{ "name": "US rules on reusing call recordings for AI", "title": "US rules on reusing call recordings for AI", "kind": "terms-board", "url": "https://sellcallcenterdatatoai.com/datasets/call-recording-ai-training-law/", "csv": "https://sellcallcenterdatatoai.com/datasets/call-recording-ai-training-law.csv", "markdown": "https://sellcallcenterdatatoai.com/datasets/call-recording-ai-training-law/index.md", "computed_at": "2026-10-28", "license": "https://sellcallcenterdatatoai.com/terms", "headline": "10 US rules that bite when call recordings are reused for AI, read 28 October 2026.", "quotes": [ "10 US rules that bite when call recordings are reused for AI, read 28 October 2026.", "What the rule covers, by rule: recording or intercepting calls 3 of 10, voiceprints and other biometric identifiers 2 of 10, AI-generated voices on calls 1 of 10, changing terms to reuse data for AI 1 of 10, financial customer information 1 of 10, health information 1 of 10, personal information and its sale 1 of 10 (10 rules, read 28 October 2026).", "What it asks before data is reused or passed on, by rule: consent of the person 4 of 10, not stated 2 of 10, notice and a right to opt out 2 of 10, de-identification 1 of 10, clear disclosure 1 of 10 (10 rules, read 28 October 2026).", "Whether a person can sue, by rule: not stated 7 of 10, enforced by a regulator or prosecutor 2 of 10, a private right of action 1 of 10 (10 rules, read 28 October 2026).", "The rule, in its words, by rule: stated 10 of 10 (10 rules, read 28 October 2026)." ], "citation": "\"US rules on reusing call recordings for AI\", updated 2026-10-28, https://sellcallcenterdatatoai.com/datasets/call-recording-ai-training-law/.", "national": { "n": 10, "unit": "rules", "documents": 10, "published_sources": 10, "named_sources": 14 }, "board": { "type": "clauses", "noun": { "one": "rule", "many": "rules" }, "document": { "one": "statute or rule page", "many": "statute and rule pages" }, "fields": [ { "id": "covers", "label": "What the rule covers", "counts": { "financial": 1, "interception": 3, "health": 1, "personal-information": 1, "voiceprints": 2, "ai-voices": 1, "changed-terms": 1 }, "values": [ { "value": "voiceprints", "text": "voiceprints and other biometric identifiers" }, { "value": "interception", "text": "recording or intercepting calls" }, { "value": "personal-information", "text": "personal information and its sale" }, { "value": "health", "text": "health information" }, { "value": "financial", "text": "financial customer information" }, { "value": "ai-voices", "text": "AI-generated voices on calls" }, { "value": "changed-terms", "text": "changing terms to reuse data for AI" } ] }, { "id": "before_reuse", "label": "What it asks before data is reused or passed on", "counts": { "notice-and-opt-out": 2, "consent": 4, "de-identification": 1, "not-stated": 2, "disclosure": 1 }, "values": [ { "value": "consent", "text": "consent of the person" }, { "value": "notice-and-opt-out", "text": "notice and a right to opt out" }, { "value": "de-identification", "text": "de-identification" }, { "value": "disclosure", "text": "clear disclosure" }, { "value": "no-specific-step", "text": "no specific step stated" } ] }, { "id": "private_right", "label": "Whether a person can sue", "counts": { "not-stated": 7, "regulator-only": 2, "private-action": 1 }, "values": [ { "value": "private-action", "text": "a private right of action" }, { "value": "regulator-only", "text": "enforced by a regulator or prosecutor" } ] }, { "id": "clause", "label": "The rule, in its words", "counts": { "stated": 10 }, "values": [ { "value": "stated", "text": "stated" } ], "clause": true } ], "lead": { "type": "count", "field": null, "value": null, "n": 10, "of": 10, "label": "US rules on the register" }, "vendors": [ { "name": "16 CFR Part 313 (GLBA privacy rule)", "answers": { "covers": { "value": "financial", "text": "financial customer information", "documents": [ { "document": "16 CFR Part 313", "url": "https://www.ecfr.gov/current/title-16/chapter-I/subchapter-C/part-313", "value": "financial", "quote": "you may not, directly or through any affiliate, disclose any nonpublic personal information about a consumer to a nonaffiliated third party unless" } ] }, "before_reuse": { "value": "notice-and-opt-out", "text": "notice and a right to opt out", "documents": [ { "document": "16 CFR Part 313", "url": "https://www.ecfr.gov/current/title-16/chapter-I/subchapter-C/part-313", "value": "notice-and-opt-out", "quote": "You have provided to the consumer an opt out notice as required in § 313.7" } ] }, "private_right": { "value": "not-stated", "text": "not stated", "documents": [ { "document": "16 CFR Part 313", "url": "https://www.ecfr.gov/current/title-16/chapter-I/subchapter-C/part-313", "value": "not-stated", "quote": "" } ] }, "clause": { "value": "stated", "text": "you may not, directly or through any affiliate, disclose any nonpublic personal…", "documents": [ { "document": "16 CFR Part 313", "url": "https://www.ecfr.gov/current/title-16/chapter-I/subchapter-C/part-313", "value": "stated", "quote": "you may not, directly or through any affiliate, disclose any nonpublic personal information about a consumer to a nonaffiliated third party unless" } ] } } }, { "name": "18 U.S.C. 2511 (federal Wiretap Act)", "answers": { "covers": { "value": "interception", "text": "recording or intercepting calls", "documents": [ { "document": "18 U.S.C. 2511", "url": "https://www.govinfo.gov/content/pkg/USCODE-2023-title18/html/USCODE-2023-title18-partI-chap119-sec2511.htm", "value": "interception", "quote": "intentionally intercepts, endeavors to intercept, or procures any other person to intercept or endeavor to intercept, any wire, oral, or electronic communication" } ] }, "before_reuse": { "value": "consent", "text": "consent of the person", "documents": [ { "document": "18 U.S.C. 2511", "url": "https://www.govinfo.gov/content/pkg/USCODE-2023-title18/html/USCODE-2023-title18-partI-chap119-sec2511.htm", "value": "consent", "quote": "where such person is a party to the communication or where one of the parties to the communication has given prior consent to such interception" } ] }, "private_right": { "value": "not-stated", "text": "not stated", "documents": [ { "document": "18 U.S.C. 2511", "url": "https://www.govinfo.gov/content/pkg/USCODE-2023-title18/html/USCODE-2023-title18-partI-chap119-sec2511.htm", "value": "not-stated", "quote": "" } ] }, "clause": { "value": "stated", "text": "It shall not be unlawful under this chapter for a person not acting under color of law to…", "documents": [ { "document": "18 U.S.C. 2511", "url": "https://www.govinfo.gov/content/pkg/USCODE-2023-title18/html/USCODE-2023-title18-partI-chap119-sec2511.htm", "value": "stated", "quote": "It shall not be unlawful under this chapter for a person not acting under color of law to intercept a wire, oral, or electronic communication where such person is a party to the communication" } ] } } }, { "name": "45 CFR 164.514 (HIPAA de-identification)", "answers": { "covers": { "value": "health", "text": "health information", "documents": [ { "document": "45 CFR 164.514", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514", "value": "health", "quote": "Health information that does not identify an individual and with respect to which there is no reasonable basis to believe that the information can be used to identify an individual is not individually identifiable health information." } ] }, "before_reuse": { "value": "de-identification", "text": "de-identification", "documents": [ { "document": "45 CFR 164.514", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514", "value": "de-identification", "quote": "The following identifiers of the individual or of relatives, employers, or household members of the individual, are removed" } ] }, "private_right": { "value": "not-stated", "text": "not stated", "documents": [ { "document": "45 CFR 164.514", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514", "value": "not-stated", "quote": "" } ] }, "clause": { "value": "stated", "text": "A covered entity may determine that health information is not individually identifiable…", "documents": [ { "document": "45 CFR 164.514", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514", "value": "stated", "quote": "A covered entity may determine that health information is not individually identifiable health information only if" } ] } } }, { "name": "California Civil Code 1798.120 (CCPA)", "answers": { "covers": { "value": "personal-information", "text": "personal information and its sale", "documents": [ { "document": "Civil Code section 1798.120", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.120", "value": "personal-information", "quote": "A consumer shall have the right, at any time, to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumer’s personal information." } ] }, "before_reuse": { "value": "notice-and-opt-out", "text": "notice and a right to opt out", "documents": [ { "document": "Civil Code section 1798.120", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.120", "value": "notice-and-opt-out", "quote": "shall provide notice to consumers, pursuant to subdivision (a) of Section 1798.135, that this information may be sold or shared and that consumers have the “right to opt out”" } ] }, "private_right": { "value": "not-stated", "text": "not stated", "documents": [ { "document": "Civil Code section 1798.120", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.120", "value": "not-stated", "quote": "" } ] }, "clause": { "value": "stated", "text": "A business to which another business transfers the personal information of a consumer as…", "documents": [ { "document": "Civil Code section 1798.120", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.120", "value": "stated", "quote": "A business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction" } ] } } }, { "name": "California Civil Code 1798.140 (CCPA)", "answers": { "covers": { "value": "voiceprints", "text": "voiceprints and other biometric identifiers", "documents": [ { "document": "Civil Code section 1798.140", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.140", "value": "voiceprints", "quote": "and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted" } ] }, "before_reuse": { "value": "not-stated", "text": "not stated", "documents": [ { "document": "Civil Code section 1798.140", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.140", "value": "not-stated", "quote": "" } ] }, "private_right": { "value": "not-stated", "text": "not stated", "documents": [ { "document": "Civil Code section 1798.140", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.140", "value": "not-stated", "quote": "" } ] }, "clause": { "value": "stated", "text": "a consumer’s personal information by the business to a third party for monetary or other…", "documents": [ { "document": "Civil Code section 1798.140", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.140", "value": "stated", "quote": "a consumer’s personal information by the business to a third party for monetary or other valuable consideration" } ] } } }, { "name": "California Penal Code 632.7", "answers": { "covers": { "value": "interception", "text": "recording or intercepting calls", "documents": [ { "document": "Penal Code section 632.7", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN§ionNum=632.7", "value": "interception", "quote": "intercepts or receives and intentionally records, or assists in the interception or reception and intentional recordation of, a communication transmitted between two cellular radio telephones" } ] }, "before_reuse": { "value": "consent", "text": "consent of the person", "documents": [ { "document": "Penal Code section 632.7", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN§ionNum=632.7", "value": "consent", "quote": "Every person who, without the consent of all of the parties to a communication" } ] }, "private_right": { "value": "regulator-only", "text": "enforced by a regulator or prosecutor", "documents": [ { "document": "Penal Code section 632.7", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN§ionNum=632.7", "value": "regulator-only", "quote": "shall be punished by a fine not exceeding two thousand five hundred dollars ($2,500)" } ] }, "clause": { "value": "stated", "text": "Every person who, without the consent of all of the parties to a communication…", "documents": [ { "document": "Penal Code section 632.7", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN§ionNum=632.7", "value": "stated", "quote": "Every person who, without the consent of all of the parties to a communication, intercepts or receives and intentionally records" } ] } } }, { "name": "California Penal Code 637.2", "answers": { "covers": { "value": "interception", "text": "recording or intercepting calls", "documents": [ { "document": "Penal Code section 637.2", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN§ionNum=637.2", "value": "interception", "quote": "Any person who has been injured by a violation of this chapter may bring an action against the person who committed the violation" } ] }, "before_reuse": { "value": "not-stated", "text": "not stated", "documents": [ { "document": "Penal Code section 637.2", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN§ionNum=637.2", "value": "not-stated", "quote": "" } ] }, "private_right": { "value": "private-action", "text": "a private right of action", "documents": [ { "document": "Penal Code section 637.2", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN§ionNum=637.2", "value": "private-action", "quote": "Five thousand dollars ($5,000) per violation." } ] }, "clause": { "value": "stated", "text": "It is not a necessary prerequisite to an action pursuant to this section that the…", "documents": [ { "document": "Penal Code section 637.2", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN§ionNum=637.2", "value": "stated", "quote": "It is not a necessary prerequisite to an action pursuant to this section that the plaintiff has suffered, or be threatened with, actual damages." } ] } } }, { "name": "FCC Declaratory Ruling 24-17 (TCPA and AI voices)", "answers": { "covers": { "value": "ai-voices", "text": "AI-generated voices on calls", "documents": [ { "document": "FCC 24-17", "url": "https://docs.fcc.gov/public/attachments/FCC-24-17A1.pdf", "value": "ai-voices", "quote": "artificial or prerecorded voice” encompass current AI technologies that generate human voices" } ] }, "before_reuse": { "value": "consent", "text": "consent of the person", "documents": [ { "document": "FCC 24-17", "url": "https://docs.fcc.gov/public/attachments/FCC-24-17A1.pdf", "value": "consent", "quote": "require the prior express consent of the called party to initiate such calls absent an emergency purpose or exemption" } ] }, "private_right": { "value": "not-stated", "text": "not stated", "documents": [ { "document": "FCC 24-17", "url": "https://docs.fcc.gov/public/attachments/FCC-24-17A1.pdf", "value": "not-stated", "quote": "" } ] }, "clause": { "value": "stated", "text": "calls that use such technologies fall under the TCPA and the Commission’s implementing…", "documents": [ { "document": "FCC 24-17", "url": "https://docs.fcc.gov/public/attachments/FCC-24-17A1.pdf", "value": "stated", "quote": "calls that use such technologies fall under the TCPA and the Commission’s implementing rules" } ] } } }, { "name": "FTC Act section 5, as the FTC applies it to changed terms", "answers": { "covers": { "value": "changed-terms", "text": "changing terms to reuse data for AI", "documents": [ { "document": "FTC Office of Technology, 13 February 2024", "url": "https://www.ftc.gov/policy/advocacy-research/tech-at-ftc/2024/02/ai-other-companies-quietly-changing-your-terms-service-could-be-unfair-or-deceptive", "value": "changed-terms", "quote": "to start sharing consumers’ data with third parties or using that data for AI training—and to only inform consumers of this change through a surreptitious, retroactive amendment" } ] }, "before_reuse": { "value": "disclosure", "text": "clear disclosure", "documents": [ { "document": "FTC Office of Technology, 13 February 2024", "url": "https://www.ftc.gov/policy/advocacy-research/tech-at-ftc/2024/02/ai-other-companies-quietly-changing-your-terms-service-could-be-unfair-or-deceptive", "value": "disclosure", "quote": "any firm that reneges on its user privacy commitments risks running afoul of the law" } ] }, "private_right": { "value": "regulator-only", "text": "enforced by a regulator or prosecutor", "documents": [ { "document": "FTC Office of Technology, 13 February 2024", "url": "https://www.ftc.gov/policy/advocacy-research/tech-at-ftc/2024/02/ai-other-companies-quietly-changing-your-terms-service-could-be-unfair-or-deceptive", "value": "regulator-only", "quote": "the FTC has a long history of challenging deceptive and unfair practices in connection to a company’s privacy policy" } ] }, "clause": { "value": "stated", "text": "It may be unfair or deceptive for a company to adopt more permissive data practices", "documents": [ { "document": "FTC Office of Technology, 13 February 2024", "url": "https://www.ftc.gov/policy/advocacy-research/tech-at-ftc/2024/02/ai-other-companies-quietly-changing-your-terms-service-could-be-unfair-or-deceptive", "value": "stated", "quote": "It may be unfair or deceptive for a company to adopt more permissive data practices" } ] } } }, { "name": "Washington RCW 19.375.020", "answers": { "covers": { "value": "voiceprints", "text": "voiceprints and other biometric identifiers", "documents": [ { "document": "RCW 19.375.020", "url": "https://app.leg.wa.gov/RCW/default.aspx?cite=19.375.020", "value": "voiceprints", "quote": "A person may not enroll a biometric identifier in a database for a commercial purpose" } ] }, "before_reuse": { "value": "consent", "text": "consent of the person", "documents": [ { "document": "RCW 19.375.020", "url": "https://app.leg.wa.gov/RCW/default.aspx?cite=19.375.020", "value": "consent", "quote": "without first providing notice, obtaining consent, or providing a mechanism to prevent the subsequent use of a biometric identifier for a commercial purpose" } ] }, "private_right": { "value": "not-stated", "text": "not stated", "documents": [ { "document": "RCW 19.375.020", "url": "https://app.leg.wa.gov/RCW/default.aspx?cite=19.375.020", "value": "not-stated", "quote": "" } ] }, "clause": { "value": "stated", "text": "A person may not enroll a biometric identifier in a database for a commercial purpose…", "documents": [ { "document": "RCW 19.375.020", "url": "https://app.leg.wa.gov/RCW/default.aspx?cite=19.375.020", "value": "stated", "quote": "A person may not enroll a biometric identifier in a database for a commercial purpose, without first providing notice, obtaining consent" } ] } } } ] }, "subject_kind": "rule", "rows": [ { "subject": "16 CFR Part 313 (GLBA privacy rule)", "url": "https://www.ecfr.gov/current/title-16/chapter-I/subchapter-C/part-313", "document": "16 CFR Part 313", "question": "covers", "answer": "financial", "answer_text": "financial customer information", "status": "stated", "retrieved_at": "2026-10-08", "quote": "you may not, directly or through any affiliate, disclose any nonpublic personal information about a consumer to a nonaffiliated third party unless", "text_sha256": "546b4ac2b4cc8fd6a732294157270ba9aaa63b2688c7cbd5bb696a008e46805a" }, { "subject": "16 CFR Part 313 (GLBA privacy rule)", "url": "https://www.ecfr.gov/current/title-16/chapter-I/subchapter-C/part-313", "document": "16 CFR Part 313", "question": "before_reuse", "answer": "notice-and-opt-out", "answer_text": "notice and a right to opt out", "status": "stated", "retrieved_at": "2026-10-08", "quote": "You have provided to the consumer an opt out notice as required in § 313.7", "text_sha256": "546b4ac2b4cc8fd6a732294157270ba9aaa63b2688c7cbd5bb696a008e46805a" }, { "subject": "16 CFR Part 313 (GLBA privacy rule)", "url": "https://www.ecfr.gov/current/title-16/chapter-I/subchapter-C/part-313", "document": "16 CFR Part 313", "question": "private_right", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-10-08", "quote": "No answer on the statute or rule page, which ran to 107,343 characters when read on 2026-10-08.", "text_sha256": "546b4ac2b4cc8fd6a732294157270ba9aaa63b2688c7cbd5bb696a008e46805a" }, { "subject": "16 CFR Part 313 (GLBA privacy rule)", "url": "https://www.ecfr.gov/current/title-16/chapter-I/subchapter-C/part-313", "document": "16 CFR Part 313", "question": "clause", "answer": "stated", "answer_text": "you may not, directly or through any affiliate, disclose any nonpublic personal…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "you may not, directly or through any affiliate, disclose any nonpublic personal information about a consumer to a nonaffiliated third party unless", "text_sha256": "546b4ac2b4cc8fd6a732294157270ba9aaa63b2688c7cbd5bb696a008e46805a" }, { "subject": "18 U.S.C. 2511 (federal Wiretap Act)", "url": "https://www.govinfo.gov/content/pkg/USCODE-2023-title18/html/USCODE-2023-title18-partI-chap119-sec2511.htm", "document": "18 U.S.C. 2511", "question": "covers", "answer": "interception", "answer_text": "recording or intercepting calls", "status": "stated", "retrieved_at": "2026-10-24", "quote": "intentionally intercepts, endeavors to intercept, or procures any other person to intercept or endeavor to intercept, any wire, oral, or electronic communication", "text_sha256": "31b101f1cb94b94d68638daa9da3efa8479de4eb6ec2d53f27b1318420ffa3f2" }, { "subject": "18 U.S.C. 2511 (federal Wiretap Act)", "url": "https://www.govinfo.gov/content/pkg/USCODE-2023-title18/html/USCODE-2023-title18-partI-chap119-sec2511.htm", "document": "18 U.S.C. 2511", "question": "before_reuse", "answer": "consent", "answer_text": "consent of the person", "status": "stated", "retrieved_at": "2026-10-24", "quote": "where such person is a party to the communication or where one of the parties to the communication has given prior consent to such interception", "text_sha256": "31b101f1cb94b94d68638daa9da3efa8479de4eb6ec2d53f27b1318420ffa3f2" }, { "subject": "18 U.S.C. 2511 (federal Wiretap Act)", "url": "https://www.govinfo.gov/content/pkg/USCODE-2023-title18/html/USCODE-2023-title18-partI-chap119-sec2511.htm", "document": "18 U.S.C. 2511", "question": "private_right", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-10-24", "quote": "No answer on the statute or rule page, which ran to 28,101 characters when read on 2026-10-24.", "text_sha256": "31b101f1cb94b94d68638daa9da3efa8479de4eb6ec2d53f27b1318420ffa3f2" }, { "subject": "18 U.S.C. 2511 (federal Wiretap Act)", "url": "https://www.govinfo.gov/content/pkg/USCODE-2023-title18/html/USCODE-2023-title18-partI-chap119-sec2511.htm", "document": "18 U.S.C. 2511", "question": "clause", "answer": "stated", "answer_text": "It shall not be unlawful under this chapter for a person not acting under color of law to…", "status": "stated", "retrieved_at": "2026-10-24", "quote": "It shall not be unlawful under this chapter for a person not acting under color of law to intercept a wire, oral, or electronic communication where such person is a party to the communication", "text_sha256": "31b101f1cb94b94d68638daa9da3efa8479de4eb6ec2d53f27b1318420ffa3f2" }, { "subject": "45 CFR 164.514 (HIPAA de-identification)", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514", "document": "45 CFR 164.514", "question": "covers", "answer": "health", "answer_text": "health information", "status": "stated", "retrieved_at": "2026-10-22", "quote": "Health information that does not identify an individual and with respect to which there is no reasonable basis to believe that the information can be used to identify an individual is not individually identifiable health information.", "text_sha256": "3e3a54b6d8fa6be22d0d070d3d705675f1c32987345343f7adeca7551a3ec83b" }, { "subject": "45 CFR 164.514 (HIPAA de-identification)", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514", "document": "45 CFR 164.514", "question": "before_reuse", "answer": "de-identification", "answer_text": "de-identification", "status": "stated", "retrieved_at": "2026-10-22", "quote": "The following identifiers of the individual or of relatives, employers, or household members of the individual, are removed", "text_sha256": "3e3a54b6d8fa6be22d0d070d3d705675f1c32987345343f7adeca7551a3ec83b" }, { "subject": "45 CFR 164.514 (HIPAA de-identification)", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514", "document": "45 CFR 164.514", "question": "private_right", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-10-22", "quote": "No answer on the statute or rule page, which ran to 19,506 characters when read on 2026-10-22.", "text_sha256": "3e3a54b6d8fa6be22d0d070d3d705675f1c32987345343f7adeca7551a3ec83b" }, { "subject": "45 CFR 164.514 (HIPAA de-identification)", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514", "document": "45 CFR 164.514", "question": "clause", "answer": "stated", "answer_text": "A covered entity may determine that health information is not individually identifiable…", "status": "stated", "retrieved_at": "2026-10-22", "quote": "A covered entity may determine that health information is not individually identifiable health information only if", "text_sha256": "3e3a54b6d8fa6be22d0d070d3d705675f1c32987345343f7adeca7551a3ec83b" }, { "subject": "California Civil Code 1798.120 (CCPA)", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.120", "document": "Civil Code section 1798.120", "question": "covers", "answer": "personal-information", "answer_text": "personal information and its sale", "status": "stated", "retrieved_at": "2026-10-08", "quote": "A consumer shall have the right, at any time, to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumer’s personal information.", "text_sha256": "5abb921a8cb0f58568061ffba0573718b226c5e64dce22ba67be5836462cea56" }, { "subject": "California Civil Code 1798.120 (CCPA)", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.120", "document": "Civil Code section 1798.120", "question": "before_reuse", "answer": "notice-and-opt-out", "answer_text": "notice and a right to opt out", "status": "stated", "retrieved_at": "2026-10-08", "quote": "shall provide notice to consumers, pursuant to subdivision (a) of Section 1798.135, that this information may be sold or shared and that consumers have the “right to opt out”", "text_sha256": "5abb921a8cb0f58568061ffba0573718b226c5e64dce22ba67be5836462cea56" }, { "subject": "California Civil Code 1798.120 (CCPA)", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.120", "document": "Civil Code section 1798.120", "question": "private_right", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-10-08", "quote": "No answer on the statute or rule page, which ran to 6,371 characters when read on 2026-10-08.", "text_sha256": "5abb921a8cb0f58568061ffba0573718b226c5e64dce22ba67be5836462cea56" }, { "subject": "California Civil Code 1798.120 (CCPA)", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.120", "document": "Civil Code section 1798.120", "question": "clause", "answer": "stated", "answer_text": "A business to which another business transfers the personal information of a consumer as…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "A business to which another business transfers the personal information of a consumer as an asset that is part of a merger, acquisition, bankruptcy, or other transaction", "text_sha256": "5abb921a8cb0f58568061ffba0573718b226c5e64dce22ba67be5836462cea56" }, { "subject": "California Civil Code 1798.140 (CCPA)", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.140", "document": "Civil Code section 1798.140", "question": "covers", "answer": "voiceprints", "answer_text": "voiceprints and other biometric identifiers", "status": "stated", "retrieved_at": "2026-10-08", "quote": "and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted", "text_sha256": "e3c6e568a063521dc4d2277af4c0e193823b014d89f6df49ee26845afb13a82b" }, { "subject": "California Civil Code 1798.140 (CCPA)", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.140", "document": "Civil Code section 1798.140", "question": "before_reuse", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-10-08", "quote": "No answer on the statute or rule page, which ran to 36,374 characters when read on 2026-10-08.", "text_sha256": "e3c6e568a063521dc4d2277af4c0e193823b014d89f6df49ee26845afb13a82b" }, { "subject": "California Civil Code 1798.140 (CCPA)", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.140", "document": "Civil Code section 1798.140", "question": "private_right", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-10-08", "quote": "No answer on the statute or rule page, which ran to 36,374 characters when read on 2026-10-08.", "text_sha256": "e3c6e568a063521dc4d2277af4c0e193823b014d89f6df49ee26845afb13a82b" }, { "subject": "California Civil Code 1798.140 (CCPA)", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.140", "document": "Civil Code section 1798.140", "question": "clause", "answer": "stated", "answer_text": "a consumer’s personal information by the business to a third party for monetary or other…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "a consumer’s personal information by the business to a third party for monetary or other valuable consideration", "text_sha256": "e3c6e568a063521dc4d2277af4c0e193823b014d89f6df49ee26845afb13a82b" }, { "subject": "California Penal Code 632.7", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN§ionNum=632.7", "document": "Penal Code section 632.7", "question": "covers", "answer": "interception", "answer_text": "recording or intercepting calls", "status": "stated", "retrieved_at": "2026-10-28", "quote": "intercepts or receives and intentionally records, or assists in the interception or reception and intentional recordation of, a communication transmitted between two cellular radio telephones", "text_sha256": "0fe5ceda0c0a6db78fafb2c6a88b6d1c5e849dcd8d22ed10026a1407335744c5" }, { "subject": "California Penal Code 632.7", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN§ionNum=632.7", "document": "Penal Code section 632.7", "question": "before_reuse", "answer": "consent", "answer_text": "consent of the person", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Every person who, without the consent of all of the parties to a communication", "text_sha256": "0fe5ceda0c0a6db78fafb2c6a88b6d1c5e849dcd8d22ed10026a1407335744c5" }, { "subject": "California Penal Code 632.7", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN§ionNum=632.7", "document": "Penal Code section 632.7", "question": "private_right", "answer": "regulator-only", "answer_text": "enforced by a regulator or prosecutor", "status": "stated", "retrieved_at": "2026-10-28", "quote": "shall be punished by a fine not exceeding two thousand five hundred dollars ($2,500)", "text_sha256": "0fe5ceda0c0a6db78fafb2c6a88b6d1c5e849dcd8d22ed10026a1407335744c5" }, { "subject": "California Penal Code 632.7", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN§ionNum=632.7", "document": "Penal Code section 632.7", "question": "clause", "answer": "stated", "answer_text": "Every person who, without the consent of all of the parties to a communication…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Every person who, without the consent of all of the parties to a communication, intercepts or receives and intentionally records", "text_sha256": "0fe5ceda0c0a6db78fafb2c6a88b6d1c5e849dcd8d22ed10026a1407335744c5" }, { "subject": "California Penal Code 637.2", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN§ionNum=637.2", "document": "Penal Code section 637.2", "question": "covers", "answer": "interception", "answer_text": "recording or intercepting calls", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Any person who has been injured by a violation of this chapter may bring an action against the person who committed the violation", "text_sha256": "73d9e935e6cd52c35953ae30c1328dfa5b7dd821594c438e1b18a7a5d3b3f23f" }, { "subject": "California Penal Code 637.2", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN§ionNum=637.2", "document": "Penal Code section 637.2", "question": "before_reuse", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-10-28", "quote": "No answer on the statute or rule page, which ran to 1,749 characters when read on 2026-10-28.", "text_sha256": "73d9e935e6cd52c35953ae30c1328dfa5b7dd821594c438e1b18a7a5d3b3f23f" }, { "subject": "California Penal Code 637.2", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN§ionNum=637.2", "document": "Penal Code section 637.2", "question": "private_right", "answer": "private-action", "answer_text": "a private right of action", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Five thousand dollars ($5,000) per violation.", "text_sha256": "73d9e935e6cd52c35953ae30c1328dfa5b7dd821594c438e1b18a7a5d3b3f23f" }, { "subject": "California Penal Code 637.2", "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN§ionNum=637.2", "document": "Penal Code section 637.2", "question": "clause", "answer": "stated", "answer_text": "It is not a necessary prerequisite to an action pursuant to this section that the…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "It is not a necessary prerequisite to an action pursuant to this section that the plaintiff has suffered, or be threatened with, actual damages.", "text_sha256": "73d9e935e6cd52c35953ae30c1328dfa5b7dd821594c438e1b18a7a5d3b3f23f" }, { "subject": "FCC Declaratory Ruling 24-17 (TCPA and AI voices)", "url": "https://docs.fcc.gov/public/attachments/FCC-24-17A1.pdf", "document": "FCC 24-17", "question": "covers", "answer": "ai-voices", "answer_text": "AI-generated voices on calls", "status": "stated", "retrieved_at": "2026-10-28", "quote": "artificial or prerecorded voice” encompass current AI technologies that generate human voices", "text_sha256": "182b99336d0e77b412e23e4b92e4621e203c0826ba4d908e8c7551df082bee86" }, { "subject": "FCC Declaratory Ruling 24-17 (TCPA and AI voices)", "url": "https://docs.fcc.gov/public/attachments/FCC-24-17A1.pdf", "document": "FCC 24-17", "question": "before_reuse", "answer": "consent", "answer_text": "consent of the person", "status": "stated", "retrieved_at": "2026-10-28", "quote": "require the prior express consent of the called party to initiate such calls absent an emergency purpose or exemption", "text_sha256": "182b99336d0e77b412e23e4b92e4621e203c0826ba4d908e8c7551df082bee86" }, { "subject": "FCC Declaratory Ruling 24-17 (TCPA and AI voices)", "url": "https://docs.fcc.gov/public/attachments/FCC-24-17A1.pdf", "document": "FCC 24-17", "question": "private_right", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-10-28", "quote": "No answer on the statute or rule page, which ran to 23,748 characters when read on 2026-10-28.", "text_sha256": "182b99336d0e77b412e23e4b92e4621e203c0826ba4d908e8c7551df082bee86" }, { "subject": "FCC Declaratory Ruling 24-17 (TCPA and AI voices)", "url": "https://docs.fcc.gov/public/attachments/FCC-24-17A1.pdf", "document": "FCC 24-17", "question": "clause", "answer": "stated", "answer_text": "calls that use such technologies fall under the TCPA and the Commission’s implementing…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "calls that use such technologies fall under the TCPA and the Commission’s implementing rules", "text_sha256": "182b99336d0e77b412e23e4b92e4621e203c0826ba4d908e8c7551df082bee86" }, { "subject": "FTC Act section 5, as the FTC applies it to changed terms", "url": "https://www.ftc.gov/policy/advocacy-research/tech-at-ftc/2024/02/ai-other-companies-quietly-changing-your-terms-service-could-be-unfair-or-deceptive", "document": "FTC Office of Technology, 13 February 2024", "question": "covers", "answer": "changed-terms", "answer_text": "changing terms to reuse data for AI", "status": "stated", "retrieved_at": "2026-10-22", "quote": "to start sharing consumers’ data with third parties or using that data for AI training—and to only inform consumers of this change through a surreptitious, retroactive amendment", "text_sha256": "b931f36ab1c1fdb1bd4a4b0c7655f673fb1e6f436d7ef153057e1054833032a7" }, { "subject": "FTC Act section 5, as the FTC applies it to changed terms", "url": "https://www.ftc.gov/policy/advocacy-research/tech-at-ftc/2024/02/ai-other-companies-quietly-changing-your-terms-service-could-be-unfair-or-deceptive", "document": "FTC Office of Technology, 13 February 2024", "question": "before_reuse", "answer": "disclosure", "answer_text": "clear disclosure", "status": "stated", "retrieved_at": "2026-10-22", "quote": "any firm that reneges on its user privacy commitments risks running afoul of the law", "text_sha256": "b931f36ab1c1fdb1bd4a4b0c7655f673fb1e6f436d7ef153057e1054833032a7" }, { "subject": "FTC Act section 5, as the FTC applies it to changed terms", "url": "https://www.ftc.gov/policy/advocacy-research/tech-at-ftc/2024/02/ai-other-companies-quietly-changing-your-terms-service-could-be-unfair-or-deceptive", "document": "FTC Office of Technology, 13 February 2024", "question": "private_right", "answer": "regulator-only", "answer_text": "enforced by a regulator or prosecutor", "status": "stated", "retrieved_at": "2026-10-22", "quote": "the FTC has a long history of challenging deceptive and unfair practices in connection to a company’s privacy policy", "text_sha256": "b931f36ab1c1fdb1bd4a4b0c7655f673fb1e6f436d7ef153057e1054833032a7" }, { "subject": "FTC Act section 5, as the FTC applies it to changed terms", "url": "https://www.ftc.gov/policy/advocacy-research/tech-at-ftc/2024/02/ai-other-companies-quietly-changing-your-terms-service-could-be-unfair-or-deceptive", "document": "FTC Office of Technology, 13 February 2024", "question": "clause", "answer": "stated", "answer_text": "It may be unfair or deceptive for a company to adopt more permissive data practices", "status": "stated", "retrieved_at": "2026-10-22", "quote": "It may be unfair or deceptive for a company to adopt more permissive data practices", "text_sha256": "b931f36ab1c1fdb1bd4a4b0c7655f673fb1e6f436d7ef153057e1054833032a7" }, { "subject": "Washington RCW 19.375.020", "url": "https://app.leg.wa.gov/RCW/default.aspx?cite=19.375.020", "document": "RCW 19.375.020", "question": "covers", "answer": "voiceprints", "answer_text": "voiceprints and other biometric identifiers", "status": "stated", "retrieved_at": "2026-10-28", "quote": "A person may not enroll a biometric identifier in a database for a commercial purpose", "text_sha256": "cc228887d2801d020ac0329878ffe39899d082d592d867ac85deddbca7b55679" }, { "subject": "Washington RCW 19.375.020", "url": "https://app.leg.wa.gov/RCW/default.aspx?cite=19.375.020", "document": "RCW 19.375.020", "question": "before_reuse", "answer": "consent", "answer_text": "consent of the person", "status": "stated", "retrieved_at": "2026-10-28", "quote": "without first providing notice, obtaining consent, or providing a mechanism to prevent the subsequent use of a biometric identifier for a commercial purpose", "text_sha256": "cc228887d2801d020ac0329878ffe39899d082d592d867ac85deddbca7b55679" }, { "subject": "Washington RCW 19.375.020", "url": "https://app.leg.wa.gov/RCW/default.aspx?cite=19.375.020", "document": "RCW 19.375.020", "question": "private_right", "answer": "not-stated", "answer_text": "not stated", "status": "not-stated", "retrieved_at": "2026-10-28", "quote": "No answer on the statute or rule page, which ran to 4,259 characters when read on 2026-10-28.", "text_sha256": "cc228887d2801d020ac0329878ffe39899d082d592d867ac85deddbca7b55679" }, { "subject": "Washington RCW 19.375.020", "url": "https://app.leg.wa.gov/RCW/default.aspx?cite=19.375.020", "document": "RCW 19.375.020", "question": "clause", "answer": "stated", "answer_text": "A person may not enroll a biometric identifier in a database for a commercial purpose…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "A person may not enroll a biometric identifier in a database for a commercial purpose, without first providing notice, obtaining consent", "text_sha256": "cc228887d2801d020ac0329878ffe39899d082d592d867ac85deddbca7b55679" } ], "sources": [ { "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN§ionNum=632.7", "label": "California Penal Code 632.7 (recording cellular and cordless calls)", "license": "quoted for reporting from the publisher's US federal and state statutes, regulations and regulators guidance", "class": "primary-government", "status": "read" }, { "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN§ionNum=637.2", "label": "California Penal Code 637.2 (private right of action)", "license": "quoted for reporting from the publisher's US federal and state statutes, regulations and regulators guidance", "class": "primary-government", "status": "read" }, { "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.140", "label": "California Civil Code 1798.140 (CCPA definitions: sale, biometric information, personal information)", "license": "quoted for reporting from the publisher's US federal and state statutes, regulations and regulators guidance", "class": "primary-government", "status": "read" }, { "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.120", "label": "California Civil Code 1798.120 (right to opt out of sale or sharing)", "license": "quoted for reporting from the publisher's US federal and state statutes, regulations and regulators guidance", "class": "primary-government", "status": "read" }, { "url": "https://cppa.ca.gov/regulations/", "label": "California Privacy Protection Agency, laws and regulations", "license": "quoted for reporting from the publisher's US federal and state statutes, regulations and regulators guidance", "class": "primary-government", "status": "not-terms", "why": "the California Privacy Protection Agency's index of laws and rulemakings; the rules themselves are read from the Civil Code sections recorded here" }, { "url": "https://app.leg.wa.gov/RCW/default.aspx?cite=19.375.020", "label": "RCW 19.375.020 (Washington biometric identifiers: enrollment, retention, use)", "license": "quoted for reporting from the publisher's US federal and state statutes, regulations and regulators guidance", "class": "primary-government", "status": "read" }, { "url": "https://www.govinfo.gov/content/pkg/USCODE-2023-title18/html/USCODE-2023-title18-partI-chap119-sec2511.htm", "label": "18 U.S.C. 2511 (interception and disclosure of wire, oral or electronic communications)", "license": "quoted for reporting from the publisher's US federal and state statutes, regulations and regulators guidance", "class": "primary-government", "status": "read" }, { "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514", "label": "45 CFR 164.514 (HIPAA de-identification of protected health information)", "license": "quoted for reporting from the publisher's US federal and state statutes, regulations and regulators guidance", "class": "primary-government", "status": "read" }, { "url": "https://www.hhs.gov/hipaa/for-professionals/special-topics/de-identification/index.html", "label": "HHS, guidance on de-identification of protected health information", "license": "quoted for reporting from the publisher's US federal and state statutes, regulations and regulators guidance", "class": "primary-government", "status": "not-terms", "why": "HHS guidance explaining 45 CFR 164.514, which is recorded from its own text; guidance is not a separate rule" }, { "url": "https://www.ecfr.gov/current/title-16/chapter-I/subchapter-C/part-313", "label": "16 CFR Part 313 (Gramm-Leach-Bliley privacy of consumer financial information)", "license": "quoted for reporting from the publisher's US federal and state statutes, regulations and regulators guidance", "class": "primary-government", "status": "read" }, { "url": "https://www.ftc.gov/policy/advocacy-research/tech-at-ftc/2024/02/ai-other-companies-quietly-changing-your-terms-service-could-be-unfair-or-deceptive", "label": "FTC, quietly changing terms of service to use data for AI could be unfair or deceptive", "license": "quoted for reporting from the publisher's US federal and state statutes, regulations and regulators guidance", "class": "primary-government", "status": "read" }, { "url": "https://docs.fcc.gov/public/attachments/FCC-24-17A1.pdf", "label": "FCC 24-17, declaratory ruling: AI-generated voices are artificial under the TCPA", "license": "quoted for reporting from the publisher's US federal and state statutes, regulations and regulators guidance", "class": "primary-government", "status": "read" }, { "url": "https://www.fcc.gov/document/fcc-makes-ai-generated-voices-robocalls-illegal", "label": "FCC, AI-generated voices in robocalls", "license": "quoted for reporting from the publisher's US federal and state statutes, regulations and regulators guidance", "class": "primary-government", "status": "not-terms", "why": "the FCC news release index for Declaratory Ruling 24-17, which is recorded from the ruling itself" }, { "url": "https://leg.colorado.gov/bills/sb24-205", "label": "Colorado SB24-205, consumer protections for artificial intelligence", "license": "quoted for reporting from the publisher's US federal and state statutes, regulations and regulators guidance", "class": "primary-government", "status": "not-terms", "why": "Colorado SB24-205 governs algorithmic discrimination by high-risk AI systems; it sets no rule on reusing call recordings as training data" } ], "methodology": "Each rule's own US federal and state statutes, regulations and regulators guidance were read through estate-fetch and stored whole (sha256 on every row). For every statute or rule page, four questions were answered from its own words: what the rule covers, what it asks before data is reused or passed on, whether a person can sue, the rule, in its words. Every stated answer carries the sentence it rests on, checked against the stored text; 'not stated' means the statute or rule page read does not address the question. A rule with several statute and rule pages reads 'varies' where they disagree. 10 rules, 10 statute and rule pages.", "embed": "
10 US rules that bite when call recordings are reused for AI, read 28 October 2026.
US rules on reusing call recordings for AI, sellcallcenterdatatoai.com
" }