Call recording technology has been around for a long time. Once the preserve of financial market participants, it is a common misconception that its use is confined to financial industries.
Over the last decade usage has exploded with organisations spanning a broad range of industries seeking to harness the power of voice and extract valuable data from their customer interactions. In addition, recording Increasingly reaches much further within organisations to areas that don't necessarily interact with customers directly but where sensitive roles are performed such as HR, Legal, Risk and Executives.
Historically the challenges for organisations have been the many jurisdictions with a legal requirement to notify the other party(s) of recording taking place, often referred to as “all-party consent” jurisdictions.
GDPR and CCPA
[caption id="attachment_25296" align="alignright" width="187"]
Mitch Dawson[/caption]
More recently we have seen complex consumer protection and privacy legislation such as GDPR and the forthcoming CCPA, that place much greater control over the recording and processing of personal data.
Under GDPR Article 6, in most cases consent is required for all data processing in lieu of a legal contract between the parties or a legal obligation to record the call.
Consent is defined under Article 4 as, “Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her."
Within the CCPA there is an obligation to inform consumers at the point of personal data collection of the types of information to be collected and the purposes of its use. Additionally, consumers must be informed about the right to deletion and the right to opt-out of the sale of their personal information.
When recording calls then you need to demonstrate compliance with these laws, having the right tools can help you stay within the law.
In an interview with UC Today, Mitch Dawson, founder of Consentec, said, “against a backdrop of increasing consumer protection and privacy legislation, the requirement to record creates complex compliance challenges for organisations trying to stay within the law”.
“The legislation varies so you now need a tailored approach, generic announcements are no longer enough to demonstrate compliance”
“It's a considerable challenge, organisations have recorded endpoints participating in calls all around the world and they have no visibility of the jurisdictions of the parties that they are interacting with, and importantly the laws that apply in those jurisdictions in real time.
For example, they may be interacting with a party within the EU for the first time and not necessarily know that they are doing it, if they are recording that party's data then they could be in breach of GDPR.
