You want a record of a meeting: an appraisal, a call with a supplier, a project meeting you'll need to come back to. Can you simply press the record button? The short answer is above. Below is the nuance: where the law draws the line, what you can do with the recording, and what to check when an app writes the report for you.
One thing first: the spine of this page is the United Kingdom. Recording rules differ per country, so there is a world tour further down, and the Dutch rules are on the Dutch version of this page. And this is general information based on the sources listed at the end, not legal advice for your situation.
The main rule: taking part is what counts.
UK law does not have a general rule against recording your own conversations. The criminal offence, in the Investigatory Powers Act 2016, is interception: capturing a communication in the course of its transmission so that its content becomes available to someone outside it. Someone who takes part in a conversation and records it is not making it available to an outsider. The offence is aimed at eavesdroppers, not at participants.
That is why the UK is often described as a one-party country: one participant knowing about the recording is enough. You do not need the other side's consent to record a meeting you are in, whether at the table, on the phone or in a video call. There is no general duty to announce it either.
But being allowed to record is not the same as being allowed to do anything with it. Using the recording at work, sharing it and publishing it each have their own rules, and that is where recordings get people into trouble.
Three questions tell you where you stand.
Run through these three questions in order and you have your answer.
- Do you take part in the conversation?Yes: you can record, even without consent or an announcement. No: then you are in interception or covert-monitoring territory, and that is where the law bites.
- Is the recording processed for work?Yes: the UK GDPR applies. Your organisation needs a lawful basis, must tell the people involved and must keep the recording proportionate. Purely private use falls outside it.
- What happens with the recording?Your own record or evidence is one thing. Publishing or sharing it widely is another: that can be misuse of private information, and it needs its own justification.
The same three questions, four situations.
The four situations that come up most often, side by side.
| Situation | Record? | Tell people? | Use it? |
|---|---|---|---|
| I take part in the conversation (private) | Yes, even without consent | No legal duty | For your own records yes; publishing is not automatically allowed |
| I do not take part (listening in) | Not covered here: interception and covert-monitoring rules apply | n/a | No |
| I covertly record a work meeting I am in | Possible, but generally misconduct | That is exactly what covert means: no, and that is the problem | A tribunal may still admit it as evidence |
| An app turns the recording into a report | Yes, if you take part | Yes, the organisation informs the participants (UK GDPR) | Under the data processing agreement and for the stated purpose |
The law, precisely.
Interception: the Investigatory Powers Act 2016
Sections 3 and 4 define the offence: intentionally intercepting a communication in the course of its transmission, without lawful authority, so that its content becomes available to someone who is neither the sender nor an intended recipient. Interception is also lawful where both sides consent, or where one side consents and surveillance has been properly authorised. A participant recording their own meeting sits outside all of this: nothing is being captured in transmission for an outsider.
At work: misconduct and evidence are two different questions
The Employment Appeal Tribunal put it plainly in Phoenix House v Stockman: it "will generally amount to misconduct" not to tell the other side a meeting is being recorded, save in the most pressing circumstances. It is not automatically gross misconduct: purpose matters, and so does what was recorded. At the same time, the Employment Appeal Tribunal in Vaughan v Lewisham held that covert recordings are not excluded as evidence merely because of how they were obtained; relevance is weighed against privacy. So the same recording can be admissible in your case and a disciplinary problem for you. Record openly and the tension disappears.
Employers themselves record on their own systems under the 2018 monitoring regulations, for defined purposes such as establishing facts or regulatory compliance. The ICO expects any workplace monitoring to be necessary and proportionate, and expects workers to be told about it in advance.
Courts and tribunals: never without permission
Recording court or tribunal proceedings without the court's permission is contempt of court under section 9 of the Contempt of Court Act 1981. Everything on this page is about ordinary work and private conversations, not hearings.
Online meetings: the notification is not the law.
Teams and Zoom show everyone a notice when a recording starts, and can even ask participants to agree before their microphone is unmuted. Useful, but that banner is a product feature, not a legal conclusion. The duty to be open about recording sits with you and your organisation under the UK GDPR: a valid purpose, people told what is recorded and why, and a retention period that fits that purpose. One sentence at the start of the meeting does more than any banner.
Two sectors with extra rules.
In financial services, FCA-regulated firms must record telephone conversations about in-scope activities and keep them for at least five years; that duty belongs to the firm, not to you as a private individual. In healthcare, the General Medical Council requires doctors to get consent before recording patients for purposes such as teaching or research. If you work in a regulated field, check the rules of your own regulator on top of everything above. What capturing client conversations looks like in day-to-day practice is on the pages for mortgage advisers and insurance advisers, and healthcare has its own page too.
Around the world: two families of rules.
Recording law is national, but almost every country lands in one of two camps. In participant or one-party countries, taking part in the conversation is enough. In all-party-consent countries, everyone must agree. Announcing the recording satisfies both models, everywhere.
| Country | The rule for participants |
|---|---|
| United States | Federal law is one-party consent. Roughly a dozen states, California among them, require everyone's consent; across state lines, follow the strictest rule involved. |
| Canada | A participant may record. Organisations recording customers must inform them under privacy law. |
| Australia | Differs per state: Victoria leaves participants free, New South Wales requires a justification. |
| Germany | All-party consent: recording someone's non-public spoken words without permission is a criminal offence. |
| France | Consent-based, but recording openly counts: if people can object and don't, consent is presumed. |
| Netherlands | A participant may record, no consent needed. The Dutch version of this page has the detail. |
And wherever you are in the EU, the GDPR layer comes on top as soon as the recording is processed for work: a lawful basis, and people told what is recorded and why.
What does the app do with your conversation?
As soon as an app turns your recording into text, rules apply regardless of whether you were allowed to record. The recording is personal data: your organisation needs a lawful basis, a data processing agreement (GDPR Article 28) with the provider, and the participants must be informed.
How a tool actually handles this rarely appears in its marketing. So check three things:
- Where are the servers? Inside the EU or the UK, or on infrastructure elsewhere? That determines which law your data sits under.
- How long is the recording kept? Is the audio deleted straight away, or does it land in a searchable archive that can be requested later?
- Is your data used for training? Does the provider use your conversation to train its own models, or does it stay yours?
If you run conversations through a general chatbot instead of a notetaking tool, first read whether ChatGPT is GDPR-compliant. For the wider trade-offs between tools, read how Notuly handles security.
How to have the recording written up properly.
If you want more than a recording (a report you can actually work from), the tool you choose decides whether that happens properly. Notuly is the AI notetaker for every conversation, discreet in-person, hybrid and online: at the table you put your phone in the middle, and for meetings via Teams, Zoom or Google Meet you use the desktop app for macOS and Windows.
Afterwards the meeting report is in everyone's inbox: the summary, the decisions and the action points with an owner and a deadline ("Sam sends the proposal to Ben on Friday", "Nora schedules the follow-up for Tuesday"). If you choose, the transcript comes along as a .txt attachment. Notuly understands more than 90 spoken languages and delivers the report in English or Dutch.
For the three checks above, the answer is short. Processing runs on our own servers in Amsterdam; your data never leaves the EU. The audio is deleted within a minute of processing: no archive, no searchable storage. And your conversations are not used as training data and are not for sale.
The data processing agreement (GDPR Article 28) is available on Team and above: exactly the document the GDPR asks of your organisation. And what do you tell the people in the room? One sentence at the start is enough: "I'm recording this so we all get a report." Most people appreciate it.
Read how Notuly keeps conversations secure →
Sources.
Based on public, authoritative sources, checked 10 August 2026. Law and guidance change; check the source for the current position. The framework above applies across the UK; the main differences in Scotland and Northern Ireland concern defamation law.
- Investigatory Powers Act 2016 (sections 3 and 4): the interception offence and its limits.
- The Investigatory Powers (Interception by Businesses etc.) Regulations 2018: recording by businesses on their own systems.
- ICO, Employment practices and data protection: monitoring workers, on lawful basis, transparency and proportionality. The ICO is updating its guidance following the Data (Use and Access) Act 2025.
- Phoenix House Ltd v Stockman (Employment Appeal Tribunal, 2019): covert recording at work as misconduct.
- Vaughan v London Borough of Lewisham (Employment Appeal Tribunal, 2013): admissibility of covert recordings.
- Contempt of Court Act 1981 (section 9): recording in court.
- FCA Handbook, SYSC 10A: telephone recording in regulated financial services.
- General Medical Council, Making and using visual and audio recordings of patients.
For the world tour: 18 U.S.C. § 2511(2)(d) (United States, federal), Criminal Code section 184 (Canada), Surveillance Devices Act 1999 (Victoria, Australia), § 201 StGB (Germany), Article 226-1 Code pénal (France) and articles 139a and 139b of the Dutch criminal code. All sources checked 10 August 2026.
General information based on the sources above, not legal advice.