Recording Law for Voiceprints & Biometric Data in New Jersey

New Jersey lets you record any conversation you’re part of without telling the other people, provided you comply with the New Jersey Wiretapping and Electronic Surveillance Control Act, specifically N.J.S.A. 2A:156A-4(d). That section says it’s lawful to intercept a communication if you’re a party to it or have the prior consent of one party, and the interception is not done to commit any criminal or tortious act. The Act’s one-party consent rule applies uniformly to wire, electronic, and oral communications, but the statutory framework treats these categories differently: phone calls and electronic communications (e.g., texts) are covered by the Act regardless of any expectation of privacy, while in-person speech must first qualify as a protected 'oral communication' under N.J.S.A. 2A:156A-2(b) — defined as 'any oral communication uttered by a person exhibiting an expectation that such communication is not subject to interception under circumstances justifying such expectation.' So if you’re part of the conversation, you’re allowed to capture the audio; any later extraction of a voiceprint from that recording for identification purposes is governed by New Jersey’s Data Privacy Act, not the Wiretap Act.

New Jersey’s Data Privacy Act (N.J.S.A. 56:8-166.4 et seq.) treats a voiceprint as biometric data when it is generated to identify a specific person. The law defines 'biometric data' to include 'voiceprint' and states: 'Biometric data' means data generated by automatic or technological processing, measurements, or analysis of an individual's biological, physical, or behavioral characteristics, including, but not limited to, fingerprint, voiceprint, eye retinas, irises, facial mapping, facial geometry, facial templates, or other unique biological, physical, or behavioral patterns or characteristics that are used or intended to be used, singularly or in combination with each other or with other personal data, to identify a specific individual. 'Biometric data' shall not include: a digital or physical photograph; an audio or video recording; or any data generated from a digital or physical photograph, or an audio or video recording, unless such data is generated to identify a specific individual. A raw audio file alone is excluded from the definition of biometric data, but once you process that audio to create a voiceprint for identification, it falls under the law’s definition. The Act also says 'sensitive data' includes 'genetic or biometric data that may be processed for the purpose of uniquely identifying an individual,' which is exactly what a voice-enrollment feature does. So if you’re using a recorded voice to create a voiceprint for identification, you’re processing sensitive biometric data that requires consent under the Act.

If your use meets the Act’s thresholds, you must get the person’s consent before processing their biometric voiceprint. The law says you can’t process sensitive data without first obtaining the consumer’s consent that is 'freely given, specific, informed, and unambiguous'; consent obtained through 'dark patterns' or bundled into broad terms-of-use acceptance does not satisfy this standard. You also have to let people revoke consent easily and stop processing within 15 days of a revocation request. Before you start, you must do a written Data Protection Assessment and document it. The Act only applies if you process personal data of at least 100,000 New Jersey consumers in a calendar year (excluding data processed solely to complete a payment transaction), or 25,000 consumers and derive revenue or a discount from the sale of their data. Smaller uses may not trigger the Act at all.

The Wiretap Act only protects communications where the speaker exhibits an expectation that the conversation is not subject to interception under circumstances justifying such expectation, and this threshold applies only to 'oral communications' as defined in N.J.S.A. 2A:156A-2(b): 'any oral communication uttered by a person exhibiting an expectation that such communication is not subject to interception under circumstances justifying such expectation.' If you record in a public place or use a visible device, courts say there’s no such expectation. In Kinsella v. Welch, 362 N.J. Super. 143 (App. Div. 2003), the court held that filming in a hospital ER with a hand-held camera didn’t violate the Act because the camera’s presence would have been obvious to anyone nearby. So recording a street argument, a public meeting, or an on-duty police interaction with a visible device is very unlikely to run afoul of the Wiretap Act. Separately, silent video (no audio) is not restricted by the Wiretap Act because the Act only governs interception of 'wire,' 'electronic,' or 'oral' communications, and video without audio does not fall within those categories. The New Jersey Appellate Division held in State v. Diaz, 308 N.J. Super. 504 (App. Div. 1998), that the video portion of a recording does not come within the scope of the Wiretap Act.

Imagine you’re leading a team meeting in your office with five coworkers. You record the meeting with a visible device; because you’re a participant in the conversation, New Jersey’s one-party consent rule under N.J.S.A. 2A:156A-4(d) lets you record without telling the others. However, once you extract the voiceprints for identification, you’re processing biometric data that’s considered sensitive under the New Jersey Data Privacy Act (N.J.S.A. 56:8-166.4 et seq.). If your use meets the Act’s thresholds, you must get each person’s consent before processing their voiceprint. If you don’t, you risk enforcement by the Attorney General.

Recording a conversation without consent can trigger both criminal and civil penalties under the Wiretap Act. Unlawful interception is a crime of the third degree under N.J.S.A. 2A:156A-3, and anyone harmed by the recording can sue for actual damages or liquidated damages of $100 per day, whichever is higher, with a minimum of $1,000, plus reasonable attorneys’ fees and costs, under N.J.S.A. 2A:156A-24. For biometric data under the Data Privacy Act, the Attorney General can enforce violations as an unlawful practice under the New Jersey Consumer Fraud Act (N.J.S.A. 56:8-1 et seq.). The Act doesn’t allow private lawsuits, so only the state can bring an action. Before taking enforcement, the Division of Consumer Affairs must give you notice and a 30-day opportunity to cure, unless you’re a large controller processing data of at least 100,000 New Jersey consumers.

New Jersey has no statute that specifically permits or restricts recording on-duty police by a member of the public; instead, it follows the same one-party consent and public-place framework described above. An officer performing public duties in public ordinarily has no protected expectation of non-interception, and a person who is a party to the police interaction independently satisfies the one-party consent exception under N.J.S.A. 2A:156A-4(d). Beyond the wiretap statute, New Jersey sits in the Third Circuit (covering NJ, PA, DE, and the U.S. Virgin Islands), which recognized a First Amendment right to record on-duty police performing their duties in public in Fields v. City of Philadelphia, 862 F.3d 353 (3d Cir. 2017) (consolidating Fields and Geraci). The court held the right applies to any person with a recording device (not just press) and covers photo, video, and audio capture, though it found the right was not 'clearly established' before July 2017 for qualified-immunity purposes.