Costa Rica
Costa Rica Recording Laws: One-Party Consent Rules and Penalties (2026)

How Costa Rica Classifies Recording Consent
Costa Rica is a one-party consent jurisdiction for the act of recording itself. If you are a participant in a conversation, whether in person, over the phone, or through a digital platform, you may record that conversation without informing the other party.
This framework rests on a practical distinction that runs through Costa Rican criminal law. Recording your own conversation is treated differently from intercepting someone else's. The Código Penal punishes unauthorized interception of communications between third parties (Article 198), but it does not criminalize a participant who captures a conversation they are already part of.
Where Costa Rica diverges from many one-party consent countries is in what happens after the recording is made. The law places meaningful restrictions on dissemination. Recording the conversation may be lawful, but publishing it, sharing it on social media, or distributing it to people who were not involved can expose you to criminal liability unless the content serves a recognized public interest.
Constitutional Foundation: Article 24
The starting point for all recording and privacy law in Costa Rica is Article 24 of the 1949 Political Constitution. It reads, in part:
The right to intimacy, to freedom and to the secrecy of communications is guaranteed. The private documents and the communications, written, oral or of any other type, of the inhabitants of the Republic, are inviolable.
The article goes further. It establishes that only the courts may authorize seizure or examination of private documents, and only when "absolutely indispensable" to resolve matters before them. Any law permitting such exceptions must be approved by a two-thirds supermajority in the Legislative Assembly.
Article 24 also contains an evidence exclusion rule with constitutional force: "The correspondence stolen or the information obtained as a result of the illegal intervention of any communication will not produce legal effects." This means illegally obtained recordings are inadmissible in court, a principle that has shaped how prosecutors and defense attorneys approach recording evidence throughout the Costa Rican legal system.
The constitutional text protects against state overreach and third-party intrusion. It does not, however, strip a participant of the ability to preserve their own conversation. That gap is where one-party consent operates.
Código Penal: The Criminal Statutes That Govern Recording
Costa Rica's Código Penal (Criminal Code, Law No. 4573 of 1970, as amended) addresses recording and communications privacy across several articles in Title VI, covering crimes against the sphere of intimacy (Delitos Contra el Ámbito de Intimidad).
Article 196: Violation of Correspondence or Communications
Article 196 is the broadest provision. It punishes anyone who, without authorization and with danger or harm to another's privacy, seizes, accesses, modifies, alters, suppresses, intercepts, opens, delivers, sells, redirects, or diverts documents or communications directed to another person.
Base penalty: 1 to 3 years in prison.
Aggravated penalty (2 to 4 years): When the violation is committed by personnel responsible for handling mail or document delivery, system administrators with network access, or employees of communication providers.
Article 196 contains a significant exception. Public interest information and documents already in public databases may be published without triggering the penalty. This statutory carve-out for public interest material has proven consequential in recent high-profile cases.
Article 196 Bis: Violation of Personal Data
Article 196 bis targets the unauthorized handling of personal data stored in computer or telematic systems. The prohibited conduct includes accessing, copying, transmitting, publishing, broadcasting, collecting, using, intercepting, holding, selling, buying, or diverting data without the holder's authorization.
Base penalty: 1 to 3 years in prison.
Aggravated penalty (2 to 4 years): When committed by system administrators, when the data concerns minors, or when it involves sensitive information such as ideology, religion, health status, racial origin, or sexual orientation.
This provision is particularly relevant for digital recordings stored on servers, cloud platforms, or corporate databases. Accessing someone's stored voice recordings without authorization falls within its scope.
Article 198: Unauthorized Recording of Private Communications
Article 198 is the core recording offense. It prohibits three specific forms of conduct:
- Recording the words of another person that were not intended for the public, without that person's consent.
- Using technical means to listen to or intercept private communications not directed at the listener.
- Installing apparatus or instruments designed to intercept or prevent oral or written communications, regardless of whether the interception succeeds.
Penalty: 1 to 3 years in prison.
The critical qualifier is "words of another not intended for the public." When you are a participant in a conversation, the words are directed to you. They are intended for you. The prohibition targets someone who is outside the conversation capturing words meant for others. This is the textual basis for Costa Rica's one-party consent principle.
Article 200: Aggravated Circumstances
When any of the above violations are committed by a public official exercising their functions, or by an employee of a public or private communications entity exploiting their position, the penalty increases to 2 to 6 years in prison.
Courts also have discretion to apply the aggravated penalty range when the person who obtained the recording publishes the information, depending on the circumstances.
Article 201: Improper Use of Communications
A person who misuses stolen, reproduced, or unlawfully obtained correspondence, recordings, or communications of any kind faces 6 months to 1 year in prison.
This is the article that most directly restricts what you do with a recording after making it. Even if the recording itself was lawful (because you were a participant), sharing it in ways that harm the other person's privacy can constitute improper use.
Article 202: Unauthorized Disclosure
Publishing private correspondence or recordings that you lawfully possess, but without proper authorization from the other party, carries a penalty of 30 to 60 days fine (or 30 to 100 days fine if the information is of a private nature).
Article 203: Divulgence of Professional Secrets
Professionals who reveal confidential information learned through their work face 1 month to 1 year in prison or 30 to 100 days fine. Public officials and regulated professionals may also face disqualification from their position for 6 months to 2 years.
Ley 7425: Judicial Intercepts and State Surveillance
Law No. 7425, enacted on August 9, 1994, governs the circumstances under which the state may intercept private communications. Its full title is the Law on Registration, Seizure, and Examination of Private Documents and Intervention of Communications (Ley sobre Registro, Secuestro y Examen de Documentos Privados e Intervención de las Comunicaciones).
This law implements the constitutional framework of Article 24 by spelling out exactly when courts may authorize surveillance, what procedures must be followed, and what penalties apply when officials abuse the process.
When Judicial Intercepts Are Permitted
Under Article 9 of Ley 7425, courts may authorize interception of oral, written, or other communications, including fixed, mobile, wireless, and digital telecommunications, but only when investigating specific serious crimes:
- Extortion and kidnapping
- Aggravated corruption and public corruption offenses
- Human trafficking and smuggling of migrants
- Drug trafficking (under Ley 7786)
- Qualified homicide and genocide
- Terrorism
- Aggravated pimping and production of pornography involving minors
- Organ trafficking
The law requires "sufficient indications" of criminal activity before authorization can be granted. Fishing expeditions are not permitted.
Procedural Requirements
Article 10 requires the judge to issue a "founded resolution" (resolución fundada) at the request of the Fiscal General (Attorney General). The judge may conduct the interception procedure personally or delegate it to judicial investigators, who must provide written reports.
Decision timelines are tight: 3 days for ordinary cases, 5 days for organized crime matters.
Article 11 states that the judge's authorization or denial must be documented in a reasoned resolution. If interception is ordered, the ruling remains confidential until the interception concludes and results are incorporated into the case file.
Duration Limits
Article 12 caps initial interception at 4 months. In cases of "extreme gravity," the judge may authorize up to two additional 4-month extensions. The absolute maximum is one year of continuous interception.
Penalties for Officials Who Abuse Intercepts
Article 24 of Ley 7425 imposes 1 to 3 years in prison on judges or officials who disclose intercepted information for unauthorized purposes or fail to observe the required procedural formalities.
Article 25 addresses negligent violations, carrying 6 months to 2 years in prison for judges or officials who negligently allow improper disclosure.
Intercepted information cannot be used for any purpose beyond what motivated the original order. This principle of necessity runs throughout the law.
Phone Calls vs. In-Person Conversations
Phone and Digital Calls
A participant in a phone call in Costa Rica may record it. This applies to landline calls, mobile calls, VoIP calls, and calls through apps like WhatsApp, Zoom, or Microsoft Teams. The participant is recording their own conversation, not intercepting a third party's communication.
However, dissemination restrictions still apply. Recording a phone call for your own reference or potential use in a legal proceeding is one thing. Broadcasting the audio publicly or sending it to media outlets without the other party's knowledge raises exposure under Articles 201 and 202, unless a public interest exception applies.
In-Person Conversations
The same one-party principle governs face-to-face conversations. If you are present and participating in a discussion, you may record it. The recording captures words that were directed to you.
Placing a hidden recording device in a room to capture conversations you are not part of is a different matter entirely. That constitutes third-party interception under Article 198, punishable by 1 to 3 years in prison.
Recording in Public Spaces
Costa Rican law does not contain a standalone statute governing recording in public places. The analysis depends on whether the person being recorded has a reasonable expectation of privacy.
In genuinely public settings, such as streets, parks, government buildings open to the public, and commercial establishments, the expectation of privacy is reduced. Recording activity that is visible to passersby generally does not trigger criminal liability.
Conversations in public that are conducted at normal volume, audible to anyone nearby, carry less privacy protection than whispered discussions or meetings in semi-private areas like restaurant booths or office lobbies.
Video surveillance (CCTV) by businesses and property owners is common throughout Costa Rica and is regulated primarily through the data protection framework under Ley 8968 rather than the criminal recording statutes.
Workplace Recording and Employee Privacy
Employees Recording in the Workplace
An employee who participates in a workplace conversation may record it under the one-party consent principle. This includes meetings with supervisors, discussions with HR, or interactions with colleagues where the employee is present and engaged.
Such recordings have practical value in labor disputes. Costa Rican labor courts operating under the Código de Trabajo may consider participant recordings when evaluating claims of harassment, wrongful termination, or wage violations.
Employer Monitoring
Employers who wish to monitor workplace communications must navigate both the criminal code provisions and the data protection framework of Ley 8968.
Ley 8968, the Law on the Protection of Individuals Regarding the Processing of Personal Data, enacted in 2011, requires that personal data processing occur only with the prior, express, and informed consent of the data subject, unless a specific legal exception applies. The consent must be "unequivocal, freely given, specific, and documented in written or digital form."
For employers, this means:
- Employees must be notified in advance that monitoring or recording occurs.
- The purpose and scope of monitoring must be clearly stated.
- Monitoring must be proportionate to a legitimate business objective.
- Data retention policies must be defined and enforced.
The enforcement body, the Agency for the Protection of Inhabitants' Data (PRODHAB), oversees compliance and handles complaints. Employers who collect recordings without proper consent or notice face administrative sanctions under Ley 8968 and potential criminal exposure under the Código Penal.
Call Centers and Business Telephony
Costa Rica hosts a significant call center and business process outsourcing industry. Companies that record customer calls should provide clear notice at the start of the call, maintain documented consent frameworks, define retention periods for recorded calls, and restrict internal access to recordings to authorized personnel.
While the one-party consent principle means a company representative participating in a call can lawfully record it, data protection obligations under Ley 8968 create additional compliance requirements that go beyond the criminal code analysis.
The Public Interest Doctrine: Lessons from the 2023 Presidential Audio Scandal
The most consequential recent test of Costa Rica's recording laws came in December 2023, when the newspaper La Nación published audio recordings of conversations between President Rodrigo Chaves and government authorities. The recordings, made by former Communications Minister Patricia Navarro during her four-month tenure beginning in May 2022, allegedly revealed improprieties in the awarding of a government contract to a communications consultancy.
What Happened
Navarro, a participant in the recorded conversations, captured audio of discussions involving the president and other officials. The recordings were later provided to La Nación, which published them as part of an investigative report.
President Chaves and Communications Minister Jorge Rodríguez Vives filed a criminal complaint against both La Nación and Navarro. They alleged violations of "improper capture of verbal manifestations and improper use of correspondence," arguing that the recordings violated their privacy rights under the Código Penal.
The Prosecution's Response
Prosecutors rejected the request to suppress the recordings and order La Nación to stop publishing them. The stated rationale was straightforward: the recordings fell within the public interest. Their relevance to allegations of public corruption and the misuse of government contracts outweighed the privacy interests of the officials involved.
This outcome aligned with the public interest exception embedded in Article 196 of the Código Penal, which exempts information of public interest from the criminal prohibition on dissemination of private communications.
The Ongoing Corruption Case
The recordings became central evidence in the corruption investigation. Prosecutors alleged that Chaves and Rodríguez rigged a contract to favor a company owned by businessman Christian Bulgarelli, with $32,000 allegedly funneled to Chaves's former adviser, Federico Cruz.
By mid-2025, Costa Rica's Supreme Court sought to strip President Chaves of his immunity, making him the first sitting president in the country's history to face such a proceeding. Navarro was named as a prosecution witness. The audio recordings backed the prosecution's claims.
What It Means for Recording Law
The Navarro case did not create new law, but it established a practical precedent. A participant who records conversations involving public officials engaged in potential corruption, and who provides those recordings to the press, can invoke the public interest doctrine as a shield against criminal prosecution. Courts and prosecutors weighed the competing interests and came down on the side of transparency.
This does not mean all dissemination of private recordings is protected. The public interest doctrine applies narrowly. Recordings of purely private matters, personal conversations with no bearing on public affairs, remain subject to the full weight of the dissemination restrictions in Articles 201 and 202.
Penalties at a Glance
| Violation | Statute | Penalty |
|---|---|---|
| Intercepting or recording a third party's private communications | Código Penal Art. 198 | 1 to 3 years prison |
| Seizing, intercepting, or diverting communications directed to another | Código Penal Art. 196 | 1 to 3 years prison |
| Same conduct by mail handlers, system admins, or telecom employees | Código Penal Art. 196 (aggravated) | 2 to 4 years prison |
| Unauthorized access to personal data in computer systems | Código Penal Art. 196 bis | 1 to 3 years prison |
| Same involving minors or sensitive data | Código Penal Art. 196 bis (aggravated) | 2 to 4 years prison |
| Any privacy violation by a public official using their position | Código Penal Art. 200 | 2 to 6 years prison |
| Misusing unlawfully obtained recordings or correspondence | Código Penal Art. 201 | 6 months to 1 year prison |
| Publishing lawfully held private recordings without authorization | Código Penal Art. 202 | 30 to 100 days fine |
| Judge or official abusing judicial intercept authority | Ley 7425 Art. 24 | 1 to 3 years prison |
| Negligent disclosure of intercepted material by official | Ley 7425 Art. 25 | 6 months to 2 years prison |
Business Compliance in Costa Rica
Companies operating in Costa Rica that record conversations, whether with customers, employees, or business partners, should follow these steps.
Identify your legal basis under Ley 8968. Before collecting any voice recording, determine whether you are relying on consent, contractual necessity, legal obligation, or another lawful basis. Document that determination.
Provide clear notice. Even though one-party consent permits participant recording, Ley 8968's transparency requirements mean businesses should inform individuals when recordings are being made. For phone calls, an automated disclosure at the start of the call is standard practice.
Define retention periods. Establish written policies governing how long recordings are kept. Delete or anonymize recordings when the retention period expires.
Restrict access. Limit who within the organization can access stored recordings. Maintain access logs and audit them periodically.
Train your team. Employees who handle recordings need to understand that recording a conversation they participate in is lawful, but sharing those recordings outside authorized channels may not be.
Address cross-border transfers. If recordings are stored or processed outside Costa Rica, ensure the transfer complies with Ley 8968's data protection requirements.
Register with PRODHAB if required. Entities that maintain databases of personal data may need to register with the Agency for the Protection of Inhabitants' Data. Check current registration requirements.
Foreigners and Visitors
Costa Rica's recording laws apply equally to citizens, residents, and visitors. If you break the law while in Costa Rica, you are subject to the Costa Rican judicial system regardless of your nationality.
Tourists and business travelers should be aware that while recording your own conversations is permitted, sharing those recordings online or with media could trigger criminal exposure under the dissemination provisions. The penalties apply to anyone on Costa Rican territory.
For foreign businesses operating call centers or regional offices in Costa Rica, local data protection and recording laws govern any recording activity that takes place within the country, even if the other party to the call is abroad.
Sources and References
- Constitución Política de la República de Costa Rica, 1949 (rev. 2020) — Artículo 24(constituteproject.org)
- Código Penal de Costa Rica (Ley No. 4573) — Artículos 196 a 203, Delitos Contra el Ámbito de Intimidad(pgrweb.go.cr).gov
- Ley No. 7425 — Ley sobre Registro, Secuestro y Examen de Documentos Privados e Intervención de las Comunicaciones (1994)(pgrweb.go.cr).gov
- Ley No. 8968 — Ley de Protección de la Persona frente al Tratamiento de sus Datos Personales (2011)(pgrweb.go.cr).gov
- UNODC SHERLOC — Costa Rica Código Penal, Título VI, Artículos 196-201(unodc.org)
- Constitución Política de Costa Rica — Texto completo (WIPO)(wipo.int)
- Freedom House — Costa Rica: Freedom on the Net 2024(freedomhouse.org)
- Procuraduría General de la República de Costa Rica — Sistema Costarricense de Información Jurídica (SCIJ)(pgrweb.go.cr).gov
- Al Jazeera — Chaves Robles becomes first Costa Rican president to face loss of immunity (August 2025)(aljazeera.com)
- DLA Piper — Data Protection Laws of the World: Costa Rica(dlapiperdataprotection.com)