Privacy

Call recording and consent in Europe: what a voice agent must do

8 September 2026 Β· 5 min read Β· by the NordTell team

Recording a phone call feels like a small thing. Press a button, keep the audio. In Europe it is not small: the recording is personal data of everyone on the line, it needs a reason, and in many countries the people being recorded must be told and may need to agree. When a voice agent takes the call, the same rules apply, with one new wrinkle: the agent has to do the asking, and it has to do it well. This post explains the principles in plain words. The details differ by country, so check with your own adviser before you switch anything on.

A recording is a second thing

The call itself is one use of personal data: someone speaks, someone listens, something is written down. A recording is a copy that lives on after the call has ended, can be listened to by people who were not there, and can be leaked. That is why the law treats it as its own decision, and why "we answer the phone" does not automatically cover "we keep the audio".

So the first question is not "may we record" but "why would we". Training staff, settling a booking dispute, quality control, a legal requirement in some regulated trades. If the honest answer is "it seemed useful", a transcript or a summary is usually enough and carries less weight.

Two traditions, one floor

European countries do not agree on the details. Some are satisfied if one side of the conversation knows the call is being recorded. Others expect everyone on the line to be told, and some expect agreement. On top of those national rules sits the GDPR, which applies everywhere in the EU and adds a floor: a recording needs a lawful basis, people must be informed, and the audio must not be kept longer than needed. Our wider GDPR checklist for AI phone calls covers the rest of that floor.

The practical result for a business is simple even if the law is not. Tell people, early and clearly, and give them a way to say no. If you do that, you meet the stricter tradition, and you meet it in every country your callers may be dialling from. What "a way to say no" has to look like for your business is a question for your adviser.

How a voice agent should ask

A human receptionist can read a caller's mood and adapt. The agent reads a script, so the script has to be right the first time. Four rules.

  • Ask before the recorder starts, not after. The greeting comes first, including the line that says it is an AI, then the question, and nothing is recorded until the answer is yes.
  • Keep it to one sentence. "This call may be recorded to help us with your booking. Is that all right?" is enough. A paragraph of legal text on the phone is not more careful, it is less understood.
  • Accept a no without a fight. The agent carries on, unrecorded, and does not ask again. A caller who says "rather not" should not have to explain.
  • Say it in the caller's language. A consent question the caller did not understand is not consent.

Write the line yourself and read it aloud. If you would feel odd saying it to a customer, the agent will sound odd too.

What to keep, and for how long

Three things come out of a recorded call: the audio, a transcript and a summary. They are not equally heavy. The audio contains the caller's voice, which is itself personal data; the transcript contains their words; the summary contains what mattered for the job. Many businesses find that the summary does the work and the audio is rarely opened.

A retention schedule turns that into numbers. Audio for a few weeks, long enough to settle a dispute. Transcripts a little longer. Summaries as long as the customer record they belong to. Whatever the numbers, they should be settings that expire data by themselves, not a reminder in someone's calendar. A single call should be something you can delete on request, by number, without asking a supplier. And where the audio sits while it lives matters too, which is why we wrote about hosting in the EU.

A short checklist before you switch it on

  1. Write down why you record, in one sentence you would be happy to say to a caller.
  2. Choose the position per agent: off, on, or on after the caller agrees.
  3. Write the consent line, read it aloud, and translate it for every language the agent answers in.
  4. Set retention in days for audio, transcripts and summaries.
  5. Decide who can listen, and log who did.
  6. Mention recording in your privacy notice.
  7. Take the whole thing to your adviser, because your country's rule may add a step.

Where NordTell fits

In NordTell, recording is a per-agent setting with three positions: off, on, or on after the caller consents. In the last case the agent asks, and the recorder only starts if the answer is yes. Retention is a number of days for calls, recordings and transcripts, and any single call can be deleted from the dashboard. Those are the settings; what you choose is up to you and your adviser.

Recording, consent and retention settings Β· The AI receptionist