AI Voice Compliance:
What Australian Businesses Need to Know

This is general information for Australian business owners, not legal advice. Rules differ by industry and state — confirm specifics with a qualified adviser before you go live.

Using an AI agent on your phone line raises three practical questions: can you record the call, must you disclose it's an AI, and how is caller data handled. Getting these right protects both your business and your callers' trust.

1. Disclosure: tell callers it's AI

Transparency is the baseline expectation across Australian law and community standards. The safest approach is to have the agent identify itself as an automated assistant at the start of the call — and to answer honestly if asked directly. Callers who discover they've been talking to an AI without knowing it feel deceived, which damages trust and can attract complaints.

2. Consent to record

If calls are recorded, callers generally need to be told — and in some states and contexts, to consent. A short, clear statement at the start of the call ("this call may be recorded for quality and training") is the standard practice. Requirements vary by jurisdiction, so confirm what applies to your state and your industry.

3. Personal information under the Privacy Act

The Privacy Act 1988 (Cth) and the Australian Privacy Principles govern how you collect and handle personal information — names, numbers, addresses and any other identifying detail a caller shares. Practical points:

• Only collect what you need to do the job.
• Tell callers why you're collecting it (your privacy policy should cover it).
• Store it securely and don't keep it longer than necessary.
• Give callers a way to access or correct their information.

4. Sensitive information needs extra care

Health, disability, and certain other categories attract higher obligations. If your agent may handle health information — a clinic, an allied health practice — get specific advice before deploying.

5. Outbound and marketing calls

Making calls to people is different from answering calls. Outbound marketing and telemarketing are regulated — including the Do Not Call Register and the Spam Act for related messages. If you're considering outbound AI calls, treat them as a separate compliance question.

A starter checklist

1. Agent discloses it's an automated assistant.
2. Recording notice (and consent where required) at the start of the call.
3. Privacy policy updated to cover the AI agent.
4. Only necessary data collected, stored securely, and deleted on schedule.
5. Clear path to a human for callers who ask.
6. Industry-specific advice sought where health or financial data is involved.

ConnectDeep AI builds agents that disclose clearly and hand off to humans on request. If you want to see how that works on a real call, book a demo.