Israel Recording Laws: One-Party Consent Rules and Penalties (2026)

How Israel Regulates Recording: Two Statutes, One Framework

Israel does not rely on a single recording consent law. Two separate statutes govern different aspects of the same act, and understanding both is necessary before recording any conversation in the country. The constitutional backdrop is provided by a third instrument entirely.

The Secret Monitoring Law 5739-1979 (Chok Ha'Maakav Ha'Sodi) addresses the act of intercepting and recording conversations. It is Israel's primary wiretapping statute.

The Protection of Privacy Law 5741-1981 (Chok Haganat Ha'Privatiyut) addresses a broader set of privacy concerns, including what happens after a recording is made. It governs storage, disclosure, and use of personal information, including recorded material.

These two laws do not always point in the same direction. The Secret Monitoring Law may permit a recording that the Protection of Privacy Law then limits. That tension is central to understanding Israeli recording law.

Behind both statutes stands the Basic Law: Human Dignity and Liberty (5752-1992), which gives privacy rights constitutional weight. Section 7(d) of that Basic Law explicitly protects the confidentiality of conversations. Any legislative or administrative action that restricts that right must satisfy proportionality requirements.

This three-layer structure, constitutional foundation, wiretapping prohibition, and post-recording privacy regime, is what makes Israeli recording law more nuanced than a simple "one-party consent" label suggests.

Israel's Constitutional Privacy Framework: Basic Law Section 7

The Basic Law: Human Dignity and Liberty was approved by the Knesset on March 17, 1992. Israeli legal scholars describe it as the beginning of a "constitutional revolution" because, for the first time, a set of rights gained supreme constitutional status in Israeli law.

Section 7 of the Basic Law protects privacy in four distinct dimensions:

1. Section 7(a): The right of individuals to privacy and to intimacy.
2. Section 7(b): The prohibition on entering private premises without consent.
3. Section 7(c): The prohibition on searching a person's premises, body, or personal effects.
4. Section 7(d): The right to confidentiality of conversations, writings, and records.

Section 7(d) is the constitutional provision most directly relevant to recording law. It establishes that every person in Israel has a constitutionally protected right that their conversations remain confidential. The Secret Monitoring Law and the Protection of Privacy Law are the legislative expressions of that right in ordinary statute.

The constitutional status of Section 7(d) has practical consequences. When Israeli courts interpret ambiguous provisions of the Secret Monitoring Law or the PPL, they apply a principle of proportionality drawn from the Basic Law. Restrictions on the right to confidentiality must serve a legitimate purpose, be necessary to achieve that purpose, and not impose a disproportionate burden on the individual.

This framework also explains why Israel's privacy regime has been recognized as adequate by the European Commission. The EU adequacy decision is not simply a compliance checklist comparison with the GDPR. It reflects the European Commission's assessment that Israel provides a fundamentally equivalent level of protection, grounded in constitutional rights rather than mere regulatory obligation.

The Basic Law does not create an absolute right to silence. Section 8 permits limitations on the rights in Section 7 provided the limitation is enacted by law, befits the values of the State of Israel, serves a proper purpose, and does not exceed what is necessary.

The Secret Monitoring Law 5739-1979

Definition of Secret Monitoring

Section 1 of the law defines "secret monitoring" as listening to, receiving, or recording a conversation using a device without the consent of any of the participants. The word "any" carries legal weight. If even one party to the conversation consents to the recording, it falls outside the definition of secret monitoring.

This is the statutory foundation of Israel's one-party consent framework. A participant who records their own conversation is not engaged in "secret monitoring" under this law, regardless of whether the other parties know about it.

What the Law Prohibits

The Secret Monitoring Law prohibits two distinct acts:

1. Secret monitoring of a conversation without lawful authority. This means intercepting or recording a conversation to which the recorder is not a party, without the consent of any participant, and without a court order.

2. Knowingly using information obtained through secret monitoring, or disclosing such information to unauthorized persons.

Both prohibitions target third-party surveillance. The statute does not criminalize a participant recording their own conversation.

Court Orders for Law Enforcement

The law grants police and the Israel Security Agency (Shin Bet) the authority to conduct secret monitoring under judicial oversight. A warrant must be obtained from the president of a district court or a designated judge. The application must demonstrate that monitoring is essential for state security, crime prevention, or detection of offenders.

Some categories of monitoring are exempt from the warrant requirement. These include monitoring conversations in the public domain for state security purposes, intercepting international communications for military censorship, and monitoring communications systems operated by the Israel Defense Forces, Israeli Police, and licensed service providers.

Criminal Penalties

The Secret Monitoring Law prescribes a sentence of up to three years in prison for violations of its core prohibitions. Courts may also order the destruction of illegally obtained recordings.

Evidence gathered through illegal monitoring is generally inadmissible, though Israeli courts retain discretion to permit its use in certain circumstances, weighing the probative value of the evidence against the severity of the privacy violation.

The three-year maximum under the Secret Monitoring Law should not be confused with the five-year maximum under the Protection of Privacy Law. They are separate statutes with separate penalties. Third-party interception triggers the three-year exposure under the Secret Monitoring Law; deliberate privacy violations such as unauthorized filming in a private domain trigger the five-year exposure under the PPL.

The Protection of Privacy Law 5741-1981

Section 2: The Privacy Violation Catalog

Section 2 of the PPL lists specific acts that constitute a violation of privacy. Several directly affect recording:

• Section 2(1): Spying on or trailing a person in a manner likely to harass them.
• Section 2(2): Eavesdropping prohibited under any law (linking directly to the Secret Monitoring Law).
• Section 2(3): Photographing a person while they are in a private domain.
• Section 2(4): Publishing a photograph taken under circumstances likely to humiliate or degrade the subject.
• Section 2(9): Using information about a person's private affairs for a purpose other than that for which it was provided.

The term "photographing" is defined broadly in the law to include filming and, by extension, video recording.

Criminal Penalties Under the PPL

A person who willfully infringes the privacy of another under sections 2(1), 2(3) through 2(7), and 2(9) through 2(11) faces up to five years in prison. This penalty applies to deliberate violations.

Separately, any person who discloses information obtained through their role as an employee, manager, or possessor of a database, except for legitimate work purposes or under a court order, faces up to five years in prison as well.

Civil Liability

A privacy infringement under the PPL constitutes a civil wrong (tort). Victims may pursue civil claims for damages without being required to prove specific financial loss.

Before Amendment 13, the available civil remedy was limited. Amendment 13 substantially expanded what courts may award. Courts may now impose exemplary damages of up to NIS 10,000 for privacy violations even without proof of actual harm. Separately, individuals may bring civil claims and courts may award statutory damages of up to NIS 100,000 (approximately USD 27,000) per person. These are distinct categories: the exemplary damages provision applies to a narrower class of deliberate violations, while the statutory damages cap of NIS 100,000 covers a broader range of privacy claims brought by individual data subjects.

The Yair Netanyahu driver case illustrates how civil liability works in practice. A driver who secretly recorded a conversation with then-Prime Minister Netanyahu's son during a private outing was ordered by an Israeli court to pay NIS 30,000 in compensation and issue a public apology. The recording itself was not illegal under the Secret Monitoring Law because the driver was a participant. But the subsequent disclosure of the recording's contents violated the PPL. The court's ruling reflects the "record freely, disclose carefully" principle that runs through Israeli recording law.

Where the Two Laws Conflict

The interaction between these statutes creates a legal gray zone that Israeli courts have addressed repeatedly.

The Secret Monitoring Law says: A party to a conversation may record it. No crime is committed.

The Protection of Privacy Law says: Even if the recording was lawful, using it to expose private information, disclosing it to unauthorized parties, or publishing it in ways that harm someone's dignity can constitute a privacy violation carrying up to five years in prison.

The practical effect is that recording is generally legal, but disclosure is not automatically legal. The purpose of the recording matters. Courts distinguish between recordings made to document evidence of wrongdoing, which are generally treated favorably, and recordings made for personal advantage, harassment, or public exposure, which risk PPL liability.

Israeli legal commentators describe this as a "record freely, disclose carefully" framework. The act of pressing the record button is almost always lawful for a participant. What you do with the file afterward determines whether you have broken the law.

Amendment 13: Strengthened Enforcement (Effective August 2025)

The Knesset approved Amendment 13 to the Protection of Privacy Law in August 2024. It took effect on August 14, 2025, marking the most significant update to Israel's privacy framework in decades.

What Changed

Amendment 13 did not alter the core recording consent rules under the Secret Monitoring Law. The one-party consent standard remains intact. What changed is the enforcement infrastructure surrounding the PPL.

Expanded PPA powers: The Privacy Protection Authority (formerly called the Israel Privacy Authority and, before that, the Registration of Databases Authority) gained authority to conduct administrative inquiries, appoint inspectors, issue binding compliance orders, and impose administrative fines without initiating criminal proceedings.

Administrative fines: Monetary penalties can reach into the millions of shekels. Fines range from NIS 1,000 to NIS 320,000 per offense, with the potential to double to NIS 640,000 in severe cases. A cap of 5% of annual turnover applies. Small and micro businesses face a separate annual cap of NIS 140,000. For database violations, fines may also be calculated at NIS 100 per affected data subject, with the maximum administrative fine reaching approximately NIS 3.2 million for large-scale database breaches.

Civil statutory damages: Courts may award statutory damages of up to NIS 100,000 per person for privacy violations, without requiring proof of actual harm. Exemplary damages of up to NIS 10,000 are available as a distinct category for deliberate violations.

Extended limitations period: The statute of limitations for civil privacy claims was extended from two years to seven years, aligning with general civil claim limitations in Israel.

Data Protection Officer requirement: Organizations that are public bodies, data brokers, processors of especially sensitive data, or those conducting systematic monitoring must appoint an independent DPO with direct access to senior management. The PPA offered a grace period through October 31, 2025. That grace period has now expired; DPO appointment is a 2026 enforcement priority. Organizations that appointed a DPO before a fine is imposed receive a 10% reduction in the fine amount.

Name publication: The PPA can publish the names of violators for up to four years as a deterrent measure.

First Enforcement Actions Under Amendment 13

The PPA moved quickly after Amendment 13 took effect. In one of its first enforcement actions under the expanded powers, the PPA fined HOT, an Israeli telecommunications company, NIS 70,000 to 75,000 for privacy violations. The PPA has confirmed that enforcement of data governance obligations is a stated priority for 2026, and organizations should expect scrutiny to intensify.

What This Means for Recording

For individuals recording personal conversations, Amendment 13 does not change daily practice. One-party consent still applies.

For businesses that store, process, or manage recorded data, the stakes are substantially higher. A company that records customer calls and mishandles the data now faces PPA investigation, administrative fines, binding orders, and public naming. The amendment brought Israel's enforcement regime considerably closer to the European Union's GDPR standard, which was one of its stated purposes.

The Library of Congress noted that the amendment represents "an important step in terms of Israel's alignment with the European Union's privacy protection laws" and supports Israel's continued EU adequacy status, which was reaffirmed in January 2024.

Recording Phone Calls in Israel

Recording a phone call is lawful when you are a participant in the call. This applies to:

• Mobile and landline voice calls
• VoIP calls through services like WhatsApp, Zoom, and FaceTime
• Conference calls where you are an active participant

You do not need to inform the other party. Your participation is your consent under the Secret Monitoring Law.

If you are not a participant and you intercept the call through a tap, exploit, or covert device, you have committed a criminal offense carrying up to three years in prison.

Cross-border calls: When one party is in Israel and the other is abroad, the Secret Monitoring Law applies to the conduct of the Israeli party. The foreign party's jurisdiction may impose additional consent requirements. A business call between an Israeli office and a California counterpart, for example, is subject to California's two-party consent rule as well as the Israeli one-party rule. In practice, the stricter jurisdiction governs.

Google's Phone app does not enable native call recording in Israel despite the one-party consent framework, a decision based on Google's own global policies rather than Israeli law. Third-party recording apps remain available and legal to use.

Recording In-Person Conversations

Private Settings

Recording a face-to-face conversation in a private location, such as a home, office, or hotel room, is lawful if you are a party to the conversation. The Secret Monitoring Law does not distinguish between phone calls and in-person exchanges.

However, the PPL's Section 2(3) prohibition on photographing or filming a person in a "private domain" can apply if video recording captures someone in a space where they have a reasonable expectation of privacy. Audio-only recording by a participant generally does not trigger this provision, but video recording adds a layer of risk.

Public Spaces

Recording in public spaces is broadly permitted. Conversations held in areas accessible to the general public receive less privacy protection. Journalists recording statements by public officials, bystanders documenting incidents on a public street, and security cameras in commercial areas all operate within legal bounds.

The test is not simply location but context. A private conversation held in a quiet corner of a public park may still attract PPL protection depending on what is done with the recording. But the act of recording it as a participant remains lawful.

Hidden Cameras and Voyeurism

PPL Section 2(3) prohibits photographing or filming a person in a private domain without consent. This provision covers hidden cameras placed in hotel rooms, changing areas, bathrooms, or private residences to capture footage of individuals who have not consented to being filmed.

A separate criminal dimension applies under the Prevention of Sexual Harassment Law 5758-1998. Under that law, the publication of pictures, videos, or recordings of a person focused on their sexuality, including intimate footage obtained by hidden camera in a private setting, is a criminal offense punishable by up to five years imprisonment. The perpetrator is classified as a sex offender upon conviction.

These provisions interact with the Secret Monitoring Law's framework: even if the hidden camera operator is physically present in the space, filming a person in a private domain without their consent in a sexualized context is not protected by the participant-recording exception. The PPL and the Prevention of Sexual Harassment Law address the footage's nature and use, not merely whether the operator was present.

Recording Police and Government Officials

Israeli law does not prohibit citizens from recording police officers or other government officials during public interactions. As a participant in a conversation with an officer, you may record it under the Secret Monitoring Law.

Public officials performing their duties in public settings have a reduced expectation of privacy. Recording a traffic stop, a police questioning at a protest, or an interaction with a government clerk is lawful.

In August 2016, a bill circulated within Netanyahu's coalition that would have required two-party consent for recording public servants. The bill attracted immediate public criticism, and Prime Minister Netanyahu directed coalition chairman David Amsalem to withdraw it, stating he was personally opposed to the legislation. As of May 2026, no such restriction exists.

That said, physically interfering with a police officer while recording remains a separate offense. The right to record does not override the obligation to comply with lawful orders.

Workplace Recording and Employee Monitoring

Employer Obligations

Israeli employers who monitor employees must follow principles established by the Privacy Protection Authority and reinforced by National Labor Court rulings.

Advance notice is mandatory. Employees must be told that monitoring is occurring, what systems are being used, and what data is being collected. The PPA requires employers to disclose this information before monitoring begins.

Proportionality applies. Monitoring must be proportionate to a legitimate business interest. The National Labor Court established a three-stage test: first, the employer must demonstrate a legitimate objective; second, the chosen monitoring method must be the least intrusive option that achieves that objective; third, the degree of employee consent must be weighed against the privacy intrusion.

Consent must be informed and freely given. Pressure, including threats of sanctions for refusal, can invalidate consent under Israeli law.

Specific Scenarios

CCTV cameras: Permitted in common work areas with clear signage. Not permitted in changing rooms, bathrooms, or private offices without disclosure. The employer must formulate a written policy on camera placement and usage, developed in consultation with employees or their representatives.

Call recording in customer service: Permitted when callers are notified and agents are aware. Standard practice is to use an IVR announcement at the start of the call.

Email monitoring: Work email accounts may be monitored with prior notice. Personal email accounts may not be monitored, even on employer-owned devices, without a court order.

Audio surveillance of employees: Covert audio recording of employee conversations without notice violates both the Secret Monitoring Law and the PPL. Employers cannot install hidden microphones.

Employee Rights

Employees who believe they have been monitored unlawfully may file complaints with the Privacy Protection Authority, which now has enhanced enforcement powers under Amendment 13. They may also pursue civil claims for privacy violations, with statutory damages of up to NIS 100,000 per person available without proof of financial loss.

Deepfake and AI-Generated Recordings

Israel does not have a standalone anti-deepfake statute as of May 2026. Legislative discussions have occurred within the Knesset, and the National Cyber Directorate has issued guidance on AI-generated disinformation, but no enacted law specifically addresses deepfake audio or video as a recording-consent matter.

However, existing law provides meaningful coverage in the most harmful category of AI-generated content: synthetic intimate imagery.

The Prevention of Sexual Harassment Law 5758-1998, as amended by Amendment 10 in 2014, explicitly prohibits the distribution of pictures, videos, or recordings of a person focused on their sexuality including by editing or incorporation. The phrase "editing or incorporation" was added to address situations where real footage is manipulated or where a person's likeness is combined with other material. Courts have applied this language to cover synthetic and AI-generated intimate content where it depicts a real person's image in a sexualized context without consent.

The offense carries up to five years imprisonment. A person convicted under this provision is classified as a sex offender.

For non-intimate deepfakes used for fraud, defamation, or political manipulation, the applicable provisions are the general fraud provisions of the Penal Law 5737-1977, the PPL's Section 2(9) (using information about a person for a purpose other than that for which it was provided), and defamation law. None of these were drafted with AI-generated content in mind, and their application involves case-by-case analysis.

The National Cyber Directorate has flagged AI-generated disinformation as a threat category requiring legislative attention. During the June 2025 conflict between Israel and Iran, social media platforms were flooded with AI-generated images and videos depicting false events, prompting policy discussions about dedicated synthetic media legislation. As of the date of this article, no bill has completed the Knesset's legislative process.

Cross-Border Recording and EU Adequacy

Israel's EU Adequacy Status

The European Commission reaffirmed Israel's data protection adequacy status on January 15, 2024. The adequacy decision means that personal data, including recorded communications, may flow freely from the European Economic Area to Israel without additional safeguards such as standard contractual clauses. Israeli data recipients are treated as providing a fundamentally equivalent level of protection to that guaranteed within the EU.

Israel strengthened its adequacy position by adopting the Privacy Protection Regulations (Instructions for Data Transferred to Israel from the EEA), 5783-2023, and the Privacy Protection (Data Security) Regulations, 5777-2017. Amendment 13's enforcement improvements were viewed as further evidence of alignment with EU standards.

On June 24, 2025, civil society organizations sent a letter to the European Commission urging reassessment of Israel's adequacy status on human rights grounds related to the conflict in Gaza. The adequacy decision remains in force as of the publication of this article; the European Commission has not initiated formal review proceedings.

Practical Implications for Cross-Border Calls and Recordings

When a recording involves parties in different countries, the legal analysis becomes layered:

• Israel-to-EU call: Israeli one-party consent governs the Israeli party's conduct. If the call involves personal data of an EU resident, the recording and any subsequent storage or processing is subject to GDPR requirements for data minimization, purpose limitation, and retention limits.
• Israel-to-US call: Israeli one-party consent governs the Israeli party. The US state of the other party governs that party's conduct. If the other party is in a two-party consent state such as California, the California party's recording without disclosure to the Israeli participant may violate California Penal Code Section 632 even if the Israeli participant lawfully records.
• Recording for litigation purposes: Recordings made as a participant to document evidence of wrongdoing generally receive favorable treatment in Israeli courts, but cross-border litigation introduces evidentiary questions about admissibility standards in the foreign jurisdiction.

Organizations transferring recorded data out of Israel to EU entities should maintain records of processing activities, apply data minimization principles to recording retention, and ensure that their data processing agreements address the cross-border transfer requirements.

Penalties at a Glance

Business Compliance Checklist

Organizations operating in Israel that record communications should address each of the following.

Audit existing recording practices. Map every point where your organization captures audio or video of individuals. This includes customer calls, security cameras, meeting recordings, and employee monitoring tools.

Provide clear notice. For customer-facing calls, use an IVR announcement or verbal disclosure at the start of the interaction. For workplace monitoring, distribute a written policy to all employees before monitoring begins.

Appoint a DPO if required. Under Amendment 13, public bodies, data brokers, processors of especially sensitive data, and organizations conducting systematic monitoring must designate an independent DPO. The grace period expired October 31, 2025. This is now a live compliance obligation and a stated 2026 enforcement priority for the PPA.

Define retention periods. Establish documented policies for how long recorded material is stored. Automated deletion should occur at the end of each retention period.

Restrict access and document it. Limit access to recordings to personnel with a documented business need. Maintain access logs.

Prepare for PPA inquiries. The PPA now has the authority to initiate administrative investigations, issue binding orders, and publish violators' names. Organizations should designate a point of contact and document procedures for responding to PPA requests.

Review cross-border data transfers. If recordings are stored on servers outside Israel or shared with foreign entities, ensure compliance with the PPL's data transfer requirements, the EEA transfer regulations 5783-2023, and any applicable EU adequacy conditions.

Consider National Cyber Directorate guidance. For organizations that process or transmit sensitive recorded data, the National Cyber Directorate publishes cybersecurity standards that bear on how recording systems should be secured against unauthorized access.