The Global Voice Call Regulation Guide for AI Agent Builders

If you make a voice call from a US number to an Israeli recipient, does TCPA apply?

No. And understanding why is the starting point for every AI voice calling deployment that touches more than one country.

TCPA (the Telephone Consumer Protection Act) protects US consumers -- it applies to calls made TO US numbers, regardless of where the caller is located. When you call an international number from a US line, the call routes out of US carrier networks via international SS7 interconnects. TCPA enforcement does not follow the call. What does follow: the destination country's own regulations.

This is the same principle as 10DLC for SMS (US domestic only), applied to voice. The origin country may have its own rules too, but the destination country is where the actual compliance burden lands.

Voice call regulation has several layers SMS does not. Live calls versus automated calls are treated differently in almost every jurisdiction. AI voice agents are now explicitly classified as automated systems by the FCC, TRAI, and others. Recording consent laws split countries into two camps. STIR/SHAKEN authentication is US-mandatory but barely adopted globally. And DNC registries -- which you must scrub before dialing -- exist in more than 20 countries.

This guide maps all of it.

The Two-Axis Framework (Same as SMS, but with more dimensions)

The origin × destination framework applies to voice exactly as it does to SMS. Each axis has its own requirements; the compliance burden for any given call is the union of both.

Origin-side rules are enforced by the sending country's carriers or law. TCPA is an example -- but it only applies when the called number is a US number, not when you call internationally. Similarly, Canada's CRTC ADAD rules and Australia's ACMA requirements travel with calls from those origins.

Destination-side rules govern what happens once the call arrives. Some countries have hard technical enforcement (call blocking, DNC registry checks enforced by carriers). Most enforce through legal liability -- the call reaches the recipient, but the caller is liable for violations.

The Critical Voice-Only Dimension: Live vs. Automated

Unlike SMS, voice call regulations in most countries draw a sharp line between live human calls and automated calls. This distinction matters enormously for AI agents.

In most jurisdictions:

AI voice agents fall firmly into the automated category in every jurisdiction that has addressed them:

If your AI agent makes calls, assume it is classified as automated everywhere. The live-call exemptions do not apply.

Origin-Side Requirements

The practical implication: if your agent runs on US infrastructure and calls US numbers, TCPA is the primary constraint. If it calls internationally, TCPA is irrelevant to those calls -- but each destination country's rules take over.

Destination-Side: The Three Tiers

Tier 1 countries -- about 6% of global destinations -- drive roughly 65% of commercial voice call volume. If your agents call US, Indian, UK, Canadian, Australian, UAE, Singaporean, New Zealand, South Korean, or Mexican numbers, you are in Tier 1 for those calls. Mandatory DNC scrubbing and hard legal enforcement apply.

Tier 1 -- DNC + Hard Enforcement

These countries have mandatory Do Not Call registries that must be checked before dialing, plus significant legal or financial penalties for violations.

Tier 2 -- Consent / Legal Compliance (traffic reaches recipient, liability applies)

European Union (all 27 member states)

The ePrivacy Directive distinguishes automated calls from live calls across the EU. Key rules:

Country-specific variations:

Israel

Israel's Ministry of Communications requires prior opt-in consent for automated voice calls. The Do Not Call Me registry (established December 2022) is administered by the Consumer Protection and Fair Trade Authority. Check it before every campaign. Time windows are informally 9AM-9PM Sunday-Thursday. Enforcement is active; administrative penalties apply. No carrier-level blocking, but legal liability is real.

Japan

The Act on Specified Commercial Transactions requires disclosing the caller's name, company, purpose, and goods/services at the START of any marketing call -- before soliciting. Calls are prohibited if the recipient has expressed unwillingness. No formal national DNC list; compliance is through documentation and caller identification. Content filtering applies. Consent documentation for data processing under APPI (amended April 2025) required.

South Korea

PIPA consent required. Telemarketers must disclose the source of contact information during the call (since September 2016). KCC DNC registry exists and must be checked. Calls to KCC-registered numbers without consent carry significant penalties. One-party recording consent applies (caller can record).

Brazil

LGPD (Lei Geral de Proteção de Dados) requires a lawful basis for calling. No formal national DNC registry. ANATEL rule (November 2025) requires companies making more than 500 calls per month to validate call origin before transmission. Opt-out mechanism mandatory. State-level consumer protection agencies actively enforce; class action exposure possible.

South Africa

POPIA Guidance Note (April 2025) clarified that voice calls are "electronic communications" requiring explicit consent -- and consent must be a positive action (not silence, not pre-ticked boxes). Recording of the consent on the call is recommended. A national Opt-Out Registry is launching in the 2025/26 financial year; once live, scrubbing will be mandatory.

Asia-Pacific (Tier 2)

Americas (outside US/Canada)

Tier 3 -- General Privacy Law Only

Most remaining destinations have no sector-specific voice call regulation. General consumer protection and data protection law applies. Traffic reaches recipients without technical blocking. Consent is good practice. This covers most of Sub-Saharan Africa (outside South Africa and Nigeria), Pacific islands, Central Asian countries, most of the Balkans, Central America, and the Caribbean. For these destinations, a standard consent workflow and opt-out mechanism is sufficient.

AI Disclosure: Which Countries Require It

This is the layer unique to voice that does not exist for SMS. Multiple jurisdictions now explicitly require that AI voice agents identify themselves as AI at the start of every call.

Practical rule: disclose AI at the start of every outbound call, regardless of destination. Countries without an explicit AI disclosure rule still have general anti-deception consumer protection laws that cover false representation. Saying "Hi, I'm calling from Acme -- this call uses AI" costs nothing and protects you everywhere.

Recording Consent Laws by Country

AI voice agents typically log or transcribe calls for quality, training, or compliance. Recording consent rules determine whether you can do that without notifying the called party.

One-party consent (caller can record without notifying the other party):

United States (federal + most states), United Kingdom, Canada, India, Australia, Sweden, most EU countries, South Korea, New Zealand, Brazil, Japan

All-party consent (must notify all parties before recording; criminal offense in some jurisdictions if violated):

Practical rule: announce recording at the start of every call ("This call may be recorded"). This satisfies all-party consent jurisdictions and costs nothing in one-party jurisdictions. AI agents should have this in their opening line globally.

STIR/SHAKEN: Where It Is (and Is Not) Enforced

STIR/SHAKEN is a cryptographic call authentication framework that verifies calls originated from the claimed number. It is the voice equivalent of DMARC for email -- and like DMARC, adoption is highly uneven.

The gap this creates: A US-to-US call carries STIR/SHAKEN attestation. A US-to-UK call strips that attestation when it crosses non-IP interconnection points. This means international calls from US numbers often arrive at the destination without authenticated caller ID -- and some destination countries (Belgium, Czech Republic, Ireland, Malta, Sweden since 2024) now block international calls that present a domestic caller ID without verification.

Practical implication for AI calling internationally:

Common Route Combinations for AI Agents

2025-2026 Enforcement Changes

Practical Compliance Checklist

Before your AI agent makes its first call to any destination:

The DNC scrubs that cause the hard legal exposure -- TCPA (US), TRAI DND (India), ACMA (Australia), TPS (UK), DNCL (Canada) -- are the ones to automate before your first call, not after the first fine.