Call recording laws in the UK: a practical guide

Call recording is normal, legal and expected in UK business — provided you're transparent about it. Here's the practical position for a small business recording calls through an AI receptionist.

The legal framework (in plain terms)

Recording for your own business purposes is lawful under UK GDPR with a lawful basis (typically legitimate interests — quality, dispute resolution, service records). What you can't do is record secretly in a way callers wouldn't expect — which is why the standard practice is a disclosure notice at call start, exactly like the "calls may be recorded" you're used to hearing.

• The notice itself: "this call may be recorded" satisfies the transparency expectation for typical business purposes.
• What you can't do: intercept calls between other parties (that's different law — the Investigatory Powers regime); recording calls you're a party to for business purposes is the standard practice.

What recording gives you

• Dispute protection — "the assistant quoted £85" is checkable.
• Quality improvement — reviewing real transcripts is how the knowledge base gets good.
• Service records — who called about what, when, and what was promised.

The rules that actually matter to you

1. Disclose it. Our greeting says it automatically.
2. Keep recordings for a defensible period — set a retention policy (30/90/365 days in settings) and stick to it.
3. Use them for the stated purpose — quality and records, not something else.
4. Allow data subject access — callers can ask for their recording; the tooling exports it.
5. Secure it — handled for you: encrypted storage, tenant isolation, audit logs.

When callers decline recording

Some callers ask not to be recorded. Configure the assistant to offer the alternative (unrecorded conversation → message capture, or a callback from a human) rather than refusing service.

The honest bottom line

Recording inbound calls for service purposes is mainstream business practice — the compliance burden is mainly "say you're doing it," which the greeting handles automatically, and "keep them for a sensible time," which the retention setting controls.