State-by-State AI Calling Regulations: Complete Guide

TL;DR

AI calling regulations vary significantly across US states. Beyond the federal TCPA baseline, individual states impose additional requirements on automated calls, AI disclosure, calling hours, and consent standards. This guide covers the key state-level regulations that affect AI lead calling, organized by the requirements that matter most: AI disclosure mandates, stricter consent rules, calling hour restrictions, and state-specific penalties.

Federal Baseline: TCPA and FCC Rules

Before diving into state-specific rules, here is the federal foundation that applies everywhere:

Prior Express Written Consent (PEWC) is required for automated or AI calls to mobile phones for marketing purposes
1-to-1 consent (effective January 2025) requires seller-specific, topic-specific consent
AI-generated voices are classified as "artificial or prerecorded voices" under the TCPA
Calling hours are restricted to 8 AM - 9 PM in the recipient's local time zone
Do Not Call compliance requires checking the National DNC Registry and maintaining an internal DNC list
Penalties are $500 per violation, $1,500 for willful violations

Every state listed below layers additional requirements on top of this federal baseline.

States with AI Disclosure Requirements

A growing number of states specifically require callers to disclose when an AI or automated system is making the call. These requirements go beyond the federal TCPA, which does not explicitly mandate AI disclosure (though the FCC has signaled that it should be disclosed).

California

California's BOT Act (SB 1001, effective 2019) requires bots that interact with California residents to disclose their artificial identity. While primarily aimed at online chatbots, the principle extends to AI voice agents. Additionally, the California Consumer Privacy Act (CCPA) gives consumers the right to know what personal information is being collected and how it is used.

Disclose AI identity at the start of the call
Provide opt-out mechanism for data collection
Two-party call recording consent required
Broader data handling obligations under CCPA

Washington

Washington requires AI callers to identify themselves as artificial intelligence at the beginning of the call. Washington also has all-party call recording consent requirements.

AI identification required at the start of the call
All-party recording consent
Strong consumer protection enforcement

Colorado

Colorado's AI Act (effective 2026) requires disclosure when AI is used in consequential interactions with consumers. While focused on "high-risk" AI systems, voice AI agents that make decisions about consumer interactions (qualifying leads, scheduling appointments) may fall under its scope.

States with Stricter Consent Rules

Florida

The Florida Telephone Solicitation Act (FTSA), significantly amended in 2021, is one of the most restrictive state telemarketing laws in the country:

Prior express written consent required for all automated calls and texts to Florida residents
Calling hours restricted to 8 AM - 8 PM (one hour narrower than federal)
No calls on holidays - Sundays before noon and federal holidays are prohibited
Maximum frequency - no more than 3 calls within a 24-hour period to the same number
Private right of action - $500 per violation, $1,500 for willful violations
Two-party recording consent

Florida has become one of the most actively litigated states for telemarketing violations. If you serve Florida leads, configure your AI to follow FTSA rules specifically.

Oklahoma

Oklahoma's anti-robocall law requires prior express written consent for all automated calls. The state has also increased enforcement against robocall violators with its anti-spoofing provisions.

New York

New York's telemarketing regulations include a state Do Not Call registry, specific disclosure requirements, and restrictions on calling hours. New York also has aggressive consumer protection enforcement through the Attorney General's office.

Calling Hour Restrictions by State

While the federal TCPA sets a baseline of 8 AM - 9 PM, several states have narrower windows:

Florida: 8 AM - 8 PM, no calls on Sundays before noon or on federal holidays
Georgia: 8 AM - 8 PM on weekdays, more restricted on weekends
Massachusetts: 8 AM - 8 PM
Oklahoma: 8 AM - 8 PM
Indiana: Restrictions apply to certain categories of calls

For AI calling systems, the safest universal configuration is 9 AM - 8 PM in the lead's local time zone. This respects the most restrictive state windows while still covering productive calling hours.

Call Recording Consent States

Eleven states require all-party consent to record a phone call. If your AI system records calls and your leads are in these states, the AI must disclose recording and obtain consent:

California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Pennsylvania, and Washington.

For a detailed breakdown of each state's recording consent law and how to configure AI disclosure, see our sister site's call recording consent guide.

State Do Not Call Registries

In addition to the federal National Do Not Call Registry, many states maintain their own DNC lists. Businesses must check both the federal and applicable state registries before making calls:

States with their own DNC registries include: California, Colorado, Connecticut, Florida, Georgia, Indiana, Louisiana, Massachusetts, Missouri, New York, Oklahoma, Pennsylvania, Tennessee, Texas, Wyoming, and others
Registration fees vary by state and are typically required annually
Scrubbing frequency requirements vary - some states require monthly updates, others quarterly

AI callback for opted-in website form leads has a significant advantage here: leads who voluntarily submit your form and consent to be called are not blocked by DNC registries, because they have given direct consent. However, if you expand beyond form leads (for example, re-engagement campaigns to older leads), DNC compliance becomes critical.

Penalties Comparison

State-level penalties for telemarketing violations can be equal to or greater than federal TCPA penalties:

Federal TCPA: $500 per violation, $1,500 for willful violations
Florida FTSA: $500 per violation, $1,500 for willful violations, plus attorney fees
California: $2,500 per violation under recording consent laws; CCPA violations up to $7,500 per intentional violation
Illinois: Criminal penalties for recording consent violations
Texas: Up to $25,000 per violation for DNC violations (enforced by the AG)

Penalties stack. A single non-compliant call to a Florida resident could trigger both federal TCPA and Florida FTSA penalties. Class action lawsuits multiply these figures by thousands of calls.

Practical Configuration for Multi-State AI Calling

If your business serves leads across multiple states, here is how to configure your AI for universal compliance:

Always disclose AI identity. Even in states that do not require it yet, disclosure is best practice and protects against upcoming regulations.
Always disclose recording and ask for consent. Apply two-party consent rules universally rather than trying to determine each lead's state.
Use the most restrictive calling hours. 9 AM - 8 PM in the lead's local time zone covers all state requirements.
Limit call frequency. Follow Florida's 3-calls-per-24-hours rule for all leads.
Check federal and state DNC lists. For non-consent-based calling, scrub against both registries.
Log everything. Consent records, call timestamps, recording consent, opt-out requests - maintain comprehensive records for at least 5 years.

For the federal TCPA consent framework, see our sister site's TCPA compliance guide for AI callback. For DNC registry compliance specifically, see our DNC Registry compliance guide.

Disclaimer: This guide provides general information about state-level AI calling regulations. It is not legal advice. State laws change frequently, and new AI-specific regulations are being proposed across the country. Consult with a qualified attorney for guidance specific to the states where you operate.

Need help configuring compliant AI calling across multiple states? Book a discovery call and we will review your state coverage.

Frequently Asked Questions

Which state has the strictest AI calling regulations?

Florida currently has the most restrictive combination of rules for AI calling: strict consent requirements, narrow calling hours (8 AM - 8 PM), call frequency limits (3 per 24 hours), holiday restrictions, two-party recording consent, and an active plaintiff's bar that aggressively litigates violations. California is close behind due to its combination of CCPA data requirements, BOT Act AI disclosure rules, and two-party recording consent.

Do I need to register as a telemarketer in every state?

Many states require telemarketing registration or licensing. Requirements vary - some states require registration before making any sales calls to their residents, others only for certain types of solicitations. Check with each state's consumer protection office or consult a telemarketing compliance attorney for the states where you operate.

Does the AI callback model (calling opted-in form leads) reduce state compliance burden?

Yes, significantly. Most state telemarketing restrictions focus on unsolicited calls. When a lead voluntarily submits your form and consents to an AI callback, the call is solicited and consensual. This satisfies or exempts you from many of the strictest requirements. However, calling hour restrictions, AI disclosure requirements, and recording consent rules still apply regardless of whether the call was solicited.

How do I determine which state law applies to a specific lead?

Generally, the law of the state where the lead is located applies. You can determine this from the lead's area code, their form-submitted address or zip code, or IP geolocation. However, area codes are unreliable (people move but keep their numbers). When in doubt, apply the most restrictive applicable rules.