Skip to content

Can the AI listen in on a phone call? Announcement, notes, recording

What the announcement “This is an AI speaking” covers on the phone, what it doesn't, and which questions about notes, recording and data processing you should settle before you start. Not legal advice.

Attila Arndt
Attila Arndt

Triple A Digital, Cologne · · 5 min read

Who it's for
Anyone who uses an AI on the phone or wants to: to answer calls, to take call notes or to write summaries.
What you'll be able to do
Know what the announcement covers, what it doesn't cover, and which questions you should settle before you start.
As of
October 2026
TL;DR

The announcement “This is an AI speaking” is there for the labelling duty; it doesn't cover notes or recording. That a short announcement is enough for labelling is the assessment of a software vendor, not a decision by an authority. What happens to the call afterwards, who stores it and who processes it, is a separate question, and the announcement doesn't answer it.

Not legal advice

This post summarises what published sources say: a law firm, a software vendor, press releases and a court judgment. It is no substitute for advice. If you record calls, or deal with health data or client data on the phone, have it checked by someone whose job that is.

Why the question is coming up now

On 8 September 2026, Telekom announced that business customers on its business mobile plans will be able to have calls summarised by AI from 5 October 2026. The feature is called “Voice AI Notes Mobile”; it writes a summary and turns it into tasks and calendar entries. It is aimed at small and medium-sized businesses.1

One condition in the same announcement is worth noting: the feature may only be used with the prior consent of the people on the call. Once the summary has been sent, the content is deleted, according to Telekom.1 Even a large provider makes consent a condition before the AI takes notes.

Art. 50 AI Act
2 Aug 20262
applies since this day
Telekom
5 Oct 20261
launch of AI call notes
Data protection
66%3
named as an obstacle by companies that use AI

The concern is widespread: in a Bitkom survey, 66 per cent of the companies already using AI name data protection as an obstacle.3 On the phone it becomes tangible, because there is a person speaking who may not know who is listening.

The announcement: what the AI Act requires

Article 50 of the AI Act has applied since 2 August 2026. Under paragraph 1, people have to be told that they are talking to an AI.2 The amending Regulation (EU) 2026/1744, known as the Digital Omnibus, pushed back the obligations for high-risk systems, but not the duty under paragraph 1.2

For the phone, in the assessment of the software vendor CATAMA, that means: a short announcement at the start of the call meets the duty.4 Exactly which notices are enough and which aren't is covered in the post Labelling AI: what chatbots, AI images and AI text have to disclose.

The announcement says who is speaking, not what happens to the call. So if you have built it in, you are not yet done with data protection.

Announcement, notes, recording: three different things

On the phone, an AI can do three things that sound alike and are treated differently in law. The comparison shows what happens in each case and what the sources say about it.

What the AI does and what goes with it
Announcement
What happensAt the start, the AI says that an AI is speaking.
What the sources sayThis is the duty under Article 50 of the AI Act. In CATAMA's assessment, a short announcement is enough for it.
Notes and summary
What happensThe AI processes what is said on the call and turns it into notes, tasks or appointments.
What the sources sayThe announcement doesn't settle this. Telekom makes its notes feature conditional on the prior consent of the people on the call.
Recording
What happensThe audio of the call is stored.
What the sources sayAccording to CATAMA, this needs a separate legal basis and a clear notice; otherwise there is a risk of breaching section 201 of the German Criminal Code.
Summarised from the Telekom announcement (1), itmr-legal (2) and CATAMA (4). Not legal advice.

The statements on recording come from CATAMA, a software vendor, in a post about AI phone assistants in workshops. It is not an authority and not a law firm.4 I repeat them here because they are concrete enough to be useful in practice, not as my own reading of the Criminal Code.

If you only announce, but take notes or record, you have dealt with just the first of the three points. Which basis for the notes fits your business, consent or something else, depends on the individual case. That is a question for an adviser, not for this post.

Who processes the data: processing on your behalf

If the AI phone assistant runs at a service provider and not on your own systems, CATAMA names two things: a data processing agreement under Article 28 GDPR and a contractual exclusion from model training.4

A data processing agreement, DPA for short, is a contract under Article 28 GDPR. You generally need one when a service provider processes personal data on your behalf. Exclusion from model training means the provider may not use your calls to train its AI further.

If a service provider writes the note, then according to CATAMA a contract with you goes with it. How to collect such contracts from all your service providers without losing track is covered in the post on DPAs and vendor onboarding.

And if the AI says something wrong?

The announcement doesn't protect you from a wrong answer either. The Higher Regional Court of Hamm treated the answers of a chatbot on a website as a commercial act of its operator, because the operator has sufficient influence over the system and sets it in motion.5 The Hamm judgment rests on German unfair competition law, not on the AI Act.5

The judgment concerns a chatbot on a website, not the phone. I would still assume that you have to answer in the same way for what the AI promises on the phone. That is my assessment, not a court decision. What the judgment is about and what to check before launch because of it is covered in the post When your chatbot gets it wrong, you said it.

Before you start

The sources above can be turned into a list to go through once before you start. It is my recommendation, not a list from one of the sources and not legal advice.

Before the AI answers the phone
  • The AI says at the start of every call that it is an AI
  • Settled whether the call is only summarised or also recorded
  • A basis chosen for notes and recording, and a clear notice built in
  • A data processing agreement signed with the provider
  • Ruled out by contract that your calls are used for training
  • Asked when call content and notes are deleted
  • For health data or client data, had the setup checked beforehand
Get in touch

If you are planning an AI on the phone and want to go through the points above for your business: tell me what it's meant to do. That is no substitute for a legal review, but afterwards you'll know which questions to put to your provider and your adviser.

Sources

  1. 1Telekom: press release on AI notes in business customer calls (8 September 2026, in German) · retrieved 28 September 2026
  2. 2itmr-legal: blog post on the Digital Omnibus (as of 28 July 2026, in German) · retrieved 28 September 2026
  3. 3Bitkom: press release on the study “KI in der Wirtschaft” (14 September 2026, in German) · retrieved 28 September 2026
  4. 4CATAMA: post on AI phone assistants in workshops (27 September 2026, in German) · retrieved 28 September 2026
  5. 5OLG Hamm, judgment of 12 May 2026, 4 UKl 3/25 (full text, NRWE, in German) · retrieved 23 September 2026
Questions

Answered in brief

Does the announcement “This is an AI speaking” also cover recording the call?

According to the software vendor CATAMA, no. In its assessment, the short announcement at the start of the call meets the duty under Article 50 of the AI Act. Anyone who records the call, however, needs a separate legal basis and a clear notice; otherwise there is a risk of breaching section 201 of the German Criminal Code. This is a summary of published sources, not legal advice.

Do I need a data processing agreement if the AI only takes notes?

For AI phone assistants, CATAMA names a data processing agreement under Article 28 GDPR and a contractual exclusion from model training. Such an agreement sets out how a service provider processes data on your behalf. Whether you need one in your case depends on who processes the calls; if in doubt, have it checked.


Keep reading

Attila Arndt

Attila Arndt · Triple A Digital, Cologne

Is there a process like this in your company?

Pick a time that suits you. In the intro call, we'll work out which process is worth tackling first — and whether I'm the right person for it.

Free intro call (opens in a new tab)

Or email me directly: hello@tripleadigital.de · I reply within 48 hours.