Recording meetings in Portugal.
Portugal is one of the clearer European jurisdictions on this question, and one of the stricter ones: its criminal provision turns directly on the consent of the person whose words are recorded.
The General Data Protection Regulation applies here of its own force rather than through a national translation of it, and the national act below handles the parts member states are left to decide for themselves. The supervisory authority enforces both. In Portugal that is Lei n.º 58/2019. Alongside it, Article 199 of the Código Penal addresses unlawful recordings: recording words spoken by another person and not intended for the public, without that person's consent, and separately using or allowing others to use such a recording.
Article 199 is drafted around consent rather than around whether you were a participant, which makes Portugal stricter in practice than the jurisdictions whose provisions target only non-participants. Being in the room is not, by itself, the answer. The provision also treats using or passing on a recording as conduct separate from making it, so a recording properly made can still raise a question when it is shared. On top of that sit the ordinary data protection obligations: a stated purpose, a lawful basis, transparency at the time, bounded retention.
- The data protection instrument
- Lei de Execução do RGPD (GDPR Implementation Act), Lei n.º 58/2019
- Who supervises this
- Comissão Nacional de Protecção de Dados (National Data Protection Commission)
Criminal provisions
These sit alongside data protection law rather than replacing it. They generally address conduct that is covert or that involves conversations the recorder was not part of, which is a narrower category than everyday meeting recording, and a considerably more serious one.
Código Penal, Article 199
Criminal Code
Unlawful recordings and photographs. The provision addresses recording words spoken by another person and not intended for the public, without that person's consent, and separately addresses using or allowing others to use such a recording.
What is specific to this country
- The GDPR applies directly in Portugal rather than through a national equivalent. A meeting recording that identifies the people in it is personal data, so making, storing and sharing it is processing, and it needs a lawful basis under Article 6.
- Transparency is a separate obligation from lawful basis. Article 13 requires that people are told what is being collected and why at the time it is collected, which for a meeting means at the start rather than afterwards.
- Article 199 is framed around the consent of the person whose words are recorded, which makes Portugal one of the clearer European jurisdictions on the point and one of the stricter ones in practice.
- The provision covers using or sharing a recording as separate conduct from making it, so a recording that was lawfully made can still raise a question when it is passed on.
What to do in practice
The practice below is not the legal minimum in every jurisdiction. It is the practice that is defensible in all of them, which is a more useful target when your calls cross borders.
- Say it out loud at the start, before anything substantive is discussed, and say what the recording is for. Not a line in the invite nobody read.
- Give people a real way to decline. An announcement that leaves no room to object is closer to a notification than to consent.
- Write it down. A line in the notes recording that the meeting was recorded, and that nobody objected, is worth more later than anyone's memory of the moment.
- Keep external meetings to a higher standard than internal ones. Colleagues share an employment context; a customer, a candidate, or a supplier does not.
- Decide how long you keep recordings, and actually delete them. Indefinite retention converts a small, well-handled recording into a growing liability.
- Treat sharing as a fresh decision. The question is not whether you were allowed to record, it is whether this particular person was meant to hear it.
Questions
Is being a participant enough in Portugal?
Article 199 is framed around the consent of the person whose words are recorded rather than around whether the recorder was present. That is a meaningfully different structure from, say, Sweden's, and it is why announcing the recording and getting clear agreement matters particularly here.
Is sharing a recording treated separately?
Yes. The provision addresses using or allowing others to use such a recording as distinct conduct from making it. Under the Regulation, sharing is also separate processing needing its own basis.
Who supervises data protection in Portugal?
The Comissão Nacional de Protecção de Dados, the CNPD.
Sources
Primary sources, so you can check this rather than take our word for it.
Recording that announces itself.
Canto's notetaker joins as a named participant the organiser admits, and the recording, the transcript and who can see it stay under your control. 300 minutes a month, free forever.