Is it illegal to make an AI voice of someone?

The Short Answer: Not Illegal, But Consent Is the Line

Cloning your own voice is legal everywhere, while cloning someone else's voice without documented consent is where liability begins. The key legal threshold is whether the synthetic voice is "readily identifiable" as a specific individual—meaning even imperfect clones that listeners recognize can trigger legal exposure under right-of-publicity, biometric privacy, and consumer protection laws.

For businesses using AI voice technology in lead generation or customer outreach, this distinction is critical. GrowthPros emphasizes that all AI follow-up sequences use either client-owned voice profiles or fully licensed synthetic voices to ensure compliance from the first point of contact. Documented consent must specify purpose, duration, distribution scope, and revocation processes, as required by evolving state laws and platform policies.

• Tennessee's ELVIS Act (2024) was the first state law to explicitly extend right-of-publicity protection to AI voice clones, covering living individuals and deceased persons for up to 10 years after death.
• The NO FAKES Act cleared the Senate Judiciary Committee by unanimous voice vote in June 2026, proposing a federal intellectual property right in a person's voice that does not expire at death and passes to heirs.
• Audience preference data shows 55% of listeners trust human voices compared to only 23% for AI-generated content, creating reputational risks that may exceed legal exposure.

Platform policies on YouTube, TikTok, and Spotify prohibit unauthorized voice cloning and enable rapid takedowns through abuse reporting, often faster than legal action. Meanwhile, the EU AI Act classifies certain voice cloning applications as high-risk, with penalties up to 35 million euros or 7% of global annual turnover for violations. These layered regulations mean businesses must verify consent not just for legal compliance, but to maintain audience trust and avoid platform penalties.

Ultimately, the compliance question centers on consent verification and liability allocation—not whether the technology itself is permissible. For lead-based businesses, ensuring every AI voice interaction stems from properly documented permission protects both the brand and the consumer from the outset.

The Legal Patchwork: State Laws, Federal Bills, and Platforms

The legal ground beneath AI voice cloning shifts weekly. What was a gray area six months ago now carries criminal penalties in Tennessee, disclosure mandates in Nevada, and platform takedowns that move faster than any court order.

Tennessee's ELVIS Act, signed in March 2024, became the first state law to explicitly extend right-of-publicity protection to AI voice clones. It imposes criminal penalties of up to 11 months incarceration and a $2,500 fine for unauthorized commercial use, and protects deceased individuals for up to 10 years after death. California followed with AB 1836, which sets penalties at $10,000 or actual damages—whichever is greater—for unauthorized digital replicas of deceased personalities. Meanwhile, Nevada and Arizona now require commercial entertainment applications using voice cloning to include labels or watermarks indicating AI synthesis.

• NO FAKES Act (S. 4591): Cleared the Senate Judiciary Committee by unanimous voice vote in June 2026; would create a federal IP right in voice and likeness that survives death and passes to heirs
• TAKE IT DOWN Act: Criminalizes knowing distribution of non-consensual deepfakes and mandates platform removal within defined timeframes
• EU AI Act: Classifies certain voice cloning applications as high-risk, with penalties up to €35 million or 7% of global annual turnover
• California SB 1050: Requires disclosure of synthetic performers in ads but explicitly excludes direct voice cloning of recognizable individuals from its scope

Platform policies act as a parallel enforcement layer. Spotify, YouTube, TikTok, and Apple Music all prohibit unauthorized voice cloning and process takedowns through standard abuse channels—often within hours. For businesses deploying AI voice at scale, this patchwork means compliance isn't a one-time checklist. It's a moving target that demands consent verification, jurisdictional tracking, and audit trails on every generated asset.

GrowthPros builds that infrastructure into every lead we deliver. Each contact arrives with a consent record—disclosure text, timestamp, IP address, and the named contacting party—so your outreach starts on solid ground. DNC-scrubbed lists, immediate opt-out propagation, and FCC one-to-one consent direction are baked in, not bolted on.

How to Clone a Voice Legally: Consent Documentation Done Right

Creating a legally compliant AI voice clone requires more than technical capability—it demands rigorous consent documentation that specifies exactly how the voice will be used. Valid consent must clearly define the purpose (e.g., marketing, customer service), duration of use, geographic or platform-based distribution scope, permissions for third-party sharing, and a straightforward revocation process, as emphasized by industry guidance on informed consent requirements. Publicly available audio, such as interviews or social media posts, does not grant permission to clone a voice, a critical distinction underscored by technical experts who warn that explicit consent requires verifiable permission from the individual, including disclosure of intended use.

For businesses seeking a licensing alternative, models like Grimes' Elf.Tech offer a practical framework: providing 50% royalties on master recordings in exchange for authorized voice use, thereby transforming consent into a structured commercial agreement. This approach aligns with evolving best practices from SAG-AFTRA, which now mandates informed consent, fair compensation, and performer control over digital voice replicas as union standards. At GrowthPros, we apply similar rigor to lead compliance—ensuring every contact includes a consent record with disclosure text, timestamp, and named contacting party—because whether cloning voices or activating leads, documented permission isn’t just legal protection; it’s the foundation of trust in AI-driven outreach.

The Trust Gap: Why Disclosure Protects More Than Your Legal Exposure

The Trust Gap: Why Disclosure Protects More Than Your Legal Exposure

Audiences demonstrate a clear preference for human voices, with 55% of listeners trusting human voices compared to only 23% for AI-generated content, creating a significant trust deficit that extends far beyond legal compliance concerns. This gap becomes critical in customer-facing communications where trust directly influences conversion rates, especially when leads are followed up within minutes to maximize contact likelihood.

Voice cloning fraud has escalated dramatically, reaching an estimated $25 billion globally in 2025, while vishing attacks surged 350% year over year, eroding consumer confidence in voice-based interactions regardless of intent. These trends underscore that even legitimate AI voice applications face heightened scrutiny, as recipients increasingly associate synthetic voices with deception unless transparency is proactively established.

For businesses leveraging AI in lead follow-up—such as GrowthPros’ AI Speed-to-Lead service that delivers voice, SMS, and email responses within five minutes—this trust gap necessitates a strategic approach. Hybrid human-AI models, where AI handles initial qualification and humans step in for relationship-building, can bridge the divide while maintaining efficiency. Transparent disclosure about AI use, particularly in jurisdictions like Nevada and Arizona that require labeling for commercial voice cloning, transforms a potential liability into a demonstration of integrity.

Ultimately, protecting your reputation requires more than avoiding legal penalties; it demands recognizing that trust is the currency of conversion. When 55% of your audience inherently favors human interaction, disclosure isn’t just compliant—it’s the foundation of sustainable engagement.

For Businesses Buying Leads: Consent Trails and Compliant AI Follow-Up

For businesses buying leads, consent isn't just a box to check—it's the foundation of compliant AI follow-up. Every lead you purchase should carry a verifiable consent trail: the exact disclosure text presented, timestamp, IP address, and the named contacting party who obtained permission. This record isn't merely administrative; it's your legal safeguard when deploying AI voice, SMS, or email sequences within minutes of lead delivery. Without it, even a perfectly timed follow-up risks violating evolving consent standards that now treat voice as a protected biometric identifier under laws like Illinois' BIPA and expanding right-of-publicity statutes.

The FCC's one-to-one consent direction, reinforced by state laws such as Tennessee's ELVIS Act, requires that permission for AI voice outreach be specific, informed, and tied to a defined use case—blanket authorizations no longer suffice. Before a vendor places an AI voice on the phone with your prospects, verify three things: first, that the lead's consent record explicitly covers AI-generated voice contact for your specific niche and offering; second, that the list has been DNC-scrubbed against the national registry and any applicable state-specific opt-out lists; and third, that the vendor honors opt-outs permanently across all channels—voice, SMS, and email—as required by both TCPA guidance and emerging AI-specific regulations. GrowthPros builds this verification into every lead delivery, attaching the consent trail directly to each record in your CRM so compliance travels with the opportunity.

When consent is properly documented and scoped, AI follow-up becomes a powerful compliance-enabled accelerator rather than a liability. Leads contacted within five minutes are roughly 100x more likely to engage than those reached at thirty minutes, and 78% of buyers choose the vendor who responds first—turning speed into a measurable conversion advantage. But speed without consent invites risk; the most effective lead generation strategies now treat consent verification as the prerequisite to velocity, not an obstacle to it. The qualification call is where fit is confirmed and compliance is confirmed—book yours to see how consent-recorded leads transform your pipeline.