One-Party vs Two-Party Consent States: Recording Laws
"Consent" doesn't only mean cookie banners. In US recording law, it decides whether you can legally record a call — and the answer depends on your state. Here's the full 2026 map of one-party and two-party consent states, the specific answers people search for, and how this ties back to the same wiretap law behind website lawsuits.
What this covers
One-party vs two-party consent: the difference
US call-recording law splits into two models. In a one-party consent state, only one person in the conversation needs to consent to the recording — and that person can be you. If you're on the call, you can legally record it. In a two-party consent state (more accurately "all-party"), every participant must be informed and agree before recording is legal. The familiar "this call may be recorded for quality assurance" message exists precisely to obtain that all-party consent on the record.
The distinction has real teeth: recording illegally in an all-party state can be a criminal offense, and states like Maryland and Massachusetts attach penalties of up to five years' imprisonment. This is why knowing your state's rule — and the rule of whoever you're calling — matters before you hit record.
The full 2026 state lists
As of 2026, 38 states plus Washington DC follow one-party consent, and 12 states require two-party/all-party consent. Here are the two-party states — the ones to watch — since every other state (plus DC) is one-party.
California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Montana, Nevada, New Hampshire, Pennsylvania, and Washington. Several of these are legally "hybrid" — their rule differs for phone calls vs in-person conversation (see below) — but for recorded phone calls, treat all twelve as requiring everyone's consent. Sources vary slightly on the hybrids (some lists swap Nevada for Oregon), so when a state is borderline, get everyone's consent to be safe.
Everything not on that list — 38 states plus DC — is one-party consent, including high-population states like New York, Texas, Ohio, Georgia, North Carolina, Virginia, and New Jersey. In those states, if you're a participant, you can record without telling the other person (though disclosure is still often the wiser practice).
A few states change rules by context. Oregon is generally one-party for phone calls but requires all-party consent for in-person conversations. Nevada statute reads one-party but the state Supreme Court added a reasonable-expectation-of-privacy gloss, so in-person recordings are treated cautiously. Connecticut applies all-party rules to phone calls. Michigan reads all-party but courts have long recognized a participant exception. When a state is hybrid, the safe rule is: disclose and get consent from everyone.
The specific states people ask about
These are the exact questions searched most — answered directly.
Interstate calls & the strictest-law rule
The hardest case is a call that crosses state lines — say, you're in one-party Texas calling someone in all-party California. Which law applies? The safest and most widely-followed rule is to apply the strictest state's law involved. If anyone on the call is in an all-party state, get everyone's consent. Courts have resolved these cases inconsistently, so the conservative practice — disclose and get consent on every call that might touch an all-party state — is the one that keeps you safe across all 50 states.
Announce the recording at the start of every call and get a verbal "yes" before the substance begins. That single practice satisfies all-party consent everywhere, removes the interstate guesswork, and turns "which state's law applies?" into a question you never have to answer under pressure.
Federal law (ECPA) is the floor
Underneath the states, federal law — the Electronic Communications Privacy Act, 18 U.S.C. § 2511 — sets a one-party consent floor. States may be stricter (all-party) but not more permissive. So the federal baseline permits participant recording, and the all-party states layer additional protection on top. This is the same statutory family — wiretapping and interception law — that reappears, in a very different form, in website privacy litigation.
How this connects to website tracking (CIPA)
Here's the thread that ties this back to digital privacy: the California statute behind the website-tracking lawsuit wave, CIPA, is the very same all-party wiretapping law that governs recording a call in California. It was written in 1967 to stop secret phone taps and requires all-party consent to intercept a communication. Plaintiffs' firms have repurposed that exact "all-party consent to intercept" logic to argue that a tracking pixel intercepts a website visitor's communication without their consent — a digital wiretap.
In other words, "two-party consent" and "cookie consent" are branches of the same tree. The call-recording version asks everyone on a call to agree before you record; the website version asks the visitor to agree before your trackers fire. If you run a website, the same wiretap-consent principle you'd apply to recording a California call now applies to the pixels on your pages. See how that plays out in our CIPA explainer and the broader cookie consent guide.
Is your website getting consent before it "records"?
The same wiretap logic behind two-party recording law drives CIPA website lawsuits. See which trackers fire before consent on your site — in about 10 seconds.
Scan your site free →Key takeaways
38 states + DC are one-party; 12 are two-party. One-party: any participant can record. Two-party/all-party: everyone must agree.
The 12 all-party states: California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Montana, Nevada, New Hampshire, Pennsylvania, Washington — with several hybrids that vary by phone vs in-person.
New Jersey is one-party; Maryland is all-party. The two most-searched answers — and the safe move for borderline states is always to get everyone's consent.
It's the same law as website tracking. CIPA — the all-party wiretap statute behind the pixel lawsuits — is the digital cousin of two-party recording consent.
The wiretap principle now applies to your website
ConsentPixel — Privacy · Verified blocks trackers before consent — the digital version of getting all-party consent before you record. Scan your site free, then start a 14-day trial.
Start 14-day free trial → Scan a site freeNo credit card required · from $8.99/domain/mo
Frequently asked questions
Is New Jersey a one-party or two-party consent state?
New Jersey is a one-party consent state. Under N.J. Stat. § 2A:156A-4, a party to a communication may lawfully record it, so if you are on the call, your consent alone is enough — including for phone recordings. You do not legally need to tell the other party in New Jersey, although disclosure is often still the wiser practice, especially if the call might reach someone in an all-party state.
Is Maryland a one-party consent state?
No. Maryland is an all-party (two-party) consent state under § 10-402, mirroring California. Every participant must consent before a conversation is recorded, and Maryland courts have generally required that consent be explicit rather than implied by continued participation — making it one of the stricter states. Maryland's law is famously the one Linda Tripp violated by recording Monica Lewinsky. Recording without all-party consent in Maryland can carry serious criminal penalties.
Which states are two-party (all-party) consent states?
As of 2026, twelve states require all-party consent to record: California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Montana, Nevada, New Hampshire, Pennsylvania, and Washington. Several are "hybrid" — their rule differs for phone calls versus in-person conversations (Oregon, for example, is one-party for calls but all-party in person). Every other state plus Washington DC follows one-party consent. Because sources vary on the hybrids, treat any borderline state as all-party and get everyone's consent.
What happens on a call between a one-party and a two-party state?
Apply the strictest state's law involved. If you are in a one-party state but the person you are calling is in an all-party state such as California or Maryland, the safe assumption is that all-party consent is required — so inform everyone and get their agreement before recording. Courts have handled interstate cases inconsistently, so the conservative, universally safe practice is to announce the recording and get a verbal yes at the start of any call that might touch an all-party state.
What does call-recording consent have to do with website cookie consent?
They come from the same legal root. California's Invasion of Privacy Act (CIPA) is the all-party wiretapping statute that governs recording a call in California — and it is the exact law plaintiffs' firms now use against websites, arguing that a tracking pixel "intercepts" a visitor's communication without consent. The call-recording version requires everyone's consent before you record; the website version effectively requires the visitor's consent before your trackers fire. Same wiretap-consent principle, two different surfaces.