Licensing company data in Pennsylvania: the recording rule matters most
Pennsylvania has no comprehensive consumer privacy law. For a company here the limits that bite are older ones: a wiretap statute that requires every party to consent to recording a call, a breach notification act, and the federal rules attached to specific kinds of data. If a Pennsylvania company holds call recordings, the wiretap act is where to start.
Where Pennsylvania stands
| Question | Answer as of 2 November 2026 |
|---|---|
| Comprehensive privacy law | No. It is not on the list of enacted state laws kept by the tracker we checked on 2 November 2026. |
| Recording calls | The Wiretapping and Electronic Surveillance Control Act, 18 Pa.C.S. 5701 and following, generally requires all parties to consent to a recorded conversation. |
| Breach notice | The Breach of Personal Information Notification Act, 73 P.S. 2301 and following. |
| Who enforces | The Attorney General for the consumer laws; individuals may bring claims under the wiretap act. |
What all-party consent does to an archive of calls
A Pennsylvania company that recorded calls with a notice at the start of each one can usually show the other side agreed. A company that recorded without a notice, or only for some lines, has an archive with gaps, and a recording made without consent is not something to license. Reviewing how the notice was given, line by line, takes less time than defending a claim later.
The same question arises for video meetings recorded with participants from several states. The strictest consent rule among the participants is the safe one.
Records that do not involve a recording
Email, tickets, chat, job records and project files are not covered by the wiretap act in the same way, because they are stored communications and documents. For these, the limits are the ones that apply everywhere: contract terms with customers, the company’s own privacy promises and the federal rules for health and financial data.
A Pennsylvania company that closes can still be sued over a breach of an old archive, so the breach act is a reason to destroy or de-identify what will not be kept.
Read next
- United States rules. The federal laws behind every state.
- Other states. What each state adds.
- De-identification. How personal detail comes out.
- Liability. Who answers for what in a deal.
Questions about licensing company data in Pennsylvania: the recording rule matters most
Does Pennsylvania have a privacy law like California’s?
Not as of the date above. Bills have been introduced and the tracker we checked lists none enacted.
Is one-party consent enough for recordings?
Not under the Pennsylvania wiretap act as a general rule. All parties to the conversation generally need to consent.
Do the rules cover email?
The wiretap act is about intercepting communications. Stored email falls under other laws and under the company’s contracts and promises.
Didn't find your question? Ask us directly.