Federal Wiretap Act and ECPA: The Complete Guide (2026)

Under 18 U.S.C. § 2511(2)(d), federal law permits one-party consent recording: any participant in a conversation may record it without informing the other parties. That default rule applies in all 50 states, but 13 states impose stricter all-party consent requirements that override the federal floor for in-state recordings.

Information last verified on 2026-05-15. This article has not yet been reviewed by a licensed lawyer.

Jurisdiction scope: This article addresses federal US recording law under the Electronic Communications Privacy Act of 1986, Pub. L. 99-508, and its predecessor Title III of the Omnibus Crime Control and Safe Streets Act of 1968, Pub. L. 90-351, as codified at 18 U.S.C. §§ 2510-2523, 2701-2713, and 3121-3127. It does not address state-level recording consent laws in detail; for those, see US recording laws by state.

For a plain-English summary of how every US state applies the federal floor, see our one-party consent states guide and two-party (all-party) consent states guide.

What the federal law covers (and what it does not)

The Wiretap Act prohibits intentionally intercepting any wire, oral, or electronic communication. Those three categories are defined in 18 U.S.C. § 2510, and understanding them is essential because the statute does not cover everything people casually describe as "recording."

A wire communication is any aural transfer made in whole or in part through the use of facilities for the transmission of communications by the aid of wire, cable, or similar connection, including any electronic storage of such communication (18 U.S.C. § 2510(1)). A oral communication is any oral communication uttered by a person exhibiting an expectation that the communication is not subject to interception under circumstances justifying that expectation (18 U.S.C. § 2510(2)). An electronic communication is any transfer of signs, signals, writing, images, sounds, data, or intelligence of any nature transmitted in whole or in part by a wire, radio, electromagnetic, photoelectronic, or photooptical system, but does not include wire or oral communications (18 U.S.C. § 2510(12)).

Silent video recording is outside the Wiretap Act. This is one of the most commonly misunderstood points in recording law. Because the statute focuses on "aural transfer" for wire communications, and because an "oral communication" requires the utterance of words, a purely visual recording with no audio component is not a "communication" covered by 18 U.S.C. §§ 2510-2523. The constitutional backdrop confirms this: Berger v. New York, 388 U.S. 41 (1967), and Katz v. United States, 389 U.S. 347 (1967), both addressed electronic eavesdropping on conversations, not silent observation. Purely visual surveillance is governed, if at all, by state video-voyeurism statutes and Fourth Amendment doctrine, not by the federal Wiretap Act.

Watch out: Adding audio to a hidden camera changes the legal analysis entirely. A silent doorbell camera is outside the Wiretap Act; the same camera with audio recording active is a potential federal felony if no one in the captured conversation consented.

ECPA's three titles: what each one covers

Congress enacted the Electronic Communications Privacy Act of 1986, Pub. L. 99-508, to update the Wiretap Act (originally Title III of the Omnibus Crime Control and Safe Streets Act of 1968) for the digital age. ECPA has three separate titles, each covering a different threat model.

Title I: The Wiretap Act amendments (18 U.S.C. §§ 2510-2523). Title I amended and modernized the 1968 Wiretap Act. It prohibits intercepting communications "in transit," meaning while they are being transmitted. Tapping a phone line while a call is in progress is a Title I violation. Activating a recording device in a room where a conversation is occurring is a Title I violation. The interception must be contemporaneous with the transmission; this is the defining feature that distinguishes Title I from Title II.

Title II: The Stored Communications Act (18 U.S.C. §§ 2701-2713). Title II addresses communications "at rest," meaning stored on a server or device after transmission. Reading someone's stored emails without authorization violates the SCA, not the Wiretap Act. Accessing a cloud storage account, a text message archive, or a voicemail inbox without consent is an SCA violation under 18 U.S.C. § 2701. The distinction between in-transit and at-rest has generated decades of litigation; the courts have generally held that email sitting in an inbox after delivery is stored under the SCA, while email intercepted as it passes through a mail server is a Title I issue.

Title III: Pen Register and Trap-and-Trace (18 U.S.C. §§ 3121-3127). Title III governs devices that capture metadata about communications rather than their content. A pen register captures outgoing dialing, routing, addressing, or signaling information; a trap-and-trace device captures incoming information. Installing either device without a court order is a federal crime under 18 U.S.C. § 3121. The court order standard is lower than for a Title I intercept warrant: law enforcement must certify that the information is relevant to an ongoing criminal investigation, rather than demonstrating probable cause.

ECPA Title	Statute	Subject Matter	Key Prohibition
Title I: Wiretap Act	18 U.S.C. §§ 2510-2523	Communications in transit	Intercepting wire, oral, or electronic communications
Title II: Stored Communications Act	18 U.S.C. §§ 2701-2713	Communications at rest	Unauthorized access to stored communications
Title III: Pen Register / Trap-and-Trace	18 U.S.C. §§ 3121-3127	Communication metadata	Installing pen register or trap-and-trace device without court order

The § 2511(2)(d) one-party consent rule and the tortious-purpose caveat

The core prohibition is 18 U.S.C. § 2511(1)(a): it is unlawful to intentionally intercept any wire, oral, or electronic communication. Section 2511(2)(d) then carves out the most important private-party exception:

"It shall not be unlawful under this chapter for a person not acting under color of law to intercept a wire, oral, or electronic communication where such person is a party to the communication or where one of the parties to the communication has given prior consent to such interception unless such communication is intercepted for the purpose of committing any criminal or tortious act in violation of the Constitution or laws of the United States or of any State." 18 U.S.C. § 2511(2)(d)

The practical effect: if you are a participant in a phone call, in-person conversation, or video conference, you may record that communication without informing any other participant. The recording is lawful under federal law even if the other party would object. This is the federal one-party consent default.

The tortious-purpose caveat. The consent exception disappears when the interception is carried out "for the purpose of committing any criminal or tortious act." Courts have consistently read this phrase to focus on the primary purpose of the interception, not on downstream uses of the recording. Recording a conversation to gather evidence of workplace harassment is not tortious interception merely because the recording might later be used in litigation against the recorded party. By contrast, recording a business competitor's calls for the purpose of trade-secret theft, or recording a spouse in order to commit extortion, falls squarely within the caveat. The Eighth Circuit in Thompson v. Dulaney, 970 F.2d 744 (10th Cir. 1992), applied a similar purpose-based analysis. The First Circuit in Sussman v. American Broadcasting Companies, 186 F.3d 1200 (9th Cir. 1999), held that a news producer's hidden-camera investigation did not trigger the caveat because the primary purpose was journalism, not tortious conduct.

One party must actually consent. The statute requires that "one of the parties to the communication" has given consent. A third party who is not part of the conversation cannot authorize the recording. A manager who instructs an employee to record a conversation the manager is not participating in does not satisfy § 2511(2)(d); the employee must themselves be a party.

The Stored Communications Act in brief

The Stored Communications Act, 18 U.S.C. §§ 2701-2713, prohibits intentionally accessing without authorization a facility through which an electronic communication service is provided, and thereby obtaining, altering, or preventing authorized access to a wire or electronic communication in electronic storage (18 U.S.C. § 2701(a)). The SCA is relevant to recording law in several respects.

First, the SCA applies to accessing stored voicemails, text message archives, and email inboxes. Employers who access employees' personal email accounts without consent, estranged spouses who log into a partner's cloud storage, and anyone who uses another person's credentials to read messages all face SCA exposure. Second, the SCA governs government requests to service providers for stored customer data. Under 18 U.S.C. § 2703, the government must obtain a warrant supported by probable cause to compel disclosure of the content of stored communications held by providers. Third, the SCA has its own civil remedy: 18 U.S.C. § 2707 provides for actual damages, statutory damages of not less than $1,000, punitive damages, and attorney fees.

The in-transit vs. at-rest line remains contested in modern contexts. Cloud-synchronized messages, for instance, may be simultaneously in transit and in storage depending on the architecture. Courts have generally resolved ambiguity in favor of applying the stricter Title I protections where a communication can plausibly be characterized as in-transit.

Criminal penalties under the Wiretap Act

Violating 18 U.S.C. § 2511 is a federal felony. Section 2511(4)(a) provides that any person who violates the section shall be fined under Title 18 or imprisoned for not more than five years, or both. Each interception is a separate offense for purposes of penalty calculation.

A limited exception exists for first-time offenders who intercepted communications involving no criminal activity: 18 U.S.C. § 2511(4)(b) reduces the maximum imprisonment to one year for a first-time offender whose offense does not involve illegal activity other than the interception itself. That carve-out provides little practical protection for most defendants, since many unauthorized recording cases arise in contexts where other misconduct is alleged.

Providers of electronic communication service who engage in unlawful disclosure of the contents of communications face separate criminal penalties under 18 U.S.C. § 2511(3)(b). Directors and officers of a corporate provider may be personally liable for authorizing or ratifying unlawful interceptions.

Civil liability under 18 U.S.C. § 2520

Section 2520 provides a private right of action that makes the Wiretap Act a practical enforcement tool even without federal prosecution. Any person whose wire, oral, or electronic communication is intercepted, disclosed, or intentionally used in violation of the chapter may in a civil action recover from the violator such relief as may be appropriate, including:

• Preliminary, equitable, or declaratory relief as the court deems appropriate (18 U.S.C. § 2520(b)(1));
• Damages under 18 U.S.C. § 2520(b)(2), which are the greater of actual damages plus any profits made by the violator, or statutory damages of $100 per day of violation, with a minimum of $10,000 per violation;
• Punitive damages in appropriate cases (18 U.S.C. § 2520(b)(2)); and
• Reasonable attorney fees and other litigation costs (18 U.S.C. § 2520(b)(3)).

The $10,000 floor per violation is significant in class action litigation. In Bartnicki v. Vopper, 532 U.S. 514 (2001), the Supreme Court addressed whether the First Amendment limited § 2520 liability for a radio broadcaster who aired an intercepted phone call he received from a third party without participating in the interception. The Court held that where a party lawfully obtained a recording of a communication involving a matter of public concern, the First Amendment prohibits imposing liability for disclosing accurately the contents of the communication, even if the original interception was unlawful. Bartnicki does not immunize the original interceptor; it protects only subsequent publishers who played no role in the interception and received the recording lawfully.

California imposes an even higher floor. Cal. Penal Code § 637.2 permits recovery of the greater of $5,000 per violation or three times actual damages, in addition to criminal penalties under Cal. Penal Code § 632.

Exceptions to the Wiretap Act prohibition

Several exceptions authorize interception that would otherwise violate § 2511. The four most frequently encountered are the provider exception, the ordinary-course-of-business exception, the consent exception, and the law-enforcement super-warrant.

Provider exception (18 U.S.C. § 2511(2)(a)(i)). A provider of wire or electronic communication service may intercept, disclose, or use communications in the normal course of providing the service or for the protection of the rights or property of the provider. This authorizes internet service providers and telephone carriers to monitor their networks for abuse, fraud, and security threats. It does not authorize providers to sell communication content to advertisers or to monitor communications outside the scope of service delivery.

Ordinary-course-of-business / extension-phone exception (18 U.S.C. § 2510(5)(a)). The definition of "electronic, mechanical, or other device" in § 2510(5)(a) excludes any telephone or telegraph instrument, equipment, or facility, or any component thereof, that is furnished to a subscriber or user by a provider of wire or electronic communication service in the ordinary course of its business and being used by the subscriber or user in the ordinary course of its business, or that is furnished by such subscriber or user for connection to the facilities of such service and used in the ordinary course of its business. Courts have applied this to permit employers to monitor business phone calls when employees are informed that the equipment may be monitored, but the employer must cease monitoring once the call is identified as personal. Watkins v. L.M. Berry & Co., 704 F.2d 577 (11th Cir. 1983), established this "minimization" requirement for the business-extension exception.

Consent exception (18 U.S.C. § 2511(2)(c) and (d)). Section 2511(2)(c) covers government agents acting under color of law where one party consents; § 2511(2)(d) covers the private-party version described in detail above. Consent may be express or implied. Implied consent exists where circumstances clearly indicate awareness of monitoring; a pre-recorded message at the start of a call stating "this call may be monitored or recorded" generally establishes implied consent for the duration of the call.

Law-enforcement super-warrant (18 U.S.C. §§ 2516-2518). Law enforcement may intercept communications only by obtaining a Title III court order, sometimes called a super-warrant because of its heightened requirements. Under 18 U.S.C. § 2518, the application must:

• Show probable cause to believe an individual is committing, has committed, or is about to commit one of the designated serious offenses listed in 18 U.S.C. § 2516;
• Show probable cause to believe that the communications about the crime will be obtained through the interception;
• Establish that normal investigative procedures have been tried and failed, appear unlikely to succeed, or would be too dangerous (the exhaustion requirement); and
• Describe the facilities or place where the interception is to take place and the type of communications to be intercepted.

A Title III order is limited to 30 days and may be extended only upon fresh application and a judicial finding of necessity. The government must minimize the interception of communications that are not within the scope of the order: agents must immediately stop listening when a communication is clearly not within the authorized categories.

How federal law interacts with stricter state laws

Federal one-party consent under § 2511(2)(d) is a floor: it establishes the minimum permissive standard. States may impose stricter requirements, and many do. The Wiretap Act contains an explicit savings clause: 18 U.S.C. § 2516(2) preserves state authority to enact all-party consent requirements.

Approximately 13 states require the consent of all parties before a conversation may be recorded: California, Connecticut, Florida, Illinois, Maryland, Massachusetts, Michigan (though Michigan courts have interpreted Mich. Comp. Laws § 750.539c to include a participant-recording carve-out, see Sullivan v. Gray, 117 Mich. App. 16 (1982), narrowing liability to third-party eavesdroppers), Montana, New Hampshire, Oregon, Pennsylvania, Washington, and Nevada. For a state-by-state breakdown, see our two-party (all-party) consent states guide.

Jurisdiction	Consent Standard	Primary Statute
Federal baseline	One-party consent	18 U.S.C. § 2511(2)(d)
California	All-party consent	Cal. Penal Code § 632
Florida	All-party consent	Fla. Stat. § 934.03
Illinois	All-party consent	720 ILCS 5/14-2
Massachusetts	All-party consent	Mass. Gen. Laws ch. 272, § 99
Washington	All-party consent	Wash. Rev. Code § 9.73.030
New York	One-party consent	N.Y. Penal Law § 250.05
Texas	One-party consent	Tex. Penal Code § 16.02

Interstate calls: the cautious rule. When a call crosses state lines and one state requires one-party consent while the other requires all-party consent, the law is not uniform. Courts have generally looked to where the interception device is located, or where the recording party is located, to determine which state's law applies. Because courts in all-party states have sometimes asserted jurisdiction over recordings made by their residents, the cautious rule for interstate calls is to comply with the stricter requirement. A Florida resident recording a call with a New York counterpart should apply Florida's all-party consent rule (Fla. Stat. § 934.03) even though New York only requires one-party consent.

Recording police and the First Amendment

The relationship between the Wiretap Act and the constitutional right to record police officers on duty is one of the most litigated areas in recording law. The First Circuit, Third Circuit, Fifth Circuit, Seventh Circuit, Ninth Circuit, and Eleventh Circuit have all recognized a First Amendment right to record police performing their official duties in public. The First Circuit in Glik v. Cunniffe, 655 F.3d 78 (1st Cir. 2011), held that this right is "clearly established" for purposes of qualified immunity.

The Wiretap Act intersects with this right in states that require all-party consent. Several state prosecutors have attempted to charge citizens recording police encounters under state wiretapping statutes. Courts have largely rejected those prosecutions on First Amendment grounds when the recording was overt and the officer was on duty in a public place. The Illinois Supreme Court in People v. Clark, 2014 IL 115776, struck down Illinois's all-party eavesdropping statute as facially unconstitutional, and Illinois subsequently amended its statute to include a law-enforcement-accountability carve-out.

Bartnicki v. Vopper, 532 U.S. 514 (2001), provides the Supreme Court's clearest statement on the intersection of the Wiretap Act and the First Amendment. The Court held that where a radio broadcaster obtained a recording of a private conversation involving a matter of public concern and played no role in the original interception, the First Amendment barred liability under the Wiretap Act for broadcasting the recording. Justice Stevens, writing for the Court, reasoned that the broadcaster's right to publish truthful information on matters of public concern outweighed the privacy interest in an already-intercepted communication.

Employer recording and the ordinary-course exception

Employers occupy a particular position under the Wiretap Act because they commonly operate the communications infrastructure employees use. The ordinary-course-of-business exception at 18 U.S.C. § 2510(5)(a) permits monitoring of business lines for legitimate business purposes. Four conditions courts have identified to qualify for the exception:

1. The employer uses telephone equipment provided in the ordinary course of business, not a separate recording device attached to the line;
2. The monitoring is for a legitimate business purpose (call quality, training, regulatory compliance);
3. Employees have been given advance notice that calls may be monitored; and
4. The employer stops monitoring as soon as the call is identified as personal.

Three states impose statutory advance-notice requirements beyond the Wiretap Act's baseline: Connecticut (Conn. Gen. Stat. § 31-48d), Delaware (Del. Code tit. 19, § 705), and New York (N.Y. Civ. Rights Law § 52-c, effective May 7, 2022). For a detailed treatment of employer monitoring rules, see our employer recording guide.

Deepfakes and the TAKE IT DOWN Act: a separate federal layer

The TAKE IT DOWN Act, Pub. L. 119-12, was signed by President Trump on May 19, 2025. It creates a distinct federal criminal prohibition on publishing nonconsensual intimate images (NCII), including AI-generated deepfakes depicting real individuals in sexual situations. The Act requires online platforms to remove flagged NCII content within 48 hours of a valid complaint.

The TAKE IT DOWN Act does not amend or interact with the Wiretap Act or the Stored Communications Act. It addresses a different harm (unauthorized publication of intimate images) through a different mechanism (platform takedown obligations and criminal penalties for publishers). A recording of a conversation that is also sexual in nature may trigger both statutes if it is published without consent, but the two statutes are analytically independent.

Constitutional backdrop: Katz and the reasonable expectation of privacy

The Wiretap Act's prohibition reflects Fourth Amendment principles articulated in Katz v. United States, 389 U.S. 347 (1967). In Katz, the Supreme Court held that the Fourth Amendment protects people, not places, and that a person who seeks to preserve something as private may rely on the Constitution even in a public place. Justice Harlan's influential concurrence articulated the two-part test: (1) the person exhibited a subjective expectation of privacy, and (2) that expectation is one society recognizes as reasonable. Katz overruled the "trespass doctrine" of Olmstead v. United States, 277 U.S. 438 (1928), which had limited Fourth Amendment protection to physical intrusions.

Berger v. New York, 388 U.S. 41 (1967), decided the same term, struck down New York's eavesdropping statute as facially unconstitutional because it lacked adequate safeguards, including a particularity requirement and a termination provision. Berger shaped the procedural requirements now codified in 18 U.S.C. § 2518 for Title III orders.

Together, Katz and Berger established that electronic surveillance requires constitutional justification; Congress codified that requirement in the Wiretap Act's super-warrant provisions. The private-party one-party consent rule in § 2511(2)(d) reflects the corollary principle: no reasonable expectation of privacy attaches to communications in which the other party might reveal the contents.

Disclaimer

This article provides general legal information about the federal Wiretap Act (18 U.S.C. §§ 2510-2523), the Stored Communications Act (18 U.S.C. §§ 2701-2713), and related ECPA provisions, as verified on 2026-05-15. It does not constitute legal advice and does not create an attorney-client relationship. The law in this area is complex, and its application depends on specific facts, including the jurisdiction in which recording occurs, the nature of the communication, and the purpose of the recording. Readers should consult a lawyer licensed in their jurisdiction before recording any conversation.

Authorities cited

Related articles

• US recording laws by state: the complete 50-state guide
• One-party consent states: full list and rules
• Two-party (all-party) consent states: full list and rules
• Can an employer record conversations without consent?

Last updated: 2026-05-15. Statutes cited reflect their in-force version as of 2026-05-15.