Blog

14 Nov 2026

Call Recording Laws in Australia: A Guide for Businesses

Yes, an Australian business can record phone calls, but the rules depend on where the people on the call are, and the safest practice is the same everywhere: tell every caller at the start of the call that it is recorded, and give them a way to carry on without being recorded. Two layers of law apply. State and territory surveillance laws decide whether a recording is lawful, and privacy law decides what you do with it afterwards. If your calls are answered by software, the notice and the handling of recordings should be built into the call flow, not left to each staff member to remember.

Wattleheywattle.comBuild recording notices into every callWattle lets businesses configure voice agents with call recording and transcription settings, including explicit opt-in, and manage customer interactions in one workspace.Visit

TL;DR

New South Wales, the ACT, South Australia and Western Australia generally require all parties to consent to recording a private conversation. Victoria, Queensland, Tasmania and the NT are more permissive for a participant, but sharing a recording is restricted everywhere.
Calls often cross state lines, so follow the strictest rule: announce the recording at the start of the call and record only once the caller has been told.
A recording of a customer is usually personal information, so the Australian Privacy Principles apply to notice, storage, access and disposal if your business is covered by the Privacy Act.
Commercial SMS and marketing follow separate rules: consent, sender identification and a working unsubscribe.
Build the notice, the consent path and the retention limit into your call flow once, and every call follows it.

Why there is no single national rule
State and territory differences at a glance
What happens when the caller is in a different state
What a valid notice looks like
The privacy layer: what you do with the recording
Who is covered by what, and why a casual approach fails
Recording your own call versus recording someone else’s
Penalties and what is at stake
SMS marketing: the other rules in the same conversation
A practical compliance routine
What we think about recording and AI answering
Putting the notice into every call with Wattle
FAQ
Sources

Why there is no single national rule

Two sets of law sit over a recorded call, and many guides blur them together.

The first is federal. The Telecommunications (Interception and Access) Act 1979 prohibits intercepting a communication passing over a telecommunications system, and a serious breach can mean up to two years’ imprisonment. Interception here means a third party listening in or capturing the call while it is in transit. A business recording its own calls is not the usual target, which is why the practical question for most businesses turns on the second layer.

The second is state and territory surveillance-device or listening-device legislation. Each jurisdiction has its own statute, and they do not match. That is why you will find guides that seem to contradict each other: they are describing different states.

The third layer is privacy law. Even where recording is lawful, a recording of a customer’s voice is generally personal information, and the rules for collecting, storing and using it come from the Privacy Act 1988 and the Australian Privacy Principles (APPs).

State and territory differences at a glance

The general position, drawn from the Sprintlaw state summary and checked against the statutes below, looks like this:

Jurisdiction General position on recording a private conversation you are part of New South Wales All parties must generally consent, with limited exceptions such as protecting a lawful interest ACT All-party consent generally required South Australia All-party consent generally required Western Australia All-party consent generally required Queensland A participant may generally record, but communicating or publishing is restricted Victoria A participant may generally record, but communicating or publishing is restricted Tasmania Participant recording is generally permitted, with restrictions on sharing Northern Territory A participant may generally record, with restrictions on sharing

Treat this table as orientation, not legal advice. Exceptions exist in each statute, and some jurisdictions describe the rules in terms of “principal parties” and “private conversations”, which turn on whether the people involved would reasonably expect to be overheard or recorded. A caller who has just been told the call is recorded generally has no such expectation, which is one more reason the notice matters.

New South Wales

NSW is where many Sydney-based businesses start. Under the Surveillance Devices Act 2007, using a listening device to record a private conversation is an offence unless an exception applies, and the TechSafety legal guide to NSW surveillance law sets the maximum penalty for the main listening-device offences at 100 penalty units or five years’ imprisonment, or both.

NSW law has also moved recently. Parliament passed the Surveillance Devices Amendment (Public Interest Exceptions) Bill 2026, which received assent on 7 April 2026. It adds exceptions for certain uses of surveillance devices and for communicating or publishing records, and it makes possessing a record of a private conversation obtained in breach of the Act an offence in certain circumstances. If your business is based in NSW or regularly calls NSW customers, confirm how those changes apply to you before you rely on any older guide.

Queensland

Queensland is the state people ask about most. Under section 43 of the Invasion of Privacy Act 1971, a person who is a party to a private conversation is exempt from the prohibition on using a listening device. So recording a call you are on is generally not an offence. Recording conversations you are not part of remains unlawful, and communicating or publishing a recording is dealt with separately. The Act sets a maximum of 40 penalty units or two years’ imprisonment on indictment for prohibited use of a listening device.

The lesson for a business is that “I was on the call” answers the question of making the recording and does not answer the question of what you may do with it.

Western Australia

Western Australia’s Surveillance Devices Act 1998 regulates the use of listening devices in its Part 2 and separately prohibits publishing or communicating private conversations. In practice that is an all-party consent state for private conversations, with the exceptions the Act sets out.

What happens when the caller is in a different state

Customer calls rarely stay inside one jurisdiction. A Melbourne plumber answers a call from a Perth customer. A Brisbane clinic returns a call to someone in Sydney. Which state’s rule governs is not something you want to argue after the fact.

The conservative approach, and the one most Australian practitioners recommend, is to follow the stricter rule. Tell every caller at the start that the call is recorded, and treat that as consent-based recording on every call. It costs a few seconds and removes the question of which state applies.

What a valid notice looks like

The safest approach is clear notice before recording starts, consent that is clear, and a practical alternative for callers who do not want to be recorded, as Sprintlaw’s business guide puts it. Put into a script, a good notice does five things:

Comes first. The notice plays or is spoken before any substantive conversation and before recording starts.
Says the call is recorded. Plain words, not “calls may be monitored for quality” tucked into a menu.
Says why. Training, quality, record of what was agreed, or booking accuracy.
Offers a choice. For example, the caller can ask to continue without recording, or be transferred to someone who can help another way.
Points to your privacy information. A short reference to where the caller can read how recordings are kept and how to request access.

Where a human answers, this depends on every staff member saying it every time. Where the call is answered by an AI voice agent, the greeting is part of the configuration, so the notice is the same on every call at 2 am as at 2 pm.

An example opening

A short, plain opening might run: “Thanks for calling Harbour Physio. This call is recorded so we can book you in accurately and keep a record of what we agreed. If you’d rather not be recorded, just say so and we’ll help another way. How can I help?”

That is about twenty seconds, and it covers notice, purpose and choice in one breath.

The privacy layer: what you do with the recording

Lawful recording is the start. A recording that identifies a customer is generally personal information. If your business is covered by the Privacy Act (it applies to organisations with annual turnover above $3 million and some others, according to OAIC guidance), the Australian Privacy Principles apply. Under APP 5, an entity that collects personal information must take reasonable steps to notify the person of certain matters, including the purposes of collection, or to make sure they are aware of them. A spoken notice at the start of the call is the natural way to do that for a phone line.

Beyond notice, a sound routine covers these points:

Limit use. Use recordings for the purposes you told callers about: quality, training, disputes, booking accuracy.
Limit disclosure. Sharing a recording with a third party is where state laws on communication and publication, and privacy law, both bite.
Secure storage. Restrict who can listen, log who does, and keep recordings in a system with proper access controls. A managed AI receptionist platform is one example of the kind of tooling that can sit alongside access controls and retention limits; whichever you use, the controls matter more than the label.
Set a retention period. Keep recordings only as long as you need them, then delete them. Our guide to a data retention policy for calls covers how to set one.
Handle access requests. If someone asks for their recording, you need a consistent way to respond.

Alongside recordings, transcripts are personal information too and follow the same rules. If you are setting up recording and transcripts together, see our walkthrough of call recording and transcription setup.

Who is covered by what, and why a casual approach fails

Small businesses sometimes assume they are too small for any of this. Two points correct that. First, the surveillance-device laws are not limited by turnover: they apply to whoever makes the recording. Second, the Privacy Act threshold is turnover-based, but customers expect to be told in any case, and a clear notice protects you wherever you are on that line.

The common failure points are predictable:

A recording notice that exists on the website but not on the phone line.
Different staff using different wording, or skipping it when busy.
Recordings stored in a personal phone, email thread or shared drive with no access limits.
No retention rule, so recordings pile up for years.
Passing a clip to a third party, or posting it, without checking the separate rules on communication and publication.

Recording your own call versus recording someone else’s

People searching this topic often mix up two questions. One is whether a business may record a call it is part of. The other is whether anyone may record a conversation they are not part of. The second is generally unlawful everywhere: Queensland’s Act, for instance, keeps the prohibition for people who are not parties to the conversation. Staff secretly recording a manager’s conversation with a colleague, or a business recording a call between two other people, sits in this territory. If you operate shared lines or conference calls, the notice should cover everyone on the line, not only the customer.

Penalties and what is at stake

The penalty figures differ by state, and the examples above give a sense of scale: up to two years’ imprisonment under the federal interception offence, 40 penalty units or two years in Queensland for prohibited listening-device use, and 100 penalty units or five years under the main NSW offences. For a business the more common cost is practical: a recording obtained or shared unlawfully can create legal exposure, a privacy complaint and lost trust, long before any prosecution.

Federal, Queensland and NSW penalty examples

SMS marketing: the other rules in the same conversation

Searches about call recording often sit next to SMS marketing, because businesses that record calls also text customers. The rules are separate and sit with the Australian Communications and Media Authority (ACMA).

According to ACMA’s spam guidance:

A commercial SMS generally requires the recipient’s consent.
The message must identify the sender and include contact details.
There must be an easy, low-cost way to unsubscribe, and you cannot generally require a login or extra personal information beyond the number being removed.
Marketing must generally stop within five business days after an unsubscribe request.

On consent, ACMA’s expectations for direct marketing are express consent based on clear terms: what the marketing is, who will use the consent, for how long, and how to withdraw it.

The penalties are material. ACMA reported in October 2024 that Commonwealth Bank paid $7.5 million for spam breaches, and noted maximum court penalties for companies of $626,000 per day for a company without a prior record and $3.13 million per day for one with a prior record. A transactional message, such as a booking confirmation, is a different category from marketing; our guide to SMS booking confirmations explains the setup.

Sender names changed recently too. ACMA announced that from 1 July 2026, only participating telcos can send SMS with registered sender IDs, and unregistered sender IDs show as “Unverified”. If your business texts customers under a brand name, check that your sender ID is registered through your telco.

A practical compliance routine

Here is a routine a business of any size can put in place in a week:

Map your calls. Which numbers take calls, who answers, and which states your callers are in.
Write one notice. Use the strictest-state approach: notice first, reason, choice, pointer to your privacy information.
Build it into every answering path. Main line, after-hours line, overflow, call-backs and outbound calls.
Decide who can listen. Name the roles, and log access.
Set retention. Pick a period for recordings and transcripts, and delete on schedule.
Write down the sharing rules. No forwarding or posting clips without checking with whoever owns compliance in your business.
Review when the law moves. The NSW changes in 2026 are a reminder that this area is not static.

If your business operates in a regulated area such as health, finance or legal services, or you are unsure how a state exception applies to you, speak to a lawyer who practises privacy and surveillance law in your state before you finalise the script.

What we think about recording and AI answering

Most of the call recording problems we see described come down to consistency, not intent. A good owner wants to do the right thing, and then a busy Friday afternoon arrives, three people answer the phone in three ways, and the notice gets skipped.

That is why we think the notice belongs in the system, not in anyone’s memory. With Wattle you configure each voice agent’s greeting, persona, instructions and guardrails, and you can run a scripted mode where the call follows a controlled, deterministic flow. Put your recording notice in the greeting and it is there on every call, on every number, at every hour.

Wattle also gives you call recordings and transcripts in one workspace, alongside the conversations from web chat, WhatsApp and SMS, and human handover when a conversation is sensitive or complex. Keeping everything in one place makes it simpler to control who can see it and how long it stays.

Our view: compliance is easier when the safest wording is the default wording.

Christopher

Putting the notice into every call with Wattle

Wattle is an AI front desk that answers calls and chats, books work, takes payments and hands important conversations to people. Agents are configured with their own greeting, role and guardrails, and the platform connects to your existing calendars, spreadsheets, accounting tools and phone numbers. Plans are published at Starter A$99 per month, Pro A$499 per month and Max A$999 per month; Australian mobile numbers, outbound calling and transfers are listed separately without a published price.

If you want to hear how a recorded-call notice sounds in your own greeting, you can try an AI receptionist and set the opening words yourself.

FAQ

Do I legally have to tell someone the call is being recorded?

In NSW, the ACT, South Australia and Western Australia, recording a private conversation generally needs the consent of all parties, so you should tell them. In the other jurisdictions a participant may generally record, but telling the caller is still the safe practice for calls that cross state lines, and APP 5 expects covered organisations to notify people about collection. The simplest rule is to tell every caller at the start.

Is it illegal to record a phone call in Queensland?

Generally not if you are part of the conversation. Section 43 of the Invasion of Privacy Act 1971 exempts a person who is a party to the private conversation. Recording a conversation you are not part of is unlawful, and communicating or publishing a recording can be a separate offence.

Can someone record me without my permission in Australia?

It depends on the state and on whether they are part of the call. In all-party consent states, secretly recording a private conversation is generally an offence, subject to limited exceptions. In states that allow participant recording, the person on the call may record, but sharing it is still restricted. If this has happened to you, a lawyer in your state can advise on your options.

What are the rules for SMS marketing in Australia?

Commercial SMS generally needs consent, must identify the sender with contact details and must include a simple unsubscribe. Unsubscribe requests should be actioned within five business days. ACMA enforces these rules and publishes the current guidance.

Do the rules differ if an AI answers the call?

The consent and privacy rules apply to the call, not to who or what answers it. What changes is how you deliver the notice: through the agent’s greeting, the same way every time, with recordings and transcripts held under the same retention and access rules as any other call record.

Sources

Give every caller a good first answer.

Request access