Country guide

United Kingdom recording laws

Last checked Jul 26, 2026 · general legal information, not legal advice
Overall position

The answer depends on the specific circumstances. This is a summary of the reviewed rule for United Kingdom, not a conclusion about your situation — the conditions below are where most of the answer actually lives.

Reviewed rule available · last checked 2026-07-26 · next review due 2027-01-26

Check your own situation

The rule below is only part of it. Who else is on the conversation, where they are, and what you plan to do with the recording all change the answer. The checker runs in your browser — nothing is uploaded.

Check recording rules for this situation

In-person conversations

The answer depends on the specific circumstances

Section 3 of the Investigatory Powers Act 2016 is aimed at intercepting a communication in the course of its transmission over a telecommunication system — that is, at a third party tapping the line, not at a participant making their own record of a face-to-face conversation. What usually decides a UK situation instead is data-protection law: whether the recording is a purely personal activity, or whether it is being made for an organisation or for a purpose beyond your own household.

Conditions that matter

  • A recording kept for genuinely personal use is treated very differently from one made in the course of a business, employment or public-facing activity.
  • If the recording is not purely personal, UK GDPR applies and you need a lawful basis. Consent is one of six lawful bases, not the only one, and the ICO expects transparency about the recording either way.
  • Sharing or publishing a recording of an identifiable person is a separate processing activity with its own requirements.

What this source does not resolve

  • Whether a specific recording falls within the domestic-purposes exemption is fact-sensitive and has been read narrowly.
  • Whether confidentiality, employment or professional-regulatory obligations are breached is separate from data-protection law.

Telephone calls

The answer depends on the specific circumstances

Section 3 of the Investigatory Powers Act 2016 is aimed at intercepting a communication in the course of its transmission over a telecommunication system — that is, at a third party tapping the line, not at a participant making their own record of a call. What usually decides a UK situation instead is data-protection law: whether the recording is a purely personal activity, or whether it is being made for an organisation or for a purpose beyond your own household.

Conditions that matter

  • A recording kept for genuinely personal use is treated very differently from one made in the course of a business, employment or public-facing activity.
  • If the recording is not purely personal, UK GDPR applies and you need a lawful basis. Consent is one of six lawful bases, not the only one, and the ICO expects transparency about the recording either way.
  • Sharing or publishing a recording of an identifiable person is a separate processing activity with its own requirements.

What this source does not resolve

  • Whether a specific recording falls within the domestic-purposes exemption is fact-sensitive and has been read narrowly.
  • Whether confidentiality, employment or professional-regulatory obligations are breached is separate from data-protection law.

Internet calls and video meetings

The answer depends on the specific circumstances

Section 3 of the Investigatory Powers Act 2016 is aimed at intercepting a communication in the course of its transmission over a telecommunication system — that is, at a third party tapping the line, not at a participant making their own record of an internet call or video meeting. What usually decides a UK situation instead is data-protection law: whether the recording is a purely personal activity, or whether it is being made for an organisation or for a purpose beyond your own household.

Conditions that matter

  • A recording kept for genuinely personal use is treated very differently from one made in the course of a business, employment or public-facing activity.
  • If the recording is not purely personal, UK GDPR applies and you need a lawful basis. Consent is one of six lawful bases, not the only one, and the ICO expects transparency about the recording either way.
  • Sharing or publishing a recording of an identifiable person is a separate processing activity with its own requirements.

What this source does not resolve

  • Whether a specific recording falls within the domestic-purposes exemption is fact-sensitive and has been read narrowly.
  • Whether confidentiality, employment or professional-regulatory obligations are breached is separate from data-protection law.

Recording when you are not part of the conversation

Recording by someone who is not a participant is restricted

Recording a conversation you are not part of engages the Investigatory Powers Act interception offence where a telecommunication system is involved, and engages data-protection law in almost every case because you are processing other people's personal data without their knowledge. It can also support a misuse-of-private-information claim.

Conditions that matter

  • The domestic-purposes exemption is unlikely to help where you are capturing other people covertly.
  • Harassment and stalking legislation can apply independently.

Expectation of privacy

Whether the participants reasonably expected not to be recorded is part of the analysis here. That is a question about the circumstances, not about the room: a conversation can still be private in a café, an office, a car or a street when people reasonably expect not to be overheard. Being in a public place does not by itself remove the question.

Sharing and publishing the recording

  • Publishing a recording of an identifiable person is separate processing and can also raise misuse-of-private-information and defamation questions.

Workplace recording

  • Employee monitoring has its own ICO expectations, including a clear policy, proportionality, and telling workers what is recorded and why.

Organisational and data-protection considerations

  • An organisation recording calls or meetings must identify a lawful basis under Article 6 UK GDPR and meet its transparency obligations. Consent is not the only available basis, and it is often not the most appropriate one.
  • Recording special-category data — health, biometrics, and more — needs an Article 9 condition on top of the Article 6 basis.

Calls that cross a border

When the other participants are somewhere else, more than one set of rules may be relevant, and which one a court would apply is a fact-specific determination this site does not make. Anyone telling you the strictest rule automatically governs is offering a rule of thumb rather than the law. The course that works either way is express consent from everyone — see recording across state lines.

Sources

Official sources first. Secondary guides are used to cross-check interpretations, never as the sole basis for a conclusion.

Investigatory Powers Act 2016, Section 3 — Unlawful interception

Official
The National Archives (legislation.gov.uk) · Statute · Investigatory Powers Act 2016 s. 3

Concerns interception of a communication in the course of its transmission by a telecommunication system, not a participant making their own recording of a conversation they are part of.

Open sourceChecked 2026-07-26

Data Protection Act 2018

Official
The National Archives (legislation.gov.uk) · Statute · Data Protection Act 2018
Open sourceChecked 2026-07-26

Lawful basis for processing — UK GDPR guidance

Official
Information Commissioner's Office · Regulator guidance

Consent is one of six lawful bases. Organisations recording calls must identify a lawful basis and meet transparency duties; this is separate from interception law.

Open sourceChecked 2026-07-26

How this page was put together

Interception law, the personal-versus-organisational split, UK GDPR / DPA 2018 lawful-basis questions and ICO guidance were reviewed. Deliberately not stated: that consent is the only lawful basis for processing, which is a common and incorrect summary.

This checker provides general legal information and a conservative risk assessment. It is not legal advice, does not create an attorney-client relationship, and cannot determine which law a court would apply. Laws, court decisions, workplace policies and the facts of a specific situation can change the result.

Compiled by the BlackBox team from the official sources listed. Not reviewed by a lawyer. If you find something out of date or wrong, tell us and we will correct it — see the research method and correction policy.

After consent is handled

BlackBox records and transcribes on your device without automatically uploading conversations to BlackBox servers. That limits how far audio travels — it does not replace consent, workplace, privacy or disclosure obligations.