Business Call Recording Laws In New Zealand

Yes, you can usually record a conversation in New Zealand if you're a party to that conversation, but that doesn't mean your business should record calls secretly. For business call recording, the practical rule is simple: tell people before you record, explain why, and handle the recording like personal information under the Privacy Act 2020.

Businesses record phone calls for plenty of legitimate reasons, such as staff training, quality assurance, customer service notes, safety, complaints handling and keeping accurate records of what was agreed. The risk is that call recordings can capture names, phone numbers, addresses, payment details, health information, employment information, opinions and voices. That makes them a privacy and trust issue, not just a technical feature in your phone system.

If your business wants to record customer, client, supplier or employee calls, it's worth setting up a clear process before you switch recording on. A short upfront message, a sensible retention period and a secure storage process can save a lot of trouble later.

Can You Record A Conversation Without Consent In NZ?

New Zealand is often described as having a single party consent approach to recording conversations. In plain English, if you're one of the people in the conversation, it's generally not a criminal offence under the Crimes Act 1961 for you to record that conversation without getting the other person's consent.

However, that isn't the end of the story for your business. The Privacy Act 2020 can still apply because a call recording will often contain personal information. If your business is collecting that information, you usually need to take reasonable steps to make sure the person knows you're collecting it, why you're collecting it, who may receive it, whether they have to provide it, and how they can access and correct it.

So, when people search for recording without consent in NZ, the most useful answer is: it may not be automatically illegal if you're part of the conversation, but a business that records secretly can still create privacy, employment, consumer law and reputational risks.

The position is very different if you aren't a party to the conversation. Deliberately intercepting or recording a private communication using an interception device when you aren't part of it can be a criminal offence, unless a legal exception applies. For example, planting a device in a meeting room to capture a private discussion between other people is very different from recording a customer service call that your team member is actually taking.

Is It Legal For A Business To Record Phone Calls?

Yes, it's legal for a business to record phone calls in New Zealand if it does so properly. The safest approach is to use a clear call recording notice at the start of the call, before any detailed personal information is discussed.

You have probably heard a message like, This call may be recorded for training and quality purposes. If the caller stays on the line after hearing that message, that can often support implied consent. For higher risk calls, sensitive information or calls where recording isn't obvious, express consent is better. For example, your team member might say, Is it okay if I record this call so I can accurately note your instructions?

It's also good practice to give people a real option where possible. That might be continuing without recording, using email, submitting a web form, arranging a call back on an unrecorded line, or visiting a secure portal. A recording notice that leaves a customer with no practical choice can be risky, especially if the information is sensitive or the service is important.

If your business says the call is recorded for training and quality purposes, don't quietly use the recording for unrelated purposes such as marketing profiling, public testimonials or staff disciplinary action unless that use is also lawful, fair and clearly covered. Under the Fair Trading Act 1986, businesses should also avoid misleading customers about what is being collected and why.

What The Crimes Act And Privacy Act Require

Two key laws sit behind most New Zealand call recording questions: the Crimes Act 1961 and the Privacy Act 2020.

The Crimes Act deals with interception of private communications. The key point for everyday business calls is that recording a conversation you're part of is usually treated differently from secretly intercepting a conversation between other people. If your staff member is on the call, the criminal interception issue is generally less of a concern than if your business is recording people without anyone from your business being involved in the conversation.

The Privacy Act is usually the bigger day-to-day issue for businesses. A recording of a customer, employee or supplier call can be personal information if it identifies a person or is capable of identifying them. That means your business needs to think about the Information Privacy Principles, including:

• Purpose: only collect recordings for a lawful purpose connected to your business functions.
• Necessity: only record calls where recording is reasonably necessary for that purpose.
• Notice: take reasonable steps to tell people that you're recording, why you're recording and how the recording may be used.
• Fairness: don't collect recordings in a way that's unfair or unreasonably intrusive.
• Security: protect recordings against loss, unauthorised access, misuse and disclosure.
• Retention: don't keep recordings for longer than you need them.
• Access and correction: be ready to respond if someone asks to access or correct personal information in a recording.

The Office of the Privacy Commissioner explains the New Zealand Privacy Principles in more detail. For a business owner, the practical point is that call recording should be designed into your privacy processes, not treated as an informal back-up copy of conversations.

If a recording contains sensitive details and there's a serious privacy breach, your business may also need to notify the Privacy Commissioner and affected people. A serious breach could include a recording file being sent to the wrong customer, exposed online, accessed by an unauthorised contractor, or downloaded by a staff member who didn't need it.

How To Get Consent And Give Call Recording Notices

Consent can be express or implied, but clear notice is what makes your process easier to defend and easier for customers to understand.

An express consent script might sound like this: I would like to record this call so I can accurately record your instructions and improve our service. Is that okay? Your team member should wait for the person to say yes before continuing.

An implied consent notice might sound like this: This call may be recorded for training, quality assurance and record keeping. If you don't want the call recorded, please tell us now and we can discuss another option. If the person continues without objecting, your business may be able to rely on implied consent, depending on the circumstances.

A call recording notice isn't the same as a broad disclaimer. A disclaimer is usually aimed at limiting responsibility for certain things. A recording notice is about being transparent when you collect personal information. Some businesses use both, but the recording notice needs to be clear and specific.

A simple call recording notice should cover the following sections:

1. Who Is Collecting The Recording: name your business or organisation clearly.
2. That The Call May Be Recorded: say this before the call moves into personal or sensitive details.
3. Why You Are Recording: list the real purposes, such as training, quality assurance, safety, compliance or record keeping.
4. Who May Access It: identify the types of people who may listen, such as managers, support staff, service providers or auditors.
5. Options If They Object: explain whether the caller can continue without recording or use another contact channel.
6. Where To Find More Information: point to your privacy policy or tell them how to contact your business about privacy questions.

A legal professional should tailor your wording to your systems, industry and level of risk. For example, a medical booking service, financial services provider and online retailer shouldn't all use the same call recording script.

Recording Employees, Training Calls And Workplace Monitoring

Call recording becomes more sensitive when it involves employees. As an employer, you need to think about privacy obligations as well as good faith obligations under the Employment Relations Act 2000.

If you record calls for training or quality review, tell employees clearly before the recording programme starts. Your employment agreements, workplace policies or call centre procedures should explain what is recorded, when managers listen to recordings, how recordings are scored, how long they are kept and whether recordings can be used in performance management.

For example, if a new customer service representative is taking a live call while a manager listens in, the caller should be told that the call may be monitored or recorded for training. The employee should also have been told that this is part of their role and training process. Surprise monitoring can damage trust and may create privacy or employment issues.

Covert recording shouldn't be used as a normal management tool. There may be exceptional situations where a business considers covert monitoring, but that's high risk and should be assessed carefully before anything is done. For most small businesses, the better approach is simple: tell staff, document the policy and apply it consistently.

The same transparency principle applies to other monitoring tools. For example, if you are putting up cameras in the workplace, employees should know where the cameras are, why they're used and when they operate. Cameras shouldn't be placed in areas where people reasonably expect privacy, such as bathrooms or changing areas.

What To Do With Recorded Calls After You Collect Them

The legal risk doesn't end when the call ends. Once your business has a recording, you need to treat it as business data and personal information.

Start with access controls. Not everyone in your business should be able to search, download or forward call recordings. Limit access to people who genuinely need it, such as a customer support manager, compliance lead or authorised system administrator. If you use a third party call recording platform, check where recordings are stored, who can access them, whether data is stored outside New Zealand and what security commitments the provider gives.

Next, set a retention period. Many businesses don't need to keep routine training or quality assurance calls forever. A common approach is to keep ordinary customer service recordings for a limited period, such as 90 days or 6 months, and keep specific recordings longer only if they're needed for a legitimate business reason. Don't choose a period blindly. Your industry, risk profile, customer promises and internal processes should drive the decision.

You should also update your Privacy Policy if you record calls as part of your customer or client interactions. A good privacy policy tells people what personal information you collect, why you collect it, how you use and store it, who you may share it with, and how they can contact you to access or correct their information.

Call recordings also sit within your broader data privacy obligations. If your business is growing quickly and you aren't sure what else needs attention, a practical legal compliance review can help you prioritise. A Legal Health Check can also help you spot common business legal issues to consider.

Practical Examples And Call Recording Checklist

Here is how this can look in practice.

Koru Kitchens, a small renovation business in Wellington, receives about 100 customer calls each week. It wants to record calls because customers often change measurements, delivery dates and product choices over the phone. The business sets up an automated message saying, This call may be recorded for customer service, training and record keeping. If you don't want the call recorded, please tell us now.

Koru Kitchens keeps ordinary recordings for 90 days. Only the owner and operations manager can access them. If a call includes payment card details, staff pause the recording while the payment is taken. The privacy policy on the website is updated to explain that calls may be recorded and how customers can request access to their personal information.

Two months later, a customer says they ordered matte black handles, but the staff member entered brushed nickel. The operations manager checks the recording within the 90 day retention period. The recording confirms the customer asked for matte black handles at minute 6 of the call. Koru Kitchens fixes the order before installation. The recording has done exactly what it was collected to do: it helped the business keep an accurate record and resolve confusion quickly.

Now change one fact. If Koru Kitchens had not told callers about recording, had kept every call forever, and had allowed all staff to download recordings to personal devices, the risk profile would be very different. Even if the original recording wasn't a criminal offence, the business could still have privacy compliance problems.

Before you turn on call recording, work through this checklist:

1. Define The Purpose: write down why your business needs recordings, such as training, quality, safety or record keeping.
2. Decide Which Calls Are Recorded: avoid recording every call by default if only some calls need it.
3. Prepare A Notice Script: tell callers before collecting detailed personal information.
4. Offer Alternatives Where Practical: give customers another channel if they don't want to be recorded.
5. Update Internal Policies: tell employees how recordings are used, reviewed and stored.
6. Limit Access: restrict recordings to authorised people only.
7. Set A Retention Period: delete recordings when they're no longer needed.
8. Check Third Party Providers: understand where recordings are stored and who can access them.
9. Update Your Privacy Policy: make sure your public privacy information matches what your business actually does.
10. Plan For Access Requests And Breaches: know who will respond if someone asks for a copy or if a recording is accidentally disclosed.

Key Takeaways

• In New Zealand, recording a conversation you're part of is usually not a criminal offence, but secretly recording business calls can still create privacy and trust issues.
• If your business records phone calls, tell callers upfront, explain the purpose and give a practical alternative where possible.
• Call recordings often contain personal information, so the Privacy Act 2020 applies to collection, use, storage, access, correction, disclosure and retention.
• Don't record conversations between other people if your business isn't a party to the conversation, unless a clear legal exception applies.
• Employee call recording should be covered in workplace policies and handled consistently with good faith employment obligations.
• A strong call recording process includes a notice script, limited access, a retention period, secure storage and an updated privacy policy.

If you'd like help with call recording notices, privacy policies, workplace recording policies or customer terms for your business, you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.