Mexico Recording Laws: One-Party Consent Rules and Penalties (2026)

Last updated: March 21, 2026

Mexico takes a clear position on recording: if you are part of a conversation, you have the legal right to record it. You do not need to inform the other parties. But the moment a third party tries to intercept communications they are not part of, Mexico's constitutional protections kick in hard — requiring a federal judicial order and strict legal oversight.

This guide covers everything you need to know about Mexico's recording laws in 2026, including the constitutional foundation, the federal statutes, how state laws interact with federal rules, workplace and business compliance obligations, and what happens when the law is broken.

The Constitutional Foundation: Article 16

Mexico's approach to communications privacy starts at the constitutional level. Article 16 of the Constitución Política de los Estados Unidos Mexicanos (CPEUM) establishes the inviolability of private communications.

The relevant paragraph states, in translation: "Private communications are inviolable. Only a federal judge, upon application of the competent federal authority or competent federal public prosecutor's office, may authorize their interception."

This constitutional provision has several important implications.

First, it protects communications from government surveillance without judicial oversight. Any government agency seeking to intercept private communications must obtain a written judicial order from a federal judge.

Second, the protection applies to third-party interception. Mexican constitutional doctrine and courts have consistently held that when a person records their own participation in a conversation, no "interception" is occurring under Article 16. The constitutional prohibition targets outside surveillance, not participant documentation.

Third, the protections extend to all forms of communication — telephone calls, text messages, emails, video calls, and in-person conversations in private spaces.

What Article 16 Does Not Prohibit

Article 16 does not prohibit a participant in a conversation from recording that conversation. Mexican legal doctrine treats a participant's own recording as an exercise of autonomy over information they are already lawfully receiving, not as an invasion of another party's communications.

This distinction is the legal basis for Mexico's effective one-party consent framework. It means that recording a phone call you are part of, capturing a meeting you are attending, or documenting an in-person conversation you are participating in is legal under federal constitutional doctrine.

Federal Statutes Governing Recording

Código Nacional de Procedimientos Penales (CNPP)

The Código Nacional de Procedimientos Penales — Mexico's unified national code of criminal procedure, enacted in 2014 — governs how law enforcement may conduct communications interception as an investigative technique.

Article 291 defines intervención de comunicaciones privadas (interception of private communications) as a special investigative technique that may only be authorized by a federal judge. The authorization is available only for serious federal crimes listed in Article 291 itself, which include organized crime, kidnapping, human trafficking, drug trafficking, arms trafficking, and corruption offenses.

Article 291 Bis (added in 2016) establishes additional procedural safeguards for real-time interception requests, requiring that the requesting authority demonstrate the existence of reasonable grounds to suspect the target of a specific listed offense, that other investigative methods have been tried or would be insufficient, and that the communications to be intercepted are directly related to the alleged offense.

Article 292 sets time limits on authorizations. An initial judicial authorization is valid for up to sixty days and may be renewed, but the total duration may not exceed six months absent extraordinary circumstances authorized by a senior federal judge.

These CNPP provisions apply to law enforcement interception. They do not regulate private participant recording.

Código Penal Federal (CPF)

The Código Penal Federal (CPF) — Mexico's federal criminal code — contains the criminal penalties for unauthorized communications interception.

Article 167, paragraph IX criminalizes the unauthorized interception of private communications. A person who uses any technical means to intercept, interfere with, or record private communications without the consent of the parties and without judicial authorization commits a federal crime. Penalties range from six to twelve years in prison plus fines calculated as a multiple of the daily minimum wage.

Article 210-bis addresses the violation of secrecy of communications. This provision makes it illegal to reveal, divulge, or publish the content of private communications obtained without consent or judicial authorization. Penalties include one to five years in prison. This article is particularly relevant for journalists or individuals who obtain and publish wiretapped content.

Article 177 of the CPF addresses the unlawful use of communications systems to intercept data transmissions. This article is often applied in cases involving digital interception, hacking into communications systems, or unauthorized access to electronic mail.

Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP)

The Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), enacted in 2010, governs how private parties — businesses and individuals — collect, process, and store personal data. Audio recordings of conversations are personal data under this law.

Key obligations under the LFPDPPP for those recording communications include:

• Notice (Aviso de Privacidad): Any entity that records communications for business purposes must provide a privacy notice to the individuals being recorded, explaining who is collecting the data, for what purpose, and how it will be used.
• Consent: Ordinary personal data (including audio recordings of conversations) requires at least implicit consent after notice. Sensitive personal data requires express consent.
• Purpose limitation: Recordings may only be used for the purpose stated in the privacy notice.
• Security: Recordings must be protected by appropriate technical, administrative, and physical security measures.
• INAI enforcement: The Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI) enforces the LFPDPPP and can impose sanctions ranging from 100 to 320,000 times the daily minimum wage for violations.

The LFPDPPP creates a regulatory layer on top of the criminal law framework. A business call center may be legally permitted to record calls under the one-party framework, but it must still comply with LFPDPPP notice and consent requirements to avoid regulatory sanctions.

Federal Telecommunications and Broadcasting Law (LFTR)

The Ley Federal de Telecomunicaciones y Radiodifusión (LFTR), enacted in 2014, requires telecommunications carriers to maintain technical infrastructure capable of supporting lawful interception requests from judicial authorities. Carriers must retain certain metadata (call records, subscriber data) for periods specified by law to support criminal investigations.

The LFTR does not directly regulate private participant recording, but it reinforces the judicial authorization requirement for any carrier-assisted interception.

One-Party Consent in Practice

Phone Calls

A person who is a party to a telephone call may record that call without notifying the other parties. This applies whether the call is a landline call, a mobile call, or a VoIP call conducted through apps such as WhatsApp, Zoom, or Microsoft Teams.

Mexican courts and legal commentators have consistently treated participant recording as outside the scope of the constitutional interception prohibition. The recorded party's privacy interest in the conversation is limited because they chose to communicate with the recorder.

The recording may be used as evidence in civil, labor, or criminal proceedings, subject to the general rules of evidence admissibility. Courts have admitted participant recordings as documentary evidence in a wide range of cases, including labor disputes, contract disputes, and family law matters.

In-Person Conversations

The same one-party framework applies to in-person conversations. A participant in a face-to-face meeting, whether in a private location or a public space, may record that conversation without the knowledge or consent of other participants.

The location matters for context but not for the basic legality of participant recording. Recording a conversation in a private home, an office, a restaurant, or a public park is equally permissible for participants under federal law.

Conversations in Public Spaces

Recording conversations or activities in public spaces where no reasonable expectation of privacy exists is generally unrestricted. This includes recording police officers exercising their public duties, public meetings, protests, court proceedings in open session, and interactions with public officials in public spaces.

Mexico's constitutional framework for press freedom and the right to information supports the right to record in public spaces. The Suprema Corte de Justicia de la Nación (SCJN) has affirmed this principle in multiple decisions addressing the rights of journalists and citizens to document public events.

Recording public officials in the performance of their duties has additional protection under Mexico's transparency laws, including the Ley General de Transparencia y Acceso a la Información Pública.

Third-Party Interception: Strict Prohibition

While participant recording is broadly lawful, third-party interception — capturing communications you are not a party to — is severely restricted and criminalized.

What Constitutes Third-Party Interception

Third-party interception includes:

• Installing a listening device (bug) in a location to capture others' conversations
• Tapping a telephone line to intercept calls you are not a party to
• Accessing voicemail, email, or text messages without authorization
• Using software to intercept data transmissions on a network without consent
• Hiring a private investigator to wiretap another person's communications

All of these acts require a judicial authorization under Article 16 of the Constitution and the CNPP if done by law enforcement. If done by a private party without authorization, they constitute federal crimes under CPF Article 167.

Judicial Authorization Requirements

For law enforcement agencies, obtaining judicial authorization for communications interception requires demonstrating:

1. A nexus to a listed serious federal offense (organized crime, kidnapping, drug trafficking, etc.)
2. Probable cause to believe the target is involved in the alleged offense
3. That other investigative methods are insufficient or have been tried
4. Specific identification of the communications to be intercepted
5. A defined time period not to exceed sixty days initially

The authorization is reviewed by a federal judge. Mexico's constitutional reform of 2008 created a system of federal judges (jueces de control) specifically empowered to oversee investigative techniques including wiretapping requests.

Private Party Interception

Private individuals and businesses have no legal mechanism to obtain judicial authorization for interception. The CNPP authorization process is available only to designated law enforcement authorities. A private citizen who installs a recording device to capture a third party's conversations, or who intercepts electronic communications they are not a party to, commits a federal crime under CPF Article 167 regardless of their motivation.

This applies even in domestic situations. A spouse who intercepts the other spouse's telephone calls without consent commits a federal crime under the CPF.

State Penal Codes and Federal Primacy

Mexico's legal system is federal. The federal criminal framework — the CPF and CNPP — is dominant for communications interception offenses.

How State Laws Interact

Mexico's 31 states plus Mexico City each have their own state penal codes. Some state codes contain provisions that address privacy violations, unauthorized recording, or invasion of privacy that may apply to conduct not covered by the CPF.

However, the key principle is federal primacy in communications law. Because communications interception is a federal matter under Article 16 of the Constitution and the federal criminal codes, federal law governs the most serious recording violations.

State Variations Worth Knowing

Mexico City (CDMX): The Código Penal para el Distrito Federal contains provisions addressing the recording of images and sounds that violate a person's privacy (Article 226 Bis). This provision addresses non-consensual recording of intimate images and their distribution — the "revenge porn" scenario — and carries penalties of six months to four years in prison.

Jalisco: Jalisco's state penal code includes provisions targeting unauthorized recording in private spaces, with penalties that may supplement federal prosecution in egregious cases.

Nuevo León: As a major business hub, courts in Nuevo León have addressed workplace recording disputes with consistency, generally upholding the federal one-party participant framework for employee recordings made in self-defense.

General principle: When a state law imposes stricter privacy protections than federal law, the stricter standard may apply to conduct that falls within state jurisdiction. But for telephone interception and electronic communications, federal law and federal courts are the primary forum.

Workplace Recording in Mexico

Employees Recording Conversations

An employee who is a participant in a workplace conversation — with a supervisor, a colleague, or a client — may record that conversation under the federal one-party framework. Mexican labor courts have admitted such recordings as evidence in wrongful termination cases, discrimination claims, and workplace harassment proceedings.

The guiding principle from Mexican labor law jurisprudence is that an employee recording a conversation they participate in is not violating any law, and the recording may be used to protect their labor rights. This principle aligns with Article 6 of Mexico's Constitution, which protects the right to information as a fundamental human right.

Employer Recording and Monitoring

Employers in Mexico face a more complex framework when recording employees. Several competing legal considerations apply.

Labor Law obligations: The Ley Federal del Trabajo (LFT) does not explicitly authorize or prohibit employer recording, but labor tribunals have applied the principle that employees retain a reasonable expectation of privacy in personal communications. Covert recording of employees in personal spaces (break rooms, restrooms) would be a violation of privacy rights.

LFPDPPP compliance: Employer recording programs are subject to the LFPDPPP. Employees must be provided with a privacy notice explaining that calls, meetings, or activities may be recorded, for what purpose, and how the data will be protected. Express consent may be required for continuous monitoring programs.

Legitimate business purpose: Employers may lawfully record customer-facing calls for quality assurance, training, and compliance purposes provided they comply with LFPDPPP notice requirements and inform customers at the start of calls that the conversation may be recorded.

CCTV and video surveillance: Installation of cameras in the workplace is permitted for security and productivity monitoring purposes, subject to restrictions. Cameras may not be installed in private spaces (restrooms, changing areas, medical areas) and employees must be notified of their presence. Covert surveillance not disclosed to employees creates significant legal exposure under both the CPF and the LFPDPPP.

Call Center and Customer Service Recording

Call centers operating in Mexico must comply with LFPDPPP requirements. The standard practice — announcing at the start of a call that it may be recorded for quality and training purposes — satisfies both the notice requirement and the one-party consent framework. Customers who continue the call after the notice are deemed to have implicitly consented to the recording.

Business-to-business calls in commercial contexts follow the same rules. Recording a business negotiation you are a party to is lawful; recording a competitor's internal call you are not a party to is a federal crime.

Recording in Specific Contexts

Legal Proceedings and Evidence

Recordings made by participants are generally admissible as evidence in Mexican civil, criminal, labor, and administrative proceedings. Courts treat participant recordings as documentary evidence.

The Suprema Corte de Justicia de la Nación has addressed the admissibility of participant recordings in multiple tesis (precedents). The general position is that a recording made by a participant does not violate constitutional rights because the recording party consented to their own participation in the conversation, and the other party's privacy interest in the conversation extends only to protection against third-party interception.

Recordings must be authenticated — demonstrated to be genuine and unaltered — to be given full evidentiary weight. Chain of custody, metadata, and technical authentication play important roles in highly contested proceedings.

Journalism and Public Interest Recording

Mexico's constitutional framework strongly supports press freedom and the right to inform. Journalists enjoy broad protection to record public officials, document public events, and capture information of public interest.

The Ley para la Protección de Personas Defensoras de Derechos Humanos y Periodistas provides mechanisms for protecting journalists who document corruption, human rights abuses, and matters of public concern.

Recording public officials in the performance of their duties — police officers, government employees, elected officials — is protected activity under both the right to information and press freedom guarantees. Any attempt to obstruct recording of public officials performing public functions may itself constitute an abuse of authority under the CPF.

Minors

Recording conversations involving minors requires particular care. Mexico's Ley General de los Derechos de Niñas, Niños y Adolescentes protects minors' right to privacy and dignity. Publishing or distributing recordings of minors without parental consent can give rise to both civil liability and, in egregious cases, criminal prosecution. Courts in Mexico take a particularly protective view toward minors in privacy disputes.

Immigration and Cross-Border Contexts

Travelers entering Mexico from the United States or Canada should be aware that Mexico's recording laws apply within Mexican territory. A recording that is lawful under U.S. or Canadian law is judged by Mexican law if the recording occurs in Mexico or if the communication is intercepted in Mexico.

The practical rule for cross-border calls: the law of the jurisdiction where the recording occurs governs legality. Participant recording in Mexico is governed by Mexican law regardless of where the other party is located.

Penalties for Illegal Recording

Criminal Penalties

Unauthorized third-party interception under CPF Article 167 (paragraph IX) carries:

• Six to twelve years in prison for the underlying interception
• Fines from 300 to 2,000 times the daily minimum wage (approximately MX$38,600 to MX$257,000 based on the 2026 Mexico City minimum wage)
• Aggravated penalties if the interception is conducted by a public official, if the intercepted content is subsequently published or used for extortion, or if organized crime is involved

Disclosure or publication of illegally intercepted communications under CPF Article 210-bis carries:

• One to five years in prison
• Fines of 100 to 1,000 times the daily minimum wage

LFPDPPP Administrative Sanctions

INAI can impose administrative sanctions for violations of the LFPDPPP, including improper recording by businesses:

• 100 to 160,000 times the daily minimum wage for most violations
• 200 to 320,000 times the daily minimum wage for violations involving sensitive personal data
• Sanctions doubled for repeat violations or intentional misconduct

INAI has become increasingly active in enforcement, particularly against businesses that record customer communications without adequate notice frameworks.

Civil Liability

Victims of illegal recording may also pursue civil claims for moral damages (daño moral) under the Código Civil Federal. Courts have awarded damages in cases involving unauthorized recording of private conversations, particularly when the recordings were used for extortion, reputational harm, or domestic abuse purposes.

Business Compliance Guide

If your business records communications in Mexico, a compliance program should include the following elements.

Privacy Notice Requirements

Every business that records calls or meetings must have a privacy notice (aviso de privacidad) that discloses:

• The identity and contact information of the data controller
• The purposes for which audio recordings will be processed
• How long recordings will be retained
• With whom recordings may be shared
• The mechanisms through which individuals may exercise their ARCO rights (access, rectification, cancellation, and objection)

The privacy notice must be made available before or at the moment of collection. For call recordings, this typically means a recorded announcement at the start of the call.

Consent Mechanisms

For standard customer service recordings, implied consent after clear notice (the recorded announcement) is generally sufficient. For more sensitive recording programs — covert workplace monitoring, biometric voice data, or long-term surveillance — express written consent may be required.

Employee Policies

Update employment contracts and workplace policies to include:

• Clear disclosure of any recording programs
• Explanation of the purposes (quality assurance, compliance, security)
• Employee acknowledgment and consent
• Restrictions on unauthorized recording by employees of confidential business information

Data Retention and Security

Establish documented retention schedules for recordings — how long they are kept, who has access, and how they are deleted. Implement encryption and access controls. Conduct regular security risk assessments, as required by LFPDPPP regulations.

Cross-Border Data Transfers

If recordings made in Mexico are transferred to servers or personnel outside Mexico — for example, to a parent company in the United States or Europe — the cross-border transfer provisions of the LFPDPPP apply. Adequate legal mechanisms (data transfer agreements, standard contractual clauses) must be in place.

Summary: Key Rules at a Glance

Scenario	Legal Status	Key Requirement
Recording a call you are a party to	Legal	None — participant recording is permitted
Recording an in-person conversation you participate in	Legal	None — participant recording is permitted
Recording a public official performing public duties	Legal	Strong constitutional protection
Third-party interception of telephone calls	Illegal without judicial order	Requires federal judicial authorization
Installing a listening device to record others	Illegal without judicial order	Federal crime under CPF Art. 167
Business recording of customer calls	Legal with LFPDPPP compliance	Privacy notice required; implied consent after notice
Employer covert surveillance of employees	Restricted — legal limits apply	LFPDPPP notice required; no surveillance of private spaces
Publishing illegally intercepted recordings	Illegal	Federal crime under CPF Art. 210-bis
Cross-border recording (participant in Mexico)	Governed by Mexican law	One-party framework applies; LFPDPPP for business use