Recording a sales call in Belgium: what the law actually says
Consent, GDPR, the role of the DPA, retention periods, what to announce: the legal framework for recording sales calls in Belgium.
Recording or analysing a sales call is perfectly legal in Belgium — provided you respect a precise framework. Confusion often comes from French-language articles describing French law and citing the CNIL, whereas the competent authority in Belgium is the DPA (Data Protection Authority).
This article summarises what concretely applies to a Belgian sales team. It is not legal advice: for a specific case, consult your DPO or a specialised lawyer.
The foundation: GDPR applies in full
An identifiable person's voice is personal data. Recording a call, producing a transcript or analysing it automatically is therefore processing under the GDPR, with all the resulting obligations: legal basis, informing individuals, minimisation, limited retention, security, and respect for access and erasure rights.
In Belgium, the GDPR is complemented by the Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data. The supervisory authority is the DPA, not the CNIL.
Which legal basis should you choose?
Two bases are generally considered for a sales call.
- Consent: the person explicitly agrees, after being informed. This is the clearest and most defensible basis for a commercial recording. They must be able to refuse with no consequence for the relationship.
- Legitimate interest: possible for certain purposes (quality, training), but it requires a documented balancing test between your interest and the person's rights. That's more fragile for systematic recording, and it doesn't remove the duty to inform.
In practice, for a sales call, asking for consent at the start is simultaneously the simplest, the safest and the best received. One sentence is enough — and it positions you as a professional.
What to announce, and when
Information must be given before recording starts, not after. It must be understandable, not buried in jargon. Cover: who is recording, why, what happens to the recording, and how to exercise one's rights.
A short, effective spoken version: “Before we start, I should tell you this call may be recorded and analysed for quality purposes. You can decline — it changes nothing about our conversation. Is that alright with you?” Note the answer, and honour a refusal immediately.
The special case of regulated sectors
If you are an insurance intermediary or a financial adviser, two extra layers sit on top of the GDPR: the MiFID II (financial instruments) and IDD (insurance distribution) directives, supervised in Belgium by the FSMA. They require a duty of advice, a suitability test and clear pre-contractual information on costs and risks.
Two practical consequences. First, recording can become an asset: it documents what was said and advised. Second, any assistance tool used during the meeting must stay factual — it must never suggest a product recommendation that would bypass the suitability test, nor state an unverified figure.
Belgian tax ceilings change with each tax year. Never quote an amount from memory in a meeting: say you'll check and come back in writing. It's more professional than an approximate figure, and it protects you.
Retention and security
The GDPR sets no fixed duration: it requires a duration justified by the purpose. If the goal is quality and training, a few months is usually enough. If the goal is evidence of advice in a regulated sector, align with your sector's retention obligations.
- Define the duration in advance, record it in your processing register, and delete automatically at the end.
- Restrict access to people who genuinely need it.
- Check where your tool hosts the data, and whether any transfers occur outside the EU.
- Have a simple procedure for responding to an access or erasure request.
What about B2B cold calling?
Calling a professional on their business number, about an offer related to their activity, remains possible in Belgium as in France. Opt-out lists aimed at consumers (Bloctel in France, the “Do not call me!” list in Belgium) target private individuals. That doesn't exempt you from being impeccable: identify yourself, state the purpose of the call, and immediately remove anyone who asks.
If you use an automated voice agent, the transparency requirement is heightened: the person must be able to know they are speaking to a machine.
In summary
- 1Inform and obtain consent before recording, in one clear sentence.
- 2Honour a refusal without arguing, and without degrading the relationship.
- 3Document purpose, legal basis and retention in your processing register.
- 4In regulated sectors, keep assistance factual: never an invented figure, never a product recommendation before the suitability test.
- 5Remember the competent authority is the DPA, and the financial regulator the FSMA — not their French counterparts.
Closer AI was designed with these constraints as a starting point: consent required before any listening, refusal to produce an unsourced figure, and a regulatory framework injected per sector — Belgian for Belgium, French for France.
Want to try the copilot on your own calls?
See pricing