Call Recording
Call recording is the ability to capture, store and retrieve the audio of a conversation between a contact centre agent and a customer.
In plain terms, call recording keeps a copy of what was said on a call so it can be reviewed later — for quality assurance, coaching, training, resolving disputes or meeting compliance obligations. It's a standard feature of almost every modern contact centre platform.
Recording sounds simple, but the important part is what you do around it: getting consent right, protecting the data, and handling sensitive information such as credit card numbers correctly. That's where most of the risk — and most of the value — actually sits.
This guide explains what call recording is, why contact centres record, how it works, and the Australian consent, privacy and PCI considerations you need to understand before you switch it on.
What it is
Technology that captures and stores the audio of customer calls so they can be reviewed, scored, used for coaching or retained for compliance.
Why it matters
Recordings power quality assurance, agent coaching and dispute resolution — but recording people also carries consent, privacy and PCI obligations you must get right.
What this guide covers
What call recording is, why contact centres record, how it works, and the Australian consent, privacy and PCI-DSS considerations that apply.
What is Call Recording?
In plain English
Call recording is the ability to record and retrieve the entire conversation with a customer. The audio is captured as the call happens, stored securely, and can be played back later for review, scoring or evidence.
Recording is often combined with screen capture, which shows what the agent was doing on their screen at the same time — useful for understanding the full context of an interaction, not just the words spoken.
Most contact centre platforms include call recording as standard, and it's a foundational capability for quality assurance, coaching and compliance programs. What varies is how much control you have — for example, whether an agent can pause recording, and whether the system can automatically redact sensitive data.
What it is
The capture and secure storage of call audio (and optionally the agent's screen) so conversations can be reviewed, scored, used for coaching or retained as evidence.
What it isn't
It's not the same as analysing calls. Recording captures the audio; understanding it at scale is the job of speech analytics, which sits on top of your recordings.
Why Contact Centres Record
Recording calls isn't done for its own sake — it underpins several of the core things a contact centre needs to do well.
✅ Quality assurance
Recordings are the raw material for QA scoring — reviewing calls against a scorecard to check accuracy, compliance and customer experience, and to spot where the process is breaking down.
🎧 Coaching & training
Playing back real calls is one of the most effective ways to coach agents and to train new starters on what good (and bad) looks like in practice.
⚖️ Dispute resolution
When it's a "he said, she said" situation, a recording provides an objective record of what was actually agreed — protecting both the business and the customer.
💡 Especially valuable in regulated industries
Call recording is particularly useful — and often fundamental — in high-compliance areas such as insurance, banking and financial services, where being able to evidence what was disclosed and agreed can be a regulatory requirement, not just good practice.
How Call Recording Works
The mechanics vary by platform, but the underlying flow is consistent: the call audio is captured, stored and indexed so it can be found and played back later.
Call is captured
As the call connects, the platform captures the audio from both sides of the conversation — and optionally the agent's screen.
Stored securely
The recording is saved as a file, usually encrypted, with access restricted to authorised users under your security and retention policies.
Tagged & indexed
Each recording is linked to call data — agent, time, number, queue and outcome — so specific calls can be searched and retrieved later.
Reviewed or analysed
Recordings are played back for QA and coaching, produced as evidence, or fed into speech analytics for insight at scale.
💡 VoIP and the cloud made this far easier
On older copper and ISDN systems, recording meant separate hardware wired into the phone lines. Because VoIP carries calls as digital data, recording is now typically built into the phone system or cloud contact centre platform — easier to switch on, cheaper to run, and far simpler to store, search and feed into tools like speech analytics.
💡 Pause, resume and redaction
A key capability to look for is the ability to pause and resume recording — or automatically redact sensitive information such as card numbers — so you can capture the conversation without capturing data you shouldn't store. Not every system supports this, so check before you rely on it.
Compliance & Consent
Turning recording on is the easy part. Consent, privacy and payment-card data are where contact centres get caught out — and the rules differ by country and, within some countries, by state.
The two consent models
Almost every jurisdiction's law falls into one of two camps:
- One-party consent: only one participant — usually the person doing the recording — needs to agree. A business recording its own calls is covered as a party to the conversation.
- Two-party / all-party consent: every participant must be told and agree before recording starts.
When a call crosses jurisdictions — say an agent in a one-party location speaking to a customer in an all-party one — the stricter law generally applies. So the universally compliant approach is simple: tell every caller the call is recorded and give them a genuine chance to decline. That satisfies both models at once, which is exactly why the "this call may be recorded" announcement is so widespread.
How it varies globally
In the United States, federal law is one-party, but around a dozen states (including California, Florida, Illinois, Pennsylvania and Washington) require all-party consent, and the stricter state's rule applies to cross-state calls. Canada is one-party but you must inform callers of the recording and its purpose. The UK and EU add a data-protection layer under GDPR — businesses need a lawful basis and must inform people — and some countries, such as France and Germany, treat recording without all-party consent as a criminal offence.
Privacy & data handling
A recording that captures personal information is personal data almost everywhere it matters. Wherever you operate, store recordings securely, restrict access to authorised staff, keep them no longer than you need, and reflect all of this in your privacy policy.
⚠️ Card payments and PCI-DSS
When you take credit card payments over the phone, be particularly careful with recording. Most modern platforms have recording built in, but not all let the agent stop recording while card details are read out — which risks storing card data you shouldn't.
Newer technology can automatically redact card information from the recording, improving both compliance and efficiency. Either way, if you take payments over the phone you must handle card data in a PCI-DSS compliant way — by pausing recording around the payment or redacting the sensitive portion.
The Australian Angle
Australia has no single national law on recording private conversations. A federal interception law sits over the top, and each state and territory sets its own consent rules — which is why a national contact centre needs one consistent approach.
Federal law, then eight state and territory regimes
At the federal level, the Telecommunications (Interception and Access) Act 1979 makes it an offence to intercept a call as it passes over the network. Recording your own call once it reaches you is not "interception" — that sits with state and territory surveillance and listening-devices laws, which fall into two groups:
- Participant (one-party) states — Victoria, Queensland and the Northern Territory: a party to the conversation may generally record it without the other party's consent.
- All-party consent states — New South Wales, Western Australia, South Australia, Tasmania and the ACT: you generally need the consent of all principal parties, subject to limited exceptions such as protecting a lawful interest.
Because a caller and an agent can be in different states, the practical answer for a contact centre is to work to the strictest standard and treat it as all-party consent everywhere. Recordings also contain personal information, so the Privacy Act 1988 and the Australian Privacy Principles apply — you must let people know you collect it (APP 5) and keep it secure (APP 11).
💡 What a compliant Australian set-up looks like
In practice, this is the baseline that satisfies every Australian jurisdiction:
- Play a clear notification — "this call may be recorded for training and quality purposes" — and give the caller a genuine chance to object or not proceed; continuing is treated as implied consent.
- Restrict access to recordings to authorised staff, and keep a log of who listens.
- Set a defined retention period and delete recordings once it expires.
- Pause or redact recording around card payments for PCI-DSS.
That covers the vast majority of contact centres. The edge cases — recording outbound calls, relying on a "lawful interest" exception, or capturing unusually sensitive information — are where it's worth having your specific policy reviewed by your privacy or legal team before you rely on it.
Getting Value From Recordings
Recording every call creates a huge amount of audio. The value comes from actually using it — and there's a limit to how much you can review by ear.
Manual review
QA teams and team leaders sample and score calls for coaching and compliance. It's high-quality but low-volume — you can only listen to so many calls, so you're always reviewing a small fraction.
Analysing at scale
Unless you have hours to listen, speech analytics unlocks the value in your recordings — surfacing agent performance, customer sentiment and emerging trends across every call, not just a sample.
💡 Recording connects to the wider tech stack
Recording rarely works in isolation. It's often linked through CTI to your customer records, feeds your QA and coaching processes, and pairs with an assessment program such as ACXPA's Call Quality Assessment service. To compare recording and speech analytics suppliers, browse the Call Recording category in the ACXPA Supplier Directory.
Frequently Asked Questions About Call Recording
What is call recording in a contact centre?
Call recording is the ability to capture, store and retrieve the audio of a conversation between an agent and a customer. It's a standard feature of modern contact centre platforms and is used for quality assurance, agent coaching, training, dispute resolution and compliance. It can also be combined with screen capture, which records what the agent was doing on their screen during the call.
Why do contact centres record calls?
Contact centres record calls mainly for quality assurance, coaching and training, and dispute resolution. Recordings let QA teams score calls against a standard, give team leaders real examples to coach from, and provide an objective record when there's disagreement about what was said. Recording is especially valuable in regulated industries such as banking, insurance and financial services, where evidencing what was disclosed and agreed can be a compliance requirement.
Do you need consent to record a call in Australia?
Almost always, yes — and the safe practice is to tell every caller. Australia has no single federal rule: recording your own call is governed by state and territory law. Victoria, Queensland and the Northern Territory allow a participant to record without the other party's consent, while New South Wales, Western Australia, South Australia, Tasmania and the ACT generally require all parties to consent. Because callers and agents can be in different states, contact centres should work to the strictest standard — play a clear “this call may be recorded” notification and give the caller a genuine chance to decline, which is accepted across all jurisdictions as satisfying consent.
How does call recording affect PCI-DSS compliance?
If you take card payments over the phone, you must avoid storing card numbers and security codes in a recording. Not all systems let agents stop recording while card details are read out, so you either need the ability to pause and resume recording around the payment, or technology that automatically redacts the card data. Handling card details this way is part of being PCI-DSS compliant. Check what your platform supports before taking payments on recorded lines.
What is the difference between call recording and speech analytics?
Call recording captures and stores the audio of calls. Speech analytics is the technology that analyses those recordings at scale — surfacing agent performance, customer sentiment and trends across every call rather than the small sample a QA team can listen to manually. In short, recording provides the raw material, and speech analytics turns it into insight.
How long should call recordings be kept?
There's no single answer — retention depends on why you're recording and any legal or industry obligations that apply to you. Under privacy principles, personal information generally shouldn't be kept longer than necessary for the purpose it was collected. A sensible approach is to set a documented retention period, store recordings securely with restricted access, and delete them when they're no longer needed. Confirm the right period for your situation with a qualified adviser.
Can you pause call recording during a payment?
Many modern platforms let you pause and resume recording, or automatically redact sensitive segments, so card details aren't captured while a payment is taken. However, not every system supports this, which is a common compliance gap. If you process card payments over the phone, confirm that your recording platform can pause, resume or redact around the payment before you rely on it.
Where to Next
Summary: Call Recording
Call recording is the ability to capture, store and retrieve the audio of customer calls so they can be reviewed, scored, used for coaching or retained as evidence.
Contact centres record for clear reasons: quality assurance, coaching and training, and dispute resolution — and it's often fundamental in regulated industries such as banking and insurance. Optionally paired with screen capture, recordings become the raw material for improving performance.
The harder part is compliance. In Australia, recording is affected by state and territory surveillance and listening-devices laws and by privacy law — hence consent and notification such as "this call may be recorded" — and taking card payments brings PCI-DSS considerations around pausing or redacting recording. This is general information, not legal advice; obligations vary by state, so confirm yours with a qualified adviser.
To get value at scale, speech analytics turns recordings into insight, while CTI links them to customer records and quality assurance puts them to work. To compare providers, browse the Call Recording category in the ACXPA Supplier Directory.