Cameroon Recording Laws: All-Party Consent Rules and Penalties (2026)

Cameroon's Recording Laws: A Country Where Consent Is Not Optional

Cameroon treats the act of recording a private conversation without consent as a criminal offense. The country's legal framework does not leave room for one-party consent, silent recording, or implied permission. If you record someone without their knowledge, you face prison time and substantial fines.

The primary statute governing this area is Law No. 2010/012 of 21 December 2010 on Cybersecurity and Cybercriminality in Cameroon. Article 74 of that law targets anyone who interferes with the privacy of others by fixing, recording, or transmitting electronic data of a private or confidential nature without the consent of the author. The law does not distinguish between phone calls, video recordings, or digital messages. If the data is private and the author did not consent, the act is illegal.

This places Cameroon squarely in the all-party consent category, alongside countries like Germany, Switzerland, and Brazil. For anyone living in, traveling through, or conducting business in Cameroon, understanding these rules is not just advisable. It is a legal necessity.

The Bijural System: Two Legal Traditions, One Recording Standard

How Cameroon's Dual Legal System Works

Cameroon inherited two distinct legal systems from its colonial history. After Germany lost control of the territory following World War I, Britain administered the western regions (now the North West and South West) under English common law. France governed the eastern regions under the French civil law tradition. When the country reunified in 1961, both systems remained in place.

Today, Cameroon operates as a bijural state. English common law, with its emphasis on judicial precedent and adversarial proceedings, governs the two Anglophone regions. French civil law, built on codified statutes and inquisitorial procedures, governs the eight Francophone regions: Adamaoua, Centre, East, Far North, Littoral, North, West, and South.

What This Means for Recording Laws

The distinction matters less than you might expect when it comes to recording. Criminal law in Cameroon has been unified through national legislation that applies across all ten regions. The Cybersecurity Law (Law No. 2010/012), the Penal Code (Law No. 2016/007), and the Criminal Procedure Code (Law No. 2005/007) apply nationwide regardless of whether a case is heard in a common law or civil law court.

Where the bijural system creates practical differences is in procedural matters and how cases move through the courts. In Anglophone regions, proceedings follow common law conventions with greater reliance on oral arguments and cross-examination. In Francophone regions, the examining magistrate plays a more active role in directing investigations. But the substantive law on recording consent is the same in Douala as it is in Bamenda.

The Cybersecurity Law: Cameroon's Primary Recording Statute

Article 74: The Core Offense

Article 74 of Law No. 2010/012 is the provision that directly criminalizes unauthorized recording. It states that anyone who interferes with the privacy of others by fixing, recording, or transmitting, without the consent of the author, electronic data of a private or confidential nature faces criminal penalties.

The language is broad. "Fixing" covers saving or storing a communication. "Recording" covers audio and video capture. "Transmitting" covers forwarding, sharing, or distributing private content. The article does not require the person recording to have malicious intent. The act itself, performed without consent, triggers liability.

Penalties Under Article 74

A violation of Article 74 carries:

• Imprisonment of one to two years
• A fine of XAF 1,000,000 to XAF 5,000,000 (approximately USD $1,600 to $8,000)
• Or both

These are not theoretical penalties. Cameroon's judicial system actively prosecutes privacy violations, and the fines represent significant sums in a country where the average annual income falls well below XAF 1,000,000.

Articles 41-44: The Privacy Framework

Article 74 does not stand alone. It sits within a broader privacy framework established in the same law.

Article 41 declares that every individual has the right to the protection of their privacy. This is the foundational statement that supports all recording-related provisions.

Article 42 requires operators of electronic communication networks and information systems to ensure the confidentiality of information channeled through their systems, including traffic data.

Article 44(1) states that it is forbidden for any natural person or corporate body to listen to, intercept, or store communications and the traffic data related thereto, or to subject them to any other means of interception or monitoring, without the consent of the users concerned. The only exception is where such interception is legally authorized.

Article 47 adds that using electronic communication networks to store information or access information stored on someone's terminal equipment requires their prior consent.

Taken together, these articles create a layered defense of communications privacy. You cannot record, intercept, store, or access private communications without explicit consent from the people involved.

Constitutional Protections: The Foundation

The constitutional basis for Cameroon's recording laws sits in the Preamble to the Constitution (Law No. 96/6 of 18 January 1996, as amended). The Preamble declares that "the privacy of all correspondence is inviolable" and that "no interference may be allowed except by virtue of decisions emanating from the Judicial power."

Under Article 65 of the Constitution, the Preamble is an integral part of the Constitution and carries full legal force. This means the privacy of correspondence is not just a guiding principle. It is a constitutionally guaranteed right.

Cameroon's Constitution also affirms the country's commitment to the Universal Declaration of Human Rights (Article 12, protecting against arbitrary interference with privacy) and the African Charter on Human and Peoples' Rights. These international instruments reinforce the domestic prohibition on unauthorized recording.

The Penal Code: Additional Criminal Protections

Section 300: Tampering with Correspondence

Beyond the Cybersecurity Law, the Cameroon Penal Code (Law No. 2016/007 of 12 July 2016) provides separate criminal penalties for privacy violations.

Section 300 addresses tampering with correspondence. This provision criminalizes the unauthorized opening, suppression, or diversion of another person's correspondence. While it was originally drafted with physical mail in mind, Cameroonian legal scholars and courts have interpreted "correspondence" broadly to encompass electronic communications.

Section 310: Professional Secrecy

Section 310 of the Penal Code governs breaches of professional secrecy. Any person who, by reason of their profession or position, holds confidential information and discloses it faces imprisonment of three months to three years and fines of XAF 20,000 to XAF 200,000.

This provision is relevant to recording in professional settings. A doctor, lawyer, banker, or government official who records a confidential interaction and shares it without authorization faces liability under both Section 310 and the Cybersecurity Law.

Section 132: Doubled Penalties for Public Servants

Section 132(2) of the Penal Code provides that penalties for privacy-related offenses, including those under Sections 299, 300, and 310, are doubled when the offender is a public servant. A government employee who secretly records a colleague's phone call or tampers with official correspondence faces twice the standard prison term and fine.

Phone Call Recording

Personal Calls

Recording a personal phone call in Cameroon without the consent of all parties violates Article 74 of the Cybersecurity Law and Article 44 of the same statute. There is no exception for recording your own calls. The law requires the consent of "the author" of the communication, meaning the person whose words are being captured.

This applies to traditional landline calls, mobile phone calls, and internet-based voice communications. Whether you use MTN Cameroon, Orange Cameroon, or a VoIP service like WhatsApp or Zoom, the consent requirement is the same.

Business Calls

Businesses that record phone calls for quality assurance, training, or compliance purposes must obtain explicit consent from all parties before the recording begins. Automated consent prompts at the start of a call can satisfy this requirement, but the consent mechanism must be clear and give callers the option to decline.

Call centers, customer service departments, and financial institutions operating in Cameroon should treat consent collection as a mandatory step, not a formality.

In-Person Conversations

The Cybersecurity Law's reference to "electronic data" might suggest it applies only to digital communications. In practice, Cameroon's courts interpret the law more broadly. Recording an in-person conversation with a smartphone, a digital voice recorder, or any electronic device falls within the scope of Article 74 because the captured content becomes electronic data the moment it is recorded.

The Constitutional protection of correspondence privacy and the Penal Code's provisions on tampering with correspondence further reinforce that secret recording of face-to-face conversations is prohibited.

Hiding a phone in your pocket to record a business meeting, using a smartwatch to capture audio during a negotiation, or placing a recording device in a private room are all acts that expose you to criminal prosecution.

Public Spaces

Cameroon does not have a comprehensive CCTV or public surveillance statute comparable to what exists in Europe or parts of Asia. However, the general privacy framework still applies.

Recording conversations in public spaces without the participants' consent violates the Cybersecurity Law when the communication is private in nature. Two people having a quiet conversation at a cafe in Yaounde enjoy the same legal protection as two people speaking on the phone. The setting does not eliminate the expectation of privacy in the content of their exchange.

Video recording in public is less clearly regulated. Cameroon has not adopted specific legislation governing photography or filming in public places. However, if a video captures private conversations or is used in a way that violates someone's dignity or privacy, the general provisions of the Cybersecurity Law and the Penal Code provide a basis for prosecution.

Government buildings, military installations, and certain strategic sites are subject to additional restrictions. Recording at or near these locations without authorization can trigger national security provisions.

Workplace Recording and Employee Monitoring

Employer Obligations

Cameroon's Labour Code (Law No. 92/007 of 14 August 1992) does not contain specific provisions on workplace surveillance or audio recording. However, the Cybersecurity Law applies to employers just as it applies to individuals.

An employer who records employee phone calls, installs hidden microphones in offices, or monitors electronic communications without the employees' knowledge and consent violates Article 44 of the Cybersecurity Law. The fact that the recording occurs on company premises does not create an automatic right to monitor.

CCTV in the Workplace

Security cameras in Cameroonian workplaces exist in a regulatory gray area. There is no specific CCTV statute, but the general privacy principles apply. Employers should, at minimum:

• Inform employees that video surveillance is in use
• Limit cameras to common areas and exclude restrooms, changing rooms, and private offices
• Avoid recording audio alongside video unless all-party consent has been obtained
• Post visible notices indicating that surveillance is in operation

The 2024 Data Protection Act and Workplace Monitoring

Law No. 2024/017, Cameroon's first comprehensive data protection statute, adds new requirements for employers processing employee data. Once enforcement begins on June 23, 2026, businesses that collect, store, or process employee personal data through monitoring systems must obtain explicit consent and register with the Personal Data Protection Authority.

The law defines "processing" broadly to include collection, recording, organization, storage, adaptation, retrieval, consultation, dissemination, transmission, alignment, blocking, erasure, and transfer of personal data. Any workplace monitoring system that captures employee data falls within this definition.

Law Enforcement and Judicial Interception

When Interception Is Legal

The Criminal Procedure Code (Law No. 2005/007) provides the only legal pathway for recording or intercepting communications without the parties' consent. Under Section 245(4), an Examining Magistrate or State Counsel may order the interception, recording, and transcription of telecommunications when the following conditions are met:

• The investigation involves a crime punishable by at least two years of imprisonment
• The interception is authorized in writing by the Examining Magistrate
• The operation is conducted under the control of the State Counsel
• The order identifies the specific communication means, the offense under investigation, and the duration

Duration and Limits

An interception order may last up to four months and can be renewed for additional four-month periods. There is no cap on the number of renewals, meaning an interception can continue indefinitely as long as the Examining Magistrate determines it remains necessary.

Judicial police officers carry out the actual interception, and qualified agents from telecommunications operators install the necessary equipment. The intercepting officer must transcribe relevant correspondence and produce a report of each operation.

Protections for Attorneys

Barristers' phone lines and the communications of individuals protected by parliamentary or diplomatic immunity are exempt from interception. This protection reflects the recognized need for attorney-client privilege within Cameroon's legal system.

Data Retention by Service Providers

Article 25 of the Cybersecurity Law requires service providers to retain traffic and connection data for 10 years and make it accessible during investigations. This is one of the longest mandatory retention periods in Africa and gives authorities a substantial window to request historical communications data.

The 2024 Personal Data Protection Act

A New Layer of Protection

On December 23, 2024, Cameroon enacted Law No. 2024/017 relating to personal data protection. This law is the country's first comprehensive data protection statute and introduces requirements that directly affect anyone who records, stores, or processes personal information.

The law requires explicit, informed consent before personal data is processed. Consent must be freely given, specific, and unambiguous. Pre-ticked boxes, opt-out mechanisms, and bundled consent arrangements do not meet the legal standard.

Penalties Under the 2024 Act

Non-compliance with Law No. 2024/017 carries:

• Fines of up to XAF 100,000,000 (approximately USD $160,000)
• Imprisonment of up to 10 years

These penalties apply to violations of consent requirements, unauthorized data processing, and failure to comply with orders from the Personal Data Protection Authority.

Compliance Deadline

Organizations have until June 23, 2026 to bring their data processing protocols into compliance with the new law. After that date, the Personal Data Protection Authority will begin enforcing sanctions.

What This Means for Recording

Any recording that captures personal data, which includes voice recordings, video footage of identifiable individuals, and intercepted communications, now falls under two regulatory regimes: the Cybersecurity Law and the Data Protection Act. Organizations that record calls, operate surveillance cameras, or process audio and video content must comply with both.

CEMAC Regional Framework

Cameroon is a member of the Central African Economic and Monetary Community (CEMAC), which has issued directives relevant to electronic communications privacy.

CEMAC Directive No. 07/08-UEAC-133-CM-18 requires member states to protect the privacy of users by ensuring the confidentiality of their electronic communications. This regional directive reinforces Cameroon's domestic prohibition on unauthorized interception and recording.

The 2019 CEMAC Directive 02/19-UEAC-639-CM-18 on consumer protection within the economic community adds further requirements for safeguarding consumer data in electronic transactions.

These directives do not create directly enforceable rights in Cameroonian courts, but they inform the interpretation of domestic law and signal the direction of regional legal development.

Penalties Summary

Offense	Law	Imprisonment	Fine
Recording private data without consent	Cybersecurity Law Art. 74	1-2 years	XAF 1M-5M (~$1,600-$8,000)
Interception or monitoring without consent	Cybersecurity Law Art. 44	Up to 2 years	Up to XAF 5M
Tampering with correspondence	Penal Code Sec. 300	Up to 1 year	Fine as prescribed
Breach of professional secrecy	Penal Code Sec. 310	3 months-3 years	XAF 20,000-200,000
Banking secrecy violation	Banking Secrecy Law Art. 26	3 months-3 years	XAF 1M-10M
Data protection violations	Law No. 2024/017	Up to 10 years	Up to XAF 100M (~$160,000)
Public servant committing above offenses	Penal Code Sec. 132(2)	Doubled	Doubled

Business Compliance Checklist

Organizations operating in Cameroon should take the following steps to comply with the country's recording and data protection laws:

• Audit all recording systems. Identify every system that captures audio, video, or electronic data, including phone systems, CCTV, video conferencing platforms, and customer service tools.
• Obtain explicit consent. Before recording any call, meeting, or interaction, secure clear consent from all parties. Verbal acknowledgment or a written agreement both satisfy the requirement.
• Implement consent mechanisms for call recording. Automated prompts at the beginning of recorded calls must clearly inform all parties and allow them to decline.
• Register with the Data Protection Authority. Once the Personal Data Protection Authority becomes operational under Law No. 2024/017, organizations that process personal data must register before processing begins.
• Appoint a Data Protection Officer. Large-scale data processing operations require a certified DPO under the 2024 Act.
• Restrict workplace surveillance. Limit cameras to common areas. Never record audio in the workplace without explicit employee consent. Post visible notices about surveillance.
• Establish data retention policies. Align retention schedules with both the 10-year requirement under the Cybersecurity Law (for service providers) and the data minimization principles of the 2024 Act.
• Train employees. Staff who handle recording equipment, call center operations, or surveillance systems must understand the consent requirements and penalties for non-compliance.
• Review cross-border data transfers. The 2024 Act restricts international transfers of personal data. Organizations sending recordings or personal data outside Cameroon must demonstrate adequate safeguards.