If your business uses CCTV, records customer service calls, monitors employee emails, or captures content for marketing, you’re likely collecting audio or video in some way.
In New South Wales (NSW), this activity is tightly regulated. Recording without the right consent or notices can lead to penalties - and it can also damage trust with your staff and customers.
The good news is that with the right policies, notices and processes, you can record lawfully and responsibly. In this guide, we’ll walk through the key NSW recording laws, how they apply to businesses, and the practical steps to stay compliant.
What Do NSW Recording Laws Cover?
Three main laws are relevant to most workplace recording scenarios in NSW:
- Surveillance Devices Act 2007 (NSW) (SDA): Regulates the use of listening devices (audio), optical devices (video), and tracking devices in NSW. It also contains separate offences for publishing or communicating recordings.
- Workplace Surveillance Act 2005 (NSW) (WSA): Regulates surveillance of employees in the workplace (camera, computer and tracking) and sets out notice, policy and visibility requirements.
- Telecommunications (Interception and Access) Act 1979 (Cth) (TIA): Prohibits intercepting live communications over telecom networks (for example, tapping a phone line) unless authorised by law.
At a high level:
- In NSW, recording a private conversation generally requires the consent of all parties (with narrow exceptions).
- Surveilling employees is permitted if you follow the WSA’s rules (including advance written notice, a clear policy, visible cameras and no surveillance in certain private facilities).
- Customer-facing CCTV and call recording must meet consent and notice requirements. If you collect personal information, you’ll also need to consider your privacy obligations.
If you’d like a plain-English refresher on the national position before diving into NSW specifics, our overview of recording laws in Australia is a helpful starting point.
A quick clarification about “data surveillance”: in NSW, monitoring employees’ computer use (emails, internet access, keystrokes) is governed by the Workplace Surveillance Act rather than the SDA. That means you need proper notices and an internal policy to monitor lawfully.
Can You Record Calls, Meetings And Videos In NSW?
Under the SDA, using a listening device to record a private conversation is generally prohibited unless all parties consent.
There is a narrow exception that allows a person who is a party to the conversation to record without the other party’s consent if it’s reasonably necessary to protect their lawful interests. This is interpreted narrowly and is not a general “one-party consent” rule.
For businesses, the safest and most practical approach is clear, informed consent.
Business Call Recording
If you record customer service calls for quality, training or dispute resolution, obtain consent up front. Common approaches include a pre-call voice prompt (“this call will be recorded…”) or a clear on-screen disclosure for web-based calls, with a genuine option to speak without recording or to use another channel.
For practical scripting and storage considerations, it’s worth reviewing guidance on business call recording laws and this deeper dive on whether it’s legal to record a phone call in Australia.
Recording In-Person Meetings
Recording in-person meetings raises the same issues. If the discussion is private, you’ll need the consent of everyone present to use an audio recorder or a phone in your pocket.
When consent isn’t practical, visible note-taking, clearly visible cameras (with signage), or post-meeting written summaries can be lower-risk alternatives.
Sharing Or Publishing Recordings
Even if a recording is lawfully made, it can be a separate offence to publish or communicate that recording without consent (unless a specific exception applies). If you plan to use audio or video externally - for example, in marketing materials or training distributed beyond your business - get explicit written consent from the people featured.
CCTV And Employee Monitoring: What’s Allowed?
Many businesses use cameras to deter theft, promote safety, or review incidents. In NSW, you need to consider both customer-facing CCTV and any surveillance involving employees.
CCTV In Customer Areas
Recording in areas open to the public (for example, shop floors) is generally less restricted than in private areas. However, you still need to avoid places where people reasonably expect privacy (such as bathrooms and change rooms) and meet signage and data security expectations.
It’s sensible to post clear signs at entrances stating that CCTV is in operation. For a broader compliance view, have a look at our notes on security camera laws.
What about staff areas like lunchrooms or break rooms? The WSA does not categorically prohibit surveillance in break rooms, but it does prohibit camera surveillance in toilets, showers and change rooms. As a best practice, only surveil break rooms if you have a legitimate purpose, include it in your notices and policy, and keep it proportionate and visible.
Employee Surveillance Rules (Workplace Surveillance Act)
Surveilling employees in NSW (camera, computer and tracking) is lawful only if you follow the WSA’s rules, including:
- Advance Written Notice: Provide employees with written notice of surveillance at least 14 days before it starts (or a shorter period if agreed).
- Clear Internal Policy: Set out what will be monitored, when and for what purpose, and carry out surveillance in accordance with that policy. A practical, accessible workplace policy is essential.
- Visibility And Signage: For camera surveillance, cameras must be clearly visible and signs must indicate that cameras are in use.
- No Surveillance In Certain Facilities: Do not use cameras in bathrooms, toilets, showers or change rooms at the workplace.
- Computer Surveillance: If you monitor emails, internet use or keystrokes, your written policy must state this clearly (for example, that business emails are monitored).
- Tracking Surveillance: If you track vehicles or devices, employees must be notified in writing that tracking is in place.
- Covert Surveillance: Only allowed with a magistrate’s authority and only for investigating suspected unlawful activity by an employee (with strict conditions). Don’t DIY hidden cameras.
For teams that record calls (e.g. sales or support), align your customer consent scripts with your internal employee surveillance notices so the two regimes work together smoothly.
Finally, employee contracts should complement your policy by setting expectations around acceptable use and confidentiality. If you’re updating agreements, make sure your Employment Contract reflects your monitoring practices and links to the relevant policies.
Consent, Privacy And Marketing: Getting The Paperwork Right
Beyond surveillance laws, you’ll also need to think about privacy and how you handle any personal information captured in recordings.
If your recordings capture personal information (for example, voices tied to a customer file, faces in video, phone numbers or email addresses), the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) may apply. Some small businesses under $3 million in annual turnover are exempt, but there are important exceptions (for example, health service providers, businesses that trade in personal information, or those that opt in or are otherwise bound contractually).
Either way, customers and staff now expect transparency. Publishing a clear, accessible Privacy Policy that explains what you collect, why, where it’s stored, and who you share it with is considered baseline good practice.
Also plan how long you’ll keep recordings and who can access them. While general “data retention laws” don’t apply to every business, specific industries and circumstances may impose retention obligations. It’s wise to set sensible retention periods and secure storage - our guide to data retention laws in Australia outlines the considerations.
Marketing Consents (Email And SMS)
If you collect contact details during recorded interactions and plan to send marketing messages, you must comply with the Spam Act 2003 (Cth). Opt-in consent, clear identification and easy unsubscribe mechanisms are key. You can check your processes against our summary of email marketing laws.
If you’re filming staff or customers for marketing (for example, testimonials or behind-the-scenes reels), get written consent that covers the recording and how you’ll use it. A simple media or content release, alongside your platform’s terms, reduces the risk of takedown demands or disputes later.
A Step-By-Step Compliance Checklist
Here’s a practical, staged approach to build a compliant recording framework in your NSW business.
1) Map Your Recording Activities
- List each scenario where you record or monitor: phone calls, video calls, in-store CCTV, warehouse cameras, vehicle tracking, employee email monitoring, meeting recordings, marketing shoots.
- For each, note the purpose, who is affected (customers, staff, contractors), and the type of data captured (audio, video, location logs, metadata).
2) Identify The Legal Basis (Consent/Notice)
- For private conversations (calls or meetings), implement all‑party consent mechanisms (pre‑call disclosures, scripts, on‑screen consent for web calls) unless a narrow exception truly applies.
- For employee surveillance, give 14 days’ written notice, adopt a clear policy, ensure cameras are visible with signage, and don’t surveil toilets, showers or change rooms.
- For public‑facing CCTV, keep signage prominent, avoid filming in private facilities, and secure storage with access controls.
3) Put The Right Documents In Place
- Workplace Surveillance/IT Policy: Explain what is monitored, when and why (cameras, emails, internet usage, tracking) and make sure it aligns with the WSA.
- Customer Call Scripts: Standardise pre‑call consent notices and alternative pathways (for example, a non‑recorded channel if a caller declines).
- Consent Forms: Use written releases for testimonials, staff interviews or marketing content. A straightforward media release form is typically sufficient for marketing use.
- Privacy Policy: Publish and follow a practical Privacy Policy covering collection, storage, retention and sharing of recordings.
- Employment Contracts And Policies: Ensure your workplace policy and employee agreements work together to set expectations and protect confidentiality.
- Switch on pre‑call announcements and on‑screen prompts in your telephony or contact centre software.
- Set retention periods and automatic deletion for recordings; encrypt storage and restrict access on a need‑to‑know basis.
- Check camera placement and fields of view to exclude private facilities and ensure signage matches actual coverage.
5) Train Your Team
- Train frontline staff to use consent scripts and handle objections (for example, switching callers to a non‑recorded option when requested).
- Train managers and IT on the limits of surveillance, lawful access to recordings, and how to respond to requests from law enforcement or litigants.
6) Review And Audit Regularly
- Audit signage, scripts and system settings periodically to confirm everything aligns with your notices and policies.
- Refresh staff training annually or when laws, tools or processes change.
- If you expand into other states, check local rules - states and territories have different frameworks, and the NSW approach isn’t universal.
Common Pitfalls To Avoid
- Assuming one‑party consent applies: NSW is not a general one‑party consent jurisdiction. Build processes for all‑party consent for private conversations.
- Relying on “quality and training” alone: The phrase doesn’t create a legal basis. You still need clear notice and a genuine choice to opt out or proceed unrecorded.
- Covert employee surveillance: Only permissible with a magistrate’s authority for suspected unlawful activity, subject to strict conditions.
- Filming in prohibited facilities: Never place cameras in bathrooms, change rooms, or shower/toilet areas. Double‑check camera angles before activation.
- Over‑surveilling staff spaces: Break rooms aren’t categorically off‑limits, but keep surveillance proportionate, visible and properly notified.
- Keeping recordings indefinitely: Set retention periods and delete recordings when they’re no longer needed for your business purpose.
- Skipping documentation: It’s hard to demonstrate compliance without paper trails. Use visible signage, employee notices, consent forms and a robust Privacy Policy.
Key Takeaways
- NSW generally requires all‑party consent to record private conversations, with only narrow exceptions.
- Employee surveillance is permitted if you follow the Workplace Surveillance Act: 14 days’ written notice, a clear internal policy, visible cameras/signage and no cameras in toilets, showers or change rooms.
- Customer‑facing CCTV and call recording must be transparent - use clear signage, pre‑call notices and offer practical opt‑out alternatives.
- Privacy obligations apply when recordings include personal information, so publish and follow a practical Privacy Policy, secure your storage and set deletion schedules.
- Align your scripts, workplace policy and employment contracts so day‑to‑day recording is compliant and consistent.
- Regular audits and staff training help prevent breaches and maintain trust with employees and customers.
If you’d like a consultation on NSW recording compliance for your business, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no‑obligations chat.
