EOFY Sale · Save up to $750 off your legals · Ends 30 June

Claim offer

Covert Recording Laws for Australian Businesses: Legal Risks and Compliance

Alex Solo
byAlex Solo11 min read

If you run a small business or startup, you’ve probably had at least one moment where you’ve thought: “I wish I had proof of what was said.”

Maybe it’s a tense customer complaint, a supplier dispute, an underperformance conversation, or a workplace investigation where people’s accounts don’t match. In those moments, recording the interaction (without making a big deal of it) can feel like an easy solution.

But in Australia, covert recording is a legally risky area. The rules depend on where you are, where the other person is, what you’re recording, how you’re recording it, and what you intend to do with the recording. Even if you think you’re doing it for a “good reason”, you can still end up with evidence you can’t use, a privacy complaint, or (in some cases) criminal penalties.

Below, we break down what covert recording means, when it comes up for businesses, and how to approach it carefully so you can protect your business without creating a bigger problem.

What Is Covert Recording (And Why Does It Matter For Businesses)?

In plain terms, covert recording usually means recording a conversation, phone call, meeting, or footage without the other person knowing, or without their clear consent.

For businesses, covert recording typically shows up in a few forms:

  • Recording calls between staff and customers (or between you and a supplier) without telling the other party.
  • Recording in-person meetings (for example, performance management discussions, complaints, disciplinary meetings, or negotiations).
  • CCTV or audio surveillance in workplaces, retail stores, warehouses, or shared spaces.
  • Recording via apps or devices (such as a phone recording app or a hidden device left in a room).

It matters because covert recording often triggers multiple legal areas at once, including:

  • state/territory surveillance and listening device laws (these are a big one)
  • privacy and confidentiality obligations
  • workplace relations and HR process risks
  • reputation and trust issues (especially in a small team)

Even where recording is technically lawful, what you do with the recording (like sharing it, storing it, or using it in a dispute) can create separate legal issues.

When Might A Small Business Consider Covert Recording?

Most business owners don’t start out wanting to record anyone secretly. Usually, the idea comes up when you’re trying to manage risk or stop a situation escalating.

Common scenarios include:

1) Customer Disputes And “He Said / She Said” Situations

If a customer alleges your staff promised something, misrepresented pricing, or acted improperly, you might want a recording to confirm what happened.

This is especially common for businesses that handle complaints by phone, or where the customer relationship is managed through a small number of key conversations.

2) Staff Misconduct Or Workplace Investigations

When you’re investigating harassment, bullying, theft, safety issues, or serious policy breaches, recordings can feel like a way to “get the truth”.

But this is also the area where covert recording can backfire the most, because workplace surveillance and employee privacy issues are highly sensitive (and some states have specific workplace surveillance notice requirements).

3) Performance Management And Termination Conversations

If you’re concerned an employee may later claim you said something inappropriate, or dispute the fairness of a process, it’s understandable to want an accurate record.

However, HR conversations are exactly the kind of context where trust is critical, and where covert recording can damage your position if it becomes an issue later.

4) Negotiations With Suppliers, Contractors, Or Partners

In early-stage businesses, deals often happen quickly (and sometimes informally). If you don’t have everything properly documented, a recording might seem like a backup.

In reality, if you’re relying on recordings to “prove the deal”, that’s usually a sign you should tighten up your contracting process instead (for example, confirming key terms in writing).

The most important point for Australian businesses is this: covert recording laws are not uniform across Australia.

Surveillance and listening device rules are largely set by state and territory laws, and the details matter. What is lawful in one state may be unlawful in another. There are also differences between recording:

  • audio conversations
  • phone calls
  • video footage (like CCTV)
  • video footage with audio

At a high level, Australian laws often treat these situations differently:

  • recording a conversation you are a party to (for example, a phone call you’re on), versus
  • recording a conversation you are not a party to (for example, leaving a device running in a room while you’re not present).

That distinction is crucial, but it’s not the whole story. Depending on the jurisdiction, recording may still be unlawful even if you are a party (particularly if it’s done without consent and doesn’t fit within an exception). Some states are closer to a “one-party consent” model (with important limitations), while others are closer to “all-party consent” (again, with exceptions). On top of that, the rules about use, communication, and publication of recordings can be strict even where the act of recording is lawful.

It can also get complicated when people are in different places (for example, you’re in NSW and the customer is in Victoria). In cross-border situations, more than one set of laws may be relevant, so it’s risky to assume the law of “your” state is the only one that matters.

If you want a practical overview of how these rules commonly work (and what businesses should look out for), recording laws in Australia is a helpful starting point.

Covert Recording Calls With Customers Or Clients

If your business records calls (whether overtly or covertly), you should think about:

  • which state/territory law (or laws) apply (this is not always straightforward if the caller is in a different state)
  • whether consent is required, and what counts as consent (express vs implied)
  • what you will do with the recording (internal training, dispute handling, evidence, etc.)
  • how you’ll store it and who can access it

For many businesses, the best risk-management approach is to avoid “covert” recording and instead use a clear notification such as: “This call may be recorded for quality and training.” This won’t solve every issue, but it usually puts you in a safer compliance position (and helps establish consent).

Call recording is a big topic on its own, so if your business regularly deals with customers by phone, it’s worth reviewing business call recording laws and also keeping your processes consistent across sales, support, and complaints.

Covert Recording In-Person Meetings (Including HR Meetings)

Small business owners often ask whether they can covertly record a meeting with an employee, particularly where the discussion might later be disputed.

Legally, in-person audio recording can fall under “listening device” laws, and those rules can be strict. In some states, recording a private conversation you’re part of may be allowed only in limited circumstances (and often still restricts sharing or using the recording). In other states, recording a private conversation without everyone’s consent may be unlawful unless a specific exception applies.

Even where a recording is technically lawful, using it as “evidence” in a workplace dispute can create practical issues, including:

  • escalating the dispute (trust breaks down quickly once recording is discovered)
  • potential unfairness arguments (for example, if a meeting was recorded selectively)
  • privacy and policy breaches (if your own workplace policies don’t allow it)

If you’re unsure whether you can record a specific conversation, it’s usually safer to get advice first or consider alternatives (like taking contemporaneous notes, having a witness, or confirming outcomes in writing after the meeting).

CCTV And Workplace Surveillance

CCTV is common for retail, hospitality, warehouses, and any business with stock, cash handling, or safety risks. But CCTV can cross into covert surveillance if people are not properly notified, or if cameras capture areas where privacy is expected.

Some states also have specific workplace surveillance compliance requirements. For example, in NSW, the Workplace Surveillance Act 2005 (NSW) regulates camera, computer, and tracking surveillance of employees, and (in many cases) requires prior notice before surveillance starts. If you operate in NSW, this is a key compliance issue (and it’s not something you can usually “fix later” if surveillance is set up incorrectly).

As a business owner, you should be especially careful with:

  • placing cameras in staff break rooms, bathrooms, changerooms, or other private areas
  • installing cameras with audio (audio triggers extra legal risk)
  • using CCTV for purposes beyond what you told people (for example, “security” turning into constant performance monitoring)

If you’re installing cameras or upgrading your security setup, it’s worth checking CCTV laws in Australia and ensuring your internal documentation and signage match what you’re actually doing.

Even when covert recording is done with the intention of protecting the business, it can create a chain of risks that are hard to unwind later.

1) Criminal Or Regulatory Exposure

Depending on the state or territory and the circumstances, unlawful covert recording can lead to criminal penalties. That might sound extreme, but surveillance laws are taken seriously, particularly where someone is recorded without consent in a context where privacy is expected (or where employee surveillance rules apply).

For small businesses, the risk is often less about “police knocking at the door” and more about:

  • a complaint being made to a regulator
  • evidence being excluded or treated as improperly obtained
  • the recording becoming a separate legal problem in a dispute

2) Evidence That Can’t Be Used (Or That Hurts Your Position)

A common misconception is: “If I have the recording, I win.” In reality, the legal system (and workplace dispute processes) don’t always work that way.

Covertly obtained recordings may be:

  • challenged as unlawfully obtained
  • given less weight due to fairness concerns
  • used against you to argue poor process or bad faith

It’s often better to focus on getting your HR process right than trying to “catch someone out” on tape.

3) Privacy, Confidentiality, And Data Handling Problems

A recording is data. Once you collect it, you need to think about how it’s stored, who can access it, and whether it contains sensitive information (like health information, allegations, or personal details).

Even if your business is not covered by all aspects of the Privacy Act, you can still face:

  • contractual confidentiality issues
  • employee relations issues
  • reputational fallout if recordings leak or are shared inappropriately

If your business collects personal information more broadly (for example, customer details online), having a clear Privacy Policy and consistent internal practices is a key part of reducing privacy risk.

4) Workplace Trust And Culture Damage

For startups especially, culture is fragile. If your team believes management is recording conversations secretly, you can quickly end up with:

  • lower engagement and morale
  • higher turnover
  • reduced openness in performance conversations
  • greater likelihood of disputes being formalised

Even where you have good intentions, covert recording can be perceived as surveillance and control, rather than fairness and accountability.

How To Handle Recording In A Safer, More Business-Friendly Way

If you’re thinking about covert recording, it’s usually a sign you’re dealing with risk you want to manage. The good news is you often have safer options that achieve the same outcome.

1) Decide What Problem You’re Trying To Solve

Before you record anything, ask:

  • Are you trying to keep an accurate record of a conversation?
  • Are you trying to protect staff from abuse?
  • Are you trying to prevent theft or improve safety?
  • Are you anticipating litigation or a Fair Work dispute?

The “why” matters because different risks and laws apply depending on the purpose, the location, and the people involved.

In many situations, a straightforward approach is to record openly, with notice and consent.

For example, for a high-risk customer complaint call, you might say:

  • “For accuracy, I’d like to record this call. Are you okay with that?”

For meetings, you can similarly ask whether the other party agrees to record, or offer an alternative like a written summary emailed immediately after the meeting.

If you record calls or conversations as part of normal operations, it’s worth ensuring your approach aligns with record a phone call compliance expectations in Australia.

3) Use Better Documentation Instead Of Recordings

Covert recording is often a substitute for documentation. In a well-run business, the first line of defence is usually:

  • good file notes taken during or immediately after meetings
  • email confirmations (what was discussed, what was agreed, next steps)
  • written policies and procedures
  • clear contracts that reduce ambiguity

This is especially important in HR. If you’re managing employees, having proper documentation (and templates that suit your workplace) is usually far more valuable than relying on recordings. As part of that, a tailored Employment Contract can help set expectations around conduct, confidentiality, performance, and workplace policies.

4) If You Use Cameras, Be Transparent And Purpose-Driven

If you’re using cameras in a workplace, focus on transparency. This typically includes:

  • signage (where required and as good practice)
  • workplace policies explaining why surveillance exists and how footage is used
  • limiting access to footage to appropriate staff
  • avoiding cameras in private areas

Workplace surveillance can trigger overlapping obligations, so it’s also worth checking practical employer considerations in workplace camera laws.

5) Don’t Share Recordings Casually

One of the fastest ways to turn a “recording for protection” into a legal headache is to share it informally, such as:

  • sending it to other staff who don’t need it
  • posting it in a group chat
  • sharing it with a third party to “prove a point”
  • using it in marketing or content (even if names are removed)

Even if making the recording is lawful, disclosure and publication often create separate legal issues (including privacy, confidentiality, and defamation risks).

6) Build It Into Your Compliance Framework

Covert recording often happens in the moment, when someone is stressed and looking for certainty.

A better approach is to build a simple internal framework that answers:

  • When does our business record calls or meetings?
  • How do we give notice and obtain consent?
  • Where do we store recordings and for how long?
  • Who can access recordings?
  • When do we delete recordings?
  • What do we do if someone asks for a copy?

This is particularly important for startups scaling quickly, where informal habits can become “the way things are done” without anyone meaning to create risk.

Key Takeaways

  • Covert recording generally means recording conversations or footage without the other party’s knowledge or consent, and it can raise serious legal and practical risks for businesses.
  • Australian recording rules vary by state and territory, and the legality can change depending on where each person is located, whether you are a party to the conversation, and how the recording is used or shared.
  • For employers, covert recording can create problems beyond the recording itself, including privacy and data handling issues, workplace culture damage, and evidence challenges.
  • In many cases, you can reduce risk by using consent-based recording, clear notice, good file notes, and strong contracts and policies instead of secret recordings.
  • If your business uses call recording or CCTV, build a consistent process around notice, purpose, storage, access controls, and retention so recording doesn’t become an ad-hoc habit (and check for state-specific workplace surveillance notice requirements, such as in NSW).

If you’d like help setting up a compliant approach to recording in your business (including workplace policies, employment documentation, and risk management), you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.

Alex Solo

Alex is Sprintlaw's co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.

Need legal help?

Get in touch with our team

Tell us what you need and we'll come back with a fixed-fee quote - no obligation, no surprises.

Keep reading

Related Articles

AI Governance Policies: What Australian Businesses Should Include

AI Governance Policies: What Australian Businesses Should Include

Using AI at work without clear rules can create privacy, confidentiality, contract and consumer law risks. Here’s what Australian businesses should

15 June 2026
Read more
Shopify Privacy Policy Template: Key Inclusions for Australian Businesses

Shopify Privacy Policy Template: Key Inclusions for Australian Businesses

If you run an online store, it’s almost impossible to avoid handling customer data. Even if you’re only selling a few products a week, you’re likely collecting names, email addresses, delivery details,...

10 June 2026
Read more
Privacy Act: What “Personal Information” Means For Businesses

Privacy Act: What “Personal Information” Means For Businesses

If you run a small business in Australia, you’re probably collecting more customer (and supplier) data than you realise. It might be a name and email for a newsletter, a delivery address...

5 June 2026
Read more
Small Business Privacy Policy Template: How To Create A Compliant Policy In Australia

Small Business Privacy Policy Template: How To Create A Compliant Policy In Australia

When you’re running a small business, it can feel like you’re collecting customer information everywhere - through your website contact form, online bookings, email marketing sign-ups, invoices, payment platforms, or even CCTV...

4 June 2026
Read more
Data Processing Schedules in Australia: What to Check in Your Contracts

Data Processing Schedules in Australia: What to Check in Your Contracts

A data processing schedule can shift major privacy risk onto your business. Here’s what Australian startups and SMEs should check before signing supplier

1 June 2026
Read more
What Is a Privacy Statement? A Guide for Australian Businesses

What Is a Privacy Statement? A Guide for Australian Businesses

If you run a business in Australia, chances are you collect personal information at some point - even if it’s just customer names, email addresses, delivery details, or payment confirmations. That’s where...

29 May 2026
Read more
Need support?

Need help with your business legals?

Speak with Sprintlaw to get practical legal support and fixed-fee options tailored to your business.