GDPR (General Data Protection Regulation)
EU regulation governing the collection, storage, and processing of personal data.
GDPR (General Data Protection Regulation) is European Union legislation that regulates how organizations collect, store, process, and transfer personal data of EU residents. It took effect on May 25, 2018, and applies to any organization that processes data of EU residents, regardless of where the organization is based.
Key GDPR principles relevant to AI voice agents
- Lawful basis for processing: You must have a legitimate reason to record and process call data (typically: contract performance, legitimate interest, or consent)
- Data minimization: Collect only the personal data necessary for the stated purpose
- Right to access: Data subjects can request a copy of their personal data you hold
- Right to erasure: Data subjects can request deletion of their data ("right to be forgotten")
- Data residency: EU personal data must remain within the EU (or countries with equivalent protection) unless specific transfer mechanisms are in place
GDPR and call recording
Recording calls in the EU requires informing callers at the start of the call and, in most cases, obtaining explicit consent. AI voice agents should announce recording at the start of each call when operating in GDPR-regulated contexts.
TurboCall and GDPR
TurboCall is GDPR compliant with EU data residency options, Data Processing Agreements (DPAs) available for enterprise customers, right-to-erasure support, and consent management features for call recording notifications. Contact [email protected] to request a DPA.