Privacy and AI call transcripts: what should you watch for?
If an AI answers your business phone, keep three principles in mind. The caller is told at the start of the call that they're speaking with an AI and that the call is transcribed. Only the data needed for the purpose is captured, on a consent basis. And how long transcripts are kept is your decision, written into your privacy notice. Echo does the first two by default, and does not keep an audio recording of the call. The exact rules differ by country, and in the US by state, so check the specifics with your legal advisor.
The most common legal question about AI phone assistants isn't technical, it's about trust: what do you have to comply with? This article summarizes the principles in plain language. It deliberately doesn't say what's allowed where: transcription and disclosure rules differ by country, and in the US by state, and only your legal advisor can tell you which apply to you. This is information, not legal advice.
Three principles that hold everywhere
- Disclosure: at the start of the call, the caller knows that an AI assistant is speaking and that the conversation is being transcribed, and where to find the detailed privacy notice.
- Consent and purpose: transcription and data processing are consent-based and have a defined purpose, for example completing an appointment booking or a callback.
- Data minimization and retention: only the data needed for the purpose is requested and stored. An appointment booking needs a name and a phone number, not a full life story. How long transcripts are kept is your decision.
Echo is set up accordingly: the caller is told at the start of the call that an AI assistant is speaking and that the call is transcribed, and the assistant captures only the data needed to get in touch, after consent. Retention is configured per business, according to your own privacy notice.
Disclosure at the start of the call
On a phone call, an AI assistant shouldn't pass itself off as a human. That's why at Echo, the first sentence of the voice prompt states that an AI assistant is speaking. This isn't only about rules, it's a matter of trust: an honest opening is what's fair to the caller, and in our experience it doesn't break the conversation. In a growing number of places, disclosure of this kind is also expected; whether it's required for your business is a question for your legal advisor.
What about the transcript?
Echo makes a written transcript of every call and sends you an email summary. It does not keep an audio recording: once the transcript is generated, the audio itself is not retained. From the business's side, this is an advantage: you can look up what was said, and there's no dispute about who said what. From a privacy side, the same thing is a responsibility: only people who need to work with the transcripts should have access to them, and they should be kept only for the period stated in your privacy notice.
Practical steps when you bring in an AI assistant
- Update your privacy notice: it should state that calls are transcribed, why, and for how long.
- Leave the AI disclosure and the transcription notice at the start of the call switched on. At Echo, this is the default, not an option.
- Think through what data the assistant asks for, and keep it to the necessary minimum.
- Decide the retention period for transcripts, and who in your team can access them.
- Check the transcription and disclosure rules that apply where you and your callers are. If you work in healthcare or another sensitive field, get your legal or data protection advisor's opinion on the settings.
This article is general information, not legal advice. For your own data processing in a specific country or state, only a legal or data protection professional can give a responsible opinion.
Related questions
Do I have to tell the caller they're talking to an AI?
Echo always does, in the first sentence of the call, and we recommend keeping it on everywhere: it's the fair thing to do, and in a growing number of places it's also expected. Whether it's required for your business is a question for your legal advisor.
Am I allowed to transcribe calls?
That depends on where you and your callers are. Echo tells the caller at the start of the call that it's being transcribed. What's allowed in your country or state is a question for your legal advisor.
What data does Echo keep?
Only the data needed to get in touch, after the caller's consent. How long transcripts are kept is your decision, set according to your privacy notice. The details of data processing are in our privacy notice.