menu_bookGuide

Recording and transcribing client calls in Australia

A plain-English guide for law firms. Whether you may record a client call, whether you may have it transcribed, what the caller has to be told, and what the Privacy Act adds on top. Every rule is traced to the section of the Act it comes from, so you can check it rather than take our word for it.

Yes. A law firm may record and transcribe client calls in every Australian state and territory, as long as the caller is told at the start of the call.

What changes from state to state is whether that announcement is a courtesy or the thing your legal position rests on. And there is a second question most firms never ask: whether you may pass the recording to someone who was not on the call, such as a transcription or answering provider. The wording of the announcement answers both.

In short
  • Recording: Victoria, Queensland and the Northern Territory let a party record without more. New South Wales, Western Australia, South Australia, Tasmania and the ACT need the caller's consent, and an announcement at the start of the call followed by the caller continuing is how that consent arises. It is a consent requirement, not a ban.
  • Transcribing: permitted everywhere, provided the announcement says the call is transcribed and not only recorded, because passing the audio to a provider is a separate act in every jurisdiction and the caller's consent needs to cover it.
  • A transcript is a record in its own right, so it carries the same obligations as the audio.
  • The Privacy Act adds more: an intake call collects sensitive information almost every time, so notice alone is not consent, and the caller needs a real way to decline.
  • The statutory privacy tort applies whatever your turnover, and a covert recording of a client call is close to what its intrusion limb was written for.
ruleThe structure

Two questions, not one

Firms ask whether they may record. The legislation asks that, and then asks a second question: what may you do with the recording afterwards. The two do not travel together. Queensland lets a party record freely and then constrains what it may do with the recording, while New South Wales constrains the recording and lets a lawfully made one be shared. Neither question stops a firm transcribing its calls. Together they decide what the announcement has to say.

The call arrives

A new enquiry or an existing client speaks to the firm, or to a service answering for the firm.

Question 1: may you record it?

Answered by the surveillance devices or listening devices Act in your state. In five of the eight jurisdictions a party needs the caller's consent, and the announcement at the start is how that consent is obtained.

Question 2: may you pass it on?

A separate provision in every jurisdiction covers communicating the record to someone who was not on the call, including a transcription or answering provider. Consent covers it, so the announcement should say the call is transcribed.

The file note

What ends up on the matter: the summary, the transcript, and a record of the consent that allowed both.

Once the announcement is made, a Sydney firm is in the same position as a Melbourne firm. The difference is that in Sydney the announcement is load bearing, so it has to come first, before any discussion of the caller's matter, and the firm should be able to show it was made on each call. That is the mechanism every bank, insurer, utility and government call centre operating in the all-party consent states relies on, and it has done so for decades.

account_treeDecision tree

Work out your position in four questions

Follow the questions in order. A firm that can answer yes to all four is compliant in every Australian jurisdiction, whichever state it practises in and whether a person or an automated service answers the phone.

Is the caller told, at the start of the call and before their matter is discussed, that the call is recorded or transcribed?
This is the one step that matters in every jurisdiction.
yesConsent is implied when the caller continues. In NSW, WA, SA, Tasmania and the ACT this is what makes the recording lawful. In Victoria, Queensland and the NT it is not required for the recording itself, but you will need it for the next step.
noDo not record. In the five all-party consent jurisdictions an unannounced recording of a party is an offence. In every jurisdiction a covert recording of a client call is close to what the intrusion limb of the statutory privacy tort was written for.
Does the announcement say the call is transcribed, or name the answering or transcription provider, and not only that it is recorded?
Passing the audio to a provider is a separate act in every Act.
yesThe caller's consent covers the disclosure to the provider. This is the position to be in whichever state you are in.
noFix the wording before the audio leaves the firm. In Victoria, Queensland, Tasmania and the ACT the offence for passing on a recording applies even to a lawfully made one, and in NSW, Tasmania and the ACT the limb for recordings not made for publication falls away once the audio is sent to a vendor.
Does the announcement give the caller a real way to decline, and does the firm's privacy policy disclose the recording?
The Privacy Act adds these on top of the surveillance legislation.
yesConsent is voluntary and informed, which is what APP 3.3 requires for the sensitive information an intake call collects.
noAdd both. The OAIC's position is that notice alone is not consent, and APP 1 requires the privacy policy to say that calls are recorded.
Does any part of the processing happen overseas, and does the caller know?
Most transcription and voice AI vendors process at least part of the call offshore.
yesState it in the announcement so far as practicable, take the reasonable steps APP 8 requires before disclosing, and remember section 16C keeps the firm accountable for what the overseas recipient does.
noIf everything stays in Australia, say so. If you are not sure, ask the provider, in writing, which countries each step runs in.
mapState by state

Where each jurisdiction lands

Eight Acts, two groups. The orange group needs the caller's consent before a party records. The blue group lets a party record without more. Every card also shows the separate provision that applies when the recording is passed on, because that is the one that catches firms using an outside provider.

Does a party to the call need the other party's consent to record it?
The eight state and territory regimes, counted by whether the offence reaches a person who is on the call. Both groups may record. The first needs the caller's consent, and the announcement is how that consent is obtained.
Caller's consent needed (5)A party may record (3)
Counts of the Acts listed below, as in force at the currency dates noted on each register. The split says nothing about what a firm may then do with the recording, which is a separate offence in all eight jurisdictions.
VIC
Victoria
Surveillance Devices Act 1999
A party may record
Recording a call you are onYes, without more. Section 6 binds a person who is not a party.
Passing the recording ons 11 is not confined to unlawfully made recordings, so consent is needed before the audio goes to a provider.
QLD
Queensland
Invasion of Privacy Act 1971
A party may record
Recording a call you are onYes, without more. Express party exemption in s 43(2)(a).
Passing the recording ons 45 targets a party who recorded and then communicates or publishes the record. Consent is the exception.
NT
Northern Territory
Surveillance Devices Act 2007
A party may record
Recording a call you are onYes, without more. Section 11 binds a person who is not a party.
Passing the recording ons 15.

Section numbers are given so you can go to the source rather than take this page's word for it. Check the current consolidation for your state before setting a firm policy: the Queensland register shows a currency date of 1 July 2024, and the Western Australian consolidation this guide works from is version 01-d0-03.

All-party consent means announce, not "do not record"

Firms in the five all-party consent jurisdictions often read the legislation as "we cannot record here". That is not what the Acts say. Section 7(3)(b) of the NSW Act, and its equivalents in Western Australia, South Australia, Tasmania and the ACT, take a recording outside the offence where each principal party consents, expressly or impliedly. On a phone call consent is implied in the ordinary way: the caller is told at the start that the call is recorded or transcribed, and by staying on the line they consent.

Do not build a policy on the "lawful interests" exception

In the five all-party consent jurisdictions there is a second route, a narrower limb allowing a recording that is reasonably necessary to protect the recording party's lawful interests. It is read far more narrowly than firms expect. In Sepulveda v R [2006] NSWCCA 379 the court held that reasonable necessity is judged objectively on the grounds existing at the time of the recording, and that the availability of other lawful avenues told against it. The cases where it succeeded involved a specific, existing threat and no practical alternative, such as DW v R [2014] NSWCCA 28 and R v EP [2019] ACTSC 89, and courts have rejected recordings made to gain an advantage in civil proceedings. A general wish for accurate records of every client call is not an interest of that kind. Rely on consent instead. The announcement is already being made.

The "not for publication" limb in NSW, Tasmania and the ACT

Those three jurisdictions add a further limb: a principal party consents and the recording is not made for the purpose of communicating or publishing the conversation to people who are not parties. It suits a firm recording only for its own file, and it disappears the moment the audio is sent to an external transcription or AI vendor, because at that point the recording arguably is made for the purpose of communicating it to a non-party. If your firm is in one of those three jurisdictions and uses an outside service, plan on consent, not on this limb.

Lawful to record is not the same as free to share

This is the part worth reading twice. Tasmania section 10 restricts a party who recorded a private conversation from communicating or publishing the record whether or not the recording contravened section 5. The ACT offence in section 5 applies whether or not the recording contravened section 4. Victoria's section 11 is not confined to unlawfully made recordings, and Queensland's section 45 is aimed squarely at a party who recorded and then passes the record on. So in Victoria, Queensland, Tasmania and the ACT a firm can be entirely within its rights to record and still need consent before the audio goes to a transcription or answering provider. Consent from the parties is an exception in every one of those provisions. In practice this is a drafting point: an announcement that says the call is transcribed, and names or describes the provider, obtains consent to the disclosure at the same moment it obtains consent to the recording. What it rules out is announcing a recording and then quietly sending the audio somewhere the caller was not told about.

One amendment to watch in New South Wales

The Surveillance Devices Amendment (Public Interest Exceptions) Act 2026 (NSW) was assented to on 7 April 2026 as Act No 7 of 2026. It does not amend section 7 or section 11. It replaces the possession offence in section 12 and inserts new sections 14A to 14C creating public interest and investigative body exceptions. It commences on a day to be appointed by proclamation, which has not been confirmed, so check the NSW legislation register before treating it as operative.

publicThe federal layer

Interception, and why an answered call is not it

Telecommunications (Interception and Access) Act 1979

Interception under s 6(1) is listening to or recording a communication in its passage over a telecommunications system without the knowledge of the person making it. Section 5F ends that passage when the communication reaches the intended recipient. A recording made at the firm's end, after the call has arrived, fails the first element, and a recording the caller has been told about fails the second. No Australian decision settles the point directly, so a firm policy should describe it as the accepted position rather than as settled law.

Telecommunications Act 1997, Part 13

Part 13 restricts disclosure of the contents of communications, but it binds carriers, carriage service providers, their employees and telecommunications contractors. A law firm is not an eligible person under it. It matters indirectly, because your telephony provider is bound by it and a third party answering service may be, depending on how it is structured. It is not a source of permission for the firm and it will not authorise anything a state Act prohibits.

policyPrivacy

What the Privacy Act adds

The surveillance legislation decides whether you may make and share the recording. The Privacy Act decides how you have to handle what is in it, and for a law firm the answers are stricter than for most businesses, because an intake call collects sensitive information as a matter of course.

Assume the small business exemption no longer covers you

The exemption for annual turnover of $3 million or less is still in the Act, but section 6E(1A) removes it for reporting entities providing designated services under the AML/CTF Act. The OAIC's guidance gives 31 March 2026 for existing reporting entities and 1 July 2026 for tranche two, which takes in lawyers, conveyancers, accountants and real estate professionals. The OAIC frames the carve-out as applying to handling connected with AML/CTF obligations, while the Law Society of NSW has described the exemption as no longer applying to designated service provisions. The practical conclusion is the same either way: an intake call that collects identity information is very often part of customer due diligence, so a small practice should now assume the Australian Privacy Principles apply to how it handles calls.

An intake call collects sensitive information almost every time

Sensitive information under section 6(1) includes health information, criminal record, racial or ethnic origin, sexual orientation or practices, and political or religious beliefs. A personal injury enquiry discloses health information, a criminal enquiry discloses a criminal record, a family law enquiry often discloses both, and a migration or discrimination enquiry discloses racial or ethnic origin. APP 3.3 requires consent to collect it, and the OAIC's guidance is explicit that an entity cannot infer consent simply because it gave notice, and that express consent should generally be sought before handling sensitive information. A plain voice recording is not automatically biometric information, but voice print caller authentication is a different matter and crosses that line.

PrincipleWhat it requiresWhat it means for call recording
APP 1An up to date privacy policyIf the firm records or transcribes calls, the policy has to say so.
APP 3.3Consent to collect sensitive informationIntake calls collect it routinely. Notice alone is not consent, so the announcement needs a real way to decline.
APP 3.5Collection by lawful and fair meansA recording made in breach of a state surveillance Act is also a Privacy Act breach.
APP 5Notice at or before collectionWho is collecting, why, who it goes to, how to access and complain, and whether it goes overseas and where. The overseas item is the one most announcements leave out.
APP 6Use for the primary purposeReusing a corpus of recordings to train or tune a model is a secondary purpose and needs fresh consent.
APP 8 and s 16CReasonable steps before overseas disclosureMost transcription and voice AI vendors process offshore. The firm stays accountable for what the overseas recipient does, including its subcontractors.
APP 11Security, and destruction when no longer neededAPP 11.3 spells out technical and organisational measures. APP 11.2 means a fixed retention period for audio, not an archive that grows forever.
APP 12 and 13Access and correctionA client can ask for the recording and transcript, and ask for a wrong transcript to be corrected. The firm needs a way to find, review and release them.

Australian Privacy Principles, Schedule 1 to the Privacy Act 1988 (Cth), read with the OAIC's APP Guidelines.

The statutory tort applies whatever your turnover

The tort of serious invasion of privacy in Schedule 2 to the Privacy Act commenced on 10 June 2025. The intrusion limb expressly covers listening to or recording a private conversation. It requires intentional or reckless conduct, a reasonable expectation of privacy and seriousness, and it is actionable without proof of loss. Damages for non-economic loss together with exemplary damages are capped at the greater of $478,550 or the defamation cap for non-economic loss, which is indexed annually, so the operative number moves. Economic loss is uncapped. Consent is a defence, which is one more reason the announcement matters. A small practice relying on the turnover exemption is still exposed to the tort.

eventTimeline

Dates that changed the picture

Most of the rules in this guide are old. The reasons a firm should look at them again are recent, and one is still ahead.

6 December 2024
Joint statement on AI in legal practice

The Law Society of NSW, the Legal Practice Board of WA and the VLSB+C require transparency with clients about when and how AI is used.

11 December 2024
APP 11.3 in force

Reasonable security steps now expressly include technical and organisational measures.

10 June 2025
Statutory tort of serious invasion of privacy commences

The intrusion limb expressly covers listening to or recording a private conversation. It applies whatever the firm's turnover.

31 March 2026
Small business exemption removed for existing AML/CTF reporting entities

Section 6E(1A) of the Privacy Act, per the OAIC's guidance.

7 April 2026
NSW Surveillance Devices Amendment (Public Interest Exceptions) Act 2026 assented

Act No 7 of 2026. It does not touch s 7 or s 11. It commences on proclamation, which has not been confirmed.

1 July 2026
Small business exemption removed for tranche two entities

Lawyers, conveyancers, accountants and real estate professionals. A small practice should assume the APPs apply to its intake calls.

10 December 2026
APP 1.7 transparency for automated decision making commences

Privacy policies will need to describe automated decisions that affect individuals. Worth diarising if an AI answering service routes or triages callers.

balanceProfessional obligations

Confidentiality, conduct rules and the guidance on AI

Confidentiality. Rule 9.1 of the Australian Solicitors' Conduct Rules prohibits disclosure of confidential client information, but rule 9.1.2 permits disclosure to an employee of, or a person otherwise engaged by, the practice for the purposes of delivering or administering legal services. A properly contracted answering or transcription service engaged by the practice has a real argument that it sits inside 9.1.2. That argument does not displace APP 8, section 16C, the state offences for passing a recording on, or privilege, and rule 9.2.1 makes client authorisation the cleanest route in any event. An enquiry from a prospective client who never retains the firm may sit outside rule 9, while the equitable duty of confidence and the Privacy Act still apply to it.

File notes. Queensland Law Society Guidance Statement No. 40 is the most directly useful professional guidance on this topic in Australia. It confirms that file notes may be recorded, states that a file note generated using AI should be checked and verified by the practitioner who attended, and says it is ordinarily good practice to secure prior consent from other participants before using voice to text or AI transcription. It also treats recording another practitioner without consent as professionally discourteous.

AI. The joint statement of 6 December 2024 from the Law Society of NSW, the Legal Practice Board of WA and the Victorian Legal Services Board and Commissioner requires transparency with clients about when and how AI was used. The Law Society of NSW's guide to responsible use of AI, published January 2026, asks practitioners to ensure the client is aware of and approves the use of generative AI in their matter. The Law Institute of Victoria extends the consent requirement to commercial AI systems and not only public ones. None of those documents addresses transcription or recording tools specifically, which is worth knowing before a firm assumes it has guidance covering this.

What Victorian lawyers who use AI are using it for
Transcription and note taking is already the fifth most common use, which makes the questions in this guide live in practice rather than hypothetical.
Non-legal background research44%
Legal research and case analysis40%
Client communication and drafting emails35%
Document review and management27%
Transcription and note taking for meetings or calls26%
Source: Legal Services Research Centre, Victorian Legal Services Board and Commissioner, Generative AI Use in the Legal Profession: findings from the 2025 Victorian Lawyer Census, published 2026. Responses from 1,887 of 29,537 practising certificate holders, a 6.4% response rate. 36.7% of respondents use AI tools in practice, and among those the most cited barrier is data, privacy and security at 45%.
campaignThe announcement

What the caller has to be told

Everything in this guide comes down to what the caller hears in the first fifteen seconds. Get the announcement right and the surveillance legislation, the Privacy Act and the conduct guidance are all answered in one place.

What a compliant announcement covers
The announcement is where the surveillance legislation, the Privacy Act and the conduct guidance all meet. Nine elements, in the order a caller can follow.
  1. That the call is recorded, transcribed, or both. Name both if both happen, since a transcript is a separate record.
  2. Who is doing it. The firm's name and how to contact it.
  3. Why. An accurate file note, intake, conflict checking, quality. "Business purposes" is too vague.
  4. That an automated system is involved, where it is, and that it is not a lawyer.
  5. Who it will be disclosed to, including the answering or transcription provider.
  6. Whether it goes overseas, and where, so far as that is practicable to state.
  7. A real way to decline. Voluntariness is one of the OAIC's elements of valid consent, so a caller who says no needs somewhere to go.
  8. Where to find the full policy, which must itself disclose the recording practice.
  9. How long it is kept. A fixed period, stated plainly.
Example announcement, for a firm to adapt

You have reached [firm name]. So that we have an accurate record of your enquiry, this call is recorded and transcribed by our answering service, [provider], and some of that processing happens outside Australia. An automated assistant will take your details, and it is not a lawyer. Transcripts are kept for [period]. If you would rather not be recorded, say so now and [the alternative: call back in office hours, or leave a number for a callback]. Our privacy policy at [web address] explains how we handle your information.

Then three habits: capture the consent event in the matter record rather than relying on the fact that an announcement exists, obtain prior consent before recording an outgoing call to another practitioner, and verify an AI transcript before it is relied on as the file note.

checklistIn practice

Choosing an answering or transcription provider

A firm that uses an outside service is relying on that service to make the announcement, to keep the record where the firm says it is kept, and to leave a trail the firm can show. These are the questions to put to any provider before switching it on. A good one will answer all of them in writing.

Ask about the announcement
  • Is the caller told the call is transcribed, in the first thing the service says, before any discussion of the matter?
  • Is the wording yours to set, so it can name the firm and give a way to decline?
  • Is the fact that the announcement was made captured with each call?
Ask where the data goes
  • Which countries does each step run in: the live call, the transcription, the storage?
  • Is the transcript stored in Australia, and under whose agreement?
  • Will the provider put it in writing, provider by provider, so you can answer a client who asks?
Ask about retention and access
  • Is audio kept, and for how long? A transcript with the audio deleted on a fixed schedule is easier to defend under APP 11.2 than an archive.
  • Can you retrieve and release a transcript if a client asks under APP 12?
  • Does the record file to the matter, so the consent and the note sit together?
Ask what it will not do
  • Does it decline to give legal advice, and say so to the caller?
  • Does it refuse to confirm whether a matter exists to an unverified caller?
  • Are recordings ever used to train or tune models? If so, APP 6 needs fresh consent.

General information, not legal advice

This guide describes Australian legislation and published regulator and law society guidance as at 22 September 2026. It is general information about how call recording is regulated, written for firms deciding how to configure a phone system, and it is not legal advice or a substitute for checking the current consolidation of the Act that applies to your practice.

dictionaryDefinitions

Terms used in this guide

Private conversation
Words spoken in circumstances that show the speakers want them heard only by the people taking part. A client phone call is one. Each Act has its own definition, and in Queensland and Western Australia a conversation the parties know is being recorded can fall outside it.
Party
A person who is speaking or being spoken to in the conversation. The firm's receptionist, lawyer or answering service is a party to the call. A transcription provider that receives the audio afterwards is not.
All-party consent
A rule that a party may only record if every principal party consents. Consent can be express or implied. On a phone call it is implied by the caller continuing after being told the call is recorded. It is a consent requirement, not a ban.
Listening device
Any device used to record or listen to a conversation. A phone system, a softphone, a call recording feature and an AI answering service all count.
Record
The recording itself and, under the NSW Act, any documentary record prepared from it. A transcript and a summary built from the transcript are records too.
Communicate or publish
Passing the record, or its contents, to someone who was not a party. Sending audio to a transcription or answering provider is a communication. Every jurisdiction has a separate offence for this, each with a consent exception.
Sensitive information
A subset of personal information under section 6(1) of the Privacy Act: health, criminal record, racial or ethnic origin, sexual orientation, religious and political beliefs, among others. Legal intake calls collect it routinely.
APP
An Australian Privacy Principle, one of the thirteen rules in Schedule 1 to the Privacy Act 1988 (Cth) that govern how an entity collects, uses, discloses and secures personal information.
helpFAQ

Recording client calls, the questions firms ask

Yes, in every state and territory, as long as the caller is told at the start of the call. In Victoria, Queensland and the Northern Territory the offence is aimed at people who are not on the call, so a party may record without anything more. New South Wales, Western Australia, South Australia, Tasmania and the ACT are all-party consent jurisdictions, which means the firm needs the caller's consent. That is a requirement to obtain consent, not a ban on recording. An announcement at the start of the call, followed by the caller staying on the line, is the accepted way consent arises, and it is what banks and call centres in those states rely on every day.

Yes, in every jurisdiction. Making a recording and passing it on are treated as two separate questions in the legislation, and a transcription or answering provider is a person who was not on the call. The caller's consent covers both if the announcement says the call is transcribed, and not only that it is recorded. Get that wording right and the firm is on solid ground in all eight jurisdictions.

No. Under the NSW Act a record includes a documentary record prepared from a recording, so the transcript is caught by the same provisions as the audio. Treat the recording, the transcript and any summary built from it as the same class of material for consent, storage and access purposes.

Under the surveillance devices legislation it does most of the work, because an announcement followed by the caller continuing is the standard way implied consent arises, and in Queensland and Western Australia it can also take the call outside the statutory definition of a private conversation. Under the Privacy Act it is not the whole answer. The OAIC's position is that an entity cannot infer consent simply from having given notice, and that express consent should generally be sought before handling sensitive information, which legal enquiry calls collect routinely. A firm needs the announcement, a real opportunity to decline, and somewhere for a caller who declines to go.

Not automatically, and this is the trap. Tasmania section 10 and the ACT section 5 restrict a party who recorded the conversation from communicating the record whether or not the recording itself contravened the Act, and Victoria section 11 is not confined to unlawfully made recordings either. Queensland section 45 applies specifically to a party who communicates or publishes. Consent from the parties is an exception in all of them, so the answer is to word the announcement so that it covers the transcription provider as well as the recording.

No, on the accepted reading. Interception under section 6(1) is listening to or recording a communication in its passage over a telecommunications system without the knowledge of the person making it, and section 5F ends that passage when the communication becomes accessible to the intended recipient. A recording made at the receiving end, after the call has arrived, and announced to the caller, falls outside both elements. No Australian case decides the point squarely, so it is a proposition well accepted in practice rather than settled by authority.

Get their consent first. Queensland Law Society's guidance is that recording a conversation with another lawyer without prior consent is professionally discourteous and may be considered unprofessional, citing the courtesy obligation in rule 4.1.2 and Council Ruling 2.11. That sits on top of the criminal law, so even in a state where recording is plainly lawful, outgoing calls to other practitioners need consent first.

Assume it does not. The $3 million turnover exemption remains in the Act, but section 6E(1A) removes it for reporting entities providing designated services under the AML/CTF Act, which from 1 July 2026 takes in lawyers and conveyancers. An intake call that collects identity information is very often part of customer due diligence, so a small practice should treat the Australian Privacy Principles as applying to its call recording. The statutory tort of serious invasion of privacy applies whatever the firm's turnover.

Only as long as it needs them. APP 11.2 requires personal information to be destroyed or de-identified once it is no longer needed for a permitted purpose, so a firm needs an actual retention period for call audio rather than an archive that grows forever. Many firms keep the transcript and summary on the matter file, which is the record they rely on, and delete the audio within a fixed window once the transcript exists.

travel_exploreSources

Primary sources and further reading

Every section reference and figure in this guide traces to one of these. They are listed so you can check the guide rather than take its word for it.

Get started

See one call go from ring to file note

Book my demo call with the founder. Half an hour on how your calls are handled now, and a live look at the service answering for a demo firm, from the ring to the file note on the matter.

calendar_monthBook my demo downloadDownload the app

Keep reading