If you don't have consent, this would be one of the RARE instances of a Title I violation under the ECPA.