Recording a call you are part of is legal in Canada. Recording it as a business is a different question.

What does one-party consent actually permit?

It permits a participant to record without telling anyone else on the line. Criminal Code s. 184(2)(a) exempts an interception where one of the originator or intended recipient has consented, and a party consenting to their own recording satisfies it. This is the rule across every province: recording law in Canada is federal criminal law, not provincial.

This is the single most misunderstood point, and the reason is that most search results are American. Several US states require all parties to consent, so guidance written for a California business says the opposite of what Canadian law says. A Canadian company reading that guidance concludes it needs consent it does not need, or worse, assumes the American rule is universal and applies it backwards somewhere it matters.

The offence itself is serious, which is why the exemption is worth knowing precisely. Intercepting a private communication under s. 184(1) is a hybrid offence carrying up to five years' imprisonment on indictment. The exemption is what separates a recorded customer service call from that.

What one-party consent does not do is settle anything about what happens next. It is a criminal-law shield for the act of recording. It says nothing about whether you may store the recording, who may listen to it, how long you may keep it, or whether the caller can ask for a copy.

What does PIPEDA require on top of that?

Four things, per the Privacy Commissioner's guidance. Record only for a purpose a reasonable person would consider appropriate. Tell the customer you are recording and why, and seek their consent. Use the recording only for the purpose you stated. And meet every other PIPEDA obligation on it: safeguards, retention limits, and access.

The access right catches people out. A recording of a call is personal information about the person who made it, and they can ask to hear it. An organization that has no way to find one caller's recordings has a process problem that only appears the day someone asks.

One clause matters more than any other for anyone using an outside service to answer their phone: businesses that contract out call centre, telemarketing and similar services must ensure those third parties also follow the rules. Handing the phone to a vendor does not hand over the obligation.

• A reasonable purpose. Quality assurance, training and dispute resolution are the standard ones. "Because we can" is not a purpose.
• Notice, purpose, and consent. Say it at the start of the call, not in a policy nobody reads. If the caller continues after being told, consent is implied.
• Purpose limitation. The Commissioner's guidance is explicit that an organization should not state it is recording for quality assurance and then use the recording for marketing or profiling.
• Everything else PIPEDA asks. Safeguards on the stored audio, limited retention, and the caller's right to request access to their own recording later.

What does compliant practice look like on a real line?

A short spoken notice at the top of the call naming the purpose, a retention period you can state in a sentence, and a way to find and produce one caller's recording on request. If any of those three is missing, the recording is a liability rather than an asset.