All articles
Compliance
Consent, Recording Disclosures, and TCPA — A Plain-English Primer
What you actually need to capture, store, and prove for AI voice calls in the US, EU, and Canada — without a 30-page legal memo.
Hannah Brooks, Compliance Lead·March 19, 2026· 8 min read
🛡️
The three things every call needs
- Disclosure that the call is recorded and the agent is AI.
- Consent capture, stored for at least 12 months.
- DNC scrubbing at queue time and again at dial time.
US: TCPA
Prior express written consent for autodialed calls to wireless numbers. AI counts as autodialed.
EU: GDPR + ePrivacy
Lawful basis (usually contract or legitimate interest), purpose limitation, and a 72-hour breach window. Recording requires explicit consent in most member states.
Canada: CASL + CRTC
Express or implied consent, with proof. CRTC unsolicited-telecommunications rules apply to outbound dialing.