Turkey Recording Laws: All-Party Consent Rules and Penalties (2026)

How Turkey Classifies Recording Consent

Turkey operates under an all-party consent standard for private recordings. Every person involved in a conversation must agree before anyone may lawfully record it. This rule applies to phone calls, in-person discussions, video chats, and any other form of private communication.

The legal foundation sits in the Turkish Penal Code (Turk Ceza Kanunu, or TCK), Law No. 5237, enacted September 26, 2004. Articles 132 through 136, grouped under the heading "Offenses Against Privacy and the Secrecy of Private Life" (Ozel Hayata ve Hayatin Gizli Alanina Karsi Suclar), set out the criminal prohibitions. The full text of the code is published on Turkey's official legislation database at mevzuat.gov.tr.

Unlike one-party consent countries such as the United States (at the federal level) or Brazil, Turkey does not permit a participant to secretly record their own conversations. The mere act of pressing record without telling the other side is enough to trigger criminal liability.

TCK Article 132: Violating the Confidentiality of Communication

Article 132 of the Turkish Penal Code targets interference with private communications carried through technological means. This covers telephone calls, emails, text messages, fax transmissions, and internet-based messaging platforms.

Base Offense

Anyone who violates the confidentiality of communications between persons faces 1 to 3 years in prison. The law requires that the communication travel through a recognized medium. Face-to-face conversations do not fall under Article 132. Those are handled separately under Article 133.

Recording Aggravator

When the violation of communication confidentiality involves recording the contents, the penalty is increased by one fold. In practical terms, this doubles the sentence range. A person who records a phone call they were not authorized to record faces an effective range of 2 to 6 years.

Disclosure of Communication Contents

Article 132(3) addresses a separate but related offense. Anyone who illegally discloses the contents of communications between persons faces 2 to 5 years in prison. This applies even if the person doing the disclosing obtained the contents lawfully. Sharing a private phone conversation on social media, forwarding confidential messages to third parties, or publishing recorded calls all fall within this prohibition.

The statute is an intentional-only crime. The prosecutor must prove that the accused acted knowingly and willfully. Accidental recordings or inadvertent disclosures do not satisfy this threshold.

TCK Article 133: Eavesdropping and Recording Conversations Between Persons

Article 133 is the provision most directly relevant to recording laws. It covers in-person conversations and private meetings where no telecommunications device serves as the medium.

Eavesdropping With a Device (Article 133/1)

Anyone who listens to private conversations between other persons using a listening device, without the consent of any of those persons, faces 2 to 5 years in prison. The same penalty applies to anyone who records such conversations using an audio recording device.

This is the core all-party consent provision. The phrase "without the consent of any of such persons" means that all participants must give permission. A single holdout makes the recording illegal.

Recording a Meeting or Conference (Article 133/2)

A person who records the speech given during a non-public meeting or conference using an audio recording device, without the consent of the other speakers, faces 6 months to 2 years in prison or a judicial fine. Private business meetings, closed-door conferences, and similar gatherings fall under this provision.

Dissemination of Recordings (Article 133/3)

Anyone who distributes recordings obtained through the acts described in the first two paragraphs to third parties faces a separate charge. This applies even if the initial recording was somehow lawful. The act of spreading the recording to others is independently criminal.

The distinction between Articles 132 and 133 is critical. Article 132 covers communications made through a medium (phone, internet, mail). Article 133 covers direct, in-person conversations. Both require all-party consent. Both carry prison sentences.

TCK Article 134: Violation of Privacy of Private Life

Article 134 protects the broader sphere of private life beyond just conversations. It covers image capture, video recording, photography, and audio recording of activities that belong to someone's private domain.

Base Offense (Article 134/1)

Anyone who violates the privacy of another person's private life faces 1 to 3 years in prison. The crime is completed the moment the recording is made. No distribution or sharing is required for conviction.

Recording Aggravator

When the violation of privacy occurs through image or sound recording, the penalty is doubled, producing an effective range of 2 to 6 years. Setting up a hidden camera in someone's home, recording a person in a private setting without consent, or capturing images of intimate activities all trigger this enhanced penalty.

Disclosure of Private Images or Sounds (Article 134/2)

Anyone who unlawfully discloses images or sounds related to someone's private life faces 2 to 5 years in prison. This covers the distribution of secretly recorded material through any channel, including social media, messaging apps, or traditional media.

Complaint Timeframe

The statute of limitations for filing a complaint under Article 134/1 is 6 months. The clock starts from the date the victim learns of the recording and the identity of the person who made it.

TCK Articles 135 and 136: Personal Data Offenses

Recordings often contain personal data. Articles 135 and 136 provide a second layer of criminal exposure for anyone who captures or distributes them.

Article 135: Unlawful Recording of Personal Data

Anyone who records personal data in violation of the law faces 1 to 3 years in prison. Turkish law defines personal data broadly: any information relating to an identified or identifiable natural person. A voice recording, a photograph, a video clip, biometric data, and even a phone number all qualify.

Article 136: Unlawful Transfer or Acquisition of Personal Data

Anyone who unlawfully gives personal data to another person, disseminates it, or acquires it faces 2 to 4 years in prison. This provision targets the downstream handling of data after it has been collected.

If the personal data in question involves statements or images recorded under the Code of Criminal Procedure (CMK) Article 236, paragraphs 5 and 6, the penalty under Article 136 is doubled.

Article 136 is not a complaint-based offense. Prosecutors may initiate proceedings without a victim filing a complaint.

The Self-Defense Exception: When Secret Recording May Be Lawful

Turkey's all-party consent rule is strict, but it is not absolute. Turkish courts have carved out a narrow exception rooted in the general defense provisions of the Penal Code.

TCK Article 25: Legitimate Self-Defense

Article 25(1) provides that a person who repels a real, imminent, or certain-to-occur unlawful attack directed at their own rights or those of another person, in a manner proportionate to the attack and with the necessity of defense, shall not be punished.

TCK Article 26: Exercise of a Right and Consent

Article 26(1) states that a person exercising their legal right shall not be punished. Article 26(2) adds that no punishment applies for an act carried out with the declared consent of a person who has full authority to give that consent.

How the Exception Works in Practice

The Court of Cassation (Yargitay) has established criteria for when a secret recording qualifies as a lawful exercise of rights or legitimate defense. All of the following conditions must typically be met:

• A crime is being committed against the recorder or their close relatives at the time of the recording. Threats, extortion, blackmail, sexual harassment, or assault are the most common qualifying offenses.

• The criminal act develops suddenly, leaving no opportunity to contact law enforcement beforehand.

• The recording is the only practical way to document and prove the crime. Other means of evidence are unavailable or inadequate.

• The recorder did not plan, provoke, or orchestrate the situation to create a pretext for recording.

• The recording is used solely for the purpose of proving the crime in legal proceedings and is not shared with third parties or published.

When all five conditions are satisfied, the recording may be admitted as evidence in court and the recorder may escape criminal liability for the act of recording itself. When even one condition fails, the recording is treated as illegally obtained evidence under Article 189/2 of the Code of Civil Procedure, and the recorder may face prosecution.

Phone Recording vs. In-Person Recording

Turkish law draws a sharp distinction between recordings made through communication devices and recordings of face-to-face conversations.

Phone and Digital Communication

Recording a phone call, video call, or digital message exchange without all-party consent falls under TCK Article 132. The base penalty is 1 to 3 years, doubled to 2 to 6 years when a recording is made. Disclosure of the recording adds a separate charge carrying 2 to 5 years.

Businesses that record phone calls for quality assurance or training purposes must inform the caller at the start of the call and obtain consent. Simply playing a recorded message that says "this call may be recorded" satisfies the notification requirement only if the caller has the option to decline and the recording stops if they do.

In-Person Conversations

Recording face-to-face private conversations without consent falls under TCK Article 133. The penalty is 2 to 5 years for eavesdropping or recording. This is actually a heavier base penalty than Article 132, reflecting the legislature's view that physical-space privacy deserves heightened protection.

Recording a private meeting or conference without speaker consent carries 6 months to 2 years or a judicial fine under Article 133(2).

Judicial Wiretapping: CMK Article 135

Law enforcement agencies in Turkey may intercept and record communications, but only under strict judicial supervision governed by the Code of Criminal Procedure (Ceza Muhakemesi Kanunu, or CMK), Article 135.

Requirements for Lawful Interception

A judge must issue a written order authorizing the interception. During the investigation phase, the prosecutor may authorize interception in urgent cases, but a judge must approve that decision within 24 hours.

The following conditions must all be present:

• Strong suspicion, supported by concrete evidence, that an offense has been committed.

• The offense must be one of those specifically listed in CMK Article 135(8). The list includes organized crime, terrorism, drug trafficking, and certain other serious offenses.

• No other method of obtaining the needed evidence is available or adequate.

Interception orders are time-limited and subject to ongoing judicial review. The judge may terminate the interception at any time.

What the Authorities Can Access

Under CMK Article 135, authorities may intercept the content of telephone calls, monitor internet-based communications, and access signal data (metadata such as call duration, parties, and timestamps). The Information and Communication Technologies Authority (Bilgi Teknolojileri ve Iletisim Kurumu, or BTK) facilitates technical access at the request of prosecutors or courts.

Recording in Public Spaces

Turkish law does not create a blanket permission for recording in public. The Court of Cassation has stated that while a public space is visible to everyone, individuals do not forfeit their right to privacy simply by entering one.

The Identification Threshold

What matters is not just where a recording is made, but how it is used. Recording a city street or a crowd at a public event is generally permissible when no individual is singled out in an identifiable way. Problems arise when footage isolates a specific person in a manner that invades their private life, subjects them to ridicule, or damages their reputation.

Photography and Filming

A person's photograph is treated as personal data under both TCK Article 135 and KVKK Article 3(3). Photographing or filming identifiable individuals in public without consent and then publishing those images may violate Article 134 (privacy) and Article 136 (unlawful dissemination of personal data).

Professional film crews and photographers working in public spaces in Turkey typically obtain filming permits from local authorities and secure release forms from identifiable subjects.

Workplace Recording and Surveillance

Employers in Turkey may conduct workplace surveillance, but the right to monitor is constrained by both the Penal Code and the KVKK.

CCTV and Video Monitoring

Employers must inform employees in advance about the number of cameras, their locations, the purpose of surveillance, and the duration of data retention. The Personal Data Protection Board (Kisisel Verileri Koruma Kurulu) has ruled that cameras must not record areas where employees have a heightened expectation of privacy, including restrooms, changing rooms, and prayer rooms.

Video-only recording is acceptable when it serves a legitimate security purpose. Adding audio recording to workplace cameras violates the principle of proportionality in most circumstances, because the security objective can typically be achieved with video alone.

Employee Consent

Explicit employee consent is required before implementing electronic monitoring systems. The consent must be specific, informed, and freely given. Blanket consent buried in an employment contract does not satisfy KVKK requirements.

Email and Computer Monitoring

Employers who monitor company email accounts or computer usage must have a clear, written policy that employees acknowledge. Monitoring personal communications on company devices crosses into TCK Article 132 territory if the employee has not been notified and given consent.

KVKK (Law 6698): Data Protection Rules for Recordings

Turkey's Personal Data Protection Law (Kisisel Verilerin Korunmasi Kanunu, or KVKK), Law No. 6698, went into effect on April 7, 2016. It governs how all personal data, including voice recordings, video footage, and photographs, may be collected, processed, stored, and shared.

Recordings as Personal Data

The KVKK defines personal data as any information relating to an identified or identifiable natural person. Voice recordings, call recordings, CCTV footage, and photographs all fall squarely within this definition. Any entity that captures such recordings is acting as a data controller and must comply with the full range of KVKK obligations.

Lawful Basis for Processing

Data controllers must have a lawful basis before recording. The KVKK recognizes several grounds, including explicit consent of the data subject, performance of a contract, compliance with a legal obligation, establishment or protection of a right, and the legitimate interests of the data controller (provided those interests do not override the fundamental rights of the data subject).

VERBIS Registration

Every data controller operating in Turkey must register with the Data Controllers Registry Information System (Veri Sorumlulari Sicil Bilgi Sistemi, or VERBIS) before processing personal data. Failure to register, registering with false information, or failing to update registration details triggers fines ranging from 341,809 TL to 17,092,242 TL in 2026.

2026 Administrative Fine Amounts

The KVKK's Article 18 establishes administrative penalties that are adjusted annually based on the revaluation rate. For 2026, the revaluation rate was set at 25.49% by the Tax Procedure Law General Communique No. 585. The updated fine ranges are:

• Failure to comply with Board decisions: 427,263 TL to 17,092,242 TL

• Violation of data security obligations: 256,357 TL to 17,092,242 TL

• VERBIS registration failures: 341,809 TL to 17,092,242 TL

• Violation of the obligation to inform data subjects: 85,437 TL to 1,709,200 TL

These are administrative fines imposed by the Personal Data Protection Board. They exist in addition to any criminal penalties under the TCK.

Business Compliance: Recording Customers and Employees

Companies operating in Turkey that record phone calls, video conferences, or in-person interactions must navigate both the TCK and the KVKK simultaneously.

Call Center and Customer Service Recording

Before recording any customer interaction, the business must:

• Inform the customer at the beginning of the call that recording will take place.

• State the specific purpose of the recording (quality assurance, training, dispute resolution, or legal compliance).

• Give the customer the option to decline recording. If the customer objects, the call must proceed without being recorded.

• Store recordings securely and delete them when the stated purpose has been fulfilled.

• Register as a data controller with VERBIS.

Pre-recorded messages announcing that a call "may be recorded for quality purposes" do not automatically satisfy KVKK consent requirements. The notification must be specific, and the consent must be freely given.

Internal Recording Policies

Companies should maintain a written recording and surveillance policy that covers:

• Which communications or spaces are subject to recording.

• The legal basis relied upon for each type of recording.

• How long recordings are retained.

• Who has access to recordings.

• How employees or customers can exercise their data subject rights (access, correction, deletion).

Cross-Border Data Transfers

If recordings are stored on servers outside Turkey or shared with entities in other countries, the data controller must ensure the receiving country provides adequate data protection or obtain explicit consent for the transfer. The Personal Data Protection Board publishes a list of countries with adequate protection levels.

Penalties at a Glance

The following table summarizes the main criminal penalties for recording offenses in Turkey:

Offense	TCK Article	Prison Term
Violating communication confidentiality	132(1)	1 to 3 years
Recording communication contents	132(1) aggravated	2 to 6 years
Disclosing communication contents	132(3)	2 to 5 years
Eavesdropping on or recording private conversations	133(1)	2 to 5 years
Recording a private meeting without consent	133(2)	6 months to 2 years
Distributing recordings of private conversations	133(3)	Separate charge
Violating privacy of private life	134(1)	1 to 3 years
Violating privacy through recording	134(1) aggravated	2 to 6 years
Disclosing private images or sounds	134(2)	2 to 5 years
Unlawful recording of personal data	135	1 to 3 years
Unlawful transfer or acquisition of personal data	136	2 to 4 years

Constitutional Protections

The Turkish Constitution of 1982 reinforces the statutory framework. Article 20 guarantees the right to privacy of private life and prohibits unlawful interference. Article 22 protects the secrecy of communication and bars any form of interception or recording outside the exceptions established by law and authorized by a judge.

These constitutional provisions have direct legal force. Courts routinely cite Articles 20 and 22 alongside the relevant TCK provisions when adjudicating recording offenses.