Yes, recording phone calls in Portugal is legal under strict conditions outlined in the Lei n.º 32/2008 (Data Protection Act) and Regulamento Geral sobre a Proteção de Dados (RGPD). Consent from at least one party is mandatory, and recordings must comply with proportionality and transparency principles. The Comissão Nacional de Proteção de Dados (CNPD) enforces these rules, with potential 2026 amendments tightening consent requirements for non-business contexts.
Key Regulations for Recording Phone Calls in Portugal
- Consent Requirement: One-party consent suffices under Portuguese law, but both parties must be informed of recording unless justified by legitimate interests (e.g., fraud prevention). Silence or absence of objection does not constitute consent.
- Purpose Limitation: Recordings must serve a specific, explicit purpose (e.g., contractual verification) and cannot be repurposed without re-consent. The CNPD prohibits indefinite storage or secondary use for unrelated purposes.
- Data Subject Rights: Recorded individuals retain rights to access, rectify, or erase data under RGPD. Entities must provide clear notice of retention periods and storage safeguards, with mandatory breach notifications to the CNPD within 72 hours.
Critical Compliance Notes:
- Business vs. Personal Contexts: Corporate recordings require documented policies and employee training. Personal recordings (e.g., private disputes) face stricter scrutiny under Artigo 199.º do Código Penal (unlawful interception penalties).
- Cross-Border Considerations: If calls involve EU residents outside Portugal, RGPD’s extraterritorial scope applies, demanding additional safeguards.
- 2026 Regulatory Shifts: Proposed amendments may mandate explicit (not just implied) consent for non-essential recordings, aligning with the AI Act’s emphasis on biometric data protection. Monitor CNPD updates for transitional provisions.