by line#

Vendor terms decide much of the risk, because they define what the vendor may do with your callers' words. Read the main agreement, the data processing addendum and any AI-specific terms, and check the account settings, since defaults do not always match the contract language.

Ask the vendor to confirm answers in writing where the documents are unclear.

• 1Whether call audio, transcripts or summaries may be used to train or improve the vendor's models, and whether you can opt out.
• 2Whether the vendor acts only as your service provider or processor, and on whose instructions.
• 3Which subprocessors, such as speech-to-text providers, receive the audio.
• 4How long audio and transcripts are retained, and how deletion works when you ask or when you leave.
• 5Who owns transcripts, summaries and other outputs, and whether they are included in exports.
• 6Where data is stored and what security commitments apply.

Disclosure update checklist#

A disclosure update is the most practical step a contractor can take before turning transcription on. The goal is a disclosure that describes what actually happens to the call, delivered before the conversation starts, with a dated record of each version.

Keep the wording short enough that callers hear all of it before pressing a menu option. A disclosure that is accurate but skipped by most callers protects less than a plain sentence placed at the very start of the greeting.

• 1Update the greeting to mention recording and AI-assisted transcription or analysis, in plain language, with counsel's review.
• 2Play the disclosure before a CSR or AI agent begins the conversation, including after-hours and overflow lines.
• 3Decide how outbound calls, such as membership reminders and estimate follow-ups, disclose recording.
• 4Align the privacy notice on your website with what the phone system and vendors actually do.
• 5Tell employees in writing that calls are recorded and analyzed, and how results are used.
• 6Give callers a way to ask for an unrecorded call where the law or your policy requires it.
• 7Keep a log of each greeting version, the date it went live and the vendor settings at the time.

Illustrative: an electrical service company adds AI call summaries#

Illustrative: a fictional residential electrical service company has recorded calls for years with a greeting that mentions quality and training. Its phone provider offers AI summaries that attach to each customer record, and the service manager wants them switched on before the busy season for panel and generator calls.

Before enabling the feature, the owner asks counsel to review it. The review finds that the provider's default setting allows de-identified call content to be used to improve its models. The company turns that setting off, updates the greeting to mention AI-assisted transcription, adds a line to its privacy notice and records the date of each change.

Months later, when the owner asks whether call records could ever be licensed, the dated log makes it clear which calls were made under which disclosure, so they can be treated differently.

Transcription consent and licensing are separate questions#

Consent to record and transcribe calls for your own operations does not automatically extend to licensing those calls or transcripts to an AI developer. Licensing is a different use, and it is reviewed on its own against your disclosures, privacy notice, vendor terms and the laws that may apply.

When SourceX reviews call records, the SourceX Evidence Packet's privacy record documents which disclosure versions covered which calls, what was removed and what was excluded. Rights are assessed deal by deal with counsel, the supplier approves each step of the SourceX five-step transaction, and calls that cannot be cleared stay out. Any records that proceed are licensed, not sold, and the company keeps ownership.