Recording meetings in France.
France pairs a strict criminal provision on private conversations with one of Europe's most active regulators on workplace monitoring, which makes it a jurisdiction worth reading properly rather than assuming.
The General Data Protection Regulation applies here of its own force rather than through a national translation of it, and the national act below handles the parts member states are left to decide for themselves. The supervisory authority enforces both. Alongside it, Article 226-1 of the Code pénal addresses recording or transmitting words spoken in private or in confidence without the speaker's consent, and Article 226-2 addresses keeping or publishing what was obtained that way.
The practical distinction in French law is the setting: words spoken in private or in confidence, rather than the technology used to capture them. A meeting among colleagues who have been told and agreed is a long way from the conduct those articles target. The CNIL publishes detailed guidance on monitoring in the employment relationship, and because recording staff routinely is monitoring, that guidance is the operative reference for most organisations rather than the criminal provision.
- The data protection instrument
- Loi Informatique et Libertés (Data Protection Act), Loi n° 78-17 du 6 janvier 1978, as amended
- Who supervises this
- Commission nationale de l'informatique et des libertés (National Commission on Informatics and Liberty)
Criminal provisions
These sit alongside data protection law rather than replacing it. They generally address conduct that is covert or that involves conversations the recorder was not part of, which is a narrower category than everyday meeting recording, and a considerably more serious one.
Code pénal, Article 226-1
Criminal Code
Invasion of privacy. The provision addresses recording or transmitting, without the consent of the speaker, words spoken in private or in confidence. Article 226-2 separately addresses keeping or making public a recording obtained that way.
What is specific to this country
- The GDPR applies directly in France rather than through a national equivalent. A meeting recording that identifies the people in it is personal data, so making, storing and sharing it is processing, and it needs a lawful basis under Article 6.
- Transparency is a separate obligation from lawful basis. Article 13 requires that people are told what is being collected and why at the time it is collected, which for a meeting means at the start rather than afterwards.
- The CNIL is unusually active in publishing guidance on workplace monitoring, and its positions on recording employees are worth reading before deploying anything that records staff routinely.
- Article 226-1 turns on words spoken in private or in confidence, which is a question about the setting rather than about the technology used.
What to do in practice
The practice below is not the legal minimum in every jurisdiction. It is the practice that is defensible in all of them, which is a more useful target when your calls cross borders.
- Say it out loud at the start, before anything substantive is discussed, and say what the recording is for. Not a line in the invite nobody read.
- Give people a real way to decline. An announcement that leaves no room to object is closer to a notification than to consent.
- Write it down. A line in the notes recording that the meeting was recorded, and that nobody objected, is worth more later than anyone's memory of the moment.
- Keep external meetings to a higher standard than internal ones. Colleagues share an employment context; a customer, a candidate, or a supplier does not.
- Decide how long you keep recordings, and actually delete them. Indefinite retention converts a small, well-handled recording into a growing liability.
- Treat sharing as a fresh decision. The question is not whether you were allowed to record, it is whether this particular person was meant to hear it.
Questions
Do I need everyone's consent to record a meeting in France?
Consent is one lawful basis under the Regulation and not always the right one, particularly between an employer and an employee where consent is rarely freely given. But Article 226-1 turns on the consent of the person whose private words are recorded, which is a separate question. Telling everyone and getting their agreement addresses both, which is why it is the practice we recommend.
What does the CNIL say about recording employees?
It publishes standing guidance on workplace monitoring, covering proportionality, informing staff, and consulting employee representatives. Recording meetings routinely falls within it. Check the CNIL's current published position rather than a secondary summary.
Does it matter that participants are outside France?
Yes. Jurisdiction follows the participants, so a call spanning several countries can engage several sets of rules at once. That is the practical argument for holding every meeting to the same announced-and-agreed standard.
Sources
Primary sources, so you can check this rather than take our word for it.
Recording that announces itself.
Canto's notetaker joins as a named participant the organiser admits, and the recording, the transcript and who can see it stay under your control. 300 minutes a month, free forever.