Sapna has completed a Bachelor of Arts/Laws. Since graduating, she's worked primarily in the field of legal research and writing, and she now writes for Sprintlaw.
Recording customer and supplier calls has become normal for many Australian businesses - especially if you operate online, handle bookings, provide advice, or run a contact centre.
But “normal” doesn’t automatically mean “legal”. Australia doesn’t have one simple, nationwide rule for recording phone calls. Instead, the law can depend on where the people on the call are located, why you’re recording, whether you tell them, and what you do with the recording afterwards.
In this guide, we’ll walk you through the key legal issues to consider in 2026, in plain English, so you can build a call recording approach that protects your business (rather than creating a new compliance headache).
Why Do Businesses Record Calls (And What Are The Legal Risks)?
There are plenty of legitimate reasons you might want to record calls in your business, including:
- Training and quality assurance: helping staff learn how to handle customer questions properly.
- Dispute resolution: keeping an accurate record of what was said (for example, what a customer agreed to pay or what you promised to deliver).
- Compliance and auditing: particularly in regulated industries where you must show what advice or information was given.
- Security and fraud prevention: identifying suspicious activity or unauthorised account access.
Those reasons are sensible - but the legal risks are real if you record improperly.
If you record a call unlawfully (or handle recordings carelessly), issues can include:
- breaches of state/territory surveillance or listening device laws
- privacy compliance problems (including complaints and regulator attention)
- loss of customer trust and reputational damage
- problems using recordings in a dispute (for example, if you can’t lawfully rely on it, or it creates a bigger issue than the original dispute)
As a starting point, it helps to understand that call recording is usually treated as “recording a private conversation” - and that typically triggers consent requirements.
Is It Legal To Record Business Calls In Australia?
Often, yes - but it depends on consent and context.
Australia’s call recording rules are not just about whether you’re a business or an individual. The key questions tend to be:
- Did at least one party consent to the recording (or did all parties need to consent)?
- Where is each person located when the call happens (because state/territory rules can differ)?
- What is the purpose of recording the call?
- What will you do with the recording (store it, share it, use it for training, publish it, etc.)?
Even if recording is permitted, you also need to think about privacy and data handling - especially if the recording captures personal information, payment information, health information, or anything sensitive.
If you want a broader overview of how these rules fit together across Australia, the principles discussed in recording laws are a useful frame to keep in mind, because phone calls are only one part of the wider “surveillance and recording” landscape.
Consent: The Practical Rule Of Thumb For Businesses
From a risk-management perspective, the safest business approach is usually:
- tell people clearly that the call will be recorded (before recording starts), and
- give them a real choice (for example, to continue without recording, use email, or call another number that is not recorded).
Many businesses do this with an automated message: “This call may be recorded for training and quality assurance.” In practice, you’ll often want to be even clearer than “may be” - because if you’re actually recording, clarity reduces disputes later.
It’s also worth remembering: consent is not just about a single sentence at the start of a call. If you later use the recording for a new purpose (for example, marketing content, public posting, or sharing externally), that can raise a different set of legal issues.
One-Party Consent Vs All-Party Consent (Why It Matters)
In Australia, some jurisdictions are commonly understood as “one-party consent” (meaning one person involved in the conversation can consent to recording), while others are more restrictive and may require “all-party consent” in practice.
That sounds simple - until you’re a business taking calls from all over Australia (or from overseas). That’s why a consistent, conservative compliance approach is usually best: design your system to obtain and document consent every time.
For a general explanation of the legal question many business owners start with, phone call recording is a helpful starting point.
State And Territory Differences You Need To Consider In 2026
If your business takes calls with people across Australia, you should assume more than one set of laws may be relevant.
Even if your business is “based” in one state, the other person may be physically located somewhere else when they answer - and that location can affect which rules apply.
Because the law and how it is enforced can be nuanced, the best way to treat this section is as a practical checklist of what to look out for - not a reason to take a “wait and see” approach.
Queensland
If you or your team are located in Queensland, or you commonly deal with customers in Queensland, it’s important to understand the local position on recording private conversations.
In particular, you should be careful about recording calls where you haven’t clearly notified the other party, and you should be cautious about any sharing or secondary use of recordings.
We often see business owners look for Queensland-specific guidance when setting up call scripts and customer service processes, and Queensland recording is a useful reference point when you’re designing your workflow.
New South Wales
New South Wales businesses often record calls for booking confirmations, service updates, and customer support - and it’s essential your staff understand when they can record and when they can’t.
As a practical matter, NSW businesses should also be careful about how recordings are stored and who can access them internally.
If NSW is part of your operating footprint, NSW recording is worth keeping on your radar when you’re setting internal rules.
Victoria
Victoria has its own surveillance and recording framework, and Victorian businesses should be especially cautious about recording calls without clear notice and consent.
It’s also common for Victorian workplaces to have broader surveillance practices (for example, CCTV in premises) which can overlap with governance and policy issues.
If you operate from Victoria, or have staff located there, Victoria recording laws can help you understand the compliance context you’re working in.
Calls Across Borders (Different States Or Overseas)
Here’s the tricky part: a single call can involve people in different states - and possibly outside Australia.
When that happens, a sensible business approach is to:
- apply the most restrictive consent standard across your business (so your process works no matter where the other party is)
- ensure consent is obtained before recording starts
- avoid ad-hoc recording by staff on personal devices (which can be harder to govern and secure)
If you’re building a national customer support function, it can be worth getting advice on a single recording and privacy framework you can apply consistently across all teams.
How To Record Calls Legally: A Practical Compliance Checklist
If you’re trying to build a compliant system (rather than just “hit record and hope”), here’s a practical way to approach it.
1) Decide Why You’re Recording (And Keep It Specific)
Start with a clear purpose. For example:
- “We record calls for training and quality assurance.”
- “We record calls to keep accurate records of customer instructions.”
- “We record calls to investigate complaints and disputes.”
The more specific your purpose is, the easier it is to:
- explain it to customers and staff
- limit access internally
- set retention periods (how long you keep the recordings)
- avoid “function creep” (using recordings for new purposes later)
2) Build A Clear Consent Script (And Use It Every Time)
A good consent process is consistent. Many businesses use:
- an automated message at call start (best for inbound call queues), and/or
- a staff script (best for outbound calls, or where the system message is not reliable)
In practice, you want to avoid ambiguity. If you are recording, say so clearly. If the customer objects, your staff should know what to do next (for example, stop recording, switch channel, or escalate).
3) Limit Who Can Access Recordings
Recordings can contain sensitive information (names, addresses, complaints, financial details). From a business risk perspective, you should treat recordings like other sensitive business records.
Consider controls such as:
- role-based access (only certain staff can listen)
- audit logs (who accessed what, and when)
- separating “training” recordings from “complaints” recordings
- secure storage (including vendor due diligence if you use a call centre platform)
4) Be Careful When Sharing Or Using Recordings
Even where recording is legal, sharing a recording is a different risk category.
For example, using call audio for marketing, social media, testimonials, or internal “example calls” can raise consent and privacy issues, particularly if the person is identifiable.
If your business uses broader surveillance tools too, make sure your approach is consistent across channels. For example, some businesses who record calls also use workplace cameras, and the compliance thinking overlaps with workplace camera laws (especially around notification, policy, and appropriate use).
5) Set A Retention Period (Don’t Keep Recordings Forever “Just In Case”)
Holding recordings indefinitely is usually not a good idea.
Keeping recordings longer than you reasonably need can increase your exposure if there’s a data breach, an internal misuse issue, or a complaint.
Instead, decide:
- how long you genuinely need recordings for your purpose
- how you’ll delete recordings securely
- what you’ll keep longer (if anything) and why (for example, a call related to an active dispute)
What Policies And Legal Documents Should Your Business Have?
A compliant call recording process isn’t just about what your phone system does. It’s also about what your business promises publicly, what your staff are trained to do, and how you govern data internally.
Some key documents and settings to consider include:
- Privacy Policy: If your call recordings contain personal information (which they usually do), your Privacy Policy should clearly explain what you collect, why, how you store it, and who you disclose it to.
- Workplace policies: If your team records calls (or can access recordings), set clear rules about when recording is allowed, how recordings can be used, and what “misuse” looks like.
- Customer-facing notices and scripts: This includes your call queue message, outbound call script, and any website notices where relevant (for example, “calls are recorded for training and quality assurance”).
- Vendor and platform arrangements: If your telephony provider stores recordings in the cloud, you’ll want to understand where the data is hosted, who can access it, and what security settings are available.
If you’re collecting recordings as part of a wider customer support or complaint process, you should also make sure your approach lines up with your consumer law obligations - especially if recordings are used to evidence what was offered, promised, or agreed.
Workplace Recordings: Training Staff Is Part Of Compliance
Even the best-written policy won’t help if staff don’t understand it (or if your systems make it easy to do the wrong thing).
In 2026, common risk areas we see include:
- staff recording on personal mobiles “just to be safe”
- recordings being downloaded and shared informally in chat tools
- recordings used for a secondary purpose without clear consent (for example, marketing or public posts)
- unclear processes when a customer says “I don’t consent to being recorded”
A short training module and a clear escalation process can go a long way to keeping your practices consistent.
Key Takeaways
- Recording business calls in Australia can be legal, but you need to manage consent carefully and stay across state and territory differences.
- A consistent approach (clear notice, clear consent, and an opt-out pathway) is usually the safest way to operate if you take calls nationally.
- Call recordings often contain personal information, so privacy compliance and secure storage matter just as much as “can we record?”
- How you use and share recordings can create legal risk even where the original recording was permitted.
- Strong internal policies, staff training, and sensible retention periods help reduce the chance of complaints, disputes, and data mishandling.
If you’d like a consultation about recording calls in your business (including consent scripts, internal policies, and privacy compliance), you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.


