Supervisor Monitoring Laws: What Insurance Call Floors Must Follow

You can legally listen to and record your agents’ business calls in every state, but only on conditions. Federal law lets you monitor in the ordinary course of business and lets a call be recorded when one party consents. Many states add rules on top: notice to employees, consent from everyone on the line, or both. This guide walks through what applies to an insurance agency running outbound and inbound phones, and how to build a monitoring program that holds up when your agents and prospects sit in different states.

This is a practical overview, not legal advice. Have your agency’s attorney confirm the rules in each state where you have agents or call prospects.

TL;DR

• Federal baseline: The Wiretap Act bars intercepting calls, but business monitoring and one-party consent are exceptions. Stop listening when a call turns personal.
• Notice rules: New York, Connecticut, Delaware and Maine require employers to give employees notice of electronic monitoring. California has its own notice duties under the CCPA.
• Consent rules: About a dozen states require all parties to consent before a call is recorded. A recording disclosure at the start of each call covers you.
• Multi-state floors: When agents and prospects are in different states, apply the strictest rule to every call.
• New AI limits: California and other states are restricting AI tools that infer emotions or automate discipline. Keep a human in every coaching and discipline decision.

Table of Contents

• The federal baseline: the Wiretap Act and ordinary course of business
• What state agencies say about employer monitoring
• State notice laws for employee monitoring
• One-party and all-party consent for call recording
• Monitoring when agents and callers are in different states
• Where monitoring stops: restrooms, locker rooms and personal calls
• AI scoring and automated decisions
• A compliant monitoring program, step by step
• Perspective: build monitoring into the dial, not around it
• How RevRing.com fits
• FAQ
• Sources

The federal baseline: the Wiretap Act and ordinary course of business

Three bodies of law can govern workplace monitoring: the federal Electronic Communications Privacy Act, state statutes, and common law privacy protections. Depending on the situation, one or all three can apply.

The Bureau of Justice Assistance explains that the ECPA has three titles: the Wiretap Act, the Stored Communications Act, and the pen-register and trap-and-trace provisions. Together they protect wire, oral and electronic communications while they are made, in transit and stored.

For a call floor, Title I matters most. The Wiretap Act, as amended in 1986, prohibits intentionally intercepting a wire, oral or electronic communication, and violations can carry up to five years in prison. It does not apply when a party has given prior consent, unless the interception is for a criminal or tortious purpose.

Two exceptions make normal supervision possible:

1. One-party consent. If a supervisor is on the call, or one participant agrees to the recording, federal law is satisfied.
2. Ordinary course of business. The exception in 18 U.S.C. § 2510(5)(a) covers qualifying phone equipment used in the ordinary course of business. Employers may monitor business calls for legitimate purposes, but must stop listening once they determine a call is personal.

That last point is where managers get into trouble. Surveillance of an employee’s personal calls beyond figuring out whether the call is work-related is generally treated as outside the ordinary course of business. Each act of monitoring is judged on whether it was reasonably business-related.

Floor rule: monitor sales and service lines, written into policy. Keep personal calls on personal phones, and train supervisors to drop off a call as soon as it turns personal.

What state agencies say about employer monitoring

State regulators generally confirm the federal picture. The California Department of Justice says an employer is generally allowed to monitor workplace communications, such as business phone calls and computer use, and to access voicemail and email.

The Texas Workforce Commission says it is legal to monitor employees’ use of the company phones for business purposes. It adds that employees and outside callers should be told in advance, and that recording is legal as long as one party knows about it. The agency also says employers may listen to or record calls on their own phone system to make sure it is used for its intended purposes, and that employees and the calling public must be told monitoring may occur.

The pattern is consistent. Monitoring for a business reason is allowed. Telling people about it is how you stay on the right side of the line.

State notice laws for employee monitoring

There is no federal rule requiring employers to tell workers they are monitored. Some states have filled that gap. Here are the ones to know, with the details that affect a call floor.

The table summarizes a 2026 state-by-state review of employee monitoring laws.

New York

Employers with a place of business in New York that monitor or intercept telephone conversations, email or internet access must give prior written notice on hiring, get the employee’s written or electronic acknowledgment, and post the notice where employees can see it. The Attorney General can impose civil penalties of up to $500 for a first offense, $1,000 for a second, and $3,000 for the third and each later one.

Delaware

Delaware requires prior written notice, or a daily electronic notice, before an employer monitors telephone conversations, email or internet use. Exceptions cover processes solely for computer system maintenance or protection and court-ordered actions. The law carries a $100 civil penalty per violation, enforced by the attorney general.

Connecticut

Connecticut rewrote its statute effective October 1, 2026. Employers must give affected employees prior written notice of the types of electronic monitoring and the specific locations where it may happen, and post the notice conspicuously. New hires on or after that date must also get a plain-language statement of which prohibited activities may be monitored without prior notice. If your handbook was written before the change, have it updated.

Maine and California

Maine’s employer surveillance law took effect July 29, 2026, and California enacted AB 1883, AB 1331 and SB 947 on September 30. According to the same 2026 state-by-state review, those California bills restrict AI tools that infer emotions or collect neural data, workplace bathroom surveillance, and automated discipline or termination decisions. None of the laws in that review ban monitoring outright. They set conditions on it.

What to do if you have no state notice law

If none of these states apply to you, give notice anyway. Texas guidance recommends it, a written policy removes arguments about expectations of privacy, and agents who know how calls are reviewed tend to accept coaching more readily. Put the notice in the handbook, the offer letter and the onboarding packet, and have each agent sign an acknowledgment.

One-party and all-party consent for call recording

Notice to employees is one question. Consent from the person on the other end is another, and it is the one that creates most of the risk for insurance agencies.

In the 37 one-party consent states and the District of Columbia, a manager who participates in a conversation may record it without notifying the other parties. In the all-party states, every participant must consent before recording starts, at least for some types of conversation.

The all-party list in the research is: California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Montana, Nevada, New Hampshire, Oregon, Pennsylvania and Washington. Some have wrinkles:

• Connecticut and Nevada: all-party consent for phone calls, one-party for in-person conversations.
• Oregon: one-party consent for phone calls, but participants must be informed about in-person recordings.
• California: Penal Code § 632 requires consent of all parties to record a confidential communication.

California’s penalties are steep. A violation of § 632 carries a fine of up to $2,500 per violation, up to one year in county jail, or both, and repeat offenders face fines up to $10,000 per violation. Section 632.7 goes further and covers calls involving cellular or cordless phones whether or not the conversation is confidential.

For more detail on how these states affect agencies in particular, see our guide to two-party consent states and call recording rules and the breakdown of call recording compliance for dialers.

Monitoring when agents and callers are in different states

This is where most agencies need a plan. An agent in Texas dials a prospect in California. A remote supervisor in Florida listens in on a call between a Nevada agent and a Pennsylvania prospect. Which state’s rule governs?

There is no single answer you can count on, and courts have not treated the question uniformly. One data point matters a lot: in Kearney v. Salomon Smith Barney (2006), the California Supreme Court applied California’s rule to calls recorded out of state. A call made from a one-party state into California can still expose you to California law.

The workable approach is to treat every call as if it were subject to the strictest state rule in play. In practice:

1. Disclose on every call. Open every recorded call with a clear recording notice, and record only after the caller has heard it. If the caller stays on the line after the notice, that is how most agencies document consent. Ask your counsel to confirm the wording for your states.
2. Use one policy, not 50. A single national script is easier to train, audit and defend than state-by-state variations.
3. Cover inbound too. Inbound lines, IVR and call-back numbers need the same notice as outbound.
4. Watch state of the employee as well as the caller. If an agent works in New York, Connecticut, Delaware or Maine, the employee notice rules apply to that agent’s monitoring.
5. Keep your consent records. Store the recording, the disclosure and the timestamp together so you can produce them if challenged.

Outbound telemarketing adds its own consent layer under the TCPA, separate from recording consent. Our guides on TCPA compliance for insurance agents and express written consent cover that side.

Where monitoring stops: restrooms, locker rooms and personal calls

Some limits hold in every state:

• No audio or video recording in bathrooms, locker rooms or changing areas. One legal reference states this is a crime in every state.
• California Labor Code § 435 bars audio or video recordings in restrooms, locker rooms or rooms designated for changing clothes, except by court order. A violation is an infraction, and the employer may not use the recording for any purpose.
• Personal calls stay outside what you may listen to, as covered in the federal section above.

For a call floor, these rules rarely come up in practice, but they matter for remote setups. If agents work from home, your monitoring should cover the dialer, the business line and the CRM, not the room.

AI scoring and automated decisions

Most call floors now use software to score calls, flag compliance misses and surface coaching moments. That is lawful in itself, and consent and notice rules apply to it the same way they do to a supervisor listening live. What is changing is how states treat AI that goes beyond the call itself.

As noted above, California’s September 30 legislation restricts AI tools that infer emotions or collect neural data and limits automated discipline or termination decisions. A scoring tool that grades script adherence, disclosure language and call outcomes is different from one that tries to read an agent’s mood. To stay on safe ground:

• Score what you can document: required disclosures, script compliance, objection handling, call outcomes.
• Skip emotion inference on agents.
• Make sure a manager reviews every score before it affects pay, discipline or termination.
• Tell agents what is scored and how the scores are used.

For a broader view on the ethics of AI in sales management, this AI sales ethics guide is worth a read. We also cover how consent affects automated call data in our piece on AI call summaries and consent, and on AI compliance monitoring for regulated call teams.

A compliant monitoring program, step by step

1. Write the policy. State what is monitored (business calls, texts, CRM activity), why (quality, training, compliance), and how recordings are stored and used.
2. Deliver notice and collect acknowledgments. Do it at hire, post it in the workplace, and for New York, Connecticut, Delaware and Maine follow each state’s form requirements.
3. Script the recording disclosure. Put it at the start of every call, outbound and inbound.
4. Separate business and personal lines. Tell agents not to take personal calls on recorded lines, and tell supervisors to leave a call that turns personal.
5. Limit access. Only supervisors, compliance and the agency owner should be able to play back recordings.
6. Set retention rules. Keep recordings as long as your compliance and E&O needs require, then delete them on a schedule your counsel approves.
7. Review annually. State laws are changing quickly. Connecticut and Maine both changed their rules in 2026.

Perspective: build monitoring into the dial, not around it

We see the same mistake on agency floors. Monitoring gets treated as a manager’s side job: someone clicks into a call, someone else downloads a recording, and the policy lives in a handbook nobody reads.

The agencies that stay out of trouble build it into the workflow. The disclosure plays or is read on every call. DNC and calling-hour checks run before the dial. Consent records sit next to the recording. Scoring happens on every call, not just the ones a manager happened to hear.

That is how we think about compliance infrastructure at RevRing.com. Monitoring rules differ by state, and a sales floor changes every week. If the checks happen automatically before each call, your team can spend its time selling and coaching instead of guessing which rule applies.

Marc

How RevRing.com fits

If you are setting up or tightening a monitoring program, the tooling matters as much as the policy. RevRing.com combines dialing, AI call scoring and coaching, recording notices and TCPA consent records on one platform for insurance agencies, with DNC and litigator checks and calling-hours rules by time zone running before each call. You can run on RevRing CRM or connect the CRM you already use.

AI call scoring is billed per scored call, and plans are per seat. See current rates on the RevRing.com pricing page, or look at how the platform works for insurance agencies.

FAQ

Can a supervisor listen to an agent’s calls without telling them?

Federal law allows monitoring of business calls in the ordinary course of business, but several states require advance notice, including New York, Connecticut, Delaware and Maine. Texas guidance also says employees and callers should be told in advance. The safest approach is written notice at hire and a signed acknowledgment.

Do I need consent from the prospect to record an insurance sales call?

In one-party states, the agent’s own consent is enough. In all-party states such as California, Florida, Illinois and Pennsylvania, every participant must consent. Because you often cannot be sure where a prospect is, most agencies disclose recording at the start of every call.

What happens if I record a call in violation of state law?

Penalties vary. California’s Penal Code § 632 carries fines of up to $2,500 per violation, jail time of up to a year, or both, and up to $10,000 per violation for repeat offenders. The federal Wiretap Act can carry up to five years in prison for intentional interception without consent. Talk to your attorney about civil exposure in your states.

Can I monitor agents working from home?

Yes, for business calls and work systems, with the same notice and consent rules. Maine’s 2026 law puts strict limits on home monitoring and surveillance, so check it if you have agents there. Keep monitoring to the dialer, business line and CRM.

Can AI score my agents’ calls?

Yes, with the same notice and recording disclosure you use for any monitoring. California’s new laws restrict AI that infers emotions and automated discipline or termination decisions, so keep a manager in the loop on any decision that affects an agent’s pay or job.

Sources

• Wiretapping in the Workplace (Lexology)
• Electronic Communications Privacy Act of 1986 (Bureau of Justice Assistance)
• Recording Phone Calls and Conversations: 50 State Survey (Justia)
• Federal Wiretap Act and ECPA: The Complete Guide
• Workplace Privacy (California Department of Justice)
• Telephone Monitoring (Texas Workforce Commission)
• Monitoring Employees’ Telephone Use (Texas Workforce Commission)
• Employee Monitoring Laws by State (2026 Update)
• New York Civil Rights Law § 52-c
• Employees Electronic Privacy Rights Memo
• Connecticut Workplace Recording Laws
• Can an Employer Record Conversations Without Consent?
• California Penal Code § 632
• Can You Record Your Boss in California?
• California Workplace Recording Laws
• AI Sales Ethics: A Practical Guide for Sales Leaders