All insights

Is it legal to record business calls in Australia?

2 min readBy Brendon Whiting, Founder · 7 April 2026

It depends on your state and on consent, and this is a genuine legal question rather than a technical setting. Australian surveillance and listening device laws vary between states and territories, and the safe, standard practice is to announce that calls may be recorded so the other party can object or hang up. Get advice for your jurisdiction and industry before switching it on.

We are not lawyers and this is not legal advice, which is worth saying plainly because the consequences here are not IT consequences. What we can be useful about is the practical shape of doing it properly, because businesses often enable recording as a feature and never make the three decisions that turn it from a liability into a tool.

The first decision is announcement, and it is close to universal practice: an automated message at the start of the call telling the caller recording may occur. The second is retention, meaning how long recordings are kept before automatic deletion. Indefinite retention is the default in many systems and it is the wrong answer, because recordings are personal information and often sensitive, so keeping everything forever expands what a breach would expose while adding nothing. Choose a period tied to why you are recording, and document the reasoning.

The third is access. Recordings contain customer details, complaints, occasionally payment information, and a system where any staff member can browse them is a privacy incident waiting to happen. Restrict access to a named small group and make sure that access is logged. Decide all three before enabling the feature rather than afterwards, because the recordings made in the meantime are governed by whatever the defaults were. If you want it configured properly, call 1800 456 567.

Turn it on with the settings decided first

We configure call recording with announcements, retention and access controls agreed up front, so it is useful rather than a liability.

Frequently asked questions

It is the standard practice and it is not a substitute for advice about your own jurisdiction and industry. An announcement gives the other party the chance to object or hang up, which is the point. Whether that satisfies your obligations depends on the state and on what you do with the recording afterwards.

As long as the purpose requires and no longer, decided in advance rather than by default. Recordings are personal information and often sensitive, so indefinite retention increases what a breach would expose without adding value. Set a period, apply it automatically, and document why you chose it.

A named, small group, with access logged. Call recordings contain customer details, complaints and sometimes payment information, and a system where any staff member can browse them is a privacy problem waiting to surface. Restrict access when you configure it, not after someone asks an awkward question.

Questions? Let's talk.

Call 1800 456 567 or fill out the form.

  • 30-minute discovery — no jargon, no pressure
  • Plain-English Essential Eight Cyber Security Scorecard
  • A clear plan tailored to your business

Prefer to talk?

Call 1800 456 567

Powered by Calendly — your data is handled securely.

Our office · Level 2, 25 Grenfell Street, Adelaide

By submitting, you agree to our terms and privacy policy. No spam — ever.