Federal TCPA rules set the baseline for AI voice calling, but states can and do add their own requirements. In 2026, a growing number of states have passed or introduced legislation specifically targeting AI-generated voices in phone calls. For service businesses operating across state lines, federal compliance is no longer enough.
This post summarizes the state laws that matter most for AI voice calling in 2026, organized by risk level. It covers calling windows, consent requirements, recording rules, penalty structures, and which states are adding new AI-specific legislation. Use this as a starting point, not legal advice — consult qualified counsel for your specific operations.
High-risk states: Washington, Florida, California
These three states have the most restrictive rules and the highest penalties. If your business serves customers in any of them, your compliance program should be built to their standards, not the federal minimum.
Washington
Washington's Commercial Electronic Mail Act (RCW 19.190) requires separate prior express consent for automated or prerecorded commercial calls, even when the caller has an established business relationship. This goes beyond the TCPA's 90-day inquiry exemption. Businesses calling Washington residents with AI voice must document explicit consent regardless of how recent the lead inquiry was.
The state also has strong consumer protection enforcement through the Attorney General's office. Penalties can reach $1,000 per violation plus attorney fees. Washington does not require actual damages for statutory violations, which makes it a frequent target for plaintiff attorneys.
Florida
Florida's Telemarketing Act (Fla. Stat. § 501.059) limits calling hours to 8:00 AM – 8:00 PM, stricter than the federal 9:00 PM cutoff. The state also prohibits calls to numbers on the Florida Do Not Call list without consent, and penalties are severe — up to $10,000 per violation for willful misconduct.
Florida courts have been plaintiff-friendly in telemarketing cases. The state recognizes private rights of action, meaning consumers can sue directly for violations without waiting for regulator action. For AI voice calls, Florida's definition of automated calls is broad and likely covers AI-generated voices.
California
California's Invasion of Privacy Act (Cal. Penal Code § 632) requires two-party consent for recording calls. If your AI system records calls for quality assurance, training, or dispute resolution, you must inform the caller and obtain consent in a two-party consent state. Failure to do so can result in criminal penalties and civil liability.
California also has the Consumer Privacy Act (CCPA) and the Privacy Rights Act (CPRA), which give consumers rights to know what personal information is collected and to request deletion. Call transcripts, recordings, and lead data may qualify as personal information under these laws. Businesses must have data handling procedures that respect consumer privacy rights.
Moderate-risk states
These states have rules that go beyond federal requirements but are less aggressive than the high-risk trio. Businesses should still configure compliance settings specifically for these jurisdictions.
Texas
Texas requires telemarketers to register with the state and maintain a bond. The Business and Commerce Code prohibits deceptive telemarketing practices and requires clear disclosures. While Texas does not have AI-specific voice rules yet, its broad telemarketing framework likely covers AI-generated calls.
New York
New York General Business Law § 399-z restricts telemarketing calls and requires callers to transmit accurate caller ID information. The state has active legislation in 2026 that would add AI voice disclosure requirements — forcing callers to inform recipients when they are speaking with AI. If passed, this would be one of the first explicit AI disclosure mandates in the country.
Illinois
Illinois has introduced legislation in 2026 that would require prior written consent for AI-generated voice calls to consumers. The bill is modeled on Washington's approach and would eliminate the established business relationship exemption for AI voice calls. Monitor this closely if you serve Illinois customers.
Emerging legislation in 2026
Several states are actively considering AI voice-specific bills in 2026. Tennessee has a pending disclosure requirement. Massachusetts is reviewing consent rules for synthetic voices in commercial calls. Colorado is evaluating whether AI voice calls fall under its existing telemarketing statutes or require new legislation.
The trend is clear: states are moving faster than the federal government on AI voice regulation. Businesses that assume federal compliance is sufficient will find themselves out of step with state law within months, not years.
What businesses should do now
- Map every state where you call customers and identify the strictest rules in that set
- Configure calling windows to the most restrictive state you serve (e.g., Florida's 8:00 PM cutoff)
- Document consent for every lead, including timestamp, source, and nature of inquiry
- Add AI disclosure to your call script if you serve states considering disclosure mandates
- Review recording practices and obtain two-party consent where required
- Maintain an internal do-not-call list and honor opt-outs immediately
- Sign a BAA if you serve healthcare customers in any state
- Monitor state legislative trackers quarterly for new AI voice bills
Which states have the strictest AI voice calling laws?
Washington, Florida, and California lead in restrictiveness. Washington requires separate consent for automated calls. Florida has shorter calling hours and higher penalties. California requires two-party consent for recordings and has strong privacy laws.
Do state AI voice laws apply to inbound answering?
Most state laws target outbound calling. Inbound answering is less regulated because the caller initiates contact. Recording laws and privacy statutes may still apply, so check your specific states.
Can I use the same calling settings for all states?
No. Configure to the strictest state you serve. A federal-minimum approach will violate Washington, Florida, and California laws.
Are new state AI voice laws expected in 2026?
Yes. Tennessee, Illinois, New York, Massachusetts, and Colorado are all actively considering AI voice legislation. The regulatory landscape is changing quickly.
Related Reading
Sources and Methodology
State law summaries are based on Washington RCW 19.190, Florida Statutes § 501.059, California Penal Code § 632 and CCPA/CPRA, Texas Business and Commerce Code, and New York General Business Law § 399-z. Pending legislation references are based on 2025–2026 state legislative session bills as tracked by the National Conference of State Legislatures and state legislative databases. Laws change frequently; consult qualified telecommunications counsel for current guidance.
Stay ahead of state AI voice regulation
State AI voice laws are evolving faster than federal rules. The businesses that thrive will be the ones that build compliance into their systems from the start — conservative calling windows, documented consent, clear disclosures, and strong opt-out handling. Review your state map, update your settings, and monitor legislative changes quarterly.
