The Short Answer: Canada's One-Party Consent Rule

Yes — in most cases, the person you are talking to can legally record your conversation in Canada without ever telling you. It feels like it should be illegal, but Canada's criminal law takes a different approach than most people expect.

The rule comes from section 184 of the Criminal Code, which follows what lawyers call "one-party consent." As legal analysis of Canadian recording law explains, recording a private conversation is legal provided that one of the participants consents — and the consenting party can be the person doing the recording. In other words, if you are on the call, your own consent is enough. You do not need permission from anyone else.

This applies in every province. Research on one-party consent in Canada confirms that any participant in a private conversation may record it without committing a criminal offence, and that the rule holds across the country. The law protects a "private communication" — defined under s. 183 as one where the speaker reasonably expects it will not be intercepted by anyone other than the intended recipient. Courts interpret this expectation broadly and liberally, and the Supreme Court's R. v. Jarvis decision confirmed that even public or semi-public spaces do not automatically eliminate a person's reasonable expectation of privacy.

What trips people up is the line between participating and eavesdropping. The moment someone records a conversation they are not part of, the law changes completely:

• Wilfully intercepting a private communication without consent is a hybrid offence under s. 184(1), punishable by up to five years' imprisonment on indictment.
• Unlawfully disclosing a recording — even one made lawfully — is a separate offence under s. 193, carrying up to two years' imprisonment.
• Possessing surveillance devices primarily useful for surreptitious interception carries up to two years' imprisonment under s. 191.

Most people get this rule wrong in one of two directions. Some assume any covert recording is criminal — it is not, when done by a participant. Others assume a lawful recording is automatically safe, which is also false. As employment law analysis puts it, "lawful is not the same as safe": lawful recordings can still trigger civil liability in four provinces and dismissal for breach of trust.

For businesses, the bar sits even higher. The Office of the Privacy Commissioner requires organizations to inform customers that a call is being recorded, state the purpose, and obtain consent — implied consent is valid if the customer continues the call knowing this. That is why My AI Call Center treats recording as strictly optional on its campaigns, done only with disclosure and consent, and runs every campaign against approved, permissioned, or reviewed lists with consent records checked before launch. The one-party rule may let individuals record quietly — but organizations that call customers are held to a stricter standard.

Legal Is Not the Same as Safe: Civil and Workplace Risks

Passing the Criminal Code test is only half the story. A recording that keeps you out of criminal court can still cost you your job, your savings, or your case.

Four provinces — British Columbia, Saskatchewan, Manitoba, and Newfoundland and Labrador — go further than the Criminal Code by recognizing statutory privacy torts that are actionable without proof of damage. In these provinces, a wilful and unjustified invasion of privacy can support a civil lawsuit even when the recording itself was technically lawful, because you do not need to show you suffered measurable harm to sue. Ontario takes a narrower path: as Achkar Law explains, the common-law tort from Jones v. Tsige requires an intrusion a court would call "highly offensive."

The workplace consequences can be even harsher. In Shalagin v. Mercer Celgar Limited Partnership (2023 BCCA 373), the BC Court of Appeal upheld the dismissal of an employee who had covertly recorded more than 100 toolbox meetings and roughly 30 HR meetings over ten years. The recording was lawful under the one-party rule — but the BC Court of Appeal found the conduct had "fundamentally ruptured the trust relationship," calling it underhanded misconduct that most employers would view the same way. The lesson from that case analysis is blunt: lawful is not the same as safe.

Even a legally made recording may not help you in court. According to evidentiary guidance, the party introducing a covert recording must explain why recording inconspicuously was necessary, and it may create an unfavourable impression with the judge. Courts also prefer unedited recordings with preserved metadata, and admissible audio requires certified transcripts under the Evidence Act.

Provincial overlays add further layers for organizations:

• Quebec's Law 25, fully effective January 1, 2024, requires clear, free, informed consent for collecting personal information, plus express consent for sensitive data, according to provincial recording-law research.
• Ontario requires employers with 25 or more employees to maintain a written electronic monitoring policy under the ESA, effective October 11, 2022, per province-by-province analysis.
• BC's PIPA restricts employers from covert monitoring and requires notice before collecting employee personal information.

This layered landscape is why disciplined call operations treat consent records as a prerequisite, not an afterthought. My AI Call Center, for example, reviews list source and consent documentation before any campaign launches, and treats recording as optional — used only with disclosure and consent. For organizations running structured outbound campaigns against approved, permissioned lists, that groundwork is what separates a defensible program from a liability.

Businesses Face Stricter Rules: PIPEDA and Call Recording

If a coworker can legally record you one-party style, you might assume the business on the other end of a customer service line can too. Not so. The moment a company records calls for commercial purposes, a stricter framework takes over: the Personal Information Protection and Electronic Documents Act, or PIPEDA.

Under guidance from the Office of the Privacy Commissioner of Canada, organizations recording customer calls must meet three obligations: inform the customer that the call is being recorded, clearly state the purpose of the recording, and ask for consent. The good news for businesses is that consent does not always need to be explicit. If the customer proceeds with the call knowing the conversation is recorded and why, their consent is considered implied.

The exceptions are narrow. The OPC recognizes only a handful of situations where consent is not required — debt collection, fraud investigation, and calls where knowing about the recording could hamper obtaining accurate information. Outside those categories, silent recording of customers is off the table.

Purpose matters as much as permission. Organizations may only record for purposes a reasonable person would consider appropriate, and the OPC is explicit that a business cannot claim quality assurance while quietly using recordings for marketing or profiling. The stated purpose and the actual purpose must match.

Customers are not passive participants in this system either. Under PIPEDA, they retain several rights when a business records their calls:

• Request access to the recordings the organization holds about them
• Object to the recording and request an alternative way of doing business
• File a complaint with the OPC if they believe the organization mishandled their information

Accountability extends beyond the company whose name is on the call. Businesses that contract out call centre services must ensure those third parties follow PIPEDA as well — outsourcing the phones does not outsource the legal responsibility. This is one reason managed calling services, including My AI Call Center, treat list and consent review as a pre-launch step rather than an afterthought: recording is only ever offered with disclosure and consent, and opt-outs are logged and honored immediately.

The scope is broad. PIPEDA applies to commercial activities across Canada, including cross-border information flows, though Alberta, BC, and Quebec maintain substantially similar provincial laws for intra-provincial activities, as the regulator's PIPEDA overview explains. It does not, however, apply to individuals collecting personal information strictly for personal purposes — which is why the one-party consent rule covers your coworker but not your call centre.

For organizations running outbound campaigns, the practical takeaway is simple: disclose, match your purpose, and document consent before the first call goes out. Campaign requirements still vary by location, industry, and contact type, so appropriate legal guidance before launch is the final safeguard.

How Compliant Calling Campaigns Handle Recording and Consent

Knowing the law is one thing; running campaigns that respect it is another. So what does compliance actually look like when a business picks up the phone and starts dialing?

For organizations, the stakes are higher than for individuals. Under PIPEDA, businesses must inform customers they are recording, state the purpose, and obtain consent — with implied consent valid if the caller continues knowing the call is recorded, according to guidance from the Office of the Privacy Commissioner of Canada. That is a stricter standard than the one-party consent rule that applies to private conversations.

A compliance-forward calling process reflects these rules at every stage. It starts before the first call is ever placed. My AI Call Center, for example, reviews list source, consent records, and calling windows during pre-launch — and flags or declines bought lists that lack clear permission records. The same review checks provincial overlays, since provincial privacy law varies widely, from Quebec's Law 25 consent requirements to Ontario's written electronic monitoring policies for employers with 25 or more staff.

Once a campaign launches, the rules shape the call itself. AI-generated voices are disclosed on every call, and recipients can ask whether the call is AI-assisted, request a human, or opt out. Keyword opt-outs like "STOP" and "REVOKE" are honored immediately and logged, and those DNC requests carry across all campaigns and into client records. Recording is optional and only happens with disclosure and consent — never as a default.

The practical checklist a compliant campaign follows looks like this:

• List and consent review before launch — source, permission records, and calling windows verified
• Script, disclosure, and escalation approval — nothing dials until the client signs off
• AI disclosure on every call, with live opt-out keywords honored immediately
• Recording only with disclosure and consent, matched to the stated purpose
• Outcome reporting with disposition codes, opt-out logs, and DNC records

Purpose-matching matters more than many businesses realize. The OPC is explicit that organizations cannot claim quality assurance while using recordings for marketing or profiling, and customers retain the right to access recordings and file complaints. A campaign that records for verification must actually use those recordings for verification.

The reporting side closes the loop. Every campaign ends with a dispositioned contact list — confirmed, qualified, renewed, opted out, no answer — plus opt-out and DNC logs that prove, call by call, that consent rules were followed. As legal analysts put it, "lawful is not the same as safe." The same logic applies in outbound calling: the safest campaigns are the ones where consent, disclosure, and opt-outs are built into the process, not bolted on after the fact.

If you have an approved, permissioned, or reviewed list and one clear goal for what the call needs to accomplish, a managed campaign review is the natural first step — from 9¢ per connected minute, with the full number known before anything launches.

Your Action Plan: Recording, Consent, and Next Steps

Knowing the rules is one thing; acting on them is another. Whether you've just discovered a recording exists or you're planning to record calls yourself, the steps you take next determine whether you stay on the right side of a law that carries penalties of up to five years' imprisonment for wilful interception under Criminal Code s. 184(1), according to legal research on Canada's consent rules.

A participant who recorded you likely broke no criminal law — one-party consent covers them. But that doesn't leave you powerless. Unlawful disclosure of a recording is a separate offence under s. 193, punishable by up to two years' imprisonment, and four provinces (BC, Saskatchewan, Manitoba, and Newfoundland and Labrador) have statutory privacy torts actionable without proof of damage. Document what was recorded, how it's being used, and consult a lawyer about civil remedies or criminal referral if the recording is being shared.

Even a lawful recording can cost you your job. In Shalagin v. Mercer Celgar, the BC Court of Appeal upheld dismissal of an employee who secretly recorded more than 100 toolbox meetings and roughly 30 HR meetings over ten years — lawful, but "underhanded" conduct that fundamentally ruptured the trust relationship. As Achkar Law puts it, "lawful is not the same as safe": contemporaneous notes and written confirmations do the same job without putting your employment at risk.

Before any recording or outbound campaign goes live, run through these checkpoints:

• Consent records: verify where each list came from and what permission exists — the OPC requires informing customers, stating the purpose, and obtaining consent before recording.
• Provincial overlays: Quebec's Law 25 (fully effective January 1, 2024) demands clear, informed consent; Ontario employers with 25+ staff need written electronic monitoring policies.
• Disclosure scripts: state that the call is recorded and why — implied consent is valid only if the customer proceeds knowing both facts.
• Opt-out handling: log opt-outs immediately and honour them across every campaign; customers can also request access to recordings or file complaints with the OPC.

Purpose matters too. The OPC's call-recording guidance prohibits claiming quality assurance while quietly using recordings for marketing or profiling.

None of this replaces advice from a qualified lawyer — requirements vary by province, industry, and consent status. This is why My AI Call Center checks list source and consent records before any campaign launches, requires script and disclosure approval, and treats recording as optional — only with disclosure and consent. If a list can't support a compliant campaign, you should hear that plainly, before you spend anything.