Skip to Content

IAPP Europe Congress 2026

Privacy | AI governance | Cybersecurity law

BRUSSELS

16-19 November

Back to conference agenda

AI on the Line: Call Recordings, AI Transcription and the GDPR

Wednesday, 18 Nov.

09:30 - 10:30 CET

Intermediate level

BREAKOUT SESSIONAI GOVERNANCEPRIVACYAI AND MACHINE LEARNINGCOMPLIANCE TECHLAW AND REGULATIONREGULATORY GUIDANCERISK MANAGEMENTPROFESSIONAL SERVICESTECHNOLOGYTELECOMMUNICATIONS

Call recording and automated transcription have become embedded in customer interactions, compliance monitoring and quality assurance, often enhanced by AI based analytics. Yet companies and institutions struggle with a central question: when can they lawfully rely on legitimate interests under Art. 6(1)(f) GDPR, and when do recording and transcription practices cross regulatory lines? This panel examines the evolving legal assessment of call recording and AI supported transcription in light of supervisory authority guidance, enforcement practice and real-world implementation challenges. Focusing on purpose limitation, transparency, DPIAs and data subject rights, the speakers explore how and when transcription changes the balancing exercise, which safeguards regulators expect in practice and where consent or alternative legal bases may be required. Combining the perspectives of regulators and industry practitioners, the session provides concrete criteria and risk indicators to help privacy professionals assess existing call recording setups and design GDPR compliant recording and transcription processes.

What you will learn:

  • How to structure a defensible Art. 6(1)(f) GDPR balancing test for call recording. 
  • When call transcription, especially using AI tools, changes the legal assessment. 
  • Practical compliance measures: transparency notices, DPIAs, retention periods and safeguards.

Featured in this session

headshot of Elizabeth Denham

Elizabeth Denham

Chair

Jersey Data Protection Authority

generic profile silhouette

Carolin Loy

Head of Digital Economy

Bavarian State Office for Data Protection Supervision

generic profile silhouette

Michael Schmidl

Partner

Baker McKenzie