Call recording is a widely used technique to drive business growth and success but businesses need to balance call recording with GDPR obligations.
Since the European Union’s General Data Protection Regulations (GDPR) came into effect, the landscape for all forms of data recording and collection has changed greatly.
The relationship between call recording and GDPR compliance can be a difficult one to navigate and so in this article, we examine how to implement best practices for call recording while adhering to GDPR guidelines.
Call recording is the process of capturing audio exchanges and other data or screen activity linked to a phone call. Many companies collect these phone conversations to use the insights the data provides to drive better customer experiences and facilitate more informed business decisions.
Some of the benefits of call recording for business include:
86% of Irish consumers believe experience is as important as products.
The insights gained from call recording can help to advance customer engagement strategies, improve follow-up procedures and overall promote a better customer experience.
Call recording can also be used for employee training purposes. With a vault of real-life customer conversations to access and replay, new employees can learn more easily and understand better the do’s and don’ts when dealing with customers.
These recordings can also be used to evaluate current employee performance and provide feedback on areas of improvement where necessary.
The risk of litigation is unfortunately a reality that comes with running a business. A major benefit of call recording is that it creates a “paper trail” documenting the what, when and where of a conversation thread.
Providing all rules and protocols were followed, these call recordings can offer a quick and easy resolution to disputes that may arise.
According to a survey by PWC, 47% of consumers listed personal data protection as a key feature of brand trust.
In this data-driven age, people are more aware of how valuable their information is and many are pretty knowledgeable in the area of GDPR compliance, and their rights as data subjects. Call recording can help verify that a company is compliant should a request be made to prove so.
The General Data Protection Regulation (GDPR) came into effect in May 2018 and is a legal framework or set of regulations that apply to the collection and processing of personal information of EU citizens.
It applies to any business, regardless of whether that business is located in the EU or not, that processes the personal data of EU citizens or residents. Failure to comply with the GDPR can lead to stiff penalties.
The GDPR outlines six data protection principles that summarise its many requirements:
Before the introduction of GDPR, regulations around data protection varied from country to country and regulations around the practice of call recording were not as strict. Companies could rattle off a broad statement to notify the caller that the call was being recorded but, in most countries, they did not have to wait for explicit consent.
Post-GDPR, however, is a different story. Implied consent is simply not good enough and, as per the six principles, organisations need to be more specific and transparent with the purpose for which the call is being recorded.
So yes, GDPR limits how businesses can collect data and what they can do with it, but it doesn’t stop it completely from using call recording as a business improvement technique.
The key is to find a way to balance call recording with GDPR. Below are some suggestions to make sure your company is complying with GDPR call recording best practices.
Begin each phone conversation by disclosing that the call will be recorded and for what specific purpose the recording will be used.
Without establishing purpose, the call will not be in compliance with GDPR and breaking GDPR laws bring with it heavy financial penalties.
Implied consent is no longer sufficient for call recording. Under GDPR rules, companies must obtain explicit consent from the caller and this can only be done after the caller has been informed of the purpose of the recording.
Any device where calls are being recorded needs to be disclosed to the caller. Be it a VoIP system, mobile, an integrated PSTN landline or all of the above.
All data must be stored in a secure location. It cannot be shared with third parties and access must be restricted to only those deemed absolutely necessary.
Recordings should be easily accessible in the event that a data subject requests them. Under GDPR, a 30-day window is allowed to find and provide the recording, however, with the right phone system in place, this can be retrieved in seconds.
One of the rights for data subjects under GDPR is the “right to be forgotten”. Similar to the above, if a request is received to delete a particular call recording, this must be able to be done promptly and efficiently.
Once you have established company best practices that comply with GDPR, you will then need to ensure your business is using a reliable VoIP system.
At One Contact, our state-of-the-art VoIP services provide all of the features, security and privacy you need to conduct your business’s sales and communications operations effectively.
Get in touch today to find out more, and take a moment to also explore our blog and resources for more of the latest trends in the ICT world.
With Irish SMEs constantly seeking efficient, flexible and cost-effective solutions to stay competitive in a saturated market, cloud-based phone services are coming to the fore as the perfect solution. These innovative phone systems provide a range of benefits...
For small businesses with aspirations to scale and grow in this digital age, having an efficient communication system – which incorporates advanced business phone features – is essential. Traditional phone systems, though reliable, are increasingly being replaced by...
Excellent customer support has become a critical component of success for businesses across the globe, and many business owners are turning to unified communications to achieve this. With so much competition in the retail and services space, customers expect a quick,...