Uruguay Recording Laws: One-Party Consent Rules and Penalties (2026)

Overview of Uruguay Recording Laws

Uruguay does not have a single, dedicated recording consent statute. Instead, the legality of recording conversations sits at the intersection of constitutional protections, criminal code provisions, data protection regulations, and judicial interpretation. The practical result, confirmed by legal scholars and reinforced by a high-profile 2023 political case, is a one-party consent framework.

If you are a participant in a conversation, whether by phone or face to face, you may record it without notifying the other person. That principle flows from Article 10 of the Uruguayan Constitution, which holds that private actions that do not harm others or disturb public order fall outside the reach of judicial authority. Because no statute specifically prohibits a participant from recording their own conversation, the act is lawful.

The line is drawn at interception. If you are not part of the conversation and you use a device to capture it, Articles 296 and 297 of the Código Penal classify that as a criminal offense. The distinction between participant recording and third-party interception is the foundation of the entire legal framework.

For businesses, employers, and organizations operating in Uruguay, additional layers of regulation apply through the data protection regime administered by the Unidad Reguladora y de Control de Datos Personales (URCDP).

Constitutional Foundation: Articles 10, 28, and 72

Three provisions of the Uruguayan Constitution shape how courts and legal scholars analyze recording disputes.

Article 28 declares that the papers of private persons and their correspondence, whether epistolary, telegraphic, or of any other kind, are inviolable. They may never be searched, examined, or intercepted except in conformity with laws enacted for reasons of public interest. This provision establishes the baseline expectation of communications privacy.

Article 10 states that private actions of persons that do not harm public order and do not injure a third party are exempt from the authority of magistrates. Uruguayan legal scholars, including former dean of the Faculty of Law at the University of the Republic Alejandro Abal, have cited this article as the constitutional basis for permitting one-party recording. When you record your own conversation, you are engaging in a private action that, standing alone, causes no injury.

Article 72 provides a catch-all protection, declaring that the enumeration of rights, duties, and guarantees made by the Constitution does not exclude others inherent to the human personality or derived from the republican form of government. Courts have used this article to recognize a general right to privacy even where the Constitution does not spell it out in modern terms.

Together, these three provisions create a framework where privacy is constitutionally protected but participant recording is not constitutionally prohibited.

Código Penal: Articles 296, 297, and 298

The criminal code provisions most relevant to recording law fall within Ley 9.155, Uruguay's Código Penal, in the chapter dealing with offenses against correspondence and communications.

Article 296: Violation of Written Correspondence

Article 296 criminalizes opening sealed correspondence not addressed to you with the intent to learn its contents. The penalty is a fine of 20 to 400 Unidades Reajustables (UR). An aggravated form applies when someone intercepts, destroys, or conceals mail or parcels to steal their contents or disrupt service. That carries one to four years of imprisonment. Public officials who commit these offenses face enhanced penalties.

While Article 296 targets written correspondence rather than audio recording, it establishes the legal principle that intercepting communications belonging to others is a criminal act.

Article 297: Interception of Telegraph or Telephone Communications

Article 297 is the provision most directly relevant to recording law. It criminalizes the use of artificial means to intercept, prevent, or interrupt telegraphic or telephone communications.

The penalty is a fine of 20 to 400 UR. At current UR values (approximately $1,852 Uruguayan pesos per UR as of early 2026), that translates to roughly $37,000 to $740,800 Uruguayan pesos, or approximately USD 850 to USD 17,000.

The critical word in Article 297 is "intercept." Uruguayan legal doctrine holds that a participant in a conversation who records it is not intercepting anything. They are capturing words directed at them. Interception requires a third party who inserts themselves into a communication channel without authorization from any participant.

Article 298: Disclosure of Correspondence and Communication Secrets

Article 298 penalizes the unauthorized revelation of the contents of epistolary, telegraphic, or telephonic correspondence. Two distinct offenses exist under this article.

First, sharing with others what you learned through interception (referencing the means described in Articles 296 and 297). Second, publishing the content of correspondence that, by its nature, should remain secret.

The penalty is a fine of 20 to 200 UR. However, the statute contains an important exception: disclosure is not criminal when there is "justa causa" (just cause). This exception has been interpreted broadly by legal scholars to include situations such as presenting evidence in judicial proceedings, reporting criminal activity, and whistleblowing in the public interest.

Article 298 was last amended by Ley 15.903 in 1987.

The Ache-Bustillo Case (2023): One-Party Consent in Practice

The most significant modern test of Uruguay's recording consent framework came during the Caso Marset political scandal in late 2023. Carolina Ache, who served as Vice Foreign Minister (Subsecretaria de Relaciones Exteriores), recorded conversations with Foreign Minister Francisco Bustillo without his knowledge.

The recordings captured Bustillo allegedly instructing Ache to destroy her mobile phone containing WhatsApp messages with Interior Subsecretario Guillermo Maciel about the issuance of a Uruguayan passport to accused drug trafficker Sebastian Marset. Ache turned the recordings over to prosecutors and they were subsequently published by the newspaper Busqueda.

Bustillo resigned in November 2023 following the disclosure of the recordings.

The legal question was straightforward: did Ache commit a crime by secretly recording her superior?

Alejandro Abal, former dean of the Faculty of Law at the Universidad de la Republica and a specialist in procedural law, provided the definitive analysis. He stated publicly that the recordings "no constituyen delito" (do not constitute a crime). His reasoning rested on the established distinction between interception and participant recording. Because Ache was a participant in the conversations she recorded, Article 297 did not apply. The recordings were also admissible as evidence because they were offered by a party to the dialogue.

On the question of disclosure, Abal concluded that "justa causa" existed because the recordings related to potential obstruction of justice and public corruption, satisfying the exception built into Article 298.

The Ache-Bustillo matter is not binding precedent in Uruguay's civil law system, where court decisions do not carry the same stare decisis weight as in common law countries. But it represents the clearest modern application of the one-party consent principle and demonstrated that the legal establishment treats participant recording as lawful.

Phone Recording Laws

Recording a phone call in Uruguay is legal when you are one of the parties on the call. No notification to the other party is required.

This rule applies to calls on landlines, mobile phones, and internet-based voice services. The legal basis is the absence of any statutory prohibition combined with the constitutional freedom of private action under Article 10.

If you are not a party to the call and you use a device to capture the conversation, you are committing a criminal offense under Article 297 of the Codigo Penal. This applies regardless of whether you use a physical wiretap, software-based interception, or any other technical method. The statute refers to "medios artificiosos" (artificial means), a phrase broad enough to cover modern surveillance technology.

Recording a phone call where neither party has consented and you are merely eavesdropping also potentially violates Article 28 of the Constitution, exposing the interceptor to both criminal and civil liability.

In-Person Recording Laws

Uruguay's one-party consent principle extends to face-to-face conversations. If you are physically present and participating in a discussion, you may record it without informing other participants.

No Uruguayan statute specifically addresses in-person recording in a separate provision from telephone interception. Legal scholars apply the same constitutional analysis: because Article 10 exempts private actions that cause no harm, and because no law prohibits a participant from recording their own conversation, the practice is lawful.

The practical implication is that meetings, negotiations, and personal discussions can be recorded by any participant. This includes conversations in private homes, offices, restaurants, or any other location.

However, the Article 298 disclosure restriction still applies. Publishing or sharing the contents of a recorded in-person conversation may constitute a criminal offense if the conversation was of a nature that should remain secret and no just cause for disclosure exists.

Workplace Recording and Employer Surveillance

The URCDP has issued specific guidance on employer surveillance through Resolution 58/021, which consolidates the regulatory criteria for handling images and audio captured through surveillance systems in the workplace.

Audio Recording Prohibition

The URCDP's workplace surveillance guide states explicitly that "no deben registrarse conversaciones privadas" (private conversations must not be recorded). This means employers cannot deploy audio surveillance systems to capture employee conversations.

Video cameras with audio capabilities can be installed in work areas, but the audio recording function is restricted. Employers who capture private conversations through workplace surveillance systems risk sanctions from the URCDP.

Video Surveillance Requirements

Employers who install video cameras must comply with these requirements:

• Advance notification. Employees must be informed before cameras are installed.
• Location disclosure. The specific locations of all cameras must be communicated to employees.
• Capability disclosure. Employees must be told whether cameras capture image only or image and audio.
• Retention disclosure. The data retention period must be communicated.
• Rights information. Employees must be told how to exercise their data protection rights.

Prohibited Locations

Cameras cannot be installed in bathrooms, changing rooms, rest areas, dining spaces, or locations where union activities take place. Any placement that would invade employee privacy beyond what is necessary for legitimate security purposes is prohibited.

Database Registration

All video surveillance systems must be registered with the URCDP as personal data databases under Ley 18.331. Operating an unregistered surveillance system is itself a violation that can trigger sanctions.

Recording System Security

The physical recording system must be located in a restricted-access area. Only specifically authorized personnel may access recorded footage or audio.

Ley 18.331: Data Protection Framework

Ley 18.331, enacted on August 11, 2008, is Uruguay's comprehensive data protection law. It governs the collection, storage, and processing of personal data, which includes audio and video recordings of identifiable individuals.

Core Principles

Article 5 of Ley 18.331 establishes seven principles that apply to any recording that constitutes personal data: legality, veracity, purpose limitation, informed consent, data security, confidentiality, and accountability.

Any organization recording individuals must have a lawful basis for doing so, must collect only what is necessary for a stated purpose, and must protect the recordings from unauthorized access.

Consent Requirements

Article 9 requires free, prior, explicit, and documented consent before personal data is processed. Exceptions exist for data from public sources, data required by law, limited identifying information in professional contexts, and data arising from contractual relationships.

For audio recordings, this means that organizations (as opposed to individuals acting privately) generally need consent to record people unless a statutory exception applies.

Sensitive Data

Article 18 provides heightened protections for sensitive data, which includes information about racial or ethnic origin, political opinions, religious beliefs, health status, and sexual life. Audio recordings that capture this type of information trigger additional consent and security requirements.

Sanctions

Article 35 grants the URCDP authority to impose graduated sanctions:

• Observation (formal notice of a violation)
• Warning (formal admonition)
• Fine of up to 500,000 Unidades Indexadas (UI), approximately USD 65,000
• Database suspension for up to five business days
• Database closure (permanent shutdown of the offending data operation)

These sanctions apply to any violation of Ley 18.331, including unauthorized recording, failure to register databases, inadequate security measures, and failure to honor data subject rights.

Ley 19.293: Judicial Wiretapping and Law Enforcement Interception

Ley 19.293, Uruguay's Code of Criminal Procedure enacted in 2014, governs when and how the state can intercept private communications.

Authorization Requirements

Article 208 establishes the framework for judicial authorization of communication interception. A prosecutor must petition a judge, demonstrating sufficient evidence that a crime has been or may be committed. The judge must issue a reasoned decision that explicitly weighs the necessity and proportionality of the surveillance against the restriction on the individual's rights. Failure to properly reason the decision results in nullity of the authorization and any evidence obtained under it.

Duration Limits

The initial authorization period is up to six months. Extensions up to a total of two years are permitted for complex investigations or cases involving criminal organizations.

Protected Communications

Communications between an accused person and their defense attorney cannot be intercepted unless the judge finds evidence that the attorney may bear criminal responsibility in the matter under investigation.

Evidence Destruction

When a wiretap authorization expires or the factual basis supporting it disappears, the surveillance must stop. Any intercepted material not incorporated into the investigation must be destroyed unless a court orders otherwise.

El Guardian System

In 2014, Uruguay's government deployed a centralized surveillance platform called "El Guardian," capable of simultaneously monitoring up to 800 mobile phones, 200 fixed lines, and multiple email and social media accounts. The system consolidated more than 22 separate interception tools previously used by various agencies. Civil liberties organizations have raised concerns about oversight gaps, including the absence of mandatory notification to surveillance targets after investigations conclude and the lack of clear data retention and destruction timelines.

Recording in Public Spaces

Uruguay does not have a specific statute addressing recording in public spaces. The general principles of data protection law apply.

Photographing and filming in public areas is generally permitted because people in public do not carry a reasonable expectation of privacy regarding their physical presence and visible activities.

However, audio recording in public spaces intersects with the one-party consent rule. You may record a conversation you are part of, even in public. Recording a conversation between strangers in a public park or cafe, where you are not a participant, would constitute interception under Article 297.

The URCDP has established that surveillance cameras directed at public streets are restricted. Private entities may only capture a minimal strip of public space immediately adjacent to building entrances. Broader capture of public areas requires compliance with data protection registration and disclosure requirements.

Children receive additional protection. Uruguayan law recognizes that every child has a right to privacy, and images or recordings of children cannot be used in ways that are harmful or that identify them without proper authorization.

Penalties Summary

Uruguay's recording law penalties come from multiple sources, depending on the type of violation.

Criminal Penalties (Código Penal)

Offense	Article	Penalty
Opening sealed correspondence	Art. 296	Fine of 20-400 UR
Intercepting/destroying mail (aggravated)	Art. 296	1-4 years imprisonment
Intercepting telephone/telegraph communications	Art. 297	Fine of 20-400 UR
Unauthorized disclosure of communications	Art. 298	Fine of 20-200 UR
Fraudulent access to secret documents	Art. 300	Fine of 20-400 UR

The Unidad Reajustable (UR) is an inflation-indexed unit tied to Uruguay's Average Wage Index. As of early 2026, one UR is valued at approximately $1,852 Uruguayan pesos.

Data Protection Penalties (Ley 18.331)

Sanction	Description
Observation	Formal notice of violation
Warning	Formal admonition
Fine	Up to 500,000 UI (approx. USD 65,000)
Suspension	Database shutdown for up to 5 business days
Closure	Permanent database shutdown

Civil Liability

Beyond criminal and administrative penalties, individuals whose privacy has been violated through unauthorized recording may pursue civil claims for damages under general tort principles.

Business Compliance Checklist

Organizations operating in Uruguay should address the following to stay compliant with recording and data protection laws:

Communication recording policies. If your business records phone calls for quality assurance or training, obtain explicit consent from all parties at the start of each call. While one-party consent applies to individuals, businesses operating under Ley 18.331 face stricter data processing requirements.

Workplace surveillance registration. Register all video surveillance systems with the URCDP. Document the purpose, scope, and retention period of recordings.

Employee notification. Provide written notice to all employees about surveillance systems, including locations, capabilities, and retention periods. Do not record private conversations.

Prohibited locations. Ensure no cameras are placed in bathrooms, changing rooms, break rooms, cafeterias, or union meeting spaces.

Data security. Store surveillance recordings in access-controlled systems. Limit access to authorized personnel only.

Retention limits. Establish and enforce clear data retention periods. Destroy recordings that are no longer needed for their stated purpose.

Access rights. Have a process for responding to employee and customer requests to access, correct, or delete their personal data, including recordings.

Cross-border transfers. If recordings are stored or processed outside Uruguay, ensure the receiving country provides adequate data protection under Ley 18.331 standards.