Zoom recording law, and the consent prompt an admin can switch off

On 20 Aug 2026 I opened Zoom’s two admin help pages about recording notifications, and one line stopped me. On accounts with 100 or more licences, “account owners and admins can disable the disclaimer for internal participants.” The pop-up that most people treat as a law of physics turns out to be a checkbox. So is it legal to record a Zoom meeting when nobody on the call ever saw a prompt? In most of the country, yes. In about eleven states, that same call can be a crime.

So is it legal to record a Zoom meeting, or not?

Under United States federal law, yes, as long as you’re one of the people on the call. The federal wiretap statute permits recording where one party has consented, and you count as that party. Roughly eleven states go further and want consent from everybody. Zoom’s notification settings don’t decide the question, and neither does the little REC dot.

The operative text of 18 U.S.C. 2511(2)(d) reads: “It shall not be unlawful under this chapter for a person not acting under color of law to intercept a wire, oral, or electronic communication where such person is a party to the communication … unless such communication is intercepted for the purpose of committing any criminal or tortious act in violation of the Constitution or laws of the United States or of any State.” That last clause carries more weight than people give it. Record a call lawfully, then use the file to threaten somebody, and you’re back inside the statute, where subsection (4) sets a penalty of a fine or “imprisoned not more than five years, or both.”

One-party, all-party, and the states that split the difference

The Reporters Committee for Freedom of the Press states the rule without ceremony: “Under a one-party consent requirement, you can record a conversation if you are a party to that conversation.” All-party laws instead “require consent of all parties involved in a conversation before it can be recorded.” Their introduction to the reporter’s recording guide counts about 11 all-party states: California, Delaware, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, New Hampshire, Pennsylvania and Washington. Four more require all-party consent for either in-person conversations or phone calls, but not both. Which four? The passage I pulled doesn’t name them, and inventing a state list is exactly how a blog post gets somebody in trouble, so go read the state-by-state pages for the ones you care about.

California is the one teams actually collide with, because so many calls have at least one person sitting in California. Penal Code 632 reaches anyone who “intentionally and without the consent of all parties to a confidential communication, uses an electronic amplifying or recording device to eavesdrop upon or record the confidential communication.” A first offence carries a “fine not exceeding two thousand five hundred dollars ($2,500) per violation, or imprisonment in a county jail not exceeding one year,” and a later one goes up to $10,000 per violation. Per violation. Run that arithmetic across a twelve-person call and it stops looking like a technicality.

Worth saying plainly, since this is a blog and not advice from your lawyer: “confidential communication” is doing real work in that sentence, and a party where everyone knows they’re on a recorded webinar is a different animal from a one-to-one call about someone’s performance review. Courts have spent decades on that distinction. I’m not going to compress it into a paragraph.

What Zoom tells participants, and what it quietly doesn’t

Zoom does notify people. It just doesn’t notify everybody the same way, and the differences track your account’s licence count rather than anything a legislature wrote. Here’s the matrix I built on 20 Aug 2026 from Zoom’s own admin pages on modifying recording notification prompts and providing consent to be recorded.

Two rows deserve more attention than they usually get. Phone dial-in is the hard floor: “Participants who join audio by phone will always hear a voice prompt when a meeting is being recorded.” That’s the sentence to remember. Meanwhile, on a large enterprise account, an internal call can be recorded with no disclaimer at all, leaving the small recording indicator in the window as the whole notice. In Texas that’s fine. In Washington it isn’t, and the fact that Zoom permitted the configuration is not going to be the winning argument.

Anyone already sitting in the meeting when the host hits record gets caught too: Zoom says “Participants already in the meeting with active audio and video when the host starts recording will be prompted for consent without changes to their settings.”

Declining consent means leaving the room

When the disclaimer does fire, Zoom gives you two moves. Click OK to grant consent, or click Leave and then Leave Meeting to opt out and exit. There’s no third button that keeps you in the conversation un-recorded. Calling that consent is generous, in my opinion, and it’s the part of the design I’d argue with: the choice on offer is participate or don’t, which is closer to a turnstile than to permission.

Calls that cross a state line, which is most of them now

So is it legal to record a Zoom meeting with one person in Seattle, one in Austin, and the host dialling in from London? Assume the strictest rule in the room applies, get everyone to say yes out loud, and move on. The Reporters Committee gives the same advice for the same reason: “When a call involves participants from different states, journalists should err on the side of caution and assume that the stricter state law will apply.”

The reason to be cautious is that the courts haven’t settled it. Per the same guide, “Some courts have held that the law of the state where the recording device is located applies, while other courts have held it is where the person being recorded is located.” Those two tests point in opposite directions on a distributed call, and you find out which one your judge prefers after you’ve been sued. For participants outside the US, add data-protection law on top of wiretap law, which is a different set of duties around storage, access and deletion. I don’t know that terrain well enough to summarise it, and a one-line version would be worse than no version.

Bots, notetakers, and assistants that don’t announce themselves

Then there’s the newer wrinkle. A recording made by Zoom triggers Zoom’s prompts. An AI notetaker that joins as a participant usually shows up in the participant list with a name like “Notetaker”, which is its own form of notice. A desktop assistant that listens to your machine’s audio triggers nothing at all, because Zoom has no idea it exists.

Craqly sits in that third category, and we should be straight about what that means. It runs on your desktop, so no bot appears in the participant list and stealth mode is on every plan including the free Starter tier, which as of 20 Aug 2026 gives you 20 credits a month at $0, with Pro at $19/mo billed yearly and 180 credits (pricing checked the same day; the page defines credits as “1 credit = 1 minute of live session · credits reset every month”). None of that changes your legal position. The duty to disclose belongs to the human, not the software, and in an all-party state a silent assistant that records is the exact thing the statute was written about. If you want the summary without the exposure, say at the top of the call that you’re recording and keep a note of who agreed. We wrote up the workflow side of that in our guide to AI meeting notes, and if the bot-in-the-room approach bothers your customers, the no-bot Otter alternatives roundup compares the options that stay off the attendee list.

A short pre-record checklist

• Say it out loud at the start, then start recording, so the disclosure is inside the file.
• Ask for a verbal yes from each named attendee on small calls. Silence isn’t agreement in an all-party state.
• Check where people actually are, not where their office is. Remote teams break the assumption you made in the calendar invite.
• If any participant is in California, Illinois, Maryland, Massachusetts, Pennsylvania, Washington, Florida, Michigan, Montana, New Hampshire or Delaware, treat all-party consent as the rule.
• Ask your admin whether the internal disclaimer has been turned off on your account. If you’re on 100+ licences, it might have been, and nobody told you.
• Write the consent into the meeting notes with the date. It costs nine seconds and it’s the only record you’ll have in a year.
• Never record a call you’re not part of. That’s not a grey area anywhere.

The uncomfortable part is that the software will happily let you do the illegal thing, quietly, on a Tuesday, with a setting somebody in IT flipped in 2024. If you’re picking tooling around this, our rundown of note-taking apps for meetings covers which ones announce themselves. But the announcement was always your job.