I mean, technically, you could put something in the web site terms and conditions to the effect of, "all user input is recorded for quality assurance purposes",

I mean, technically, you could put something in the web site terms and conditions to the effect of, "all user input is recorded for quality assurance purposes", and then it wouldn't be illegal anymore. How is this any different than when telephone conversations are recorded on phone support lines, or when a video game records all user input and streams it to the remote server? It's all about disclosure up front. As long as the web site has done that properly, it's legal, right?