Romania Recording Laws: One-Party Consent Rules and Penalties (2026)

Overview of Recording Laws in Romania

Romania's recording and wiretapping laws are shaped by several layers of legislation. The Romanian Constitution, the Penal Code (Codul Penal, Law 286/2009), the Code of Criminal Procedure (Codul de Procedura Penala, Law 135/2010), the GDPR, and national implementing legislation all work together to define what is lawful when it comes to recording conversations, phone calls, and video.

The constitutional foundation comes from Article 28 of the Romanian Constitution, which states that "the secrecy of letters, telegrams and other postal communications, of telephone conversations and of any other legal means of communication is inviolable." Article 26 further protects the right to private and family life.

Despite these strong privacy protections, Romanian law operates on a one-party consent basis for private recordings. If you are a participant in a conversation, you may record it without obtaining the other party's permission. However, intercepting or recording a conversation to which you are not a party is a criminal offense under the Penal Code.

Penal Code Article 302: Violation of Correspondence Secrecy

The primary criminal provision governing unauthorized recording is Article 302 of the Romanian Penal Code (Violarea secretului corespondentei). This article establishes a graduated system of penalties depending on the nature and severity of the offense.

Paragraph 1: Correspondence Violations

Opening, removing, destroying, or retaining without legal right any correspondence addressed to another person, as well as disclosing the content of such correspondence without authorization, carries a penalty of 3 months to 1 year imprisonment or a fine.

This provision applies even when the correspondence was sent unsealed or was opened by mistake. The key element is the lack of authorization to access or disclose the contents.

Paragraph 2: Interception of Communications

The unlawful interception of a conversation or communication conducted by telephone or any electronic means of communication is punishable by 6 months to 3 years imprisonment or a fine.

This paragraph targets third-party interception. Recording or tapping into a phone call, email exchange, or electronic message to which you are not a party constitutes a criminal offense under this provision.

Paragraph 3: Aggravated Form for Public Officials

When the acts described in paragraphs 1 or 2 are committed by a public official who has a legal obligation to maintain professional secrecy and confidentiality, the penalty increases to 1 to 5 years imprisonment and the prohibition of exercising certain rights.

This aggravated form reflects the higher standard of trust placed in government employees and officials who handle sensitive information.

Paragraph 4: Unauthorized Disclosure

The unauthorized disclosure or transmission of the content of intercepted communications, including those discovered accidentally, carries a penalty of 3 months to 2 years imprisonment or a fine.

This provision means that even if you accidentally overhear or obtain a recorded conversation, sharing its contents without authorization is a criminal act.

Paragraph 5: Manufacturing Interception Equipment

Possessing or manufacturing equipment designed for the unauthorized interception of communications, without proper authorization, is punishable by 3 months to 2 years imprisonment or a fine.

Important Exceptions

Article 302 includes two critical exceptions where the act does not constitute an offense:

1. Crime detection: When the recording reveals the commission of a crime or contributes to proving the commission of a crime.
2. Public interest: When the recording exposes matters of public interest with significance for community life, and the public benefit of disclosure outweighs the harm caused to the injured party.

These exceptions provide important protections for whistleblowers and investigative journalists operating within Romanian territory.

Criminal Fine Calculation

Romania uses a day-fine system (zile-amenda) under Article 61 of the Penal Code. Fines are calculated by multiplying the number of day-fines (ranging from 30 to 400 days) by the value of each day-fine (ranging from 10 to 500 RON). The exact amount depends on the severity of the offense and the financial situation of the convicted person.

For offenses where a fine is an alternative to imprisonment of up to 2 years, the range is 120 to 240 day-fines. For more serious offenses, the range is 180 to 300 day-fines.

One-Party Consent: Recording Your Own Conversations

Romanian law permits a participant in a conversation to record that conversation without obtaining the consent of the other parties. This principle is supported by several legal foundations.

Law 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector, which implements the EU ePrivacy Directive, specifically states that listening, tapping, storage, or other kinds of interception or surveillance of communications are prohibited except when "these operations are carried out by the users who participate in that communication."

This means that if you are on a phone call, in a face-to-face meeting, or participating in a video conference, you have the legal right to record that interaction without informing the other participants.

However, there are important limitations on what you can do with such a recording:

• Distribution restrictions: Sharing or publishing the recording may violate data protection laws if it contains personal data.
• Purpose limitation: Under the GDPR, the recording should only be used for the specific purpose for which it was made.
• Proportionality: Courts will evaluate whether the recording was proportionate to a legitimate aim.

Phone Calls vs. In-Person Conversations

The one-party consent principle applies equally to phone calls and in-person conversations in Romania. There is no legal distinction between recording a telephone conversation you are part of and recording a face-to-face meeting you attend.

For phone calls, Law 506/2004 explicitly permits participants to record their own calls. For in-person conversations, the principle derives from the interpretation of Article 302 of the Penal Code, which criminalizes interception "without right." A participant exercising their right to record their own conversation is not acting "without right."

The same rules apply to digital communications. Recording a video call, voice message, or online meeting that you participate in is permissible under the same legal framework.

Court Admissibility of Recordings

The admissibility of recordings as evidence in Romanian courts received significant clarification in 2024. The Romanian High Court of Cassation and Justice (Inalta Curte de Casatie si Justitie, or ICCJ) issued Decision No. 39/2024 on September 16, 2024, establishing binding precedent on this issue.

The 2024 Landmark Ruling

The ruling arose from a request by the Bucharest Court of Appeal for clarification on whether phone recordings could serve as evidence in labor disputes. The High Court determined that recordings of telephone conversations between employees, or between employees and employer representatives, are admissible as evidence in workplace disputes, even when the recording was made without the consent or prior notification of the other party.

Conditions for Admissibility

The court established a two-part test for admissibility:

1. Indispensability: The recording must be essential for proving critical facts when no alternative evidence exists. The court emphasized that recordings should not be treated as routine evidence but rather as a last resort.
2. Proportionality: The use of the recording must be strictly proportional to protecting the party's legal rights. Courts must weigh the right to evidence against the right to privacy on a case-by-case basis.

The High Court noted that "phone recordings represent an infringement of the rules of social conduct" because labor relationships should be based on good faith. Privacy rights are not absolute, but any limitation must serve a legitimate purpose and be necessary and proportionate.

Criminal Proceedings

In criminal cases, recordings made by a participant in a conversation are generally admissible as documentary evidence. The Code of Criminal Procedure (Articles 138-145) addresses special surveillance methods that require judicial authorization, but these provisions apply to law enforcement activities, not to recordings made by private citizens who are participants in the conversation.

Law enforcement wiretapping requires a motivated authorization from a judge, issued at the request of a prosecutor. There must be reasonable suspicion regarding the preparation or commission of an offense, and the interception must be necessary for establishing the truth.

GDPR and Data Protection Requirements

As an EU member state, Romania is subject to the General Data Protection Regulation (GDPR), which took direct effect on May 25, 2018. The GDPR adds a layer of data protection obligations to any recording that captures personal data, which includes voices, images, and identifying information.

Law 190/2018: Romania's GDPR Implementation

Law 190/2018 was enacted to implement specific GDPR provisions at the national level. Published in the Official Gazette on July 26, 2018, this law addresses genetic data, biometric data, health data, national identification numbers, and employment-related data processing.

For recording purposes, Law 190/2018 is particularly important because it establishes the specific rules for electronic surveillance and monitoring in the workplace, leveraging Article 88 of the GDPR, which allows member states to provide more detailed rules for employee data protection.

ANSPDCP: The National Data Protection Authority

The National Supervisory Authority for Personal Data Processing (Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal, or ANSPDCP) is Romania's data protection regulator. ANSPDCP is responsible for enforcing both the GDPR and national data protection legislation.

ANSPDCP has the authority to:

• Investigate complaints about unlawful data processing, including unauthorized recordings
• Issue warnings and corrective measures
• Impose administrative fines
• Conduct audits and inspections

GDPR Penalties in Romania

GDPR violations in Romania can result in significant penalties:

• For public authorities and bodies: Fines ranging from RON 10,000 to RON 200,000 (approximately EUR 2,000 to EUR 40,000)
• For private entities: Up to EUR 20 million or 4% of annual global turnover, whichever is higher, for the most serious violations
• For less serious violations: Up to EUR 10 million or 2% of annual turnover

Romania ranks among the top EU countries by number of GDPR enforcement actions, with ANSPDCP having issued over 235 fines between 2019 and 2023.

Recording and GDPR Compliance

Any recording that captures personal data triggers GDPR obligations, including:

• Lawful basis: You must have a valid legal basis for processing (consent, legitimate interest, legal obligation, etc.)
• Transparency: Data subjects should generally be informed about the processing of their personal data
• Purpose limitation: Recordings can only be used for the stated purpose
• Data minimization: Only record what is necessary
• Storage limitation: Do not retain recordings longer than necessary
• Security: Implement appropriate technical and organizational measures to protect recorded data

The household exemption under Article 2(2)(c) of the GDPR may apply to purely personal recordings with no commercial or public purpose, but this exemption is narrow and should not be relied upon without careful consideration.

Workplace Recording and Employee Surveillance

Romania has some of the most detailed workplace surveillance regulations in the EU, established through Law 190/2018 and GDPR requirements.

Conditions for Lawful Workplace Monitoring

Employers who wish to implement electronic monitoring or video surveillance systems must satisfy four cumulative requirements:

1. Legitimate interest justification: The employer must demonstrate that their legitimate interests prevail over the interests, rights, and freedoms of the employees being monitored.
2. Complete prior notification: Employees must receive mandatory, complete, and explicit prior information about the monitoring system, including its scope, methods, and purposes.
3. Union or representative consultation: The employer must consult with the trade union or, where no union exists, with employee representatives before implementing any monitoring system. This is a consultation requirement, not a consent requirement.
4. Subsidiarity test: The employer must demonstrate that less intrusive alternatives have actually been tested and proved ineffective. Simply considering alternatives is not sufficient; they must have been genuinely attempted.

Audio Recording Restrictions

Workplace audio recording faces stricter scrutiny than video surveillance. Romanian law and ANSPDCP guidance indicate that audio recording should be avoided if the monitoring purpose can be achieved through less intrusive means such as video-only surveillance.

The ANSPDCP has fined organizations for implementing audio surveillance without adequate justification. A notable case involved a public transport company that was sanctioned for conducting real-time audio and video monitoring of drivers' cabins, which violated the principles of legality, transparency, and purpose limitation.

Data Retention Limits

Workplace surveillance data must be stored for a period proportional to the processing purpose, with a maximum retention period of 30 days unless a longer period is expressly required by law or justified by documented exceptional circumstances.

This 30-day limit applies to both video and audio recordings. After the retention period expires, recordings must be deleted unless they are needed for an ongoing legal proceeding or investigation.

Hidden Cameras Are Prohibited

It is strictly forbidden to install hidden surveillance cameras in the workplace. All cameras must be visible, and employees must be informed of their exact locations and operating schedules. This prohibition reflects the fundamental principle that monitoring must be transparent.

Video Surveillance and CCTV in Public Spaces

Public video surveillance in Romania is regulated through a combination of Law 333/2003 on the protection of objectives, goods, values, and persons, Government Decision 301/2012, and ANSPDCP Decision 52/2012.

Requirements for Public CCTV Systems

Organizations and authorities installing CCTV systems must comply with several requirements:

• Legitimate purpose: Surveillance must serve a justified purpose such as public safety, crime prevention, property protection, or traffic monitoring
• Police approval: Security plans that include CCTV cameras in public spaces must be approved by police authorities
• Signage: Clear and visible signs must inform the public that video surveillance is in operation
• Storage limits: Video data is typically limited to a maximum of 30 days, except when required for legal investigations
• GDPR compliance: All CCTV operations must comply with GDPR requirements, including data protection impact assessments for large-scale monitoring

Private Property Surveillance

Private citizens may install security cameras on their own property, but cameras must not capture public areas or neighboring properties without justification. Recording audio in addition to video on private property surveillance systems faces the same heightened scrutiny as workplace audio recording.

Recording in Public Places

Romania follows the general EU principle that photography and video recording in public spaces where there is no reasonable expectation of privacy is generally permitted. However, several restrictions apply:

• Privacy rights: Photographing or recording individuals in a way that infringes on their dignity or private life may give rise to civil liability under Article 26 of the Constitution
• Commercial use: Romania has limited freedom of panorama, restricted to non-commercial purposes under copyright law (Law 8/1996)
• Personal data: Publishing or distributing recordings of identifiable individuals triggers GDPR obligations
• Private conversations: Recording a private conversation between third parties in a public place still constitutes illegal interception under Article 302 of the Penal Code

The key distinction is between recording general public scenes and targeting specific individuals or their private conversations. The former is generally acceptable; the latter requires careful legal analysis.

Business Compliance Requirements

Businesses operating in Romania that record phone calls, meetings, or conduct video surveillance must establish comprehensive compliance programs.

Call Recording for Businesses

Businesses that record customer calls for quality assurance, training, or legal compliance purposes must:

• Inform callers at the beginning of the call that the conversation may be recorded
• Provide a clear explanation of the purpose of the recording
• Offer callers the option to proceed without recording where feasible
• Maintain recordings only for the period necessary to fulfill the stated purpose
• Implement appropriate security measures to protect recorded data
• Conduct a data protection impact assessment if recording is conducted on a large scale

Commercial Electronic Communications

Law 506/2004 also governs commercial electronic communications. Unsolicited commercial communications via automated systems, fax, email, or other electronic means are prohibited unless the subscriber or user has given prior express consent. An exception exists for direct marketing of similar products or services to existing customers.

Record-Keeping Obligations

Businesses must maintain records of:

• The legal basis for each type of recording activity
• Data protection impact assessments where required
• Consent records where consent is the legal basis
• Retention schedules and deletion logs
• Employee training documentation on recording policies

Law Enforcement Surveillance

Law enforcement agencies in Romania must obtain judicial authorization before conducting surveillance activities. The Code of Criminal Procedure (Articles 138-145) establishes a comprehensive framework for special surveillance methods.

Types of Authorized Surveillance

Article 138 defines the following special surveillance methods:

• Interception of communications or any type of remote communication
• Access to a computer system
• Video, audio, or photographic surveillance
• Localization or tracking through technical means
• Obtaining financial transaction data
• Retention, delivery, or searching of postal items
• Use of undercover investigators and collaborators
• Supervised delivery
• Obtaining traffic and localization data from electronic communications providers

Judicial Authorization Requirements

Interception of communications requires a motivated authorization from a judge, issued at the request of a prosecutor. The authorization must be based on data or reasonable suspicion regarding the preparation or commission of an offense for which criminal prosecution is conducted ex officio.

The authorization is issued by the president of the court having jurisdiction to judge the case in first instance. Wiretap authorizations have a maximum initial duration, with possibilities for extension under court supervision.

Constitutional Safeguards

All law enforcement surveillance in Romania is subject to constitutional oversight. Article 28 of the Constitution permits limitations on communication secrecy only through judicial order, ensuring that surveillance powers are exercised within a system of checks and balances.

Practical Summary Table

Situation	Legal Status	Key Requirements
Recording your own phone call	Legal (one-party consent)	Must be a participant in the call
Recording your own in-person conversation	Legal (one-party consent)	Must be a participant in the conversation
Recording a third-party conversation	Illegal	Punishable by 6 months to 3 years imprisonment
Workplace video surveillance	Legal with conditions	Prior notice, union consultation, 30-day retention
Workplace audio surveillance	Restricted	Must prove less intrusive methods failed
Public CCTV	Legal with conditions	Police approval, signage, GDPR compliance
Recording in public spaces	Generally legal	Must not target private conversations
Business call recording	Legal with notice	Must inform callers and state purpose
Sharing a recording publicly	Restricted	Must comply with GDPR and privacy laws
Law enforcement wiretapping	Legal with court order	Requires judicial authorization

Practical Advice for Recording in Romania

• Always be a participant. The safest legal position is to only record conversations you are directly involved in. Third-party interception is a criminal offense.
• Consider the purpose. Even when recording is legal, think about why you are recording and how you will use it. Courts evaluate proportionality.
• Protect your recordings. If you record a conversation for your own protection, keep it secure and do not distribute it unnecessarily.
• Businesses need policies. If your organization records calls or uses surveillance, develop comprehensive policies that address notification, consent, retention, and security.
• Respect the 30-day rule. Workplace and CCTV recordings should not be retained beyond 30 days unless legally justified.
• Know the exceptions. Recordings that reveal criminal activity or matters of genuine public interest may be protected under Article 302's exceptions.
• Seek legal counsel. Romanian recording law involves multiple overlapping statutes. For specific situations, consult a Romanian lawyer familiar with criminal, privacy, and data protection law.