Voice, consent and the statutes
Voiceprint biometric law for a call center selling its data
Updated
A recorded voice can be personal information, a biometric identifier and an intercepted communication all at once. These are the US rules on our register that decide which of those it is for your archive.
When a voice recording becomes biometric
California's CCPA defines biometric information to include voice recordings from which an identifier template such as a voiceprint can be extracted, and treats releasing personal information to a third party for value as a sale.
Source: US rules on reusing call recordings for AI
Notice and consent before a voice goes into a database
Washington's RCW 19.375.020 requires notice, consent or a way to stop later commercial use before a biometric identifier is enrolled in a database for a commercial purpose.
Source: US rules on reusing call recordings for AI
One-party and all-party consent
The federal Wiretap Act at 18 U.S.C. 2511 allows interception where one party consents; California Penal Code 632.7 asks for the consent of all parties to a cellular call.
Source: US rules on reusing call recordings for AI
Health and financial calls
A healthcare center's calls fall under the HIPAA de-identification standard at 45 CFR 164.514, which removes names and other listed identifiers; a lender's fall under 16 CFR Part 313, which requires an opt-out notice before sharing with a nonaffiliated third party.