Call Recording Laws in Italy
Plain-English summary
Italian criminal law (Articolo 617 Codice penale) criminalizes the unauthorized interception of telephone or electronic communications by a non-participant. The Italian Court of Cassation has held that participant recording for personal purposes does not violate Article 617, because the recording is by a party to the conversation rather than by an outsider.
Commercial and organizational recording is governed by GDPR and the Italian privacy code (D.Lgs. 196/2003), under the supervision of the Garante. The Garante has issued specific guidance on call recording.
Statutory framework
- Article 617 Codice penale. Criminal interception offence; targets non-participant interception.
- D.Lgs. 196/2003 (Codice in materia di protezione dei dati personali). Italian privacy code, harmonized with GDPR.
- GDPR. Applies in full.
Regulator guidance
The Garante has issued guidance on call recording, including specific positions on retention (typically 6 months for general business; longer for regulated activities), employee notice, and the use of recordings in disputes.
Italian privacy code specifics
D.Lgs. 196/2003 supplements GDPR with Italian-specific provisions including on employee monitoring (Article 4 of the Statuto dei Lavoratori).
Workplace and business calls
Italian workplace recording requires compliance with Article 4 of the Statuto dei Lavoratori (Law 300/1970), as amended in 2015. Recording of work activities for organizational or production purposes is permitted only by collective agreement with the trade-union representatives or by authorization from the Ispettorato del Lavoro. Recordings without these foundations are inadmissible in disciplinary proceedings.
Cross-border and conflict-of-laws notes
Garante jurisdiction follows GDPR’s one-stop-shop. Italian penal jurisdiction may extend to recordings made outside Italy of conversations with persons in Italy.
Penalties and remedies
Criminal: Article 617 C.p. — up to 4 years’ imprisonment.
Administrative: GDPR fines.
Civil: GDPR Art. 82 compensation.
Practical guidance
- Personal participant recording is generally lawful but its use as evidence is constrained.
- Commercial recording requires the GDPR compliance program.
- Workplace recording requires a collective agreement or labor-inspectorate authorization under Art. 4 Statuto dei Lavoratori.