Recording meetings in Italy.
Italy layers employment law over data protection law in a way that catches organisations out: the constraint on recording staff often comes from the Workers' Statute rather than from privacy rules.
The General Data Protection Regulation applies here of its own force rather than through a national translation of it, and the national act below handles the parts member states are left to decide for themselves. The supervisory authority enforces both. In Italy that is the Codice privacy as amended in 2018. Alongside it, Article 615-bis of the Codice penale addresses obtaining information about private life through recording devices in a dwelling or similar private place, and separately addresses disclosing it.
Article 615-bis is tied to private life in a private dwelling, so it maps poorly onto an ordinary business meeting, and the data protection layer is the operative one there. What genuinely distinguishes Italy is the employment dimension: Italian law constrains remote monitoring of employees through mechanisms that sit outside data protection law entirely and can require agreement with employee representatives or authorisation. An organisation recording staff meetings routinely should treat that as the first question rather than the last.
- The data protection instrument
- Codice in materia di protezione dei dati personali (Personal Data Protection Code), D.Lgs. 196/2003, as amended by D.Lgs. 101/2018
- Who supervises this
- Garante per la protezione dei dati personali (Italian Data Protection Authority)
Criminal provisions
These sit alongside data protection law rather than replacing it. They generally address conduct that is covert or that involves conversations the recorder was not part of, which is a narrower category than everyday meeting recording, and a considerably more serious one.
Codice penale, Article 615-bis
Criminal Code
Unlawful interference with private life. The provision addresses obtaining, through recording devices, images or information about private life taking place in a private dwelling or similar place, and separately addresses disclosing what was obtained.
What is specific to this country
- The GDPR applies directly in Italy rather than through a national equivalent. A meeting recording that identifies the people in it is personal data, so making, storing and sharing it is processing, and it needs a lawful basis under Article 6.
- Transparency is a separate obligation from lawful basis. Article 13 requires that people are told what is being collected and why at the time it is collected, which for a meeting means at the start rather than afterwards.
- The Garante has a long line of decisions on workplace monitoring, and Italian employment law adds its own constraints on monitoring employees that sit alongside data protection rules.
- Article 615-bis is tied to private life in a dwelling or similar place, so it maps poorly onto an ordinary business meeting. The data protection layer is the operative one there.
What to do in practice
The practice below is not the legal minimum in every jurisdiction. It is the practice that is defensible in all of them, which is a more useful target when your calls cross borders.
- Say it out loud at the start, before anything substantive is discussed, and say what the recording is for. Not a line in the invite nobody read.
- Give people a real way to decline. An announcement that leaves no room to object is closer to a notification than to consent.
- Write it down. A line in the notes recording that the meeting was recorded, and that nobody objected, is worth more later than anyone's memory of the moment.
- Keep external meetings to a higher standard than internal ones. Colleagues share an employment context; a customer, a candidate, or a supplier does not.
- Decide how long you keep recordings, and actually delete them. Indefinite retention converts a small, well-handled recording into a growing liability.
- Treat sharing as a fresh decision. The question is not whether you were allowed to record, it is whether this particular person was meant to hear it.
Questions
Does Article 615-bis apply to a business meeting?
It is framed around private life in a dwelling or similar private place, so it is a poor fit for an ordinary office or online meeting. The data protection obligations are the ones that govern that case.
What is the employment-law issue in Italy?
Italian law places specific constraints on remote monitoring of employees which operate alongside data protection rules rather than inside them, and can involve employee representatives. If you are recording staff routinely, that is a question for an Italian employment lawyer, not only a privacy one.
Who enforces data protection in Italy?
The Garante per la protezione dei dati personali, which has a long published line of decisions on workplace monitoring specifically.
Sources
Primary sources, so you can check this rather than take our word for it.
Recording that announces itself.
Canto's notetaker joins as a named participant the organiser admits, and the recording, the transcript and who can see it stay under your control. 300 minutes a month, free forever.