Not legal advice. This site is an editorial reference. Laws change — always confirm with a qualified attorney in the relevant jurisdiction before recording, and check each page’s last reviewed date.

Call Recording Laws in France

Plain-English summary

France criminalizes the recording or transmission, without the consent of the speaker, of words spoken in a private setting. Article 226-1 of the French Penal Code applies to recordings made by participants as well as third parties, when the words were spoken in a context where the speaker had not consented to the recording.

The CNIL — the French data-protection authority — has issued detailed guidance on call recording in commercial settings, including specific guidance on the use of recordings for training and quality-assurance.

Statutory framework

  • Article 226-1 du Code pénal. Criminalizes recording or transmission of private speech without consent.
  • Loi n° 78-17 du 6 janvier 1978 (Loi Informatique et Libertés). French data-protection statute.
  • GDPR. Applies in full.
  • Code des postes et des communications électroniques. Telecommunications-specific rules.

Regulator guidance

The CNIL has published guidance on call recording covering acceptable lawful bases, retention (commonly 6 months for general business purposes; longer for regulated activities such as financial services under MiFID II), access restrictions, and data-subject rights. The CNIL has imposed administrative fines for excessive retention and inadequate notice.

CNIL guidance specifics

Recording for training purposes: must be a sample of calls, not all calls. Retention typically capped at six months. Employee notice required.

Recording for dispute resolution or evidence: longer retention possible, but limited to what is necessary.

Recording of marketing calls: separate consent under telecom marketing rules.

Workplace and business calls

French workplace recording requires:

  • Information of the works council (CSE) and prior consultation under the Code du travail.
  • Information of employees individually.
  • A declaration in the company’s data-processing register.
  • A defined retention period.

The Cour de cassation has repeatedly held that recordings made without employee notice are inadmissible in employment proceedings.

Cross-border and conflict-of-laws notes

For cross-border calls involving French participants, the CNIL takes the position that French law and GDPR apply where the data subject is in France. Transfers outside the EEA require an Article 44 transfer mechanism.

Penalties and remedies

Criminal: Article 226-1 CP — up to 1 year’s imprisonment and a €45,000 fine.

Administrative: CNIL fines up to GDPR maximums.

Civil: compensation under GDPR Article 82; civil-code privacy and personality-right claims.

Practical guidance

  • Audible notice at the start of every recorded business call.
  • Sample, do not record-all, for training purposes.
  • Restrict access; document the access list.
  • Set retention to 6 months unless a specific lawful basis requires longer.

Related