Is it legal for AI to answer a business phone line? U.S. and EU rules, October 2026

The rules at a glance

This table lists what we opened and read for this guide. 'Status' is how we read the text on the date at the bottom of this page; laws get amended, so check the linked source before relying on it.

Federal: the FCC ruling is mostly about calls you place

In a Declaratory Ruling adopted February 2, 2024, the FCC confirmed that the Telephone Consumer Protection Act's restrictions on an 'artificial or prerecorded voice' cover current AI technologies that generate human voices. Calls that use them need the prior express consent of the called party, absent an emergency purpose or an exemption.

The ruling is written around calls a business initiates to someone else. A customer who dials your number and reaches an AI is not a called party who was rung up. That is how we read it; the ruling does not say so in those words, so a lawyer should confirm for your situation.

The line gets thin the moment the AI places a call: a callback after a missed call, a reminder, a follow-up. Those are outbound calls and the TCPA applies. We cover that side in our guides on whether AI cold calling is legal and the TCPA checklist.

Outbound AI calls, texts and do-not-call rules are covered in separate guides linked under Related. This guide is about inbound calls.

State AI-disclosure laws

California's bot law (Business and Professions Code 17941) makes it unlawful to use a bot to communicate with a person in California online, with intent to mislead about its artificial identity to incentivize a sale or sway a vote. A person using a bot is not liable if it discloses that it is a bot, clearly and conspicuously. The statute defines 'online' as a public-facing website, web application or digital application. On that wording a phone call is not obviously covered, but we would not build a product around that gap.

Utah's 2025 law (SB 226, Utah Code 13-75-103) requires a supplier using generative AI with a consumer to say it is an AI and not a human if the person asks clearly. People in regulated occupations must prominently disclose high-risk AI interactions, verbally at the start of a spoken one. Section 13-75-104 offers a safe harbor if the AI discloses clearly at the outset and throughout the interaction.

Maine's 10 M.R.S. 1500-DD says a person may not use an AI chatbot, or any other computer technology, in trade with a consumer in a way that may mislead a reasonable consumer into thinking they are talking to a human, unless the consumer is clearly told otherwise. The chatbot definition includes software that simulates conversation through aural communications, which reads on voice agents. A violation is a violation of Maine's Unfair Trade Practices Act.

Colorado's original AI Act was repealed and re-enacted in May 2026 as SB 26-189, which is about automated decision-making technology in consequential decisions, with obligations listed from January 1, 2027. An AI that books appointments or takes messages is not obviously making consequential decisions, but one that screens applicants or decides who gets service could be.

Recording is a separate question

Telling callers they are speaking with an AI does not answer whether you may record the call. Recording consent depends on the states of the people on the call: some require every party to agree, others only one. An AI agent that records and transcribes every call is recording, and the same rules apply as for a human receptionist whose calls are recorded.

Our guide on call-recording consent by state sets out the rule for each state. If your callers come from many states, the cautious approach is to give the notice that satisfies the strictest of them, at the start of the call.

EU: Article 50 of the AI Act

Regulation (EU) 2024/1689, Article 50(1), requires providers to design AI systems that interact directly with people so that those people are informed they are dealing with an AI system, unless that is obvious to a reasonably well-informed, observant and circumspect person given the context. Article 113 says the Regulation applies from 2 August 2026, with listed exceptions for other chapters.

A 2026 'digital omnibus' amendment changed some AI Act dates. The final compromise text we opened (PE-CONS 30/1/26 REV 1, July 2026) adds a transition to 2 December 2026 for providers' content-marking duty under Article 50(2) for systems already on the market before 2 August 2026. We did not find a change to Article 50(1) in it, but we have not confirmed the text as published in the Official Journal, so check there.

The Article 50(1) duty sits with the provider of the AI system, with other duties on deployers. If you are a business using a vendor's phone agent, the practical step is to confirm the vendor discloses on every call and keep that disclosure switched on.

Medical callers and HIPAA

If your callers are patients and the AI hears or stores protected health information, the vendor is likely acting for you in a way HIPAA treats as a business associate. Under 45 CFR 164.502(e) a covered entity may share protected health information with a business associate only if it obtains satisfactory assurances, documented in a written contract.

In practice that means a business associate agreement. Lead Friendly is not HIPAA-eligible and does not sign a BAA, so a medical practice should not route calls containing patient information through it. Other vendors do sign BAAs; ask for the signed agreement before you go live.

A pre-launch checklist

1. 1

   Turn on the AI disclosure

   Every call should open by saying the caller is speaking with an AI. Check the exact words in a test call.

2. 2

   Map where your callers live

   Note the states and countries your callers call from, then check recording consent and any AI disclosure statute for each.

3. 3

   Decide what is recorded

   Add a recording notice at the start of the call if any state you serve requires every party to consent.

4. 4

   Keep a person reachable

   Set rules for transferring to someone on your team, and a message-taking fallback when nobody is available.

5. 5

   Separate inbound from outbound

   Callbacks, reminders and texts are outbound and carry TCPA, do-not-call and quiet-hours duties.

6. 6

   Ask a lawyer about your trade

   Regulated fields such as health, finance, insurance and law have their own rules beyond this guide.

Last reviewed, and what this is not

Last reviewed October 14, 2026. This guide summarises public texts and is not legal advice. Laws and agency positions change, secondary summaries of them often lag the text, and we could not open every official page ourselves; where a page was blocked we used the nearest accessible copy, noted in the sources. Check the linked source and consult a lawyer licensed in your state before relying on any of it.