Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
- What Is a Covert Recording - and Why Does It Happen?
- Are Covert Recordings Admissible in Court or Tribunals?
- What Are the Legal Risks for Businesses That Record Without Telling People?
- Can You Ever Record Without Consent?
- What About Customers, Clients and Third Parties?
- What About Covert Monitoring Devices?
- Ethical Considerations for Businesses
- Practical Steps To Protect Your Business
- Key Takeaways
Smartphones, Zoom calls and portable recording devices have made it easy to record conversations at the tap of a button. Many business owners and employees ask whether they can record a difficult discussion to “protect themselves”, or worry that someone else might be recording them without their knowledge.
With covert recordings increasingly surfacing in workplace disputes and tribunal claims, this is an important area for UK businesses to understand. While recording a conversation may feel like a sensible precaution, the legal framework is complex. Getting it wrong can damage trust, breach privacy rights, and even expose your business to regulatory or legal action.
This guide explains, in clear English, what UK law says about recording conversations at work, when recordings may be lawful, and how to protect your business from the risks.
What Is a Covert Recording - and Why Does It Happen?
A covert recording is any audio or video recording made without the knowledge or permission of the person being recorded. In a workplace setting, this could include:
-
secretly recording a disciplinary or grievance meeting
-
turning on a phone’s audio app before a difficult HR discussion
-
recording a Zoom or Teams call without notifying attendees
-
leaving a device running to capture conversations in a meeting room
People often make covert recordings because they feel vulnerable, fear being treated unfairly, or want “evidence” for future disputes. But just because it is technically easy does not mean it is legally safe.
Is It Illegal to Record a Conversation in the UK?
The answer depends on who is recording, why they are recording, and how the recording will be used.
Individuals: recording for purely personal use
It is not generally illegal for a person to record a conversation they are part of, for their own private use. This falls under the “domestic purposes” exemption, meaning the recording is outside the scope of UK GDPR.
However, this exemption is narrow. As soon as the recording is:
-
shared with anyone else
-
used in a complaint, dispute or tribunal
-
retained for business purposes
-
stored by an employer or organisation
…it immediately becomes subject to data protection law.
Businesses: no domestic use exemption
Businesses can never rely on the domestic exemption. If a business records an identifiable person, the recording is classified as personal data, which triggers strict duties around transparency, lawful basis, storage and access.
Covert recording
Recording people at work without telling them is rarely lawful, and almost always carries legal, ethical and reputational risks.
The takeaway:
Recording isn’t automatically illegal, but for businesses it is highly regulated - and covert recording is almost never appropriate.
What Laws Govern Workplace Recording?
Several legal regimes apply, depending on the situation.
UK GDPR and Data Protection Act 2018
Audio or video recordings of identifiable individuals are personal data. If your business records someone, you must:
-
identify a lawful basis for recording (usually legitimate interests or contractual necessity – consent is rarely valid in employment)
-
provide clear, advance notice of the recording
-
limit recording to what is necessary and proportionate
-
keep data secure with restricted access
-
set and follow a retention period
-
conduct a Data Protection Impact Assessment (DPIA) for intrusive or monitoring-based recording
-
document your decision-making
Failing to notify people that they are being recorded can breach UK GDPR and result in complaints or regulatory investigation by the ICO.
Employment law
Employment tribunals generally disapprove of covert workplace recordings. Secretly recording colleagues or HR can:
-
undermine trust and confidence
-
support constructive dismissal claims
-
breach implied contractual duties
-
harm credibility
-
create serious cultural and reputational issues
Tribunals sometimes admit covert recordings as evidence, but they often exclude private deliberations, such as HR panels discussing a case among themselves.
Importantly, tribunals do not automatically treat employee covert recording as gross misconduct unless:
-
an employer has a clear policy banning it, or
-
the recording is especially intrusive.
Human Rights Act 1998 (Article 8: Right to Private Life)
Employees have a qualified right to privacy at work. Whether a recording breaches this right depends on whether the individual had a reasonable expectation of privacy in the situation (for example, private HR discussions usually attract such an expectation).
Communications interception laws (RIPA and IPA)
Recording a conversation you are part of is not generally an interception offence.
However, using spyware, bugging devices, or trying to access communications you’re not a party to can be criminal under the Regulation of Investigatory Powers Act 2000 or Investigatory Powers Act 2016.
Are Covert Recordings Admissible in Court or Tribunals?
Sometimes, yes. Tribunals have discretion to accept covert recordings – especially if they contain crucial evidence not available elsewhere.
But there are caveats:
-
recordings of private discussions (e.g., HR deliberations) are likely to be excluded
-
covert recording can harm the recorder’s credibility
-
the tribunal may criticise the behaviour, even if the evidence is allowed
So while recordings may be admissible, relying on covert evidence is risky and can easily backfire.
What Are the Legal Risks for Businesses That Record Without Telling People?
Recording staff, clients or customers without their knowledge can expose a business to:
-
GDPR breaches and ICO investigations
-
employment law claims (including breach of trust, unfair dismissal or discrimination claims)
-
reputational damage
-
inaccurate or misleading evidence that undermines processes
-
inadmissible or contested evidence in disputes
-
potential criminal risks if the recording crosses into interception territory
Clear processes, transparency and policy documentation are essential.
Can You Ever Record Without Consent?
There are rare exceptions where covert recording may be justified, such as capturing evidence of criminal behaviour where no other method is available and where a DPIA supports the necessity and proportionality.
These cases are exceptional and should only be taken with legal advice. For everyday HR management and business operations, recording without telling people is almost never appropriate.
What About Customers, Clients and Third Parties?
The same principles apply.
If your business records conversations or calls with customers, you must:
-
inform callers clearly and in advance
-
explain why the recording is necessary
-
identify a lawful basis
-
implement proper data security and retention policies
This includes video calls, customer service lines, and in-person conversations where your business initiates the recording.
What About Covert Monitoring Devices?
Hidden cameras, audio bugs, or secret monitoring tools (including spyware on devices) are extremely risky for businesses and often unlawful. They may amount to:
-
unlawful interception
-
serious data protection breaches
-
violations of privacy rights
-
safeguarding concerns
-
reputational crisis
Covert monitoring is only permitted in very narrow circumstances (such as investigating serious wrongdoing) and even then, only after a DPIA, strict access controls, and appropriate legal advice.
Ethical Considerations for Businesses
Even where something is not technically illegal, covert recording can cause serious harm:
-
employees may lose trust in leadership
-
staff may feel watched or unsafe
-
open communication becomes harder
-
unions and staff representatives may challenge practices
-
morale and culture can deteriorate
Transparent and well-communicated processes almost always lead to better outcomes than secret recording.
Practical Steps To Protect Your Business
If you want to stay compliant and avoid disputes, we recommend:
- Be transparent. Always notify people before recording meetings or calls.
- Have clear policies. Your staff handbook should explain when recording is allowed and how data is used.
- Choose the right lawful basis. In employment, consent is rarely valid – use legitimate interests with a documented balancing test.
- Use DPIAs for monitoring. Any form of surveillance or intrusive recording must be formally assessed.
- Do not rely on covert evidence. Secret recordings are unpredictable and risky in litigation.
- Train staff. Managers and HR teams should understand data protection duties around recordings.
- Review documents. Privacy notices, contracts and IT policies should support your approach to recording.
Key Takeaways
- Recording a conversation is not automatically illegal in the UK, but context and transparency matter enormously.
- Businesses must comply with UK GDPR, data protection rules and employment law when recording staff or customers.
- Recording people secretly at work is almost always unlawful and undermines trust.
- Covert recordings may be admissible in tribunals but can easily damage your credibility or your legal position.
- Clear policies, lawful bases and DPIAs are essential if your business records conversations for any reason.
- When in doubt, seek legal advice - recording should never be your default problem-solving tool.
If you’d like help drafting policies, reviewing your data protection obligations or setting up compliant workplace processes, the Sprintlaw UK team is here to support you. Reach out at 08081347754 or team@sprintlaw.co.uk for friendly, practical guidance tailored to your business.


