Is It Legal to Use an AI Receptionist in the USA? (2026 Guide)

The short answer

Yes. Using AI to answer your business's incoming calls is legal across the USA. The rules that matter are consent for outbound calls and texts under the TCPA (the FCC confirmed in 2024 that AI voices count as 'artificial' voices), all-party consent for call recording in about a dozen states, A2P 10DLC registration for business texting, HIPAA if patient information is involved, and honest AI disclosure, which some states, such as California and Utah, specifically require.

Inbound calls and outbound calls follow different rules

Most of the legal risk sits with outbound calls and texts, not with answering the phone. When a customer calls you, an AI receptionist answering, helping and booking is like any other answering service. When your business calls or texts people, consent rules apply.

• Inbound (customer calls you): legal everywhere in the US. Focus on honest disclosure, accurate information, recording consent where needed and data protection.
• Outbound informational calls (for example appointment reminders to existing customers): generally need prior express consent, which customers usually give when they provide their number for that purpose.
• Outbound marketing calls or texts with AI voices: need prior express written consent under the TCPA.

The TCPA and the FCC's 2024 ruling on AI voices

In February 2024, the Federal Communications Commission confirmed that calls using AI-generated voices are covered by the Telephone Consumer Protection Act's rules on 'artificial or prerecorded' voices. That means AI outbound calls need the same consent as robocalls, plus opt-out handling and calling-hour limits. TCPA violations carry statutory damages per call, which is why consent records matter.

Call recording: one-party and all-party consent states

Federal law and most states allow recording when one party consents. But about a dozen states require every party's consent, including California, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Pennsylvania and Washington. If you take calls from those states, the simplest approach is to announce recording at the start of every call. See our state-by-state AI receptionist pages for local rules.

Texting: A2P 10DLC registration

If your AI receptionist sends confirmations or follow-ups by text from a standard local number, US carriers require registration of your brand and messaging campaign through A2P 10DLC. Marketing texts also need prior express written consent and clear opt-out instructions.

Healthcare: HIPAA

Dental, medical and other healthcare practices handle protected health information. Any AI vendor that creates, receives or stores that information on your behalf should sign a business associate agreement (BAA), and the setup should collect only what the call needs.

AI disclosure and state AI laws

• California: it is unlawful to use a bot to mislead someone about its artificial identity to encourage a sale.
• Utah: businesses must disclose that a consumer is interacting with generative AI when asked, and some regulated professions must disclose it up front.
• Colorado: has passed a law on high-risk AI systems that make consequential decisions, scheduled to take effect in 2026.
• Privacy laws: California's CCPA and similar state laws give consumers rights over personal data, including call recordings and transcripts.

The simplest rule: have your AI receptionist introduce itself as an AI assistant, and never let it make important decisions about people without human review.

Industry rules to know

• Insurance: many state insurance departments have adopted the NAIC model bulletin on AI, and quotes and advice should come from licensed agents.
• Law firms: the ABA's 2024 formal opinion on generative AI stresses confidentiality and understanding the tools, and the AI must not give legal advice.
• Real estate: the Fair Housing Act means every enquiry must be handled consistently.
• Education: FERPA protects student records, and COPPA covers data from children under 13.

Compliance checklist for a US AI receptionist

1. The AI introduces itself as an AI assistant.
2. Recording is announced if you record calls.
3. Outbound calls and texts only go to people with the right consent, with opt-outs honoured.
4. Business texting is registered through A2P 10DLC.
5. A BAA is in place if patient information is handled.
6. The AI never gives legal, medical or financial advice and transfers those calls to staff.
7. Recordings and transcripts are kept only as long as needed and access is restricted.

This guide is general information, not legal advice. For your specific situation, check with a US attorney. When we set up an AI receptionist for US businesses, these points are built in from the start.

Frequently asked questions

Do I have to tell callers they're talking to AI?

It's best practice everywhere and legally important in some states. California prohibits bots that mislead people about being bots to encourage a sale, and Utah requires disclosure when asked. We make AI receptionists introduce themselves as AI assistants.

Can an AI make outbound sales calls in the USA?

Only with the person's prior express written consent. The FCC's 2024 ruling means AI-generated voices are treated like prerecorded voices under the TCPA, and violations can cost hundreds of dollars per call.

Which states require all-party consent to record calls?

Commonly cited all-party consent states include California, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Pennsylvania and Washington, and a few others have partial rules. If you take calls from these states, announce recording at the start of the call.

Is an AI receptionist HIPAA compliant?

It can be, if every vendor that handles protected health information signs a business associate agreement, data is limited to what the call needs, and access is controlled. The practice remains responsible for its HIPAA program.

Do I need to register business texting?

Yes, if you text customers from a standard 10-digit number. US carriers require A2P 10DLC brand and campaign registration, and unregistered business texts are often blocked.

Sources

• Federal Communications Commission, February 2024 declaratory ruling on AI-generated voices under the TCPA.
• Telephone Consumer Protection Act (47 U.S.C. 227) and FCC rules.
• State wiretapping and call-recording statutes.
• US carriers' A2P 10DLC requirements via The Campaign Registry.
• HHS guidance on HIPAA business associates.
• California Business and Professions Code (bot disclosure), Utah Artificial Intelligence Policy Act, Colorado AI Act, California Consumer Privacy Act.
• NAIC model bulletin on the use of AI by insurers; ABA Formal Opinion 512 (2024).