Call Recording Laws in Italy
Short answer: Yes, if you are a participant. The Court of Cassation has held that a party who records their own conversation for personal purposes does not commit the interception offence in Article 617 of the Penal Code. Businesses recording calls must comply with the GDPR and the Garante’s guidance, including giving notice.
Plain-English summary
Italian criminal law (Articolo 617 Codice penale) criminalizes the unauthorized interception of telephone or electronic communications by a non-participant. The Italian Court of Cassation has held that participant recording for personal purposes does not violate Article 617, because the recording is by a party to the conversation rather than by an outsider.
Commercial and organizational recording is governed by GDPR and the Italian privacy code (D.Lgs. 196/2003), under the supervision of the Garante. The Garante has issued specific guidance on call recording.
Statutory framework
- Article 617 Codice penale. Criminal interception offence; targets non-participant interception.
- D.Lgs. 196/2003 (Codice in materia di protezione dei dati personali). Italian privacy code, harmonized with GDPR.
- GDPR. Applies in full.
Regulator guidance
The Garante has issued guidance on call recording, including specific positions on retention (typically 6 months for general business; longer for regulated activities), employee notice, and the use of recordings in disputes.
Italian privacy code specifics
D.Lgs. 196/2003 supplements GDPR with Italian-specific provisions including on employee monitoring (Article 4 of the Statuto dei Lavoratori).
Workplace and business calls
Italian workplace recording requires compliance with Article 4 of the Statuto dei Lavoratori (Law 300/1970), as amended in 2015. Recording of work activities for organizational or production purposes is permitted only by collective agreement with the trade-union representatives or by authorization from the Ispettorato del Lavoro. Recordings without these foundations are inadmissible in disciplinary proceedings.
Cross-border and conflict-of-laws notes
Garante jurisdiction follows GDPR’s one-stop-shop. Italian penal jurisdiction may extend to recordings made outside Italy of conversations with persons in Italy.
Penalties and remedies
Criminal: Article 617 C.p. — up to 4 years’ imprisonment.
Administrative: GDPR fines.
Civil: GDPR Art. 82 compensation.
Practical guidance
- Personal participant recording is generally lawful but its use as evidence is constrained.
- Commercial recording requires the GDPR compliance program.
- Workplace recording requires a collective agreement or labor-inspectorate authorization under Art. 4 Statuto dei Lavoratori.