# Full research output — US recording law (Perplexity Sonar Deep Research, 2026-05-02)

---

# Comprehensive Guide to US State Audio Recording Consent Laws for Case Managers and Care Providers in Mental Health and Addiction Recovery (2025-2026)

This report provides a current and exhaustive examination of audio recording consent requirements across all fifty US states and the District of Columbia, with particular emphasis on implications for case managers and care providers working in mental health and substance use disorder treatment contexts. The analysis reveals that recording laws remain fragmented across the nation, with a federal baseline of one-party consent coexisting with twelve jurisdictions requiring all-party consent, along with several states that apply different standards depending on the medium of communication or professional context. A critical finding is that while the Health Insurance Portability and Accountability Act (HIPAA) creates substantial obligations for covered entities managing recordings of protected health information, case managers who are not themselves licensed providers or employed by covered entities operate in a distinct regulatory landscape where state wiretap and eavesdropping statutes serve as the primary legal framework. Furthermore, the relationship between Release of Information (ROI) procedures and recording consent authorization is complex and context-dependent, requiring distinct processes and authorizations. When case managers or care providers engage in cross-state recording—a increasingly common scenario in telehealth and multi-jurisdictional service delivery—courts and legal authorities generally mandate compliance with the most restrictive applicable state law rather than a uniform federal standard, creating significant compliance obligations for providers operating across state lines.

## Federal Legal Framework: The Foundation for State Recording Laws

The baseline for all audio recording consent requirements in the United States derives from federal wiretap and eavesdropping statutes codified in 18 United States Code Sections 2510 through 2522, commonly referred to as the Federal Wiretap Act or the Omnibus Crime Control and Safe Streets Act of 1968[11]. The foundational provision, 18 U.S.C. § 2511(2)(d), establishes a "one-party consent" standard at the federal level, providing that it is not unlawful under federal law for a person not acting under color of law to intercept a wire, oral, or electronic communication where that person is a party to the communication or where one of the parties to the communication has given prior consent to such interception, unless the communication is intercepted for the purpose of committing any criminal or tortious act[11]. This federal statute has been interpreted by courts and regulatory authorities to mean that a person may legally record a conversation to which they are a party without obtaining the consent or knowledge of the other participant, provided they are located in or subject to a jurisdiction that does not impose stricter requirements[1][11].

However, the Federal Wiretap Act explicitly permits individual states to enact more restrictive recording laws, creating what constitutional law scholars term a "floor" rather than a "ceiling" for privacy protection[1][1]. Section 2511(2)(c) reserves to states the authority to prohibit conduct that is not prohibited under the federal statute, enabling states to require all-party consent even when the federal baseline permits one-party recording[11]. The federal law further establishes critical exceptions to the general one-party consent rule, including recordings made by law enforcement personnel pursuant to court order or with specific authorizations, recordings made by communication service providers when necessary to deliver service or protect property or rights, recordings made by Federal Communications Commission personnel for enforcement purposes, recordings captured pursuant to the Foreign Intelligence Surveillance Act, recordings made by individuals to identify the source of harmful radio or other electronic interference, and recordings made pursuant to valid court orders[1].

The statutory framework also distinguishes between "wire communications," "oral communications," and "electronic communications," with wire communications traditionally referring to communications transmitted through telephone wires or similar conduits, oral communications encompassing face-to-face spoken conversations or conversations transmitted over radio frequencies where parties reasonably expect privacy, and electronic communications covering data transmissions, emails, and text messages[11]. This tripartite distinction becomes particularly significant in states that apply different consent standards to different media, and it remains highly relevant to case managers and care providers who may simultaneously engage in in-person conversations, telephone calls, videoconferences, and secure electronic communications as part of their professional duties.

## State-by-State Consent Framework: Classification and General Principles

As of May 2026, the fifty states and District of Columbia divide into three distinct categories regarding audio recording consent requirements[1][2][4]. The preponderance of jurisdictions—thirty-eight states plus the District of Columbia—maintain one-party consent laws consistent with the federal baseline[1][4]. These one-party consent states generally permit any individual who is a party to a conversation to record that conversation without notifying or obtaining the explicit consent of other participants, provided the recording is not undertaken for an illegal purpose such as extortion, blackmail, or the commission of a tort[1]. The second major category comprises twelve states that require all-party or "two-party" consent, meaning that every participant in a conversation must affirmatively agree to recording before it lawfully occurs; these jurisdictions prioritize privacy interests over the recording party's informational interests and treat unauthorized recording as a criminal offense in most contexts[1][4]. The third category, which has become increasingly prominent as courts and legislatures recognize nuance in recording regulation, consists of several states that apply different consent standards to different types of communications—for example, requiring all-party consent for in-person conversations while permitting one-party consent for telephone calls, or vice versa[2][2].

A critical principle applicable across all jurisdictions is the "choice of law" analysis: when a recording involves participants located in different states, courts have typically held that either the law of the state where the recording device is located or the law of the state where the person being recorded is located applies, with significant variation in judicial interpretation across circuits[1][1][1]. The prevailing practical standard, endorsed by the American Bar Association and state bars nationwide, holds that when recording a conversation involving parties in multiple states, the recorder must comply with the most restrictive applicable law or obtain the explicit consent of all parties to ensure lawful recording[1][1][1]. This principle has been applied with particular rigor in cases involving California, which has aggressively asserted its interest in protecting California residents' privacy expectations; courts have held that a caller in a one-party consent state who records a conversation with someone physically located in California must obtain all-party consent even if the caller is located in a one-party consent jurisdiction[1][1]. The California Supreme Court's reasoning in such cases emphasizes that California residents retain their privacy expectations regardless of the jurisdiction of the recording party, and that permitting one-party recording from other states would "impair California's interest in protecting the degree of privacy afforded to California residents"[1].

## One-Party Consent States: Thirty-Eight States Plus the District of Columbia

The jurisdictions following federal baseline one-party consent rules are Alabama, Alaska, Arizona, Arkansas, Colorado, Georgia, Hawaii, Idaho, Indiana, Iowa, Kansas, Kentucky, Louisiana, Maine, Minnesota, Mississippi, Missouri, Nebraska, Nevada (despite its statute's language, see below for clarification), New Jersey, New Mexico, New York, North Carolina, North Dakota, Ohio, Oklahoma, Rhode Island, South Carolina, South Dakota, Tennessee, Texas, Utah, Vermont, Virginia, West Virginia, Wisconsin, Wyoming, and the District of Columbia[1][2][4][31][34]. These states permit any person who is a party to a conversation—including telephone calls, face-to-face discussions, and in most cases electronic communications—to record that conversation without informing the other parties, provided the person recording is not engaging in the recording for an unlawful purpose such as extortion, harassment, or violation of another person's reasonable expectation of privacy[1][4]. The foundational statute governing one-party consent jurisdictions typically provides language similar to 18 U.S.C. § 2511, making clear that the consent of one party suffices for lawful recording.

Texas exemplifies the one-party consent model with a straightforward statutory framework establishing that it is legal for a person to record wire, oral, or electronic communication to which he is a party or who has the consent of a party, provided the reasonable expectation of privacy requirement is satisfied[31]. Arkansas similarly permits an individual to intercept or record a wire, oral, cellular, or cordless phone conversation provided the person recording is a party to the conversation or one of the parties has given prior consent[4]. Hawaii permits any wire, oral, or electronic communication to be lawfully recorded by a person who is a party to the communication or when one of the parties has consented to the recording, with the important caveat that Hawaiian privacy law imposes stricter all-party consent requirements for recording in "private places" where one would reasonably expect to be protected from surveillance[36]. Louisiana's statute is straightforward, permitting recording of any wire, oral, or electronic communication provided one party consents[1]. Mississippi permits an individual to record or disclose the contents of an oral, telephonic, or other communication to which they are a party or if one of the parties has given prior consent to the recording[4][1].

The one-party consent framework generally permits case managers and care providers to record conversations with clients without the client's advance knowledge or explicit consent, provided the case manager is a party to the conversation and is not recording for an unlawful purpose. However, this legal permission does not automatically make such recording ethically appropriate or clinically sound, and many professional organizations, including the National Association of Social Workers and the American Counseling Association, recommend obtaining explicit client consent even in one-party consent states as a matter of professional best practice and to maintain therapeutic trust. Furthermore, state confidentiality statutes, professional licensing board regulations, and organizational policies often impose requirements stricter than the baseline recording law, particularly in mental health and addiction treatment contexts where the power imbalance between provider and client is significant.

## All-Party Consent States: Twelve Jurisdictions with Stricter Requirements

Twelve states have enacted legislation requiring that all participants in a conversation provide affirmative consent before the conversation may be lawfully recorded, and these states classify unauthorized recording as a criminal offense rather than merely a civil violation[1][4][13]. The all-party consent states are California, Connecticut (for electronic recordings), Delaware, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, Nevada (despite its statute's apparent language—see specific section below), New Hampshire, Pennsylvania, and Washington[1][2][4][1][2][13][14][15][17][19][20][21][26][27]. These jurisdictions operate from the philosophical premise that privacy interests in conversations are fundamentally shared among all participants, and that no individual should unilaterally decide to preserve a recording of a conversation without the knowledge and agreement of others whose privacy expectations and words are at stake[19].

California stands as the most aggressive enforcer of all-party consent principles and has developed the most extensive case law addressing recording violations. California Penal Code Section 632 provides that a person who intentionally and without the consent of all parties to a confidential communication uses an electronic amplifying or recording device to eavesdrop upon or record the confidential communication is punishable by a fine not exceeding $2,500 per violation or imprisonment in a county jail not exceeding one year, or in the state prison, with enhanced penalties of up to $10,000 per violation for repeat offenders[14]. The statute notably excludes from its protection communications at radio frequencies and broadly defines "confidential communication" to include not only face-to-face conversations but also telephone and telegraph communications[1][14]. California's aggressive stance on recording violations became particularly prominent following the Ninth Circuit's 2022 ruling in *Javier v. Assurance IQ* that session replay technology and similar recording methods could constitute unlawful "interception" under California's statute, leading to an explosion of wiretap-based class action litigation[5]. As of 2026, California has seen approximately four thousand wiretap-based class actions filed against website operators and other entities since 2022, with estimated demand letters numbering in the tens of thousands, demonstrating how aggressively the statute is now being deployed against technology companies that capture user data without explicit consent[5]. For case managers and care providers in California, this creates a strict liability framework where any recording of a client or other party without explicit advance consent—whether for administrative purposes, supervision, training, or any other reason—can result in criminal prosecution and civil liability including $5,000 per violation in statutory damages even without proof of actual injury[5].

Florida similarly requires that all parties consent to the recording or the disclosure of the contents of any wire, oral, or electronic communication, with narrow exceptions for communications where there is no reasonable expectation of privacy and for recordings by or with the consent of law enforcement engaged in criminal investigations[3][3]. The Florida statute provides that a child under eighteen years of age may intercept and record an oral communication if the child is a party to the communication and has reasonable grounds to believe that recording will capture a statement by another party intending to commit, committing, or having committed an unlawful sexual act or act of physical violence against the child, and that recordings capturing such statements may be provided to law enforcement agencies[3][3]. This exception creates an important carve-out relevant to case managers and care providers working with minors who disclose abuse, permitting protective recording in limited circumstances.

Illinois requires consent from all parties to record, transmit, or listen to non-electronic private conversations pursuant to 720 ILCS 5/14-2, which defines eavesdropping as the knowing and intentional use of an eavesdropping device in a surreptitious manner for the purpose of overhearing, transmitting, or recording all or any part of any private conversation to which the person is not a party unless they do so with the consent of all parties to the private conversation[15]. The statute distinguishes between electronic and non-electronic private conversations, with some ambiguity regarding whether all-party consent applies to private electronic communications or only to oral conversations, though the prevailing interpretation treats electronic communications more liberally[2][2]. A notable exception in Illinois creates an affirmative defense for law enforcement officers acting pursuant to specific statutory authorizations under Illinois Code of Criminal Procedure Articles 108A or 108B[15].

Maryland requires all-party consent to the recording or the disclosure of the contents of any wire, oral, or electronic communication under Maryland Courts and Judicial Proceedings § 10-402, with criminal penalties including felony charges, fines up to $10,000, and imprisonment up to five years[19]. The Maryland statute contains exceptions for law enforcement operating under court order and for communications lacking a reasonable expectation of privacy, but these exceptions are narrowly construed. Maryland courts have held that even in public places, if someone is having a private discussion with a reasonable expectation of confidentiality, recording without consent violates state law[19].

Massachusetts prohibits the willful interception or recording of any wire or oral communication without the consent of either the sender or receiver (for telephone communications) or without the consent of at least one party (for mechanical overhearing of in-person conversations), with enhanced penalties for subsequent violations and specific prohibitions on editing, altering, or tampering with recordings before presenting them in judicial proceedings[20]. Massachusetts's statute represents a relatively moderate application of all-party consent principles in the context of in-person conversations, though it maintains strict requirements for telephone recording.

New Hampshire represents among the strictest all-party consent regimes in the nation, providing that every party to a conversation has the right to prohibit recording and that any violation constitutes a class B felony or misdemeanor with accompanying money damages[21]. New Hampshire law recognizes that recording violations are not mere technical infractions but substantive attacks on individual privacy and autonomy, and judges and juries in New Hampshire have consistently applied the statute with severity proportionate to that view[21].

Pennsylvania requires the consent of all parties to intercept or record any wire, electronic, or oral communication as a felony offense, establishing one of the strictest regimes in the nation with particular emphasis on the criminal culpability of unauthorized recording[16][26].

Washington State requires that all parties provide their prior consent to the interception or recording of any private communication transmitted by telephone, telegraph, radio, or other device, or any private conversation conducted by device, with carefully defined exceptions for emergency communications such as reporting fires, medical emergencies, crimes, or disasters; communications conveying threats of extortion, blackmail, bodily harm, or unlawful requests; anonymous or repeated communications; and communications involving hostage holders or barricaded persons as defined in the Revised Code of Washington[17]. Washington's statute creates a notable exception for employees of newspapers, magazines, wire services, and radio and television stations who are engaged in bona fide news gathering, allowing such employees to record if consent is expressly given or if the recording device is readily apparent to the speakers[17].

For case managers and care providers working in all-party consent states, the implications are profound: no recording of a client conversation, telephone call, or interaction may lawfully occur without obtaining explicit advance consent from all parties involved, and documented consent is essential. Many all-party consent states do not recognize passive consent or implied consent through mere notification; rather, most require affirmative agreement. This creates a more demanding compliance burden than in one-party consent jurisdictions, but it also provides substantial privacy protections for clients and their recorded communications.

## Mixed-Consent States: Nuanced Frameworks

Several states have developed statutory frameworks that apply different consent standards depending on the medium of communication or other contextual factors, creating a "mixed" regulatory environment that case managers and care providers must navigate with particular care[2][2][25][27][36].

**Connecticut** presents a complex regime where recording of telephone conversations falls into the all-party consent category under Connecticut General Statutes § 53a-187, which treats wiretapping (defined as intentional overhearing or recording of a telephonic or telegraphic communication by a person other than a sender or receiver without the consent of either the sender or receiver) as a criminal offense, but criminal liability requires proof that recording was not authorized by law[27]. However, Connecticut's statute on mechanical overhearing of a conversation requires consent of at least one party for non-telephonic conversations, creating effectively a one-party consent rule for in-person conversations[27]. Civil liability attaches for telephone recording without all-party consent, and aggrieved parties may recover not only damages but also attorney's fees[27]. This split creates a situation where a case manager in Connecticut working with a client by telephone must obtain all-party consent, but recording an in-person session requires only one-party consent—a distinction that case managers must clearly understand to avoid inadvertent violations.

**Oregon** similarly creates a split framework under Oregon Revised Statutes § 165.450, which prohibits the intentional interception or recording of any wire, electronic, or oral communication without the consent of all parties involved for in-person conversations, but permits one-party consent recording for electronic conversations[25]. This distinction means that an Oregon case manager may record a client telephone call or videoconference with the consent of only the case manager themselves (as a party), but recording an in-person session with the same client requires the client's explicit consent. The statutory language makes clear that Oregon favors different privacy expectations depending on the medium, recognizing that telephone and video communications inherently involve transmission through third-party infrastructure, while in-person communications maintain a more exclusive privacy domain[25].

**Illinois** presents ongoing interpretive complexity regarding electronic communications. While the statute clearly requires all-party consent for "non-electronic private conversations," the statutory language regarding electronic communications has been debated, with some courts suggesting that electronic communications might be subject to one-party consent rules[2][2]. However, the safer legal interpretation for compliance purposes is to assume all-party consent applies to all communications—oral, wire, and electronic—absent judicial clarification to the contrary.

**Hawaii** maintains one-party consent for eavesdropping under Hawaii Revised Statutes § 803-42(3)(A), which permits recording of oral, telephone, or electronic communications if the person is a party to the communication or has received prior consent from one party[36]. However, Hawaii's privacy law, codified in Hawaii Revised Statutes § 711-1110.9 and § 711-1111, imposes stricter all-party consent requirements for recording sounds or images in "private places" where one may reasonably expect to be safe from casual or hostile intrusion or surveillance[36]. This creates a practical distinction: a Hawaii case manager may record a telephone call with one-party consent, but recording a client session occurring in a private office space requires all-party consent under the privacy statute.

**Nevada** presents a complex statutory-versus-judicial framework that illustrates how courts may fundamentally reinterpret statutory language. Nevada Revised Statutes § 200.650 reads facially like a one-party consent statute, providing that a person shall not surreptitiously listen to, monitor, or record a private conversation unless authorized to do so by one of the persons engaging in the conversation[22][22]. However, the Nevada Supreme Court held in *Lane v. Allstate* that despite the statute's language, an individual must have the consent of all parties to lawfully record a telephonic communication even if they are a party to the communication, effectively converting Nevada into an all-party consent state through judicial interpretation[1][22][1][22]. Case managers operating in Nevada must treat it as an all-party consent jurisdiction for practical purposes, recognizing that the statutory language, while apparently one-party, has been judicially overridden.

**Michigan** occupies a unique position in the continuum between one-party and all-party consent states[23]. Michigan's eavesdropping statute, Michigan Compiled Law § 750.539c, states that any person who willfully uses any device to eavesdrop upon a private conversation without the consent of all parties is guilty of a felony, creating apparent all-party consent requirements parallel to California and Florida[23]. However, the Michigan Court of Appeals has held that the statutory reference to "eavesdropping" as relating to "the private discourse of others" means the statute cannot apply to one's own conversations—that is, a person cannot eavesdrop on their own conversation[23]. This creates what has been termed the "participant exception" to Michigan's all-party consent requirement: a person can record their own conversations with the consent of themselves as a participant, which in practical effect means Michigan operates as a one-party consent state for conversations in which the recorder participates[23]. However, Michigan's participant exception remains subject to ongoing litigation and clarification, and the safer approach for case managers in Michigan is to recognize that while they can record conversations in which they are a participant, recording conversations between other parties (such as between a client and family member) would require all-party consent[23].

**Montana** presents a distinct nuance: while requiring notification before recording, it operates functionally closer to one-party consent[2][24]. Montana Code Annotated § 45-8-213 prohibits recording a conversation by use of a hidden electronic or mechanical device without the knowledge of all parties to the conversation, but the statute provides an exception that if one person provides warning of the transcription or recording, either party may record[24]. This means that a case manager in Montana may record a client conversation provided the case manager gives the client warning—either verbal or written—that recording is about to occur, and the client either affirmatively consents or continues the conversation after receiving notice[24]. This transforms Montana's framework into a "notification plus consent" model where consent can be implied through continued participation after notice, rather than requiring affirmative advance consent.

## Detailed State-by-State Statutory Framework

To provide comprehensive reference material for case managers and care providers, the following section details the legal framework for each of the fifty states and the District of Columbia. This state-by-state analysis incorporates statutory citations, categorization of consent requirements, case manager-specific considerations, and relevant exceptions or carve-outs.

**Alabama** (One-Party Consent): Alabama has not enacted specific state legislation governing recording of private conversations; therefore, federal one-party consent law under 18 U.S.C. § 2511 applies. Case managers in Alabama may record conversations with clients provided at least one party (the case manager) consents and the recording is not undertaken for an unlawful purpose. No case-manager-specific exceptions or enhancements exist beyond the federal framework[4]. Recording mandatory abuse reports or duty-to-warn communications does not require client consent but should be documented in the client record.

**Alaska** (One-Party Consent): Alaska has not enacted specific state recording legislation; federal one-party consent law applies[4]. The absence of state law means that case managers operate under the federal baseline permitting recording with one-party consent, provided the recording is not for an unlawful purpose such as extortion or tortious interference[11]. Alaska's general confidentiality statutes for mental health providers remain distinct from recording law and do not prohibit recording but may impose documentation and retention requirements[4].

**Arizona** (One-Party Consent): Arizona has not enacted comprehensive state recording legislation, and federal one-party consent applies[4]. Case managers in Arizona should verify that their employer or licensing board has not enacted additional restrictions, as some mental health licensure boards impose stricter requirements than state law[4].

**Arkansas** (One-Party Consent): Arkansas Statutes § 5-60-120 governs telephone recording and similar provisions apply to other communications, permitting any individual to intercept or record a wire, oral, cellular, or cordless phone conversation if they are a party to the conversation or one of the parties has given prior consent[4]. The statute does not require written consent and does not distinguish between licensed and unlicensed case managers, making one-party consent the applicable standard across the professional spectrum[4].

**California** (All-Party Consent): California Penal Code § 632 and § 632.5 require explicit written consent from all parties to any recording of a confidential communication, whether by telephone, face-to-face, or other means, with criminal penalties of $2,500 per violation (or $10,000 per violation for repeat offenses) and potential imprisonment[14]. California courts have further extended this prohibition to session replay technology and similar recording mechanisms used in online contexts[5]. For case managers, this creates an absolute prohibition on recording client communications without obtaining a separate, client-signed recording consent document in advance of any recording. California law further recognizes mandatory reporting and duty-to-warn exceptions to confidentiality, and case managers may provide recordings to law enforcement or child protective services when legally required, but the initial recording itself still requires consent[14]. Additionally, California effective January 1, 2025 (per Assembly Bill 2905), mandates AI disclosure in voice calls, requiring that if a person uses an artificial intelligence voice to make or receive a call or engage in conversation, they must disclose that fact, with violations resulting in $500 per violation[13]. This creates heightened compliance obligations for case managers using AI-assisted documentation or communication tools.

**Colorado** (One-Party Consent): Colorado has not enacted specific state recording legislation, and federal one-party consent applies[4]. However, Colorado's addiction counselor licensing board rules (4 CCR 744-1.17) establish that certified and licensed addiction counselors must maintain client records in a secure place, implying that recordings of client sessions constitute client records subject to confidentiality, retention, and destruction requirements[30]. This means that while recording is legally permissible under one-party consent, recordings become part of the clinical record and must be handled accordingly[30].

**Connecticut** (Mixed): As detailed above, Connecticut requires all-party consent for telephone recordings (C.G.S.A. §§ 53a-187, 53a-189) and civil liability attaches even in the absence of criminal conviction, with attorneys' fees available to prevailing clients[27]. For in-person conversations, Connecticut permits one-party consent. Case managers in Connecticut must distinguish between telephone/electronic recordings (requiring all-party consent) and in-person sessions (requiring only one-party consent)[27].

**Delaware** (All-Party Consent): Delaware Code Annotated Title 11 § 1335(a)(4) requires that all parties consent to the recording of oral or electronic conversations[1][18]. Unlike some all-party consent jurisdictions, Delaware's statute has relatively sparse case law and judicial interpretation, but it unambiguously prohibits one-party recording[18]. Case managers in Delaware must obtain all-party consent for any recording[18].

**District of Columbia** (One-Party Consent): The District of Columbia has adopted the federal one-party consent standard consistent with 18 U.S.C. § 2511[1][2]. Case managers and care providers in DC may record conversations with clients or other parties provided they are a party to the conversation and not recording for an unlawful purpose[1].

**Florida** (All-Party Consent): Florida Statutes § 934.03 requires that all parties consent to the recording or disclosure of the contents of any wire, oral, or electronic communication[3][3]. Exceptions include recordings by law enforcement pursuant to court order or with consent, recordings where parties lack reasonable expectation of privacy, recordings by minors of statements indicating abuse or violence, and recordings authorized by parent or legal guardian of minors to capture statements indicating abuse or violence[3][3]. For case managers, this requires obtaining all-party consent for any recording, with the important exception that a case manager working with a minor client who discloses abuse may record that disclosure without the child's consent, and may provide the recording to law enforcement or child protective services[3][3]. Florida's statute creates substantial criminal liability for violations, with penalties applicable to individuals, business associations, partnerships, corporations, and other legal entities[3].

**Georgia** (One-Party Consent): Georgia has not enacted comprehensive state recording legislation, and federal one-party consent applies[1][4]. Georgia case managers may record conversations with parties present on the call provided the case manager is a party to the conversation[1][4]. However, the distinction between Georgia's one-party consent and California's all-party consent has spawned important case law: when Georgia residents record conversations with California residents, California law applies due to California's strong assertion of jurisdiction over California residents' privacy interests[1][1].

**Hawaii** (Mixed): As detailed above, Hawaii Revised Statutes § 803-42 permits one-party consent recording of telephone and electronic communications, but Hawaii Revised Statutes § 711-1110.9 and § 711-1111 require all-party consent for recording in private places[36]. Case managers in Hawaii may record telephone calls and electronic communications with one-party consent but must obtain all-party consent for in-person office sessions[36].

**Idaho** (One-Party Consent): Idaho permits interception of wire or oral communications when one of the parties has given prior consent, consistent with federal law[4]. No state-specific statute creates additional restrictions, and case managers operate under the federal one-party consent baseline[4].

**Illinois** (All-Party Consent): Illinois 720 ILCS 5/14-2 requires the consent of all parties to the use of an eavesdropping device for recording private conversations, with eavesdropping classified as at least a Class 4 felony[15]. Notably, Illinois amended its statute in 2025 with HB 1806 (the Psychological Resources Act), which creates specific requirements for recording therapy sessions with AI assistance: therapists must obtain separate written consent specifically authorizing recording for AI transcription purposes, and a general intake consent form is insufficient[39]. Violations of the AI recording requirement carry penalties up to $10,000[39]. Case managers in Illinois must recognize that recording therapy sessions for AI transcription requires a distinct consent process separate from general treatment authorization, and the consent must specify that AI will process the recording.

**Indiana** (One-Party Consent): Indiana has adopted one-party consent law, and case managers may record conversations with parties present provided they are a participant[1][2]. Indiana's comprehensive consumer privacy law (effective January 1, 2026) creates additional obligations regarding the use and disclosure of personal information but does not alter recording consent requirements[5].

**Iowa** (One-Party Consent): Iowa permits recording of wire, oral, or electronic communications provided the person recording is a party or has obtained one-party consent[4]. No enhanced restrictions apply to case managers, and Iowa follows the federal one-party baseline[4].

**Kansas** (One-Party Consent): Kansas permits recording provided one party consents, consistent with federal law[4][1]. No specific Kansas statute governs recording, meaning the federal framework applies[4].

**Kentucky** (One-Party Consent): Kentucky permits one-party consent recording of conversations[2]. Kentucky's consumer privacy law (effective January 1, 2026) does not alter recording consent standards[5].

**Louisiana** (One-Party Consent): Louisiana permits recording of wire, oral, or electronic communications provided one party consents[1][4]. Louisiana has not enacted all-party consent requirements, and case managers operate under one-party consent[4].

**Maine** (One-Party Consent): Maine permits one-party consent recording[1][4]. No specific restrictions apply to case managers in addiction recovery or mental health contexts beyond general confidentiality requirements[4].

**Maryland** (All-Party Consent): Maryland Courts and Judicial Proceedings § 10-402 requires all-party consent to recording of oral or phone communication, and courts have held that even if conversations occur in public, if they involve a reasonable expectation of privacy, recording without consent violates state law[19]. Criminal penalties include felony charges, fines up to $10,000, and imprisonment up to five years[19]. A small exception exists for communications lacking reasonable expectation of privacy, such as public announcements or communications uttered in circumstances where parties should understand they are not confidential[19]. For case managers, this requires obtaining explicit all-party consent for any recording in advance, whether the conversation occurs in a private office or via telephone[19].

**Massachusetts** (All-Party Consent): Massachusetts General Law Chapter 272 § 99 prohibits wiretapping and mechanical overhearing of conversations without consent[20]. For telephone communications, neither the sender nor receiver of information may record without the other's knowledge and consent[20]. For in-person conversations, mechanical overhearing without the consent of at least one party is prohibited[20]. The statute carries penalties including up to ten thousand dollars in fines or up to five years in state prison, with enhanced penalties for repeat offenses[20]. Notably, Massachusetts law also prohibits editing, altering, or tampering with recordings before presenting them in judicial or administrative proceedings[20]. Case managers in Massachusetts must obtain clear consent for any recording and preserve recordings in unaltered form if litigation is anticipated[20].

**Michigan** (Modified All-Party with Participant Exception): As detailed above, Michigan Code § 750.539c requires consent of all parties except where the recorder is a party to the conversation (the "participant exception"), creating a practical one-party consent regime for conversations in which the case manager participates[23]. However, a case manager recording a conversation between two clients or between a client and a family member would require all-party consent from all parties[23]. Case managers must document the participant exception carefully to ensure they are indeed a party to the conversation they are recording[23].

**Minnesota** (One-Party Consent): Minnesota permits recording of wire, oral, or electronic communications if the person recording is a party or has obtained one-party consent[4][1]. Minnesota adopted comprehensive consumer privacy law effective January 1, 2025, but this does not alter recording consent requirements[5].

**Mississippi** (One-Party Consent): Mississippi Code § 41-29-531(e) permits an individual to record or disclose the contents of an oral, telephonic, or other communication to which they are a party or if one of the parties has given prior consent[4][1]. No additional restrictions apply to mental health providers or case managers[4].

**Missouri** (One-Party Consent): Missouri permits one-party consent recording[1][4]. No specific statute and no case manager-specific restrictions apply beyond federal baseline[4].

**Montana** (Modified One-Party with Notification Requirement): As detailed above, Montana Code § 45-8-213 prohibits recording by hidden device without knowledge of all parties, but permits recording if one person provides warning that recording is occurring[24]. This creates a "notification plus consent" framework where consent can be implied through continued participation after notice[24]. For case managers, this means recording is permissible provided the client receives notice and either affirmatively consents or continues the conversation after notice[24]. Exception for public officials, public meetings, and persons given warning[24].

**Nebraska** (One-Party Consent): Nebraska permits one-party consent recording[1][2]. No specific restrictions apply to case managers[2].

**Nevada** (All-Party Consent Despite Statutory Language): Despite Nevada Revised Statutes § 200.650 appearing to permit one-party consent, the Nevada Supreme Court has interpreted this as an all-party consent state[1][22][1][22]. Case managers in Nevada must treat this as requiring all-party consent from all participants in order to lawfully record[22][22].

**New Hampshire** (All-Party Consent): New Hampshire RSA 570-A requires that every party to a conversation agree to recording, creating one of the nation's strictest recording regimes[21]. Violations constitute a class B felony or misdemeanor, with substantial financial damages available to aggrieved parties[21]. For case managers, absolute all-party consent must be documented in advance of recording[21].

**New Jersey** (One-Party Consent): New Jersey permits one-party consent recording consistent with federal law[1][2]. No specific restrictions apply to mental health providers or case managers beyond confidentiality requirements[1].

**New Mexico** (One-Party Consent): New Mexico permits one-party consent recording[1][2]. Federal law applies as no state-specific statute restricts recording[1].

**New York** (One-Party Consent): New York Penal Law §§ 250.00 and 250.05 establish one-party consent as the baseline, permitting recording by persons who are parties to a conversation or who have obtained prior consent from one party[34]. However, New York's courts strictly regulate recording in courtrooms and some government settings; only media regularly engaged in news gathering may record in certain appellate courts under specific conditions[34]. For case managers, one-party consent applies, but recordings of court proceedings, depositions, and certain administrative hearings require separate authorization[34]. Public meetings held by governmental bodies may be recorded by attendees in an unobtrusive manner, though restrictions on recording device usage may be imposed[34].

**North Carolina** (One-Party Consent): North Carolina permits one-party consent recording[1][2][4]. Case managers may record conversations with the consent of one party (themselves as a participant)[2][4].

**North Dakota** (One-Party Consent): North Dakota permits one-party consent recording[1][2]. No specific state statute restricts recording beyond federal law[1].

**Ohio** (One-Party Consent): Ohio Revised Code § 2933.52 permits recording of wire, oral, or electronic communications provided the person recording is a party to the communication or has obtained one-party consent[1][4]. Professional licensing boards do not impose additional recording restrictions for case managers[1][4].

**Oklahoma** (One-Party Consent): Oklahoma permits one-party consent recording consistent with federal law[1][2]. No specific restrictions apply to case managers[1].

**Oregon** (Mixed): As detailed above, Oregon Revised Statutes § 165.450 prohibits recording of in-person conversations without all-party consent but permits one-party consent recording of electronic communications (telephone, videoconference, etc.)[25]. Case managers must distinguish between in-person sessions (requiring all-party consent) and remote communications (permitting one-party consent)[25].

**Pennsylvania** (All-Party Consent): Pennsylvania 18 Pa. Code § 5702 et seq. requires the consent of all parties to intercept or record any wire, electronic, or oral communication, with recording classified as a felony[16][26]. Particularly for case managers, Pennsylvania recognizes exceptions for law enforcement and court-authorized interceptions, but no professional exception exists for treatment providers[16]. All-party consent must be documented and obtained in advance of recording[26].

**Rhode Island** (One-Party Consent): Rhode Island General Laws § 11-35-21 permits recording of any oral communication uttered by a person exhibiting an expectation that the communication is not subject to interception, provided at least one party consents, which may be the recorder if they are a party to the conversation[35]. The statute exceeds the federal floor by recognizing that consent is not required for recording conversations in public where there is no reasonable expectation of privacy[35]. Penalties for illegal recording include up to five years' imprisonment, and civil damages include the greater of actual damages, $100 a day for each day of violation, or $1,000, plus punitive damages and attorneys' fees[35]. For case managers, one-party consent applies to private conversations in which the case manager is a participant, but recordings of public statements or non-confidential communications may be made without consent[35].

**South Carolina** (One-Party Consent): South Carolina Code 17-30-30(C) permits any person not acting under color of law to intercept a wire, oral, or electronic communication where the person is a party to the communication or where one of the parties has given prior consent to the interception, provided the interception is not for the purpose of committing any criminal or tortious act[33]. Case managers in South Carolina may record conversations with parties present provided they are a party and not recording for unlawful purposes[33].

**South Dakota** (One-Party Consent with Nuance): South Dakota permits one-party consent recording but adds nuance: one-party consent applies when the recording party is a participant in the conversation, effectively creating a participant exception similar to Michigan[2][2]. Recording conversations between other parties (not including the recorder) may require all-party consent[2][2]. Case managers should verify the specific type of conversation being recorded to ensure compliance[2].

**Tennessee** (One-Party Consent): Tennessee permits one-party consent recording of telephone conversations and private communications[1][2][4]. No enhanced restrictions apply to case managers[1].

**Texas** (One-Party Consent): Texas permits recording of oral or electronic communication by anyone who is a party to the communication or who has the consent of a party, provided the parties have a reasonable expectation of privacy[31]. The "reasonable expectation of privacy" requirement distinguishes Texas from pure one-party states, as courts have held that in public settings where parties cannot reasonably expect privacy, recording may occur without consent[31]. For case managers in private office settings, one-party consent applies because clients have reasonable expectations of privacy[31]. Case managers should be mindful that telephone recordings, videoconferences, and in-office conversations all fall within the one-party consent framework provided the setting involves a reasonable expectation of privacy[31].

**Utah** (One-Party Consent): Utah permits recording of wire, oral, or electronic communication to which the recording person is a party, or when at least one participant has consented to the recording[1][4]. Consent is not required for recording non-electronic communications uttered by a person lacking reasonable expectation of privacy[1]. Case managers operate under one-party consent in private office settings[1][4].

**Vermont** (One-Party Consent via Federal Law): Vermont has not enacted specific state recording legislation; therefore, federal one-party consent law applies[37]. 18 U.S.C. § 2511 governs recording in Vermont, permitting one-party consent recording of conversations in which the recording person is a party, unless the recording is made for the purpose of committing a criminal or tortious act[37]. Penalties for violations include federal fines and imprisonment, and aggrieved parties may pursue civil claims for injunctive relief and damages[37]. Case managers in Vermont operate under the federal baseline[37].

**Virginia** (One-Party Consent): Virginia permits one-party consent recording consistent with federal law[1][2]. Virginia's comprehensive consumer privacy law (effective January 1, 2025) does not alter recording consent requirements[5]. Case managers may record conversations with parties present provided they are participants[1].

**Washington** (All-Party Consent): Washington Revised Code § 9.73.030 requires that all participants provide their prior consent to the interception or recording of any private communication transmitted by telephone, telegraph, radio, or other device, or any private conversation conducted by device[17]. However, the statute creates exceptions for emergency communications (reporting fires, medical emergencies, crimes, disasters), communications conveying threats or unlawful requests, anonymous or repeated communications, and communications involving hostage holders or barricaded persons[17]. Additionally, an exception permits newspaper, magazine, wire service, radio, and television employees engaged in bona fide news gathering to record with expressed consent or if recording device is readily apparent[17]. For case managers, all-party consent is required for any recording, and documentation of consent in advance is essential[17]. The emergency exceptions do not apply to clinical or administrative contexts[17].

**West Virginia** (One-Party Consent): West Virginia permits recording of wire, oral, or electronic communication when the person recording is a party to the communication or has obtained consent from one of the parties[1][4]. Case managers operate under one-party consent without special restrictions[1].

**Wisconsin** (One-Party Consent): Wisconsin permits recording of wire, electronic, or oral communication if the person recording is a party or has obtained prior consent from one party[4][1]. Consent is not required for recording non-electronic communications where the speaker lacks reasonable expectation of privacy[1][4]. Case managers may record conversations with clients in private office settings with one-party consent[1].

**Wyoming** (One-Party Consent): Wyoming permits one-party consent recording[1][2]. No specific restrictions apply to case managers, and federal law governs[1].

## HIPAA Implications for Audio Recordings by Non-Licensed Case Managers

The Health Insurance Portability and Accountability Act of 1996 establishes federal privacy and security standards for protected health information (PHI) maintained by "covered entities" and their "business associates," but the statute's applicability to case managers and care providers varies significantly depending on whether they are independently practicing or working within an organization[6][29][12]. A critical distinction exists between licensed case managers employed by healthcare organizations (hospitals, clinics, behavioral health agencies) and unlicensed or independently practicing case managers who do not themselves qualify as covered entities[6][29].

For case managers employed by covered entities such as hospitals, community mental health centers, substance use disorder treatment programs, or other healthcare organizations subject to HIPAA, audio recordings of client sessions become "PHI" if the recording contains identifiable patient information including the patient's voice, name, medical record number, or other linked identifiers[6][29][12]. Under the HIPAA Privacy Rule, covered entities may use or disclose PHI for "treatment, payment, and healthcare operations" (TPO) without patient authorization, but all other uses require written Patient Authorization[6][12][29][12]. This means that a covered entity may record a client session for clinical purposes (treatment), billing verification (payment), or internal quality improvement (healthcare operations) without a separate recording authorization, provided the covered entity has obtained general HIPAA authorization and the recording use falls within TPO[6][29]. However, if the covered entity intends to use recordings for marketing, external education, media purposes, or most research, a separate written Patient Authorization specifically authorizing the recording and specifying its purpose is required[6][12][29].

For case managers who are not employees of covered entities—such as independent practitioners, private practice counselors, or non-licensed community-based case managers—HIPAA generally does not apply to their personal recordings because such individuals are not themselves covered entities[6][29]. However, this does not mean such case managers can record freely; rather, their recording activities remain subject to state wiretap and eavesdropping laws, and their employer or licensing board (if applicable) may impose additional restrictions[6][29]. Non-covered-entity case managers should treat state recording laws as the governing framework and comply with the jurisdiction-specific consent requirements outlined above[6][29].

For all case managers, regardless of whether they are within or outside a covered entity framework, the fundamental principle is that **recordings constitute sensitive data that must be secured, have access restricted, and be retained only as long as clinically or legally necessary**[6][29]. Recorded audio files should be encrypted if stored electronically, kept on secured systems with access controls, and destroyed when no longer needed[6][29]. If a recording becomes part of a patient's medical record—which it may if it documents clinical information—then access rights, amendment rights, and accounting of disclosures requirements attach under HIPAA (for covered entities) or professional ethics requirements (for non-covered-entity providers)[6][12][29].

The relationship between HIPAA authorization and state recording consent law is critical: HIPAA authorization does not override state recording law requirements[6][29][12]. If a state requires all-party consent for recording, a patient's HIPAA authorization permitting treatment activities does not satisfy the all-party consent requirement; rather, a separate recording consent document specifically addressing recording authorization is necessary[6][29]. Conversely, if a patient has provided all-party consent under state law to a recording undertaken for TPO purposes, the HIPAA Privacy Rule permits the covered entity to use the recording without obtaining separate HIPAA authorization, as the TPO use falls within the Privacy Rule's permitted categories[6].

## Release of Information (ROI) and Recording Consent: Distinct Processes

The relationship between Release of Information (ROI) procedures and recording consent authorization is important for case managers to understand because these are distinct legal and clinical processes serving different purposes[12][12]. Release of Information procedures govern the disclosure of existing patient records—including written notes, test results, medical records, and other documentation—to third parties outside the organization, and ROI forms document the patient's authorization for such disclosures, identify the requesting party, specify the records to be disclosed, and establish the legal basis for disclosure[12][12]. Recording consent authorization, by contrast, governs whether a conversation may be captured in the first place and, if captured, how the recording may be used and stored[6][9][29].

A patient may authorize ROI to allow their therapist to share written clinical notes with an outside provider, court, or attorney without having authorized the recording of the therapy session itself[12][12]. Conversely, a patient may authorize recording of sessions for clinical supervision or staff training (for TPO purposes under HIPAA) without authorizing the release of those recordings to outside parties; in such cases, the recording exists for internal use only, and separate ROI authorization would be required before the recording could be disclosed to external parties[12][12].

Best practice for case managers and care providers involves obtaining two separate authorization documents: first, a **Recording Consent Form** that specifically authorizes or declines recording of sessions, specifies the purpose of recording (clinical documentation, supervision, training, etc.), describes how the recording will be stored and secured, explains retention and destruction procedures, and clearly establishes the patient's right to revoke consent; and second, any necessary **HIPAA Authorization or TPO documentation** that addresses the broader use and disclosure of patient information[6][9][12][29][12]. Additionally, if the care provider anticipates that a recording might be shared with an outside party—such as a consultant, supervisor, or trainee from another organization—a third authorization form addressing such disclosure may be necessary[6][29][12].

The distinction between these processes becomes particularly important when recordings are used for quality assurance, clinical supervision, or training purposes that may involve other personnel reviewing the recording[6][29]. If a case manager records a client session with the client's consent for the stated purpose of clinical supervision and then shares the recording with a supervisor or consulting therapist, the initial recording consent should explicitly authorize such sharing; absent such authorization, the case manager may be violating the client's privacy expectations and potentially breaching confidentiality obligations[6][9][29].

## Cross-State Recording Issues and Choice-of-Law Principles

When a case manager in one state records a conversation with a client, colleague, or other party physically located in another state, complex choice-of-law questions arise regarding which jurisdiction's recording law governs the legality of the recording[1][1][1]. The general principle, established through state and federal case law and endorsed by the American Bar Association, provides that **when recording a multi-state conversation, the recorder must comply with the most restrictive applicable law or obtain the explicit consent of all parties**[1][1][1].

The theoretical basis for this principle rests on two competing choice-of-law rules. First, some jurisdictions apply the law of the state where the recording device is located, reasoning that the act of recording takes place at the device's location[1][1]. Under this rule, if a case manager in New York records a conversation with a client in California, New York's one-party consent law would potentially govern because the recording device (the New York case manager's phone) is located in New York[1][1]. However, this rule has been superseded by a second, more consumer-protective approach that applies the law of the state where the person being recorded is located, reasoning that the privacy interests belong to the person whose words are being captured, and that person's state should protect their privacy expectations[1][1][1]. Under this rule, California law would govern because the recorded party (the California client) has privacy expectations established by California law[1][1][1].

California itself has aggressively asserted this second approach through case law. Courts applying California choice-of-law principles have held that when a California resident is recorded, California law applies regardless of the location of the recording party, and that permitting one-party recording from other states would "impair California's interest in protecting the degree of privacy afforded to California residents"[1][1][1]. This principle has been applied in cases involving a Georgia business recording calls with California clients; courts held that California's all-party consent law applied despite the business being located in a one-party consent jurisdiction[1][1].

For case managers navigating multi-state recording scenarios, the practical approach is as follows: first, identify whether either party to the conversation is located in an all-party consent state; if so, assume all-party consent applies and obtain explicit consent from all parties; second, if both parties are in one-party consent states but one party is in a state with special exceptions or nuanced frameworks (such as Montana's notification requirement), comply with the most restrictive standard; third, when in doubt, obtain explicit advance consent from all parties to eliminate ambiguity[1][1][1]. This "safe harbor" approach of obtaining universal consent in multi-state scenarios is endorsed by ethics boards and professional associations across disciplines[1][1].

Telehealth and remote service delivery have made multi-state recording issues increasingly common. A case manager located in Colorado providing therapy to a client in Illinois via videoconference must comply with Illinois's all-party consent requirement, even though Colorado is a one-party consent jurisdiction[1][1][1]. The proper practice is to obtain all-party consent before beginning the session, document the consent, and retain documentation with the clinical record[1][1].

## Case Manager-Specific Exemptions and Duty-to-Report Carve-Outs

State recording laws generally do not contain explicit exemptions for case managers or mental health providers, meaning that the recording consent requirements apply equally to clinical and administrative personnel[6][7][28]. However, several important carve-outs and exceptions exist that are relevant to case managers' duty to protect clients and respond to abuse or safety threats.

**Duty to Warn and Mandatory Reporting Exceptions**: In virtually all states, case managers have a legal duty to report suspected child abuse, elder abuse, or dependent adult abuse, and this duty supersedes confidentiality protections in certain circumstances[28][32]. If a case manager records a session during which a client discloses that they intend to harm themselves or others, or that they have abused a child, the case manager may provide the recording to law enforcement or child protective services without the client's consent; indeed, case managers generally cannot claim confidentiality as a defense to failure to report[28][32]. The key distinction is that the **duty to report does not authorize the recording in the first place in an all-party consent state**; rather, once a recording exists (lawfully made with consent or in a one-party consent jurisdiction where the case manager is a party), the case manager may share it with authorities when legally required[28][32]. In all-party consent states, case managers should not record sessions without consent in hopes of capturing abuse disclosures; rather, they should use the recording tools available under law (written notes) and make contemporaneous documentation of disclosures[28][32].

**Child Protection Exception**: Several all-party consent states, including Florida and other jurisdictions, create specific exceptions permitting minors or their guardians to record communications disclosing abuse without obtaining consent from the person making the disclosure[3][3]. These exceptions recognize that minors may need to document abuse by a parent, guardian, or other adult, and society has a stronger interest in documenting and preventing child abuse than in protecting the privacy of alleged abusers[3][3]. Case managers working with minors should understand whether their state contains such an exception and, if so, whether it applies to professional recordings as well as to recordings by the minor themselves[3][3].

**Law Enforcement and Court Order Exception**: All states, whether one-party or all-party consent, contain exceptions permitting law enforcement to record conversations pursuant to court order or under specific statutory authorizations, and permitting communications service providers to record for service delivery and security purposes[1][11]. Case managers who are approached by law enforcement requesting access to client recordings should verify that law enforcement has obtained appropriate legal authority (court order, warrant, or subpoena) before disclosing recordings, recognizing that law enforcement's authority to compel disclosure does not override HIPAA protections unless HIPAA exceptions apply[28].

**Professional Supervision and Training Purpose**: While not creating an explicit exemption from recording consent requirements, professional licensure boards and ethics bodies across mental health disciplines have recognized that professional education and quality assurance may necessitate recording, and boards increasingly permit recording for such purposes provided clients provide informed consent and recordings are secured appropriately[6][9][29]. However, this recognition does not override state law; a case manager cannot record without state-law-required consent simply because the recording is intended for supervision purposes[6][9][29]. Rather, the supervision purpose constitutes a permissible use under the recording consent framework, provided all state-law requirements for recording are first satisfied[6][9][29].

## Special Considerations for Mental Health and Addiction Treatment Contexts

Case managers and care providers in mental health and substance use disorder treatment settings should recognize several factors that make recording particularly sensitive and legally complex in these contexts. First, federal law under 42 Code of Federal Regulations Part 2 establishes strict confidentiality protections for substance use disorder treatment records that exceed HIPAA protections in many respects, and recordings of sessions involving substance use disorder treatment constitute "records" subject to 42 CFR Part 2[6][29]. This means that a case manager working in a substance use treatment program must comply not only with state recording consent law and HIPAA (if applicable) but also with 42 CFR Part 2 restrictions, which generally prohibit disclosure of any record identifying a person as having applied for or received substance abuse treatment, with narrow exceptions[6][29].

Second, psychotherapy notes receive heightened HIPAA protection requiring patient authorization for disclosure even within HIPAA's TPO exception framework[32]. If a case manager or clinician records a therapy session, the recording may fall within the definition of psychotherapy notes if it contains the provider's personal observations and analysis, and such recordings cannot be disclosed for purposes other than treatment without patient authorization, and even for treatment purposes cannot be disclosed to other providers without authorization[32]. This creates a situation where a recording used for clinical supervision must be carefully managed to ensure the supervisor has appropriate authority to access it[32].

Third, many mental health licensing boards have adopted specific guidance on telehealth and recording, recognizing that remote service delivery raises unique challenges. Some boards require that platforms used for telehealth indicate to participants that recording may occur, that recordings must be encrypted and stored securely, and that recordings should not be stored on consumer-grade cloud services or shared with third parties without authorization[29]. Case managers should review their licensing board's specific guidance to determine whether state licensure requirements impose restrictions beyond state recording law[29].

Fourth, clients in mental health and addiction treatment settings occupy a position of significant power differential relative to their providers, and ethical frameworks across mental health disciplines emphasize obtaining not merely legal consent but informed and voluntary consent where clients understand the implications of recording and do not face coercion or pressure to consent to recording in exchange for treatment[6][9][29]. This means that even in one-party consent jurisdictions where case managers could legally record without client knowledge, professional ethics and licensing board guidance typically require obtaining explicit, documented consent[6][9][29]. Many professional boards treat secret recording by a provider as an ethical violation and grounds for license discipline, regardless of whether the state permits one-party recording[6][29].

## Practical Compliance Framework for Case Managers and Care Providers

Given the complexity of recording laws and the importance of protecting client privacy while maintaining clinical documentation capabilities, case managers and care providers should implement a structured compliance framework incorporating the following elements. First, **determine jurisdiction**: identify all states in which clients are located and all states from which services are provided, and research the recording law in each jurisdiction, consulting with legal counsel if uncertain[1][1][1]. Second, **establish recording policies**: develop written organizational policies addressing whether recording is permitted, under what circumstances, for what purposes, and with what safeguards[6][9][29]. Third, **develop consent procedures**: create standardized, written consent forms specific to recording authorization that explain the purpose of recording, how recordings will be stored, who may access recordings, retention and destruction procedures, and the client's right to revoke consent[6][9][12][29]. Ensure consent forms are separate from general intake or HIPAA authorization forms, as recording consent is a distinct authorization[6][9][12][29]. Fourth, **document consent**: obtain signed, dated consent forms from all required parties before recording, and maintain the signed consent documents in the client record[6][9][29]. For one-party consent states, even though consent of only one party is legally required, best practice is to obtain client consent and document it[6][29]. Fifth, **secure recordings**: store recorded audio files in encrypted format on secured systems with access controls limiting access to authorized clinical and supervisory personnel[6][29][12]. Avoid storing recordings on consumer-grade cloud services, personal devices, or unsecured platforms[6][29]. Sixth, **restrict use**: use

Citations:
[1] https://www.mwl-law.com/wp-content/uploads/2018/02/RECORDING-CONVERSATIONS-CHART.pdf
[2] https://www.avoma.com/blog/call-recording-laws
[3] https://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0900-0999%2F0934%2FSections%2F0934.03.html
[4] https://detectiveservices.com/2012/02/state-by-state-recording-laws/
[5] https://www.uniconsent.com/blog/us-privacy-fines-2026
[6] https://www.accountablehq.com/post/hipaa-audio-recording-requirements-and-consent-policy-checklist-for-organizations
[7] https://www.seyfarth.com/news-insights/workplace-recordings-and-eavesdropping-limiting-criminal-and-legal-liabilities.html
[8] https://iar.iga.in.gov/register/20081126-IR-440080412PRA
[9] https://djholtlaw.com/understanding-and-using-a-consent-for-recording-sessions-document/
[10] https://www.law.cornell.edu/rules/fre/rule_803
[11] https://www.law.cornell.edu/uscode/text/18/2511
[12] https://www.accountablehq.com/post/what-is-a-release-of-information-roi-in-healthcare-definition-purpose-and-hipaa-requirements
[13] https://hostie.ai/resources/state-by-state-call-recording-compliance-ai-virtual-hosts-2025
[14] https://law.justia.com/codes/california/code-pen/part-1/title-15/chapter-1-5/section-632/
[15] https://www.ilga.gov/documents/legislation/ilcs/documents/072000050K14-2.htm
[16] https://www.palegis.us/statutes/consolidated/view-statute?txtType=HTM&ttl=18&div=0&chpt=57&sctn=2&subsctn=0
[17] https://app.leg.wa.gov/rcw/default.aspx?cite=9.73.030
[18] https://delcode.delaware.gov/title11/c024/sc01/
[19] https://andrewalpert.com/blog/can-you-record-someone-without-their-knowledge-in-maryland-and-use-it-in-court/
[20] https://malegislature.gov/Laws/GeneralLaws/PartIV/TitleI/Chapter272/Section99
[21] https://courts-state-nh-us.libguides.com/recordconversations
[22] https://law.justia.com/codes/nevada/chapter-200/statute-200-650/
[23] https://www.varnumlaw.com/insights/setting-the-record-straight-on-recording-conversations-is-michigan-a-one-party-consent-state/
[24] https://archive.legmt.gov/bills/2024/mca/title_0450/chapter_0080/part_0020/section_0130/0450-0080-0020-0130.html
[25] https://www.shannonpowelllaw.com/blog/the-oregon-recording-laws-guide
[26] https://www.palegis.us/statutes/consolidated/view-statute?txtType=HTM&ttl=18&div=0&chpt=57
[27] https://law.justia.com/codes/connecticut/title-53a/chapter-952/section-53a-187/
[28] https://casemanagementinstitute.com/to-report-or-not-to-report-mandatory-reporting-and-duty-to-warn-for-case-managers/
[29] https://www.accountablehq.com/post/hipaa-and-audio-recording-what-s-a-violation-and-what-s-allowed
[30] https://www.law.cornell.edu/regulations/colorado/4-CCR-744-1.17
[31] https://guides.sll.texas.gov/recording-laws/audio-recording
[32] https://www.hhs.gov/hipaa/for-professionals/faq/2088/does-hipaa-provide-extra-protections-mental-health-information-compared-other-health.html
[33] https://www.scstatehouse.gov/code/t17c030.php
[34] https://www.dmlp.org/legal-guide/new-york-recording-law
[35] https://www.rcfp.org/reporters-recording-guide/rhode-island/
[36] https://www.rcfp.org/reporters-recording-guide/hawaii/
[37] https://www.rcfp.org/reporters-recording-guide/vermont/
[38] https://www.apadivisions.org/division-31/publications/records/california-record-keeping-laws.pdf
[39] https://www.supanote.ai/blog/is-recording-therapy-sessions-legal-with-ai-transcription
[40] https://www.fcpsychexperts.com/can-therapy-sessions-be-legally-used-in-court-proceedings/
[41] https://mcdeps.com/confidentiality-in-court-reporting/
[42] https://www.accountablehq.com/post/hipaa-rules-for-case-managers-what-you-need-to-know-to-stay-compliant