Do You Need Consent to Record Insurance Sales Calls?

Yes, in most cases you need at least one party's consent. But in about 11 states, you need everyone on the line to agree. That includes California, Florida, Illinois, and Washington. Get this wrong and it's not a slap on the wrist. Civil penalties. In some states, criminal exposure too.

I've spent enough time around call centers and agencies to know this is one of those compliance questions people think they understand until someone asks them to prove it. Knowing the law is one problem. Building a process that actually holds up when a regulator or plaintiff's attorney comes asking? That's a different problem entirely.

The two-party consent states nobody thinks about until it's too late

Federal law sets a pretty low bar. Under 18 U.S.C. § 2511, only one party to a call needs to know it's being recorded. If you're on the call and you know it's recorded, that satisfies federal law. Simple enough.

But states don't have to follow the federal floor. About 11 of them don't. California, Florida, Illinois, Washington, and a handful of others require all parties to consent before a call gets recorded. Miss that step and you've potentially violated a wiretapping or eavesdropping statute, not just some marketing best practice.

In practice, an agency operating nationally needs to know where their prospect is sitting, not just where the agent is sitting. A call center in Texas (one-party state) calling a consumer in California (two-party state) has to follow California's rule, because that's where the stricter law applies. Plenty of agencies get tripped up here because they assume their own state's rule governs the whole call. It doesn't. The consumer's location usually wins.

One blunt takeaway: know your states before you know your script.

Does saying "this call may be recorded" cover you legally?

Not always. A verbal disclosure is a good start, but in strict two-party consent states, regulators and courts may look for actual acknowledgment, not just a disclosure followed by silence. Documenting that acknowledgment matters as much as the disclosure itself.

I get why agents assume the standard disclaimer is enough. It's on every call, every industry, every day. You hear it before you talk to your bank, your cable company, your doctor's office. But "this call may be recorded for quality assurance" is a passive statement. It tells the person recording is happening. It doesn't prove they agreed to it.

In a genuine two-party consent state, the safer play is to get an actual response. Something like, "Do you consent to this call being recorded?" followed by a "yes" captured in the recording itself. That's real acknowledgment, not a disclosure floating in the air. If a dispute ever comes up, a consumer complaint, a chargeback, or worse, a lawsuit, you want the recording to show consent, not just disclosure.

Agencies that rely purely on a scripted disclaimer without capturing a response are betting no one ever challenges it. Some years that bet pays off. Some years it doesn't, and fines for a wiretapping violation can run from a few hundred dollars to tens of thousands, depending on the state and whether it's a first offense or a pattern.

Medicare calls play by a different rulebook entirely

If you sell Medicare Advantage or Part D plans, this isn't optional at all. CMS requires agents and brokers to record all sales calls, full stop, a rule in effect since 2022. You also have to retain those recordings, generally for 10 years under the Medicare Marketing Guidelines.

A lot of agents mix up "consent" with "requirement" here. CMS doesn't care whether you're in a one-party or two-party state for purposes of whether you must record. You must record, period. Where state consent law comes in is how you record it. You still need to disclose (and in two-party states, get actual consent), even though CMS is mandating the recording exist in the first place.

So you've got two layers stacked on each other for Medicare calls. Layer one: CMS says record and retain for a decade. Layer two: state law says how you notify or get agreement from the consumer before or during that recording. Skipping the state-law layer because "CMS makes me record it anyway" won't get you off the hook. Both apply at once, and agencies treating CMS's mandate as a blanket excuse from state consent rules are asking for trouble.

The NAIC has weighed in too, though not with binding recording rules. Their model guidance pushes for transparency in telephonic sales generally, but the actual consent mechanics stay at the state level. NAIC sets the tone. States write the law.

Life and final expense calls: less regulation, more risk of assuming wrong

Unlike Medicare, there's no federal mandate requiring insurers or agents to record life insurance or final expense sales calls. So your recording and consent obligations here come down almost entirely to state wiretapping law and whatever your carrier or agency has built into its own compliance policy.

That actually makes life and final expense trickier in a different way. With Medicare, at least CMS is watching and the rule is spelled out. With life and final expense, you're relying on your own agency's policy to fill the gap, and not every agency has a clear one. I've seen agencies with detailed Medicare compliance manuals and absolutely nothing written down for their final expense team, even though the same California or Illinois consumer could end up on either type of call.

If you're building or buying call generation for life or final expense leads, ask direct questions about how consent gets handled before you plug into a vendor's inbound stream. Where do those calls originate? What script triggers the recording? Is there an actual captured "yes," or just a disclaimer running in the background? A vendor who can't answer that in one sentence hasn't thought about it enough.

If you're more interested in building your own inbound call volume instead of leaning on a vendor's compliance practices, that's a separate conversation about how pay-per-call marketing works from the ground up. I wrote The Pay Per Call Revolution for agents and agencies who want to understand that side of the business instead of just buying whatever shows up in their queue.

FAQ

Do I need written consent to record an insurance sales call, or is verbal enough? Verbal consent is generally enough under both federal and most state laws, as long as it's clearly captured on the recording itself. Written consent isn't typically required unless your state or carrier policy specifically demands it.

What happens if I record a call without proper consent in a two-party state? You risk a civil or criminal violation of that state's wiretapping statute. Penalties vary by state and history of violations, from a few hundred dollars to tens of thousands.

Does CMS's recording requirement apply to final expense or life insurance calls? No. CMS's mandatory recording and 10-year retention rule applies specifically to Medicare Advantage and Part D sales calls. Life and final expense calls fall under state law and individual agency policy instead.

If my agency is in a one-party state but my customer is in California, whose law applies? Generally, the consumer's state law applies, since California is a two-party consent state and offers more protection. Agencies making outbound calls need to track where the person on the other end is located, not just their own office.

How long do I need to keep insurance sales call recordings? For Medicare Advantage and Part D calls, CMS requires 10 years of retention. For life and final expense calls, there's no federal retention standard, so check your state requirements and your carrier or agency's own policy.