Recording Phone Calls in the UK: The Law

Recording a phone call you take part in is lawful in the UK for your own personal use, and you do not have to tell the other person. The picture changes sharply once a business records callers, once you share the recording, or once you capture a call you are not part of, which is a criminal offence under the Investigatory Powers Act 2016.

For the full UK overview, see UK recording laws.

Recording Your Own Calls: Lawful, No Consent Needed

If you are on the call, you can record it for your own use without telling anyone. The interception offence in section 3 of the Investigatory Powers Act 2016 targets intercepting a communication "in the course of its transmission" without lawful authority. As a participant, you are the sender or the intended recipient of the communication, so recording what is said to you is not the kind of third-party interception the Act criminalises. Section 44 reinforces this by treating interception as authorised where the relevant party has consented. UK government bodies describe the same position in their own privacy notices: an individual may record a call for personal purposes without being obliged to inform the other party (legislation.gov.uk; gov.uk customer call-recording privacy notice).

Watch out: "Personal use" is the boundary, not a loophole. The protection covers keeping the recording for your own notes, your own dispute, or your own potential evidence. It does not stretch to passing the audio to anyone who was not on the call.

Business Call Recording: A Two-Layer Test

Businesses face a far stricter regime than individuals, and recording lawfully means clearing two separate hurdles at the same time.

The first layer is interception law. A company intercepting calls on its own system needs authority. That comes from the Telecommunications (Lawful Business Practice) (Interception of Communications) Regulations 2000, which authorise recording for set purposes such as establishing facts, demonstrating regulatory compliance, maintaining quality and training standards, preventing or detecting crime, investigating unauthorised use, and ensuring effective system operation (reg. 3). Regulation 3(2)(c) requires the system controller to have "made all reasonable efforts to inform every person who may use the telecommunication system" that calls may be intercepted. The Investigatory Powers (Interception by Businesses etc. for Monitoring and Record-keeping Purposes) Regulations 2018, made under section 46 of the 2016 Act, carry the same notification condition forward for monitoring and record-keeping.

The second layer is data protection. The recording is personal data, so the business needs a lawful basis under Article 6 of the UK GDPR and the Data Protection Act 2018.

Lawful Basis and the ICO

Most businesses rely on legitimate interests (Article 6(1)(f)) for quality and training recording, which the ICO requires be backed by a documented legitimate interests assessment. Legal obligation (Article 6(1)(c)) applies where a regulator mandates recording, for example FCA conduct rules for relevant financial firms. Consent (Article 6(1)(a)) is rarely the right basis because callers cannot freely refuse and still get served. The ICO guidance stresses transparency: callers must be told who is recording, why, and how long the audio is kept, usually through a recorded announcement and a privacy notice.

Watch out: Satisfying the interception rules does not satisfy UK GDPR. A business with a valid recorded-line announcement still breaches data law if it has no lawful basis, ignores retention limits, or cannot answer a subject access request for the audio.

Intercepting a Call You Are Not Part Of

This is the bright line, and crossing it is a crime. Section 3 of the Investigatory Powers Act 2016 makes it an offence to intentionally intercept a communication in transmission, by means of a public or private telecommunication system, without lawful authority. The classic example is listening in on, or recording, a conversation between two other people, or accessing someone else's voicemail. On conviction on indictment the maximum is two years' imprisonment, a fine, or both. Prosecutions in England and Wales may be brought only by, or with the consent of, the Director of Public Prosecutions.

There is also a civil route. Under section 7, where the Investigatory Powers Commissioner considers a person intercepted a communication on a public system without lawful authority but does not treat it as a section 3 offence, the Commissioner may impose a monetary penalty of up to GBP 50,000. The News of the World voicemail-interception scandal, which led to convictions for intercepting communications, shows how seriously UK courts treat eavesdropping on others' communications.

Sharing or Publishing a Recording

Making a lawful recording is one thing; releasing it is another, and the personal-use protection does not travel with the file. Once you share a recording beyond friends and family or publish it, the ICO treats the activity as no longer purely personal or household, so the UK GDPR applies and you become responsible for that other person's data. Publishing private call audio can also support a civil claim for misuse of private information, the tort English courts have developed under Article 8 of the European Convention on Human Rights, where the person had a reasonable expectation of privacy in the conversation.

Broadcasters face a further, specific rule. The Ofcom Broadcasting Code (section 8, practice 8.12) generally expects a broadcaster recording a call for possible broadcast to identify itself, explain the call's purpose, and say it is being recorded, from the outset, unless not doing so is warranted; if that was not done, consent is normally needed before broadcast.

Watch out: Posting a call recording online to "prove a point" can convert a lawful personal recording into a data-protection breach and expose you to a privacy claim, even though making the recording was fine.

Using a Recording as Evidence

A covert recording of your own call is often useful evidence, but admission is never automatic. In civil cases the court has a discretion under the Civil Procedure Rules to admit or exclude evidence, weighing relevance, authenticity, and fairness, and may penalise a party in costs for the manner of obtaining it. In criminal cases the court may exclude evidence under section 78 of the Police and Criminal Evidence Act 1984 if admitting it would have an unfair effect on the proceedings. Courts have generally been willing to consider authentic recordings, but you should keep the original unedited file and be ready to prove how and when it was made.