Laws and regulations put in place to protect consumers have been a large driving force behind recording communications between businesses and their customer. As remote communication overtakes face to face human interaction, it’s paramount to have procedures in place to ensure people are who they say they are at other the end of the line and also to make sure that the communication is safely recorded to resolve any incidents in future.
We’ve all come across the common line when you’re waiting to get through to a customer service agent: “This call maybe recorded for monitoring and training purposes.”. However some organisations may be recording calls to follow regulations, which you might not be aware of. Here’s are some key industries who are keeping their consumers safe through intelligent communications recording:
The most common use case for call recording regulations is seen in contact centres where customer service resolve an array of users’ issues. For training purposes and to resolve potential disputes, calls often get recorded at call centres. According to Ofcom’s (the UK’s communications regulator) guidance for recording calls in the UK, contact centres who look to monitor, record calls and communications are required to adhere to a combination of UK & EU legislation which includes but is not limited to:
To summarise the legislation, a home or business user may record communications without permission of the correspondent as long as they do not share the data with a third party, where then they would need to have their consent.
Additionally through the aforementioned LBP Regulations. A business can monitor and record communications as long as they are for a series of laid out circumstances such as preventing or detecting crime or to measure quality. The purpose of most other legislation is to avoid misuse and abuse of recordings.
According to the UK’s financial regulator, the Financial Conduct Authority (FCA) a series of financial firms are bound by law to record and safely store their communications. These call recording regulations were put in place to “tackle market abuse by identifying and punishing those responsible”.
To begin with, only some financial services companies are required to adhere to call recording. For example retail finance advisors, mortgage brokers, insurance brokers and some others are not required to capture their communications. More stringent rules apply to firms which are in a highly influential position such as investment advisors and stock brokers.
The type of calls that need to be recorded are specifically outlined as ones which:
On the back of an earlier initiative by VISA, in 2004, the major card companies aligned to form the Payment Card Industry Security Standards Council (PCI DSS). On December 15th 2004, the PCI DSS 1.0 was released. Over the following years PCI DSS has evolved to not only provide greater security to the industry, but also to accommodate new technology advancements and is today the global data security standard for payment cards.
If your organisation is looking be PCI compliant then as part of the PCI Data Security Standard (PCI DSS), you’ll be facing the issue of recording sensitive authentication data (SAD) when taking payments through the phone or other devices.
It is a violation of PCI DSS requirement 3.2 to store any SAD, including card validation codes and values, after authorisation – even if the data has been fully encrypted. It is therefore prohibited to use any form of digital audio recording (using formats such as wav, mp3 etc) to store CAV2, CVC2, CVV2 or CID codes after authorisation if that data can be queried; recognising that multiple tools exist that potentially could query a variety of digital recordings.
Dubber or similar services, could assist organisations to become PCI DSS compliant when it comes to recording their communication. Dubber does this in two ways:
If you’re looking to implement call recording and you’re not sure about the relevant compliance which you’ll need to adhere to, contact your industry authority for further information on specific regulations and legislations.
Our cloud call recording is now available for immediate signup for all 53.9 million customers on the Sprint Smart UC service.Read this article
A business or individual can switch on VoIP call recording and start recording immediately. Calls are saved as audio files and stored for future playback.Read this article
The fourth instalment of our series explores the evolving expectations of customers and how digital experiences will change over time.Read this article
Dodd-Frank introduced call recording regulations on almost every organisation within the financial services industry. Find out how the regulations apply.Read this article