United Kingdom recording laws
The answer depends on the specific circumstances. This is a summary of the reviewed rule for United Kingdom, not a conclusion about your situation — the conditions below are where most of the answer actually lives.
Reviewed rule available · last checked 2026-07-26 · next review due 2027-01-26
Check your own situation
The rule below is only part of it. Who else is on the conversation, where they are, and what you plan to do with the recording all change the answer. The checker runs in your browser — nothing is uploaded.
Check recording rules for this situationIn-person conversations
The answer depends on the specific circumstances
Section 3 of the Investigatory Powers Act 2016 is aimed at intercepting a communication in the course of its transmission over a telecommunication system — that is, at a third party tapping the line, not at a participant making their own record of a face-to-face conversation. What usually decides a UK situation instead is data-protection law: whether the recording is a purely personal activity, or whether it is being made for an organisation or for a purpose beyond your own household.
Conditions that matter
- A recording kept for genuinely personal use is treated very differently from one made in the course of a business, employment or public-facing activity.
- If the recording is not purely personal, UK GDPR applies and you need a lawful basis. Consent is one of six lawful bases, not the only one, and the ICO expects transparency about the recording either way.
- Sharing or publishing a recording of an identifiable person is a separate processing activity with its own requirements.
What this source does not resolve
- Whether a specific recording falls within the domestic-purposes exemption is fact-sensitive and has been read narrowly.
- Whether confidentiality, employment or professional-regulatory obligations are breached is separate from data-protection law.
Telephone calls
The answer depends on the specific circumstances
Section 3 of the Investigatory Powers Act 2016 is aimed at intercepting a communication in the course of its transmission over a telecommunication system — that is, at a third party tapping the line, not at a participant making their own record of a call. What usually decides a UK situation instead is data-protection law: whether the recording is a purely personal activity, or whether it is being made for an organisation or for a purpose beyond your own household.
Conditions that matter
- A recording kept for genuinely personal use is treated very differently from one made in the course of a business, employment or public-facing activity.
- If the recording is not purely personal, UK GDPR applies and you need a lawful basis. Consent is one of six lawful bases, not the only one, and the ICO expects transparency about the recording either way.
- Sharing or publishing a recording of an identifiable person is a separate processing activity with its own requirements.
What this source does not resolve
- Whether a specific recording falls within the domestic-purposes exemption is fact-sensitive and has been read narrowly.
- Whether confidentiality, employment or professional-regulatory obligations are breached is separate from data-protection law.
Internet calls and video meetings
The answer depends on the specific circumstances
Section 3 of the Investigatory Powers Act 2016 is aimed at intercepting a communication in the course of its transmission over a telecommunication system — that is, at a third party tapping the line, not at a participant making their own record of an internet call or video meeting. What usually decides a UK situation instead is data-protection law: whether the recording is a purely personal activity, or whether it is being made for an organisation or for a purpose beyond your own household.
Conditions that matter
- A recording kept for genuinely personal use is treated very differently from one made in the course of a business, employment or public-facing activity.
- If the recording is not purely personal, UK GDPR applies and you need a lawful basis. Consent is one of six lawful bases, not the only one, and the ICO expects transparency about the recording either way.
- Sharing or publishing a recording of an identifiable person is a separate processing activity with its own requirements.
What this source does not resolve
- Whether a specific recording falls within the domestic-purposes exemption is fact-sensitive and has been read narrowly.
- Whether confidentiality, employment or professional-regulatory obligations are breached is separate from data-protection law.
Recording when you are not part of the conversation
Recording by someone who is not a participant is restricted
Recording a conversation you are not part of engages the Investigatory Powers Act interception offence where a telecommunication system is involved, and engages data-protection law in almost every case because you are processing other people's personal data without their knowledge. It can also support a misuse-of-private-information claim.
Conditions that matter
- The domestic-purposes exemption is unlikely to help where you are capturing other people covertly.
- Harassment and stalking legislation can apply independently.
Expectation of privacy
Whether the participants reasonably expected not to be recorded is part of the analysis here. That is a question about the circumstances, not about the room: a conversation can still be private in a café, an office, a car or a street when people reasonably expect not to be overheard. Being in a public place does not by itself remove the question.
Sharing and publishing the recording
- Publishing a recording of an identifiable person is separate processing and can also raise misuse-of-private-information and defamation questions.
Workplace recording
- Employee monitoring has its own ICO expectations, including a clear policy, proportionality, and telling workers what is recorded and why.
Organisational and data-protection considerations
- An organisation recording calls or meetings must identify a lawful basis under Article 6 UK GDPR and meet its transparency obligations. Consent is not the only available basis, and it is often not the most appropriate one.
- Recording special-category data — health, biometrics, and more — needs an Article 9 condition on top of the Article 6 basis.
Calls that cross a border
When the other participants are somewhere else, more than one set of rules may be relevant, and which one a court would apply is a fact-specific determination this site does not make. Anyone telling you the strictest rule automatically governs is offering a rule of thumb rather than the law. The course that works either way is express consent from everyone — see recording across state lines.
Sources
Official sources first. Secondary guides are used to cross-check interpretations, never as the sole basis for a conclusion.
Investigatory Powers Act 2016, Section 3 — Unlawful interception
OfficialConcerns interception of a communication in the course of its transmission by a telecommunication system, not a participant making their own recording of a conversation they are part of.
Data Protection Act 2018
OfficialLawful basis for processing — UK GDPR guidance
OfficialConsent is one of six lawful bases. Organisations recording calls must identify a lawful basis and meet transparency duties; this is separate from interception law.
How this page was put together
Interception law, the personal-versus-organisational split, UK GDPR / DPA 2018 lawful-basis questions and ICO guidance were reviewed. Deliberately not stated: that consent is the only lawful basis for processing, which is a common and incorrect summary.
This checker provides general legal information and a conservative risk assessment. It is not legal advice, does not create an attorney-client relationship, and cannot determine which law a court would apply. Laws, court decisions, workplace policies and the facts of a specific situation can change the result.
Compiled by the BlackBox team from the official sources listed. Not reviewed by a lawyer. If you find something out of date or wrong, tell us and we will correct it — see the research method and correction policy.
After consent is handled
BlackBox records and transcribes on your device without automatically uploading conversations to BlackBox servers. That limits how far audio travels — it does not replace consent, workplace, privacy or disclosure obligations.