You record calls for quality, training, or compliance. Most Australian SMBs do. The assumption is simple: stick a beep on the line, mention it in your IVR, job done. Except half the country operates under all-party consent rules that marketing agencies in Sydney routinely ignore, and the other half still expects you to act like a reasonable business owner. One mortgage broker we spoke with last month had been recording outbound calls to WA prospects for eighteen months before his compliance officer flagged it. No beep. No warning. Just luck that no complaint landed.

Call recording law in Australia is state-based, built on a patchwork of Surveillance Devices Acts and Listening Devices Acts written before mobile phones were common. The penalties sit in criminal statute. That makes ignorance expensive and uncomfortable. Here is what actually applies when you press record.

Victoria, WA, NT, Queensland, SA: all-party consent

These five jurisdictions require every person on the call to know the conversation is being recorded. Not consent in writing. Not explicit verbal "yes". Just knowledge. You satisfy that with an audible beep every few seconds, an upfront announcement, or both. The beep is the safer path because it persists through the entire call and covers hold music or transfers.

If your business is registered in NSW but you call a customer in Brisbane, Queensland law applies to that call. If you run a national outbound campaign from Melbourne and half your list is in Perth, every WA call needs the beep or the disclosure. The location of the recipient controls the rule, not your head office postcode.

Common mistakes we see:

• Recording outbound sales calls with no warning because the business assumes one-party consent everywhere.
• Turning off the beep during onboarding "because it annoys clients" and relying on a website privacy policy two clicks deep.
• Assuming inbound IVR disclosure covers outbound calls made by the same team.

Maximum penalty in Victoria for unlawful recording is two years imprisonment or 240 penalty units (currently over $40,000). WA and SA carry similar weight. Prosecution is rare but civil complaints to the Privacy Commissioner or industry regulators are not.

NSW and Tasmania: one-party consent

New South Wales and Tasmania allow you to record a conversation if you are a party to it and the recording is reasonably necessary to protect your lawful interests. That means you can record customer calls for training, dispute resolution, or compliance without telling the other person, provided you have a legitimate business reason.

Reasonably necessary is not defined in bright lines. Courts look at proportionality. Recording every inbound enquiry to improve service quality is fine. Recording a private conversation between two staff members without their knowledge to settle a hunch is not. The safest commercial practice in NSW remains disclosure, even though the statute does not require it, because it avoids argument and aligns with Privacy Principle 5 (notification of collection).

If you operate nationally, do not assume NSW rules apply to your WA customer just because your phone system lives in a Sydney data centre. The call crosses into all-party territory the moment the recipient picks up in Perth.

ACT and Commonwealth: interception vs participant recording

The ACT has no specific listening devices statute for participant recording. The Telecommunications (Interception and Access) Act 1979 (Cth) governs interception, which means capturing a call in transit without being a party. Once you are on the call as a participant, recording it falls under general law and mirrors the NSW position: lawful if you have a legitimate purpose.

Commonwealth interception law is strict. Intercepting a call you are not party to attracts up to two years imprisonment. The confusion arises when businesses assume "we use a cloud phone system so Commonwealth law applies". It does not. Participant recording by someone on the call is still governed by state surveillance device laws based on where the participants sit.

Disclosure best practice for AI voice agents

Voice AI platforms like VoxReach handle thousands of calls across state lines. The safest compliance posture is all-party disclosure on every call, regardless of jurisdiction. That means an upfront script - "This call is recorded for quality and training" - and an audible beep if the platform supports it.

For outbound AI dialling, disclosure should happen within the first ten seconds of the call, before any qualifying questions. For inbound, the IVR or the agent's opening line covers it. For two-way SMS, recording does not apply, but message logs stored for compliance still fall under Privacy Act notification rules.

If your AI agent transfers a call to a human team member, the recording continues under the same disclosure. If the human team member is in a different state and starts a fresh recording session, you need to check whether the original disclosure still applies or whether a second one is required. Assume it is required.

What to do right now

Check where your customers sit and where your staff sit. If you operate in or call into Vic, WA, NT, QLD, or SA, implement an audible beep or a verbal disclosure on every recorded call. Update your privacy policy to state that calls are recorded, why, and how long you keep them. Train your team to never disable recording compliance features for convenience.

If you use an AI voice agent, make sure the platform supports state-aware disclosure and logs it. The call recording itself is evidence, but so is proof that you disclosed. Sign up free at app.voxreach.com.au/signup to see how disclosure, beep tones, and transcript logging work in a locally-built platform that understands Australian call recording law by design.