### Answer
Based on the available sources, here are the key legal requirements for implementing AI voice agents in businesses like pool builders or HVAC:
Consent Requirements
- You must obtain
prior express consent for auto-dialed or prerecorded calls/texts from the called party [(1) ](
)
- Consent documentation (which may be required
in writing for certain types of calls) must be preserved for at least the minimum time prescribed by applicable law, but
no less than five years
- Consider consent language like:
"You consent to be contacted by [Company] via phone, text message, and email, including communications that may utilize AI-generated voice or text content..."
Call Recording Laws
- Call recording laws vary by state, with many requiring **two-party consent**—meaning your AI voice agent must disclose recording or reroute the conversation depending on the location [(2) ](
)
Security & Compliance Considerations
- End-to-end call encryption
- SOC 2 or ISO 27001 compliance
- Spam/fraud prevention measures
- Regional data controls (GDPR)
Practical Tip
Build dynamic prompts that adjust consent disclosures based on area code or data source to stay compliant without adding friction
The sources recommend consulting with a
TCPA compliance attorney for definitive answers on nuanced legal matters, as specifics around checkbox consent, double opt-in/OTP requirements, and consent expiration timelines aren't fully covered in the documentation [(1) ](
)
Check out these resources for more details:
- [Ethics and AI Phone Calls](
)