Is It Legal to Record Business Phone Calls in the US, UK and UAE?

Short answer: in all three places a business can usually record calls, but the conditions differ. In the US, federal law and most states allow recording with one party's consent, while some states require everyone on the call to agree. In the UK, you need a lawful basis under UK GDPR and you must tell callers. In the UAE, recording someone without their consent can be a criminal offence, so get clear consent. Everywhere, the practical answer is the same: tell callers at the start that the call is recorded, and record only when you have a reason to.

This is a plain-language overview, not legal advice. Laws change and depend on your facts; take advice from a lawyer where you operate.

United States: one-party and all-party consent

• Federal law allows a call to be recorded when one party to it consents. Your business, as a party to the call, can be that party under federal law.
• Most states follow the same one-party rule.
• Some states require all parties to consent, including California, Florida, Illinois, Maryland, Massachusetts, Pennsylvania and Washington. The list is not complete and the details differ from state to state.
• Calls across state lines can bring the stricter state's rule into play. Because a business rarely knows where every caller is, many simply announce recording on every call.
• An announcement at the start, such as "this call may be recorded", followed by the caller continuing, is the common approach. Ask your lawyer whether it is enough for your states and your type of call.

United Kingdom: lawful basis and telling callers

• UK GDPR applies to recordings, because a recording of a caller is personal data. You need a lawful basis for recording (often legitimate interests, sometimes a legal obligation), and you must tell people about it, usually with a short announcement and a privacy notice they can find.
• Interception law allows businesses to record calls on their own systems for certain business purposes, under the Investigatory Powers Act 2016 and regulations made under it.
• Some sectors must record certain calls, such as some regulated financial services. Others should think twice before recording sensitive calls at all.
• Keep only what you need, for as long as you need it, and be ready to answer a person who asks for their data.

United Arab Emirates: get consent

• Recording a conversation without consent can be a crime. UAE lawyers point to the federal penal code and the cybercrime law, both of which protect the privacy of conversations.
• The federal data protection law applies to recordings as personal data, and the DIFC and ADGM free zones have their own data protection laws.
• The safe approach is explicit notice at the start of the call and recording only where you have a clear business reason. Take local advice before recording calls in the UAE.

At a glance

Does this apply to AI phone agents?

Yes. The rules are about recording a conversation, not about who or what answers it. When an AI agent answers or places a call and the call is recorded, the same consent and notice rules apply. Transcripts are worth the same care: they are a written record of what the caller said and are personal data too.

Do you need recordings at all?

Often a transcript and an outcome are enough to check what the agent said and what was agreed. Recordings help with quality checks, disputes and training. If you don't need them, not recording is the simplest way to reduce risk.

How recording works in ThinnestAI

• Recording is a per-agent switch, off by default. Every call has a transcript and an outcome whether or not it is recorded.
• Telling callers is up to you. Put the recording notice in the greeting you write, and turn on "Let the greeting finish" so it is heard in full.
• Recordings are kept for a period set by your plan, then deleted. See pricing for each plan.
• Where data is stored: London for international workspaces, Mumbai for India. See where AI voice agent data is stored.

For India's rules, read call recording and privacy in India. Next step: the call recording page.