GDPR and call recording: what EU sales teams need to know

Recording sales calls is normal and legal in the EU, provided you do a few specific things. This is a practical summary, not legal advice — if you operate across several countries, get it checked.

You need a lawful basis, and consent is usually the wrong one

Many teams assume they need consent. Often legitimate interest is the more appropriate basis for recording a business call for quality and training — but it requires you to have actually documented the balancing test, not merely to have assumed the answer.

Where the call involves special-category data, or where national rules are stricter, consent may genuinely be required. Denmark, Germany and France do not treat this identically.

Tell people at the start, plainly

Whatever your basis, the person must know. A short sentence at the start of the call is enough: what is being recorded, why, and where to find more detail. Burying it in a website policy nobody will read does not meet the requirement.

Retention is where most teams fail

Keeping recordings forever because storage is cheap is the single most common mistake. You need a defined period tied to the purpose — coaching recordings do not need to outlive the coaching. Set a retention window, and make sure deletion actually happens rather than being a policy nobody automated.

A short checklist

• Documented lawful basis, with the balancing test written down if you rely on legitimate interest.
• A spoken notice at the start of the call.
• A defined retention period, enforced automatically.
• A way to find and delete one person's recordings on request.
• A processing agreement with whoever stores the audio.
• Storage inside the EU unless you have a transfer mechanism in place.