Bank records customer call without consent

PIPEDA Case Summary #2003-215

[Principles 4.1.4, 4.3 and 4.3.5, Schedule 1]

Complaint

A customer complained that his bank had

1. collected his personal information, in the form of a tape-recording, without his consent; and
2. not provided an alternative for individuals who objected to being tape-recorded.

Summary of Investigation

The complainant called his bank to activate his new credit card. When informed that the call was being tape-recorded, he objected and asked that the taping cease. Both the telephone agent and a supervisor told him that the taping could not be stopped. Neither told him of any other way of activating his card without the tape-recording of a conversation.

The bank's position was that it had the complainant's consent to taping calls by virtue of notifications of the practice in documentation pertaining to his various accounts. The complainant did not recall having received any such documentation or notification.

In a previous case, the bank had given the Commissioner's Office assurance that it was implementing a modified policy on the recording of customer calls to conform with "guidelines" recommended by the Office. These guidelines included informing a customer of call taping and its purposes at the beginning of each call and offering alternatives to call taping upon objection. To explain its failure to have offered the complainant any alternatives, the bank cited employee error, attributable to employees' lack of experience with a new procedure implemented three months before the complainant's card activation call. The bank assured the Office that an alternative automated activation method was available to customers who objected to call taping and that telephone agents had been made aware of the modified policy and the new obligation to offer this alternative to objectors.

Ten months after the purported implementation, the Office called the card activation centre and observed as follows:

• The telephone agent did not acknowledge that the call was being taped, identify the purpose of taping, or speak of alternatives, until he was specifically asked.
• When asked about alternatives, he initially replied that the caller could go to a branch and activate a card in person.
• When asked pointedly about automated activation, he replied that no automated system existed; upon further consideration, he said that such a system did exist, but was available only after midnight.
• A supervisor stated that the agent had been mistaken, that an automated system did exist, and that it was immediately available 24 hours a day to any customer who requested it.
• The supervisor himself did not acknowledge the taping of the conversation until he was asked. He indicated that, though calls were always taped from the point of telephone connection, the usual practice was to wait until the point of card activation before giving notice of the taping.

Commissioner's Findings

Issued August 26, 2003

Jurisdiction: As of January 1, 2001, the Act applies to any federal work, undertaking, or business. The Commissioner had jurisdiction because the bank in question is a federal work, undertaking, or business as defined in the Act.

Application: Principle 4.1.4 states in part that organizations must implement policies and practices to give effect to the Act's principles, including training staff and communicating to staff information about the organization's policies and practices. Principle 4.3 states that the knowledge and consent of the individual are required for the collection, use, or disclosure of personal information, except where inappropriate. Principle 4.3.5 states that, in obtaining consent, the reasonable expectations of the individual are also relevant.

Against the plain fact that the complainant had expressly refused consent to the taping on the actual occasion of the call, the Commissioner considered the bank's contention that it had nevertheless had his consent by virtue of notifications contained in pertinent documentation. The Commissioner deliberated as follows:

• Regarding written notifications, it was considered unreasonable that the bank had not brought the practice of call taping to the complainant's attention in the one place where he would have been most likely to notice - in the instructions on activating a new credit card. That was where he would most reasonably expect to be notified in writing both that a card activation call would be taped and that an alternative automated system was available to any objector.
• In previous deliberations on matters of consent, the principle that, notwithstanding written notifications elsewhere, the fact and purposes of a collection of personal information should be brought to the individual's attention at the time of the collection had been recognized and established as a reasonable expectation of the individual. In support of this principle, "best practices" specific to the recording of customer telephone calls had been developed, and the bank had previously given an assurance that it accepted the principle and best practices and was implementing a modified policy accordingly. The complainant's experience, however, seemed to indicate that the bank had not fully appreciated the implications of what it was implementing.
• Although the bank had indeed informed the complainant in accordance with recommended best practices, that his call was being taped for certain purposes, what does not seem to have been understood was that the occasion of stating purposes is an occasion of consultation about consent. The reason for stating a purpose is to present to the individual a proposition for consideration whether to accept or reject.
• Rejection of the proposition is an option that any consent mechanism must reasonably accommodate. Having thus been consulted about the proposition that his call would be tape-recorded, and having expressly rejected the proposition, the complainant had had good reason to expect that due allowances would be made to him in respect of his expressed preference.
• In the Commissioner's view, the bank had failed to meet the complainant's reasonable expectations that
  1. the bank would stop taping his conversation at his request once he had been consulted and expressly refused consent;
  2. he would be informed of any consequences of his refusal of consent and of any alternative means available for achieving his purpose;

In sum, the Commissioner determined that the bank had not had the complainant's consent to the tape-recording of his card activation call and had failed to respond in a reasonable manner to his refusal of consent. The Commissioner found therefore that the bank was in contravention of Principles 4.3 and 4.3.5.

He also deemed it evident that the bank had failed to communicate to its staff, through training or other means, the information necessary for the effective and consistent implementation of the recommended best practices regarding the tape recording of customer telephone calls. He found therefore that the bank was also in contravention of Principle 4.1.4.

He concluded that the complaint was well-founded.

Further Considerations

With regard to the complaint proper, the Commissioner made the following recommendations:

1. The bank should alter its call recording system to the effect that (a) telephone agents will have control over the taping so that they may initiate it on indication of the customer's consent and end it at the customer's request and (b) recorded calls will be stored and catalogued in such a way that they may be easily and individually retrievable and, where circumstances warrant, eraseable.
2. The bank should include, in the activation instructions accompanying any new credit card, clear notifications to the effect that (a) telephone conversations with activation centre agents will be tape-recorded and (b) an alternative automated activation system is available.
3. If the bank intends to continue recording calls to its card activation centre from the point of telephone connection, it should ensure that its agents notify the caller immediately at the outset that the call is being recorded. Alternatively, the bank should consider not initiating the recording of any call until after the notification is given.
4. The bank should also ensure that its agents notify objectors of alternatives to the taping of card activation calls - notably, the automated activation system. Ideally, the agent should begin by notifying the caller of card activation options and should commence the recording of the call only if the caller indicates a clear preference for proceeding through conversation with the agent.

The Commissioner expressed his disappointment at the evidence that, despite the findings and recommendations in a previous case, the bank was continuing as a matter of course to tape customer calls without informing callers of the fact at the outset, without specifying purposes in a clear and consistent manner, and without offering alternatives. He noted that the bank's initial explanation that this was merely a training issue - that it was simply a matter of employees not yet being familiar with new policy and procedures - was no longer acceptable a year after the fact. He therefore made the following additional recommendations:

5. The bank should review, consolidate, and revise its policy and procedures regarding the tape-recording of customer calls in accordance with the findings and recommendations in this and the prior case.
6. The bank should conduct a formal training program to ensure that all its telephone agents are knowledgeable and proficient in the consistent application of policy and procedures regarding the tape-recording of customer calls.