### Answer Retell AI supports several compliance frameworks that would be relevant for NYC-based businesses: General Compliance Support: - GDPR (General Data Protection Regulation) [(1) ]() - HIPAA compliance with Business Associate Agreement (BAA) available , [(2) ]() , [(3) ]() - SOC 2 Type II certification [(1) ]() , [(4) ]() - CCPA (California Consumer Privacy Act) [(1) ]() - PCI-DSS compliance - TCPA (Telephone Consumer Protection Act) compliance - *National Do Not Call List (DNCL) * compliance - STIR/SHAKEN for caller ID authentication Security Features: - End-to-end encryption (256-bit encryption for stored recordings and transcripts) , [(4) ]() - Access controls and audit logging , [(3) ]() - PII redaction capabilities with scrubbed recordings available [(5) ]() For HIPAA-Specific Needs (e.g., healthcare businesses) : - Sign a BAA with Retell [(3) ]() , [(6) ]() - Data remains encrypted in transit and at rest [(3) ](

.com/channels/1186424376300679209/1394351588180758660) - Audit-logged according to HIPAA and SOC 2 standards I don't have information about NYC-specific local regulations (such as NYC Local Law requirements) . For specific NYC compliance questions, I'd recommend reaching out to [Contact Sales]() .

​ To learn more, see the sources I considered: [[1] Why Enterprise Security Matters for Voice AI | Retell AI](https://www.retellai.com/blog/why-enterprise-security-is-important-for-voice-ai-technology) [[2] Best Use Cases for AI Voice Agents | Retell AI](https://www.retellai.com/blog/best-use-cases-for-ai-voice-agents) [[3] HIPPA question](https://discord.com/channels/1186424376300679209/1394351588180758660) [[4] ](https://www.retellai.com/resources/68-percent-collection-agencies-adopt-post-call-ai-analytics-compliance-audits-2026) [[5] Update Call](https://docs.retellai.com/api-references/update-call) [[6] HIPPA COMPLIANT VOICE AGENT](https://discord.com/channels/1186424376300679209/1399770131587924120) ​

Feel free to tag @AI Evy with additional questions. I also appreciate feedback, it helps me improve.

### Answer Here are the key FCC rules regarding AI/prerecorded voice disclosures: ## Prohibition Without Consent In February 2024, the FCC issued a Declaratory Ruling clarifying that calls utilizing AI-generated voices are considered "artificial" under the Telephone Consumer Protection Act (TCPA) . [(1) ]() Making AI-generated cold calls without obtaining prior express consent from the recipient is prohibited. ## Disclosure Requirements The FCC proposed new rules in August 2024 that would require callers to disclose the use of AI-generated voices at the beginning of the call. This ensures consumers are immediately aware when interacting with an AI-generated voice. Retell AI's Terms of Service also require users to include a disclosure of AI voice use at the beginning of the call. [(2) ]() ## One-to-One Consent Rule The FCC's One-to-One Consent Rule (now scheduled for January 26, 2026) mandates that businesses must obtain "prior express written consent" from consumers before sending marketing communications related to a specific seller. [(3) ]() Each consumer must provide separate and distinct consent for each seller or entity that wishes to communicate with them. ## Key Requirements for Businesses - Obtain explicit consent from individuals before initiating AI-generated calls [(1) ]() - Clearly disclose the use of AI-generated voices at the start of each call - Maintain documentation of consent for at least five years [(2) ]() - Include an automated interactive telemarketing opt-out mechanism at

the outset of prerecorded messages ## Penalties Non-compliance can lead to significant fines. For example, Lingo Telecom agreed to pay a $1 million fine for transmitting AI-generated robocalls that imitated President Biden's voice without proper disclosure. [(1) ]() For more details, see: [FCC One-to-One Consent Rule: Are You Ready?]() and [AI Phone Calls: Are AI Voices Legal?]()

​ To learn more, see the sources I considered: [[1] AI Phone Calls: Are AI Voices Legal? | Retell AI](https://www.retellai.com/blog/ethics-and-ai-phone-calls-are-ai-voices-legal) [[2] Retell | Terms Of Service](https://www.retellai.com/legal/terms-of-service) [[3] FCC One-to-One Consent Rule: Are You Ready? | Retell AI](https://www.retellai.com/blog/the-impact-of-the-fccs-one-to-one-consent-rule-preparing-for-increased-litigation-risks) ​

Feel free to tag @AI Evy with additional questions. I also appreciate feedback, it helps me improve.

### Answer Retell AI does not automatically add an AI disclosure at the beginning of outbound calls. You are responsible for configuring your agent to include this disclosure. When setting up your AI voice agent, you should include the AI disclosure as part of your agent's first sentence or opening script. This is something you configure when creating or customizing your agent—Retell AI gives you full control over what the agent says at the start of each call. [(1) ]() For example, when using the Create Phone Call API, you can use parameters like

retell_llm_dynamic_variables

to inject dynamic content into your prompts, but the actual disclosure wording needs to be built into your agent's prompt or conversation flow. Key point: You must proactively design your agent's opening to include the required AI voice disclosure to comply with FCC rules. [(2) ]() Check out these resources for more details: - [AI Phone Calls: Are AI Voices Legal?]() - [How can I create an outbound call]()

​ To learn more, see the sources I considered: [[1] How can I create an outbound call](https://retell.discourse.group/t/how-can-i-create-an-outbound-call/132) [[2] AI Phone Calls: Are AI Voices Legal? | Retell AI](https://www.retellai.com/blog/ethics-and-ai-phone-calls-are-ai-voices-legal) ​

Feel free to tag @AI Evy with additional questions. I also appreciate feedback, it helps me improve.

@AI Evy Can I call without maintaing TCPA?

### Answer No, you cannot use Retell AI without maintaining TCPA compliance. [(1) ]() Retell AI's Terms of Service explicitly require you to comply with applicable laws, including the TCPA. Key requirements include: - Obtaining prior express consent for auto-dialed or prerecorded calls before contacting the called party - Documenting proof of consent and preserving it for no less than five years - Scrubbing phone numbers against Do-Not-Call (DNC) lists regularly (at least every 31 days) - Including a disclosure of AI voice use at the beginning of the call - Including an automated opt-out mechanism at the outset of prerecorded messages - Not making certain calls before 8 a.m. or after 9 p.m. at the called party's location Retell AI retains the right to audit your use of their services to ensure compliance with applicable laws. Non-compliance can result in significant penalties—FDCPA violations can carry penalties up to $1,000 per incident, and TCPA violations can lead to fines and class-action lawsuits. [(2) ]() , [(3) ]() For more details, see: [Retell Terms of Service]()

Feel free to tag @AI Evy with additional questions. I also appreciate feedback, it helps me improve.

​ To learn more, see the sources I considered: [[1] Retell | Terms Of Service](https://www.retellai.com/legal/terms-of-service) [[2] AI Phone Calls: Are AI Voices Legal? | Retell AI](https://www.retellai.com/blog/ethics-and-ai-phone-calls-are-ai-voices-legal) [[3] ](https://www.retellai.com/resources/68-percent-collection-agencies-adopt-post-call-ai-analytics-compliance-audits-2026) ​