Recording and transcribing client calls in Australia
A plain-English guide for law firms. Whether you may record a client call, whether you may have it transcribed, what the caller has to be told, and what the Privacy Act adds on top. Every rule is traced to the section of the Act it comes from, so you can check it rather than take our word for it.
What changes from state to state is whether that announcement is a courtesy or the thing your legal position rests on. And there is a second question most firms never ask: whether you may pass the recording to someone who was not on the call, such as a transcription or answering provider. The wording of the announcement answers both.
- Recording: Victoria, Queensland and the Northern Territory let a party record without more. New South Wales, Western Australia, South Australia, Tasmania and the ACT need the caller's consent, and an announcement at the start of the call followed by the caller continuing is how that consent arises. It is a consent requirement, not a ban.
- Transcribing: permitted everywhere, provided the announcement says the call is transcribed and not only recorded, because passing the audio to a provider is a separate act in every jurisdiction and the caller's consent needs to cover it.
- A transcript is a record in its own right, so it carries the same obligations as the audio.
- The Privacy Act adds more: an intake call collects sensitive information almost every time, so notice alone is not consent, and the caller needs a real way to decline.
- The statutory privacy tort applies whatever your turnover, and a covert recording of a client call is close to what its intrusion limb was written for.
Two questions, not one
Firms ask whether they may record. The legislation asks that, and then asks a second question: what may you do with the recording afterwards. The two do not travel together. Queensland lets a party record freely and then constrains what it may do with the recording, while New South Wales constrains the recording and lets a lawfully made one be shared. Neither question stops a firm transcribing its calls. Together they decide what the announcement has to say.
A new enquiry or an existing client speaks to the firm, or to a service answering for the firm.
Answered by the surveillance devices or listening devices Act in your state. In five of the eight jurisdictions a party needs the caller's consent, and the announcement at the start is how that consent is obtained.
A separate provision in every jurisdiction covers communicating the record to someone who was not on the call, including a transcription or answering provider. Consent covers it, so the announcement should say the call is transcribed.
What ends up on the matter: the summary, the transcript, and a record of the consent that allowed both.
Once the announcement is made, a Sydney firm is in the same position as a Melbourne firm. The difference is that in Sydney the announcement is load bearing, so it has to come first, before any discussion of the caller's matter, and the firm should be able to show it was made on each call. That is the mechanism every bank, insurer, utility and government call centre operating in the all-party consent states relies on, and it has done so for decades.
Work out your position in four questions
Follow the questions in order. A firm that can answer yes to all four is compliant in every Australian jurisdiction, whichever state it practises in and whether a person or an automated service answers the phone.
Where each jurisdiction lands
Eight Acts, two groups. The orange group needs the caller's consent before a party records. The blue group lets a party record without more. Every card also shows the separate provision that applies when the recording is passed on, because that is the one that catches firms using an outside provider.
Section numbers are given so you can go to the source rather than take this page's word for it. Check the current consolidation for your state before setting a firm policy: the Queensland register shows a currency date of 1 July 2024, and the Western Australian consolidation this guide works from is version 01-d0-03.
All-party consent means announce, not "do not record"
Firms in the five all-party consent jurisdictions often read the legislation as "we cannot record here". That is not what the Acts say. Section 7(3)(b) of the NSW Act, and its equivalents in Western Australia, South Australia, Tasmania and the ACT, take a recording outside the offence where each principal party consents, expressly or impliedly. On a phone call consent is implied in the ordinary way: the caller is told at the start that the call is recorded or transcribed, and by staying on the line they consent.
Do not build a policy on the "lawful interests" exception
In the five all-party consent jurisdictions there is a second route, a narrower limb allowing a recording that is reasonably necessary to protect the recording party's lawful interests. It is read far more narrowly than firms expect. In Sepulveda v R [2006] NSWCCA 379 the court held that reasonable necessity is judged objectively on the grounds existing at the time of the recording, and that the availability of other lawful avenues told against it. The cases where it succeeded involved a specific, existing threat and no practical alternative, such as DW v R [2014] NSWCCA 28 and R v EP [2019] ACTSC 89, and courts have rejected recordings made to gain an advantage in civil proceedings. A general wish for accurate records of every client call is not an interest of that kind. Rely on consent instead. The announcement is already being made.
The "not for publication" limb in NSW, Tasmania and the ACT
Those three jurisdictions add a further limb: a principal party consents and the recording is not made for the purpose of communicating or publishing the conversation to people who are not parties. It suits a firm recording only for its own file, and it disappears the moment the audio is sent to an external transcription or AI vendor, because at that point the recording arguably is made for the purpose of communicating it to a non-party. If your firm is in one of those three jurisdictions and uses an outside service, plan on consent, not on this limb.
Lawful to record is not the same as free to share
This is the part worth reading twice. Tasmania section 10 restricts a party who recorded a private conversation from communicating or publishing the record whether or not the recording contravened section 5. The ACT offence in section 5 applies whether or not the recording contravened section 4. Victoria's section 11 is not confined to unlawfully made recordings, and Queensland's section 45 is aimed squarely at a party who recorded and then passes the record on. So in Victoria, Queensland, Tasmania and the ACT a firm can be entirely within its rights to record and still need consent before the audio goes to a transcription or answering provider. Consent from the parties is an exception in every one of those provisions. In practice this is a drafting point: an announcement that says the call is transcribed, and names or describes the provider, obtains consent to the disclosure at the same moment it obtains consent to the recording. What it rules out is announcing a recording and then quietly sending the audio somewhere the caller was not told about.
One amendment to watch in New South Wales
The Surveillance Devices Amendment (Public Interest Exceptions) Act 2026 (NSW) was assented to on 7 April 2026 as Act No 7 of 2026. It does not amend section 7 or section 11. It replaces the possession offence in section 12 and inserts new sections 14A to 14C creating public interest and investigative body exceptions. It commences on a day to be appointed by proclamation, which has not been confirmed, so check the NSW legislation register before treating it as operative.
Interception, and why an answered call is not it
Interception under s 6(1) is listening to or recording a communication in its passage over a telecommunications system without the knowledge of the person making it. Section 5F ends that passage when the communication reaches the intended recipient. A recording made at the firm's end, after the call has arrived, fails the first element, and a recording the caller has been told about fails the second. No Australian decision settles the point directly, so a firm policy should describe it as the accepted position rather than as settled law.
Part 13 restricts disclosure of the contents of communications, but it binds carriers, carriage service providers, their employees and telecommunications contractors. A law firm is not an eligible person under it. It matters indirectly, because your telephony provider is bound by it and a third party answering service may be, depending on how it is structured. It is not a source of permission for the firm and it will not authorise anything a state Act prohibits.
What the Privacy Act adds
The surveillance legislation decides whether you may make and share the recording. The Privacy Act decides how you have to handle what is in it, and for a law firm the answers are stricter than for most businesses, because an intake call collects sensitive information as a matter of course.
Assume the small business exemption no longer covers you
The exemption for annual turnover of $3 million or less is still in the Act, but section 6E(1A) removes it for reporting entities providing designated services under the AML/CTF Act. The OAIC's guidance gives 31 March 2026 for existing reporting entities and 1 July 2026 for tranche two, which takes in lawyers, conveyancers, accountants and real estate professionals. The OAIC frames the carve-out as applying to handling connected with AML/CTF obligations, while the Law Society of NSW has described the exemption as no longer applying to designated service provisions. The practical conclusion is the same either way: an intake call that collects identity information is very often part of customer due diligence, so a small practice should now assume the Australian Privacy Principles apply to how it handles calls.
An intake call collects sensitive information almost every time
Sensitive information under section 6(1) includes health information, criminal record, racial or ethnic origin, sexual orientation or practices, and political or religious beliefs. A personal injury enquiry discloses health information, a criminal enquiry discloses a criminal record, a family law enquiry often discloses both, and a migration or discrimination enquiry discloses racial or ethnic origin. APP 3.3 requires consent to collect it, and the OAIC's guidance is explicit that an entity cannot infer consent simply because it gave notice, and that express consent should generally be sought before handling sensitive information. A plain voice recording is not automatically biometric information, but voice print caller authentication is a different matter and crosses that line.
| Principle | What it requires | What it means for call recording |
|---|---|---|
| APP 1 | An up to date privacy policy | If the firm records or transcribes calls, the policy has to say so. |
| APP 3.3 | Consent to collect sensitive information | Intake calls collect it routinely. Notice alone is not consent, so the announcement needs a real way to decline. |
| APP 3.5 | Collection by lawful and fair means | A recording made in breach of a state surveillance Act is also a Privacy Act breach. |
| APP 5 | Notice at or before collection | Who is collecting, why, who it goes to, how to access and complain, and whether it goes overseas and where. The overseas item is the one most announcements leave out. |
| APP 6 | Use for the primary purpose | Reusing a corpus of recordings to train or tune a model is a secondary purpose and needs fresh consent. |
| APP 8 and s 16C | Reasonable steps before overseas disclosure | Most transcription and voice AI vendors process offshore. The firm stays accountable for what the overseas recipient does, including its subcontractors. |
| APP 11 | Security, and destruction when no longer needed | APP 11.3 spells out technical and organisational measures. APP 11.2 means a fixed retention period for audio, not an archive that grows forever. |
| APP 12 and 13 | Access and correction | A client can ask for the recording and transcript, and ask for a wrong transcript to be corrected. The firm needs a way to find, review and release them. |
Australian Privacy Principles, Schedule 1 to the Privacy Act 1988 (Cth), read with the OAIC's APP Guidelines.
The statutory tort applies whatever your turnover
The tort of serious invasion of privacy in Schedule 2 to the Privacy Act commenced on 10 June 2025. The intrusion limb expressly covers listening to or recording a private conversation. It requires intentional or reckless conduct, a reasonable expectation of privacy and seriousness, and it is actionable without proof of loss. Damages for non-economic loss together with exemplary damages are capped at the greater of $478,550 or the defamation cap for non-economic loss, which is indexed annually, so the operative number moves. Economic loss is uncapped. Consent is a defence, which is one more reason the announcement matters. A small practice relying on the turnover exemption is still exposed to the tort.
Dates that changed the picture
Most of the rules in this guide are old. The reasons a firm should look at them again are recent, and one is still ahead.
The Law Society of NSW, the Legal Practice Board of WA and the VLSB+C require transparency with clients about when and how AI is used.
Reasonable security steps now expressly include technical and organisational measures.
The intrusion limb expressly covers listening to or recording a private conversation. It applies whatever the firm's turnover.
Section 6E(1A) of the Privacy Act, per the OAIC's guidance.
Act No 7 of 2026. It does not touch s 7 or s 11. It commences on proclamation, which has not been confirmed.
Lawyers, conveyancers, accountants and real estate professionals. A small practice should assume the APPs apply to its intake calls.
Privacy policies will need to describe automated decisions that affect individuals. Worth diarising if an AI answering service routes or triages callers.
Confidentiality, conduct rules and the guidance on AI
Confidentiality. Rule 9.1 of the Australian Solicitors' Conduct Rules prohibits disclosure of confidential client information, but rule 9.1.2 permits disclosure to an employee of, or a person otherwise engaged by, the practice for the purposes of delivering or administering legal services. A properly contracted answering or transcription service engaged by the practice has a real argument that it sits inside 9.1.2. That argument does not displace APP 8, section 16C, the state offences for passing a recording on, or privilege, and rule 9.2.1 makes client authorisation the cleanest route in any event. An enquiry from a prospective client who never retains the firm may sit outside rule 9, while the equitable duty of confidence and the Privacy Act still apply to it.
File notes. Queensland Law Society Guidance Statement No. 40 is the most directly useful professional guidance on this topic in Australia. It confirms that file notes may be recorded, states that a file note generated using AI should be checked and verified by the practitioner who attended, and says it is ordinarily good practice to secure prior consent from other participants before using voice to text or AI transcription. It also treats recording another practitioner without consent as professionally discourteous.
AI. The joint statement of 6 December 2024 from the Law Society of NSW, the Legal Practice Board of WA and the Victorian Legal Services Board and Commissioner requires transparency with clients about when and how AI was used. The Law Society of NSW's guide to responsible use of AI, published January 2026, asks practitioners to ensure the client is aware of and approves the use of generative AI in their matter. The Law Institute of Victoria extends the consent requirement to commercial AI systems and not only public ones. None of those documents addresses transcription or recording tools specifically, which is worth knowing before a firm assumes it has guidance covering this.
What the caller has to be told
Everything in this guide comes down to what the caller hears in the first fifteen seconds. Get the announcement right and the surveillance legislation, the Privacy Act and the conduct guidance are all answered in one place.
- That the call is recorded, transcribed, or both. Name both if both happen, since a transcript is a separate record.
- Who is doing it. The firm's name and how to contact it.
- Why. An accurate file note, intake, conflict checking, quality. "Business purposes" is too vague.
- That an automated system is involved, where it is, and that it is not a lawyer.
- Who it will be disclosed to, including the answering or transcription provider.
- Whether it goes overseas, and where, so far as that is practicable to state.
- A real way to decline. Voluntariness is one of the OAIC's elements of valid consent, so a caller who says no needs somewhere to go.
- Where to find the full policy, which must itself disclose the recording practice.
- How long it is kept. A fixed period, stated plainly.
You have reached [firm name]. So that we have an accurate record of your enquiry, this call is recorded and transcribed by our answering service, [provider], and some of that processing happens outside Australia. An automated assistant will take your details, and it is not a lawyer. Transcripts are kept for [period]. If you would rather not be recorded, say so now and [the alternative: call back in office hours, or leave a number for a callback]. Our privacy policy at [web address] explains how we handle your information.
Then three habits: capture the consent event in the matter record rather than relying on the fact that an announcement exists, obtain prior consent before recording an outgoing call to another practitioner, and verify an AI transcript before it is relied on as the file note.
Choosing an answering or transcription provider
A firm that uses an outside service is relying on that service to make the announcement, to keep the record where the firm says it is kept, and to leave a trail the firm can show. These are the questions to put to any provider before switching it on. A good one will answer all of them in writing.
- Is the caller told the call is transcribed, in the first thing the service says, before any discussion of the matter?
- Is the wording yours to set, so it can name the firm and give a way to decline?
- Is the fact that the announcement was made captured with each call?
- Which countries does each step run in: the live call, the transcription, the storage?
- Is the transcript stored in Australia, and under whose agreement?
- Will the provider put it in writing, provider by provider, so you can answer a client who asks?
- Is audio kept, and for how long? A transcript with the audio deleted on a fixed schedule is easier to defend under APP 11.2 than an archive.
- Can you retrieve and release a transcript if a client asks under APP 12?
- Does the record file to the matter, so the consent and the note sit together?
- Does it decline to give legal advice, and say so to the caller?
- Does it refuse to confirm whether a matter exists to an unverified caller?
- Are recordings ever used to train or tune models? If so, APP 6 needs fresh consent.
General information, not legal advice
This guide describes Australian legislation and published regulator and law society guidance as at 22 September 2026. It is general information about how call recording is regulated, written for firms deciding how to configure a phone system, and it is not legal advice or a substitute for checking the current consolidation of the Act that applies to your practice.
Terms used in this guide
- Private conversation
- Words spoken in circumstances that show the speakers want them heard only by the people taking part. A client phone call is one. Each Act has its own definition, and in Queensland and Western Australia a conversation the parties know is being recorded can fall outside it.
- Party
- A person who is speaking or being spoken to in the conversation. The firm's receptionist, lawyer or answering service is a party to the call. A transcription provider that receives the audio afterwards is not.
- All-party consent
- A rule that a party may only record if every principal party consents. Consent can be express or implied. On a phone call it is implied by the caller continuing after being told the call is recorded. It is a consent requirement, not a ban.
- Listening device
- Any device used to record or listen to a conversation. A phone system, a softphone, a call recording feature and an AI answering service all count.
- Record
- The recording itself and, under the NSW Act, any documentary record prepared from it. A transcript and a summary built from the transcript are records too.
- Communicate or publish
- Passing the record, or its contents, to someone who was not a party. Sending audio to a transcription or answering provider is a communication. Every jurisdiction has a separate offence for this, each with a consent exception.
- Sensitive information
- A subset of personal information under section 6(1) of the Privacy Act: health, criminal record, racial or ethnic origin, sexual orientation, religious and political beliefs, among others. Legal intake calls collect it routinely.
- APP
- An Australian Privacy Principle, one of the thirteen rules in Schedule 1 to the Privacy Act 1988 (Cth) that govern how an entity collects, uses, discloses and secures personal information.
Recording client calls, the questions firms ask
Yes, in every state and territory, as long as the caller is told at the start of the call. In Victoria, Queensland and the Northern Territory the offence is aimed at people who are not on the call, so a party may record without anything more. New South Wales, Western Australia, South Australia, Tasmania and the ACT are all-party consent jurisdictions, which means the firm needs the caller's consent. That is a requirement to obtain consent, not a ban on recording. An announcement at the start of the call, followed by the caller staying on the line, is the accepted way consent arises, and it is what banks and call centres in those states rely on every day.
Yes, in every jurisdiction. Making a recording and passing it on are treated as two separate questions in the legislation, and a transcription or answering provider is a person who was not on the call. The caller's consent covers both if the announcement says the call is transcribed, and not only that it is recorded. Get that wording right and the firm is on solid ground in all eight jurisdictions.
No. Under the NSW Act a record includes a documentary record prepared from a recording, so the transcript is caught by the same provisions as the audio. Treat the recording, the transcript and any summary built from it as the same class of material for consent, storage and access purposes.
Under the surveillance devices legislation it does most of the work, because an announcement followed by the caller continuing is the standard way implied consent arises, and in Queensland and Western Australia it can also take the call outside the statutory definition of a private conversation. Under the Privacy Act it is not the whole answer. The OAIC's position is that an entity cannot infer consent simply from having given notice, and that express consent should generally be sought before handling sensitive information, which legal enquiry calls collect routinely. A firm needs the announcement, a real opportunity to decline, and somewhere for a caller who declines to go.
Not automatically, and this is the trap. Tasmania section 10 and the ACT section 5 restrict a party who recorded the conversation from communicating the record whether or not the recording itself contravened the Act, and Victoria section 11 is not confined to unlawfully made recordings either. Queensland section 45 applies specifically to a party who communicates or publishes. Consent from the parties is an exception in all of them, so the answer is to word the announcement so that it covers the transcription provider as well as the recording.
No, on the accepted reading. Interception under section 6(1) is listening to or recording a communication in its passage over a telecommunications system without the knowledge of the person making it, and section 5F ends that passage when the communication becomes accessible to the intended recipient. A recording made at the receiving end, after the call has arrived, and announced to the caller, falls outside both elements. No Australian case decides the point squarely, so it is a proposition well accepted in practice rather than settled by authority.
Get their consent first. Queensland Law Society's guidance is that recording a conversation with another lawyer without prior consent is professionally discourteous and may be considered unprofessional, citing the courtesy obligation in rule 4.1.2 and Council Ruling 2.11. That sits on top of the criminal law, so even in a state where recording is plainly lawful, outgoing calls to other practitioners need consent first.
Assume it does not. The $3 million turnover exemption remains in the Act, but section 6E(1A) removes it for reporting entities providing designated services under the AML/CTF Act, which from 1 July 2026 takes in lawyers and conveyancers. An intake call that collects identity information is very often part of customer due diligence, so a small practice should treat the Australian Privacy Principles as applying to its call recording. The statutory tort of serious invasion of privacy applies whatever the firm's turnover.
Only as long as it needs them. APP 11.2 requires personal information to be destroyed or de-identified once it is no longer needed for a permitted purpose, so a firm needs an actual retention period for call audio rather than an archive that grows forever. Many firms keep the transcript and summary on the matter file, which is the record they rely on, and delete the audio within a fixed window once the transcript exists.
Primary sources and further reading
Every section reference and figure in this guide traces to one of these. They are listed so you can check the guide rather than take its word for it.
- Surveillance Devices Act 2007 (NSW) s 7, NSW legislation via AustLII
- Surveillance Devices Act 1999 (Vic) s 6, Victorian legislation via AustLII
- Invasion of Privacy Act 1971 (Qld), Queensland legislation register
- Surveillance Devices Act 2016 (SA), South Australian legislation register
- Listening Devices Act 1991 (Tas), Tasmanian legislation register
- Listening Devices Act 1992 (ACT), ACT legislation register
- Surveillance Devices Act 2007 (NT), NT legislation register
- Telecommunications (Interception and Access) Act 1979 (Cth) s 6, Commonwealth legislation via AustLII
- Australian Privacy Principles Guidelines, Chapter B: key concepts, Office of the Australian Information Commissioner
- Australian Privacy Principles Guidelines, Chapter 8: cross-border disclosure, Office of the Australian Information Commissioner
- Statutory tort for serious invasions of privacy, Office of the Australian Information Commissioner
- Privacy guidance for reporting entities under the AML/CTF Act, Office of the Australian Information Commissioner
- Guidance Statement No. 40: File Notes, Queensland Law Society
- Statement on the use of artificial intelligence in Australian legal practice, Law Society of NSW, Legal Practice Board of WA and VLSB+C, December 2024
- Generative AI Use in the Legal Profession: findings from the 2025 Victorian Lawyer Census, Legal Services Research Centre, VLSB+C
See one call go from ring to file note
Book my demo call with the founder. Half an hour on how your calls are handled now, and a live look at the service answering for a demo firm, from the ring to the file note on the matter.