Is It Legal to Use an AI Voice Agent in Israel? Recording, Disclosure, Consent and Privacy

This is a plain-language summary, not legal advice. It reflects the law as of 2 November 2026, with every rule linked to its source. Your situation, especially in health, finance or sales to consumers, can change the answer, so confirm the details with a lawyer.

#The short answer

Yes. No Israeli law prohibits a business from answering or making calls with an AI voice agent. Four sets of rules apply to how you do it: the Wiretap Law on recording calls, the Consumer Protection Law on recording sales calls and on marketing calls, the Communications Law on automated advertising, and the Privacy Protection Law on what you keep. There is no Israeli statute that requires you to tell callers they are speaking with an AI, but the privacy regulator’s position is that you should when it matters to the caller, and it is the right thing to do anyway.

#Recording the call

The Wiretap Law, 1979 prohibits listening to or recording a conversation without the consent of any of its parties. That is one-party consent: a participant may record their own call. When your agent answers or places a call for your business, your business is the party to the conversation. The law has exceptions: recording to commit an offence or to cause harm is still prohibited even with one party’s consent.

There is no Israeli ruling yet on how an AI agent fits the definition of a party. The open question is the vendor, not you: a vendor that keeps or uses your recordings for its own purposes is in a weaker position than one that processes them only for you. Ask your vendor in writing.

#Amendment 74: a recording duty from March 2027

The Consumer Protection Law (Amendment No. 74), 2026 was published on 22 July 2026 and takes effect on 22 March 2027. The Minister of Economy may postpone it by up to four months. It does not apply to every business. It covers transactions listed in a new Ninth Schedule worth ₪750 or more in total, whether or not a deal was closed. The list includes:

• Sale of goods, other than food, that started with a marketing call from the business. A callback the customer asked for is not a marketing call.
• Loan brokerage, locating funds, tax refund checks by someone who is not a licensed CPA or tax advisor, and checking entitlement to rights due to a medical condition.
• Phone, internet, TV and content services, including the equipment sold with them.
• Credit data repair by non-licensees, ongoing repair and maintenance services, ongoing medical services and LPG gas supply.

If your calls are in scope, the business, or anyone acting for it, must:

1. Record every voice call with the consumer, including calls the consumer starts.
2. Tell the consumer at the start of each call that the call is recorded and that they can get the recording on request. Both parts are required.
3. Keep the recordings for at least two years if a deal was closed, or six months if not.
4. Deliver the recordings and a list of call dates free of charge within ten business days of a request.

A business that cannot deliver a recording is treated in court as admitting the consumer’s version of the call. Banks, insurers and other regulated financial services get parallel duties under their own laws. Recordings already held on 22 July 2026 must be kept and may not be deleted.

#Telling callers it is an AI

No Israeli law or regulation specifically requires it today. Three things point the same way:

• The Privacy Protection Authority’s draft guidance on AI (April 2025) says that the fact a caller is dealing with an automated AI system and not a person is an important part of informed consent, and should be disclosed where it may materially affect it. It is still a draft.
• The government’s 2023 AI policy principles recommend informing people who interact with AI. They are policy, not law.
• If you serve customers in the EU, Article 50 of the EU AI Act requires telling people they are interacting with an AI system.

A bot that claims to be a person when asked could also raise a misleading-the-consumer question. Our recommendation is simple: say it in the first sentence.

#Outbound calls and marketing

Two rules matter when your agent calls people to sell something. The first is the Do Not Call registry, added to the Consumer Protection Law by Amendment 61. A business may not make a marketing call to a number listed in the registry, and must check the registry first. The rule is about the call, so it applies whether a person or an AI dials. The exceptions are a callback the consumer asked for, a call about an existing ongoing deal, and separate written consent that is valid for up to a year.

The second is section 30A of the Communications Law, known as the spam law. Sending advertising through an automatic dialing system requires the recipient’s express prior consent, a way to refuse at any time, and identification of the sender. The law defines an automatic dialing system as one that delivers a recorded voice message. Whether a conversational AI agent counts is not settled, so assume it does. The law allows damages of up to ₪1,000 per message without proof of harm, and class actions.

In practice: call leads who left their details and agreed to be contacted, keep the consent, honor every opt-out on the next call and on every channel, and call at reasonable hours.

#Privacy: what you keep

Recordings, transcripts and summaries are personal data under the Privacy Protection Law, as updated by Amendment 13 in force since 14 August 2025. What that means for a business running an AI agent:

• Notice. When you collect details, say what for, who receives them, who you are and how to reach you, whether giving them is voluntary, and that the person can see and correct their data.
• Security. The Data Security Regulations, 2017, apply to the database that holds the calls. Transcripts that include health or financial details can raise the required security level.
• Voiceprints. A recording on its own is not biometric data. Using a voice to identify or authenticate someone is, and that is data of special sensitivity.
• Data abroad. Storing data with a cloud or AI provider outside Israel is a transfer abroad, allowed under the transfer regulations on conditions such as an adequate destination or a contract with the protections the Privacy Protection Authority describes.
• Enforcement. The Authority can now impose administrative fines, and a person can claim up to ₪10,000 without proof of harm for some breaches, including a missing notice after they asked for one.

#A compliant opening line

Most of the above is handled in the first ten seconds of the call. For example:

That one sentence says it is an AI, gives the recording notice in the form Amendment 74 asks for, and offers a person.

#Questions to ask your vendor

1. Where are recordings and transcripts stored, in which country, and for how long?
2. Are my calls used to train AI models?
3. Can I export everything and have a specific contact erased?
4. Do you sign a Data Processing Addendum?
5. How are consent and opt-outs recorded, and are they enforced on the next call automatically?
6. Can I limit outbound calls to the hours I choose?
7. Can the agent transfer to a person whenever the caller asks?

#How Direnium handles this

You write your agent’s opening line, so the AI disclosure and the recording notice are in your hands. Every call is recorded and transcribed. Data is stored in data centers in the European Union, encrypted, with a second layer of encryption for transcripts and summaries. We do not use your calls to train AI models. Consents and opt-outs are recorded and enforced on later calls, outbound calls go out only in the hours you set, and the agent can transfer a call to a person. We sign a DPA when you need one. The details are on our security page.

If you are still choosing a vendor, our buyer’s guide and price guide cover the rest.

#Sources

• Wiretap Law, 5739-1979, sections 1 to 3
• Consumer Protection Law (Amendment No. 74), 5786-2026, section 16D and the Ninth Schedule
• Consumer Protection Law (Amendment No. 61), 5781-2020, sections 16B and 16C and the Sixth Schedule
• Communications Law (Amendment No. 40), section 30A
• Privacy Protection Law (Amendment No. 13), 5784-2024
• Privacy Protection Authority, draft guidance on AI systems, April 2025
• Privacy Protection Authority, transfer of data abroad
• Principles of Policy, Regulation and Ethics in AI, December 2023