Voicemail recordings and transcription email fall under GDPR
<p>A client calls, leaves a voicemail with his name and number.</p>

<p>A vendor calls, leaves account information and address information. This call is also transcribed and sent via email.</p>

<p>The above are common communications left to individual employees' voicemail.
Do these fall under GDPR protection laws, and how are they to be handled? </p>

<p>I understand when a consumer calls, they  are informed that call may be recorded, but with the above type of communication is this implicitly assumed?</p>

<p>The scenario you describe is entirely expected. Leaving contact details on voicemail is one of the chief functions of voicemail, and such data definitely falls under the GDPR. </p>

<p>Now, under the GDPR this is not a problem. The customer left that data intentionally for you in order to be contacted. That is sufficient reason for you to have that data. However, all other GDPR policies should still apply. You shouldn't keep that voicemail for an unreasonable amount of time. That's not bad business practice either: erase the voicemail once you called back, so you know that call is handled. The customer may request that you share that voicemail, per the GDPR, and you'll need to make sure that the request comes from the person who made the call. But that's luckily something you only need to do if anyone ever asks.</p>

united-states gdpr germany