Portugal Recording Laws: All-Party Consent Rules and Penalties (2026)

Overview of Recording Laws in Portugal

Portugal takes a hard line on unauthorized recording. The country's legal framework treats private conversations, phone calls, and even photographs taken without permission as matters of criminal law rather than mere civil disputes. The constitutional foundation sits in Article 26 of the Portuguese Constitution, which guarantees every person the right to their image, word, and the privacy of their personal and family life. Article 34 goes further, declaring that correspondence and all other forms of private communication are inviolable, with only judicial authorities permitted to order access in criminal proceedings.

These constitutional principles flow down through the Código Penal (Criminal Code), the Código do Trabalho (Labour Code), and Law 58/2019, which implements the EU's General Data Protection Regulation (GDPR). Together, these statutes make Portugal one of the strictest countries in Europe for recording laws.

For anyone doing business in Portugal, traveling through the country, or communicating with Portuguese residents, the rule is simple: get consent from everyone involved before you press record. Anything less risks criminal prosecution.

Article 199 of the Código Penal: The Core Prohibition

The central statute governing recording in Portugal is Article 199 of the Código Penal, titled "Gravações e Fotografias Ilícitas" (Unlawful Recordings and Photographs). It sits within Chapter VIII of the Criminal Code, which covers crimes against personal legal interests.

What Article 199 Prohibits

Paragraph 1 of Article 199 targets audio recordings. It criminalizes two distinct acts:

• Recording words spoken by another person that are not intended for public dissemination, without their consent. This applies even when the words are spoken directly to the person doing the recording.
• Using or permitting others to use such recordings, even when the recording itself was lawfully made.

Paragraph 2 extends the same protections to visual recordings. It criminalizes:

• Photographing or filming another person against their will, including at events where the person lawfully participated.
• Using or permitting the use of such photographs or films, even when they were obtained lawfully.

The distinction in the second point matters. Even if you lawfully recorded someone (with their original consent, for instance), using that recording later in a way they object to can constitute a separate criminal offense.

Penalties Under Article 199

Both audio and visual recording violations carry the same penalty: imprisonment of up to one year or a fine of up to 240 daily rates.

The daily rate system (taxa diária) works differently from flat fines. Under Article 47 of the Código Penal, each daily rate is set by the judge between €5 and €500, based on the offender's economic situation and personal obligations. At the maximum, that translates to a fine of up to €120,000. At the minimum, it is €1,200. Courts may also allow installment payments over up to two years.

Aggravated Penalties

Paragraph 3 of Article 199 incorporates Articles 197 and 198 of the Código Penal by reference. Article 197, as amended by Lei 44/2018, increases the base penalties by one-third in their minimum and maximum limits when the offense is committed:

• For profit, reward, or enrichment, or to cause harm to another person or to the state.
• Through mass media, the internet, or any other means of widespread public dissemination.

This means that posting an unauthorized recording on social media or sending it through a messaging app could push the maximum prison sentence from one year to sixteen months.

Separately, Article 192 of the Código Penal punishes anyone who disseminates intimate recordings (particularly those involving family or sexual life) through media, the internet, or other public channels with up to five years in prison.

Complaint-Based Prosecution

Under Article 198, prosecution for recording offenses generally requires a formal complaint from the victim. Portuguese authorities do not typically initiate these cases on their own. The victim must file a complaint (queixa) with police or the Public Prosecutor to trigger an investigation.

Phone Recording vs. In-Person Recording

Phone Calls

Recording a phone call in Portugal without the consent of all parties on the line violates both Article 199 of the Código Penal and Article 194, which specifically addresses violations of correspondence and telecommunications. Article 194 carries the same base penalty of up to one year in prison or a fine of up to 240 daily rates.

The Portuguese Constitution's Article 34 explicitly prohibits interference with telecommunications by public authorities except through judicial order in criminal proceedings. The protection extends beyond the content of the call to metadata including the time, duration, and location of the communication.

Law enforcement wiretapping requires authorization from a criminal judge and must be connected to an active criminal investigation. Portuguese police cannot unilaterally decide to intercept or record calls. This framework was reinforced by Law 109/2009 (the Cybercrime Law), which transposed EU standards on information system security and electronic evidence into Portuguese law.

In-Person Conversations

Article 199's prohibition on recording spoken words applies to any private conversation, whether face-to-face or over a phone line. The critical factor is not the medium but whether the words were intended for public dissemination. A private conversation between two people at a restaurant is protected. A speech delivered to an audience at a public event is not.

Portuguese courts have consistently held that the right to one's own words (direito à palavra) is a fundamental personal right. Even when someone speaks directly to you, recording those words without telling them constitutes a criminal act. This is a broader prohibition than what exists in many other European countries, where one-party consent is sufficient.

Recording in Public Places

Portuguese law does not create a blanket exception for recording in public spaces. While there is no reasonable expectation of privacy for events visible to anyone passing by, the protections of Article 199 can still apply.

Article 26 of the Constitution protects the right to one's image even in public settings. Portuguese courts have recognized that certain events occurring in public can still fall within the scope of private life protections. Photographing or filming a specific individual in public without their consent, particularly if done in a way that targets them personally, may violate Article 199, paragraph 2.

Street photography and general filming of public scenes fall into a gray area. The practical guidance from Portuguese legal analysis is that filming a crowd or a public scene is generally permissible, but zooming in on a specific person or recording their private conversation in a public setting crosses the line.

Recording Police and Public Officials

Portugal approved Law 95/2021 on December 29, 2021, which authorizes police body cameras (câmaras portáteis de uso individual) for the PSP (Public Security Police) and GNR (National Republican Guard). Officers may activate recording when a criminal offense is being committed, when facing actual aggression, or when encountering disobedience to lawful orders. The implementing regulations were detailed in Decree-Law 2/2023.

For civilians filming police, Portuguese law does not contain a specific statute prohibiting it. However, Article 199 still applies. Recording an officer's voice or image without consent during a private interaction (for example, during a traffic stop conversation) could technically violate the law. Recording officers performing duties in a public setting where they have no expectation of privacy is generally on firmer legal ground, though this remains an area where Portuguese case law is still developing.

Workplace Recording and Surveillance

The Código do Trabalho (Labour Code)

Article 20 of the Portuguese Labour Code sets the foundational rule: employers cannot use remote surveillance equipment to monitor employee work performance. Video surveillance at the workplace is only lawful when its purpose is protecting the safety of people and property, or when the specific nature of the work activity justifies it.

When cameras are installed, the employer must inform workers and post visible notices stating either "Este local encontra-se sob vigilância de um circuito fechado de televisão" (This location is under CCTV surveillance) or a longer version specifying that image and sound recording is taking place.

Violation of the ban on performance monitoring is classified as a "very serious" labor infraction (contraordenação muito grave). Failure to post proper notices is a "minor" infraction.

Audio in the Workplace

Article 19, paragraph 4 of Law 58/2019 imposes a near-total ban on audio capture through video surveillance systems. Sound recording is prohibited except in two narrow circumstances:

• During periods when the premises are closed, meaning no workers are present in the monitored area.
• With prior authorization from the CNPD (Comissão Nacional de Proteção de Dados, Portugal's national data protection authority).

In practice, this means that even when an employer has a lawful video surveillance system for security purposes, the microphones must be turned off during working hours. The CNPD rarely grants exceptions.

Off-Limits Areas

Law 58/2019 also prohibits cameras (with or without audio) in specific workplace areas:

• Break rooms and rest areas
• Locker rooms and changing areas
• Restrooms
• Gymnasiums

Use of Surveillance Footage

Even lawfully obtained workplace surveillance footage faces restrictions on how it can be used. Under the Labour Code, recorded images and personal data from video systems may only be used in criminal proceedings. They may also be used for disciplinary purposes, but only to the extent that the footage is relevant to criminal proceedings.

Retention Limits

The CNPD mandates that surveillance footage must be deleted within 30 days. After that 30-day window, the data must be erased within 48 hours, unless it has been flagged for use in criminal proceedings.

GDPR and CNPD Enforcement

Law 58/2019: Portugal's GDPR Framework

Law 58/2019 of August 8 is Portugal's national law implementing the EU General Data Protection Regulation. It gives the CNPD enforcement authority over data processing activities in Portugal, including audio and video recordings that capture personal data.

Key provisions relevant to recording:

• Article 19 governs video surveillance, including the audio capture ban discussed above.
• The law classifies the content of electronic communications as "particularly sensitive" personal data, echoing protections in the Constitution and the EU Charter of Fundamental Rights.

CNPD Enforcement Powers

The CNPD has the authority to investigate data protection violations, issue orders, and impose administrative fines under the GDPR framework. GDPR fines can reach up to €20 million or 4% of annual global turnover, whichever is higher, for the most serious violations.

In Portugal specifically:

• The CNPD has imposed fines such as the €400,000 penalty against a hospital for data access violations (Portugal's first GDPR fine).
• A €4.3 million fine was issued against the National Statistics Institute (INE) for census data processing violations.
• The Municipality of Lisbon was fined €1.25 million for processing personal data of activists.

The CNPD announced in its 2025 activity plan a commitment to increasing the efficiency of sanctioning actions, signaling a more aggressive enforcement posture going forward.

Call Recording Under GDPR

The CNPD has issued specific guidance on call recording by businesses. In Deliberação 2019/21, the authority established that:

• Phone call recordings constitute personal data subject to GDPR protections.
• Recordings for general business purposes may be retained for a maximum of 90 days.
• Recordings specifically for quality monitoring may only be kept for 30 days.
• Data subjects have the right to access their own call recordings under GDPR Article 15.

Businesses that record customer calls must obtain explicit, informed consent under GDPR Article 7. A generic message that "this call may be recorded" is not sufficient under Portuguese and EU standards. Consent must be freely given, specific, and unambiguous.

Can Recordings Be Used as Evidence in Court?

Portuguese law creates a tension between the criminal prohibition on unauthorized recording and the potential evidentiary value of such recordings. The general rule is that illegally obtained evidence is inadmissible.

Article 32(8) of the Constitution states that evidence obtained through torture, coercion, interference with private life, correspondence, or telecommunications is null and void. This constitutional prohibition makes it extremely difficult to introduce unauthorized recordings in Portuguese courts.

However, Portuguese case law has carved out narrow exceptions. Courts have been more willing to admit recordings when:

• The person who made the recording was an active participant in the conversation (not a hidden third party).
• The recording was made without provocation, deceit, or coercion.
• The conversation took place in a public setting.
• If in a private setting, the property owner authorized the recording.

Even in these circumstances, the recording itself may still constitute a criminal act under Article 199. The question of admissibility is separate from the question of criminal liability. You could theoretically be convicted of making an illegal recording while the content of that recording is admitted as evidence in a different case.

The Tribunal da Relação de Coimbra has addressed this tension in several rulings, consistently holding that the right to one's words and image has the structure of a fundamental freedom. Gathering evidence does not, by itself, exclude the criminal nature of an unauthorized recording.

Business Compliance Checklist

Companies operating in Portugal need to navigate multiple overlapping legal requirements. Here is what compliance looks like in practice:

For Call Centers and Phone-Based Businesses

• Obtain explicit, informed consent before recording any call. A beep tone alone is not sufficient.
• Clearly state the purpose of the recording and the legal basis for processing the data.
• Offer callers the option to decline recording. If they decline, you must still provide the service.
• Delete general call recordings within 90 days and quality monitoring recordings within 30 days.
• Provide callers access to their recordings upon request under GDPR Article 15.
• If subject to anti-money laundering rules, retain records for seven years as required by Portuguese AML legislation.

For Offices and Physical Premises

• CCTV is permitted only for protecting people and property, not for monitoring employee performance.
• Audio recording through surveillance systems is prohibited during operating hours unless the CNPD grants specific authorization.
• Post visible notices at all monitored locations.
• Inform all employees in advance about the existence and purpose of surveillance equipment.
• Never install cameras in break rooms, restrooms, locker rooms, or rest areas.
• Delete all footage within 30 days (plus 48 hours for the deletion process).
• Maintain records of your data processing activities as required by GDPR Article 30.

For Media and Journalism

Portuguese courts have increasingly recognized public interest defenses for journalists. The European Court of Human Rights has ruled against Portugal in cases where fines were imposed on journalists for broadcasting material of public interest, finding that such penalties had a chilling effect on press freedom. The Portuguese Supreme Court has also acquitted journalists charged with breaching judicial secrecy when their reporting served significant public interest.

Still, journalists in Portugal operate without a clear statutory exemption for recording. The public interest defense exists through case law rather than black-letter law, making it an unreliable shield in advance of publication.

Summary of Penalties

Offense	Statute	Maximum Prison	Maximum Fine
Recording private words without consent	Art. 199(1) CP	1 year	240 daily rates (up to €120,000)
Using recordings without consent	Art. 199(1) CP	1 year	240 daily rates (up to €120,000)
Photographing/filming without consent	Art. 199(2) CP	1 year	240 daily rates (up to €120,000)
Intercepting telecommunications	Art. 194(2) CP	1 year	240 daily rates (up to €120,000)
Invasion of privacy via recording	Art. 192(1) CP	1 year	240 daily rates (up to €120,000)
Dissemination of intimate recordings	Art. 192 CP	5 years	N/A
Aggravated offense (profit/media)	Art. 197 CP	+1/3 of base	+1/3 of base
GDPR violations	GDPR / Lei 58/2019	N/A	Up to €20M or 4% of turnover