Most dealer principals assume that a “calls may be recorded for training and quality purposes” message on their phone system covers the legal requirements. In 2026, that message is the beginning of your obligations, not the end.
The two frameworks running in parallel
UK call recording law operates across two parallel frameworks, and dealers sit inside both.
The first is the Telecommunications (Lawful Business Practice) (Interception of Communications) Regulations 2000. Under these Regulations, a business can record calls without seeking explicit consent from the caller, provided the recording is for a lawful purpose: staff training, quality assurance, compliance monitoring, or dispute resolution. The business must also have made all reasonable efforts to inform every person who may use the system that communications may be intercepted.
That second condition matters. Consistent legal interpretation holds that a clear recorded announcement before the call connects satisfies it. No announcement means no lawful interception, regardless of what your internal policy says.
The second framework is UK GDPR and the Data Protection Act 2018. A call recording is personal data. To process it lawfully, you need a documented lawful basis — for dealerships, almost always legitimate interests — alongside a privacy notice that explains the recording, a data retention policy specifying how long recordings are kept, and a process for responding to subject access requests within one month.
Dealerships frequently have the recording infrastructure in place and the legal basis documented nowhere. An ICO investigation starts by asking for your Legitimate Interest Assessment. If you cannot produce one, the conversation deteriorates rapidly, and ICO penalties can reach £17.5 million or 4% of global annual turnover.
What the FCA adds on top
If your dealership holds FCA authorisation to introduce customers to finance products — which virtually every franchised and independent dealer does — you are operating as a credit broker under the Consumer Credit Act 1974, and the FCA expects something more than generic GDPR compliance.
Consumer Duty, as set out in Principle 12 and PRIN 2A, came into full effect for closed book products in July 2024. The FCA's expectation is not that you have a Consumer Duty policy document filed somewhere. The expectation is that you can demonstrate, with evidence, that customers received good outcomes from the finance conversations your salespeople had with them.
Call recordings are the most direct form of that evidence. The FCA's March 2026 review of consumer understanding found that firms achieving good practice were systematically analysing call listening data, complaints, and chat transcripts together to identify where customers were struggling. Firms that could not produce call evidence when asked were not in a strong position.
CONC 4.5.3R requires that before a customer enters into a regulated credit agreement, your team must explain the key features of that agreement adequately so the customer can make an informed decision. Recording those pre-sale conversations is not directly mandated by CONC 4.5.3R in isolation. Yet it is the most reliable way to evidence that the required explanation happened — and evidencing that it happened is what the FCA compliance monitoring for dealerships is built around.
What PS26/3 changed about the evidence you need
The FCA's Policy Statement PS26/3, published in March 2026, establishes the Motor Finance Consumer Redress Scheme covering agreements from 2007 to 2024. Lenders are now required to assess historical commission disclosures and pay redress where those disclosures were inadequate.
For dealerships, the immediate concern is connected. The scheme assessment turns partly on whether commission was clearly and prominently disclosed at the point of sale.
For agreements made from 2014 onwards, lenders will be reconstructing those sales conversations. If a customer complains and a lender investigates, the dealer who introduced the finance will be asked what evidence they hold that the commission disclosure happened correctly.
The August 2025 Supreme Court ruling in Johnson v FirstRand Bank & Others confirmed that a credit broker owes a fiduciary duty to a customer and cannot receive a secret commission without the customer's informed consent. Informed consent means a conversation in which the commission was genuinely explained. A call recording of that conversation is your defence.
Here is a scenario most sales managers will recognise. A customer finances a £22,000 used car in March 2019 through your dealership. A lender contacts you in late 2026 as part of the PS26/3 Scheme 2 assessment, asking what evidence you hold that the commission arrangement was disclosed at the point of sale. Your CRM confirms the deal was done. Your salesperson left two years ago. Without a call recording, you are producing a reconstructed account of a conversation nobody can verify.
The ICO's January 2026 update
The ICO updated its guidance on call recording in January 2026, and three specific changes are worth flagging for dealerships.
Businesses that use AI-assisted transcription or analysis on top of call recordings now need to disclose this explicitly in their privacy notices and pre-call announcements. Telling callers the call may be recorded is no longer sufficient if you are also running those recordings through an automated analysis tool. Most dealerships have not yet addressed this requirement.
The January 2026 guidance also makes the Legitimate Interest Assessment a formal written requirement rather than best practice. If you have not documented why recording serves a legitimate interest that is not overridden by the caller's privacy rights, you do not have a lawful basis under UK GDPR.
Automated retention and deletion policies are now expected to be implemented technically, not merely written into a policy document. Recordings retained indefinitely because nobody configured a deletion schedule are a compliance liability, not an administrative inconvenience.
Call recording compliance checklist for UK dealerships
| Requirement | Legal source | Action |
|---|---|---|
| Pre-call recorded announcement on all inbound lines | Telecoms (LBP) Regs 2000, Reg 3(2)(c) | Confirmed on every line, including overflow? |
| Written Legitimate Interest Assessment | UK GDPR Art. 6(1)(f) | Documented and signed off by a named individual? |
| Privacy notice referencing call recording | UK GDPR Art. 13 | Updated since January 2026? |
| Explicit disclosure if AI analysis is applied to recordings | ICO January 2026 guidance | Added to pre-call message and privacy notice? |
| Technical data retention and auto-deletion configured | UK GDPR Art. 5(1)(e) | Set with your telephony supplier? |
| Subject access request process in place | UK GDPR Art. 15 | Tested within the last 12 months? |
| Finance call recordings retrievable by deal reference | CONC 4.5.3R / Consumer Duty monitoring | Searchable and accessible to compliance? |
| Historical finance recordings from 2014 mapped and located | PS26/3 Scheme 2 (2014 to 2024) | Archive identified and retrievable? |
What dealer principals should do this week
- Listen to ten finance calls from the last 90 days. Not a random ten — pick those from your highest-volume finance introducer. Ask yourself whether a customer listening back would clearly understand what commission arrangement was in place and what their obligations were under the agreement. If the answer is uncertain, the FCA will also find it uncertain.
- Commission a Legitimate Interest Assessment if you do not have one in writing. A brief email from your legal advisers does not constitute an LIA. You need a written document that identifies the recording purpose, demonstrates it is genuine, and assesses the impact on callers' privacy rights. The ICO's January 2026 guidance treats this as non-negotiable.
- Update your pre-call announcement if you use AI transcription or analysis. If your phone system or any software your group uses produces automated transcripts of customer calls, your announcement needs to say so explicitly. The obligation applies to any AI-assisted coaching or monitoring tool running on top of your recordings.
- Check your retention and deletion settings with your telephony supplier. Many systems default to indefinite retention. Given the PS26/3 redress window covering agreements from 2014, a minimum retention period of seven years for finance calls is a defensible position. Know what your current setting is before you find out at the wrong moment.
- Map your historical finance call archive. If your dealership holds recordings from 2014 onwards, identify where they are stored, whether they are searchable by deal number, and who can retrieve them. Discovering that 2018 recordings sit on a decommissioned server three weeks before a lender asks for them is not a position any dealer principal wants to be in.
Tools like axleo are built specifically for UK dealerships to monitor whether sales calls contain the required commission disclosures and Consumer Duty-compliant explanations automatically, flagging gaps before the FCA or a lender comes looking. See how axleo automates compliance across your dealership.
The dealerships that treated call recording as a box-ticking exercise in 2019 are now being asked to produce those recordings as evidence in a live redress scheme. A phone announcement was never enough on its own, and in 2026, the gap between minimum compliance and genuinely defensible compliance has never been wider.