Is it legal for a university to record students during an online exam?

TL;DR: Generally yes, as long as students are notified in advance and consent is built into enrollment or course policies — but the details depend on your state's wiretapping law. Some US states require all-party consent for audio recording, which most institutions satisfy through a syllabus disclosure or clickthrough agreement before the exam starts.

The Evidence

Recording law in the US splits into two camps: one-party consent states, where only one participant needs to know recording is happening, and all-party (two-party) consent states — including California, Illinois, Florida, Pennsylvania, and others — where every recorded participant must be notified. Video-only recording (no audio) generally falls outside wiretapping statutes entirely, since those laws target audio communications specifically; it's the audio layer of proctoring — mic monitoring for a second voice or coaching — that triggers all-party consent requirements.

In practice, this isn't usually a legal minefield for institutions, because proctoring is disclosed, not secret. A student who enrolls in a course with a published exam policy stating "this exam is proctored, including audio and video recording" and then proceeds to take the exam has been given notice and, functionally, consented — the same logic that makes disclosed workplace call recording lawful. Courts have historically drawn a hard line at surreptitious recording; disclosed proctoring during an exam a student chooses to take doesn't fit that pattern. FERPA adds a separate layer: exam recordings become part of a student's education record, which brings its own access and retention obligations, distinct from the consent question.

Consent Requirements by Recording Type

Recording typeLegal triggerTypical institutional practice
Video only, no audioRarely covered by wiretapping lawDisclosed in exam policy
Video + audio, one-party stateInstitution's own knowledge sufficesDisclosed in exam policy
Video + audio, all-party stateEvery recorded person must be notifiedSyllabus disclosure + click-through consent before exam start
Recordings as education recordsFERPA, not wiretapping lawAccess, retention, and disclosure rules apply separately

How to Stay on Solid Ground

  1. State clearly in the syllabus and exam instructions that the exam is AI-proctored, including what's recorded (webcam, screen, audio).
  2. Require a click-through acknowledgment immediately before the exam starts, not buried in a handbook nobody reads.
  3. Check your state's consent requirement for audio — if it's an all-party state, make sure the disclosure explicitly covers audio.
  4. Set a clear, published retention period for recordings and follow it consistently.
  5. When in doubt on a specific state or international jurisdiction, get sign-off from institutional counsel — this article is not legal advice.

FAQ

Does video-only proctoring need special consent? Usually no — most wiretapping statutes govern audio communications, not video. Video recording still triggers FERPA education-record obligations, but not the same consent statute.

What if a student doesn't want to be recorded? Institutions typically frame proctoring as a condition of taking a proctored exam, with accommodations (alternate format, in-person option) available on request — similar to other exam accommodations.

Is this different outside the US? Yes — GDPR in the EU/UK treats biometric and video data as sensitive personal data with stricter consent and purpose-limitation requirements than most US state laws.

Who owns the recording — the student or the school? It's part of the student's education record under FERPA, which governs who can access it, not who "owns" it in a copyright sense.

By Pinal Dave Last updated: 2026-07-25