AI Call Recording Laws in Australia and the US (Compliance Guide)

Why Call Recording Compliance is Paramount for AI

Every production AI voice agent relies on real-time audio recording to transcribe speech, analyze sentiment, and execute database operations. However, recording telephone conversations is strictly regulated by telecommunications and surveillance legislation in both Australia and the United States.

Deploying an AI receptionist without proper legal disclosures exposes business owners to severe regulatory penalties, inadmissibility of evidence, and civil liability.

Below is an operator's legal guide to compliant AI call recording across Australian state laws and US federal/state jurisdictions.

---

1. Australian Call Recording Laws (Surveillance Devices Acts)

Under Australian federal law (Telecommunications (Interception and Access) Act 1979), recording a phone call without participant knowledge is generally illegal. However, the exact consent rules vary by state and territory under local Surveillance Devices Acts:

Two-Party Consent States (All-Party Consent Required)

In these jurisdictions, all parties to the conversation must consent to the recording:

• New South Wales (NSW): Surveillance Devices Act 2007 (NSW) - Unlawful to record without consent of all principal parties.
• South Australia (SA): Surveillance Devices Act 2016 (SA) - Requires consent of all parties.
• Western Australia (WA): Surveillance Devices Act 1998 (WA) - Requires all-party consent.
• Tasmania (TAS): Listening Devices Act 1991 (TAS) - All-party consent required.

One-Party Consent States (Single-Party Exceptions)

In Queensland (QLD) and Victoria (VIC), state law allows one-party consent in specific circumstances where recording is reasonably necessary to protect lawful interests. However, because businesses receive calls across state borders (e.g. a customer in Sydney calling a national business number), best practice dictates adopting universal all-party consent across all of Australia.

---

2. United States Call Recording Laws (Federal vs State)

In the United States, telephone recording is governed by federal statute (18 U.S.C. § 2511) and state wiretapping statutes:

Federal Law: One-Party Consent

Federal law allows recording phone calls with the consent of at least one party to the conversation (which can be the business itself).

The 11 "Two-Party" (All-Party) Consent States

State laws supersede federal law when they are more restrictive. Eleven US states require all parties to consent to telephone recording:

California (Cal. Penal Code § 632)

2. Florida (Fla. Stat. § 934.03) 3. Illinois (720 ILCS 5/14-2) 4. Massachusetts (Mass. Gen. Laws ch. 272, § 99) 5. Maryland (Md. Code, Cts. & Jud. Proc. § 10-402) 6. Michigan (Mich. Comp. Laws § 750.539c) 7. Montana (Mont. Code Ann. § 45-8-213) 8. New Hampshire (N.H. Rev. Stat. Ann. § 570-A:2) 9. Pennsylvania (18 Pa. Cons. Stat. § 5703) 10. Washington (Wash. Rev. Code § 9.73.030) 11. Connecticut (for telephone recordings)

Because internet-based VoIP routing means a caller from California or Florida can dial your business at any time, enterprise deployments must enforce universal consent.

---

The Solution: The 5-Second Automated Disclosure Script

Achieving 100% legal compliance across all 50 US states and all Australian territories is straightforward: the AI must state the disclosure immediately upon connection.

When a caller stays on the line after hearing the recording disclosure, implied consent is established under common law.

Compliant Production Scripts

#### Standard Service Business Script: > "Thank you for calling [Business Name]. Please note this call is recorded and assisted by an AI agent for quality and appointment booking. How can I help you today?"

#### Healthcare / Medical Clinic Script (HIPAA & APP Compliant): > "Welcome to [Clinic Name]. This call is assisted by an AI receptionist and recorded securely for scheduling and patient care. If you are experiencing a medical emergency, please hang up and dial 000 [or 911]. How can we assist you today?"

Data Security & Storage Standards

Recording calls legally is only step one; storing them securely is step two:

• TLS 1.3 Encryption: All audio streams in transit must be encrypted.
• Zero Public LLM Training: Audio files and transcripts must never be shared with public foundation model training pools.
• Automated PII Redaction: Credit card numbers (PCI-DSS compliance) must be automatically stripped from call transcripts before storage.

Frequently Asked Questions

What happens if a caller says "I do not want to be recorded"?

Our AI agents feature automated consent revocation logic. If a caller states "Do not record me", the AI pauses recording immediately and continues the call in non-recording mode, or transfers the caller to an unmonitored human line.

Does the business owner need to listen to every recording?

No. The AI automatically parses the transcript, extracts structured action items, and generates an executive summary. Audio recordings are retained for dispute resolution, quality assurance, and training verification.

How does this relate to missed-call text-back?

Text messaging is governed separately by the Australian Spam Act and US TCPA/10DLC regulations. Read our companion guide on missed-call text-back compliance for messaging rules.