Mexico Recording Laws: One-Party Consent Rules and Penalties (2026)

Last updated: May 15, 2026

Mexico takes a clear position on recording: if you are part of a conversation, you have the legal right to record it. You do not need to inform the other parties. But the moment a third party tries to intercept communications they are not part of, Mexico's constitutional protections apply with full force, requiring a federal judicial order and strict legal oversight.

This guide covers Mexico's recording laws as of May 2026, including the constitutional foundation, the federal statutes, the 2021 Ley Olimpia reform for intimate image crimes, the 2025 overhaul of data protection enforcement, how state laws interact with federal rules, workplace and business compliance obligations, and what happens when the law is broken.

Jurisdiction scope: This article addresses recording and wiretapping law in Mexico under federal constitutional and statutory law (Constitución Política de los Estados Unidos Mexicanos, Código Penal Federal, Código Nacional de Procedimientos Penales, LFPDPPP, LGPDPPSO, and the Ley Olimpia reforms). It notes selected state-level variations where they differ materially. It does not address recording laws in other countries. For US rules that apply when one party is in the United States, see our one-party consent states guide.

The Quick Answer: Is Mexico One-Party or Two-Party Consent?

Mexico is a one-party consent country. Under Article 16 of the Constitución Política de los Estados Unidos Mexicanos (CPEUM) and the doctrine of the Suprema Corte de Justicia de la Nación (SCJN), a participant in a conversation may record that conversation without notifying or obtaining the consent of the other parties. This principle applies to telephone calls (landline, mobile, and VoIP), video calls, and in-person conversations. The constitutional prohibition on intercepting private communications targets third-party surveillance by someone who is not a party to the exchange, not the recording choices of a participant. Federal criminal law (the Código Penal Federal, or CPF) reinforces this framework by criminalizing only unauthorized third-party interception, not participant recording.

The Constitutional Foundation: Article 16 and Article 6

Article 16: Inviolability of Private Communications

Mexico's approach to communications privacy starts at the constitutional level. Article 16 of the Constitución Política de los Estados Unidos Mexicanos (CPEUM) establishes the inviolability of private communications.

The relevant paragraph states, in translation: "Private communications are inviolable. Only a federal judge, upon application of the competent federal authority or competent federal public prosecutor's office, may authorize their interception."

This constitutional provision has several important implications.

First, it protects communications from government surveillance without judicial oversight. Any government agency seeking to intercept private communications must obtain a written judicial order from a federal judge.

Second, the protection applies to third-party interception. Mexican constitutional doctrine and courts have consistently held that when a person records their own participation in a conversation, no "interception" is occurring under Article 16. The constitutional prohibition targets outside surveillance, not participant documentation.

Third, the protections extend to all forms of communication: telephone calls, text messages, emails, video calls, and in-person conversations in private spaces.

Article 6: Right to Information and Privacy of Personal Data

Article 6 of the CPEUM establishes the right to information as a fundamental human right and, since the 2014 constitutional reform, explicitly protects the right to personal data privacy. The article provides that every person has the right to the protection of personal data, to access, rectify, and cancel that data, and to oppose its processing. This constitutional basis underpins both the LFPDPPP (private sector) and the LGPDPPSO (public sector) data protection regimes discussed below.

Article 6 also provides the constitutional foundation for the one-party recording right from the participant's perspective. An employee recording a workplace conversation to document potential labor violations, or a journalist recording a public official's statements, exercises the right to information guaranteed by Article 6. Courts have applied this framing to uphold participant recordings used in evidence.

What Articles 16 and 6 Do Not Prohibit

Article 16 does not prohibit a participant in a conversation from recording that conversation. Mexican legal doctrine treats a participant's own recording as an exercise of autonomy over information they are already lawfully receiving, not as an invasion of another party's communications.

This distinction is the legal basis for Mexico's effective one-party consent framework. It means that recording a phone call you are part of, capturing a meeting you are attending, or documenting an in-person conversation you are participating in is legal under federal constitutional doctrine.

Federal Statutes Governing Recording

Código Nacional de Procedimientos Penales (CNPP)

The Código Nacional de Procedimientos Penales (CNPP), Mexico's unified national code of criminal procedure enacted in 2014, governs how law enforcement may conduct communications interception as an investigative technique.

Article 291 defines intervención de comunicaciones privadas (interception of private communications) as a special investigative technique that may only be authorized by a federal judge. The authorization is available only for serious federal crimes listed in Article 291 itself, which include organized crime, kidnapping, human trafficking, drug trafficking, arms trafficking, and corruption offenses.

Article 291 Bis (added in 2016) establishes additional procedural safeguards for real-time interception requests, requiring that the requesting authority demonstrate the existence of reasonable grounds to suspect the target of a specific listed offense, that other investigative methods have been tried or would be insufficient, and that the communications to be intercepted are directly related to the alleged offense.

Article 292 sets time limits on authorizations. An initial judicial authorization is valid for up to sixty days and may be renewed, but the total duration may not exceed six months absent extraordinary circumstances authorized by a senior federal judge.

These CNPP provisions apply to law enforcement interception. They do not regulate private participant recording.

Código Penal Federal (CPF): Articles 177 and 211 bis

The Código Penal Federal (CPF) contains the criminal penalties for unauthorized communications interception and related privacy offenses.

Article 177 criminalizes the unauthorized interception of private communications. A person who intervenes in private communications without an order from a competent judicial authority commits a federal crime. Penalties are six to twelve years in prison plus a fine of 300 to 600 days' minimum wage.

Article 211 bis addresses the unauthorized revealing, divulging, or use of information or images obtained from an intervention of private communications. Penalties under Article 211 bis also range from six to twelve years in prison and fines of 300 to 600 days' minimum wage. Article 211 bis is distinct from Article 177: Article 177 punishes the act of intercepting the communication itself, while Article 211 bis punishes revealing or exploiting information or images obtained from an interception that has already occurred. A pending legislative proposal (introduced in the Chamber of Deputies in 2025) would expand Article 211 bis to cover images generated by artificial intelligence systems; that proposal had not been enacted as of May 2026.

Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP)

The Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), enacted in 2010 and in force with subsequent regulatory updates, governs how private parties (businesses and individuals) collect, process, and store personal data. Audio recordings of conversations are personal data under this law.

Key obligations under the LFPDPPP for those recording communications include:

• Notice (Aviso de Privacidad): Any entity that records communications for business purposes must provide a privacy notice to the individuals being recorded, explaining who is collecting the data, for what purpose, and how it will be used.
• Consent: Ordinary personal data (including audio recordings of conversations) requires at least implicit consent after notice. Sensitive personal data requires express consent.
• Purpose limitation: Recordings may only be used for the purpose stated in the privacy notice.
• Security: Recordings must be protected by appropriate technical, administrative, and physical security measures.
• Enforcement authority (post-March 2025): Enforcement of the LFPDPPP was transferred from INAI to the Secretaría Anticorrupción y Buen Gobierno under the decree published in the Diario Oficial de la Federación on March 20, 2025. The Secretaria can impose administrative sanctions ranging from 100 to 320,000 times the daily minimum wage for violations. See the section below on the 2025 reform for details.

The LFPDPPP creates a regulatory layer on top of the criminal law framework. A business call center may be legally permitted to record calls under the one-party framework, but it must still comply with LFPDPPP notice and consent requirements to avoid regulatory sanctions.

Federal Telecommunications and Broadcasting Law (LFTR)

The Ley Federal de Telecomunicaciones y Radiodifusión (LFTR), enacted in 2014, requires telecommunications carriers to maintain technical infrastructure capable of supporting lawful interception requests from judicial authorities. Carriers must retain certain metadata (call records, subscriber data) for periods specified by law to support criminal investigations.

The LFTR does not directly regulate private participant recording, but it reinforces the judicial authorization requirement for any carrier-assisted interception.

SCJN Jurisprudence on Recording Admissibility

The Suprema Corte de Justicia de la Nación (SCJN) has developed a body of tesis (binding and persuasive precedents) that define when recordings are admissible as evidence in Mexican courts.

The foundational SCJN doctrine holds that a recording of a private communication is lawfully obtained when it is disclosed by one of the participants in that communication. A participant who records a conversation they are party to does not intercept a communication within the meaning of Article 16 of the Constitution; rather, they document information they are already lawfully receiving. This doctrine is reflected in multiple tesis published in the Semanario Judicial de la Federación.

The SCJN has emphasized two pathways to lawful recording admission in criminal and civil proceedings:

1. Participant disclosure: A recording made by any party to the communication is treated as lawfully obtained and is admissible as documentary evidence, subject to authentication requirements.
2. Judicial authorization: A recording made by law enforcement pursuant to a judicial authorization under CNPP Articles 291 to 292 is admissible under the chain-of-custody rules governing special investigative techniques.

Recordings obtained by a third party without judicial authorization are classified as illicit evidence and must be excluded from consideration under the constitutional exclusionary rule (regla de exclusión de prueba ilícita). The SCJN has applied this rule to recordings obtained through unauthorized wiretaps, regardless of the evidentiary value the content might otherwise have.

Authentication requirements: For participant recordings to be given full evidentiary weight, they must be authenticated as genuine and unaltered. Courts apply a practical standard: the recording must be intelligible, the voices and context must be identifiable, and the offering party must be able to explain the chain of custody from recording to presentation. Metadata, forensic authentication, and corroborating evidence all strengthen admissibility in contested proceedings.

Labor tribunals have been particularly receptive to participant recordings. The Tribunal Federal de Conciliación y Arbitraje and successor labor courts have admitted recordings by employees of conversations with supervisors in wrongful termination, harassment, and wage-theft cases, applying the participant-disclosure doctrine directly.

Ley Olimpia: Non-Consensual Intimate Images (2021)

Overview

The Ley Olimpia refers to a package of federal and state legislative reforms addressing digital violence, specifically the non-consensual recording and distribution of intimate images. At the federal level, the key reform was published in the Diario Oficial de la Federación on June 1, 2021, and added Article 199 octies to the Código Penal Federal.

The name originates from Olimpia Coral Melo Cruz, a woman from Puebla whose intimate video was distributed without her consent. Following years of advocacy by Melo and feminist collectives, all 31 states and Mexico City have enacted complementary state-level provisions.

CPF Article 199 octies: What It Criminalizes

Article 199 octies of the CPF creates the federal offense of violación a la intimidad sexual (violation of sexual intimacy). The article criminalizes two related categories of conduct:

Non-consensual recording: A person who videotapes, audio-records, photographs, prints, or creates images, audio, or videos of intimate sexual content of a person without that person's consent, approval, or authorization commits the offense.

Non-consensual distribution: A person who discloses, shares, distributes, or publishes images, videos, or audio of intimate sexual content of a person without that person's consent, approval, or authorization also commits the offense.

Penalties under Article 199 octies are three to six years in prison plus fines of 500 to 1,000 Unidades de Medida y Actualización (UMAs).

Aggravated Penalties (CPF Article 199 Decies)

The minimum and maximum penalties are increased by up to one half when:

• The offense is committed by a spouse, cohabitant, or any person with whom the victim has or had a romantic, emotional, or trust relationship
• The offense is committed by a public official in the exercise of their duties
• The victim is a person who cannot understand the significance of the act or cannot resist it
• The perpetrator obtains any type of non-financial benefit
• As a result of the effects of the offense, the victim attempts self-harm or takes their own life

Relationship to the General Recording Framework

Article 199 octies is not a recording-consent statute in the general sense. It does not require consent for all recordings; rather, it creates a targeted offense for intimate sexual content. A participant in a workplace meeting who records that meeting for labor-dispute purposes is not affected by Article 199 octies. A person who records an intimate partner without consent in a sexual context is subject to Article 199 octies regardless of whether the general one-party consent framework might otherwise have applied.

The practical message: the one-party consent framework does not insulate anyone from criminal liability under Article 199 octies. Intimate recordings require explicit, affirmative consent from the subject.

Watch out: Mexico City's Código Penal para el Distrito Federal Article 226 Bis, which predates Ley Olimpia, addresses unauthorized recording of images and sounds that violate privacy and was frequently applied to NCII cases before the federal reform. Both the federal and CDMX provisions may apply simultaneously in the Federal District.

Deepfakes and AI-Generated Content: The Pending Legal Gap

As of May 2026, Mexico has not enacted a comprehensive federal statute specifically criminalizing the creation or distribution of AI-generated deepfake intimate content. However, several legislative developments are relevant.

State-level action: The State of Mexico (Estado de Mexico) enacted legislation in late 2025 imposing penalties of up to five years in prison and 500 UMAs for the creation and non-consensual distribution of intimate images, audio, or videos manipulated through artificial intelligence.

Federal proposals: Multiple initiatives have been introduced in the Chamber of Deputies and Senate since 2024. One proposal introduced in March 2025 would add penalties of three to six years in prison for generating, distributing, or altering through AI systems intimate content of an adult without their consent. A separate proposal introduced in March 2026 would require AI system providers to label synthetic content in a machine-readable format and mandate disclosure when distributing AI-generated or manipulated content.

CPF Article 211 bis proposal: As noted above, a proposal to expand Article 211 bis to cover AI-generated images from private communications interceptions was pending in the Chamber of Deputies as of May 2026.

Current legal basis for deepfake victims: Until a federal deepfake statute is enacted, victims of AI-generated intimate image abuse may seek recourse under (a) the existing Ley Olimpia framework if the deepfake is sexual in nature and distributed without consent, (b) civil claims for daño moral under the Código Civil Federal, and (c) CPF provisions on identity fraud or computer crimes where the deepfake involved unauthorized use of personal data.

Watch out: The legal landscape on deepfakes in Mexico is actively evolving. Content that was lawful to create when this article was last updated may be criminalized by subsequent federal legislation. Monitor the Diario Oficial de la Federación for new CPF amendments in 2026.

One-Party Consent in Practice

Phone Calls

A person who is a party to a telephone call may record that call without notifying the other parties. This applies whether the call is a landline call, a mobile call, or a VoIP call conducted through apps such as WhatsApp, Zoom, or Microsoft Teams.

Mexican courts and legal commentators have consistently treated participant recording as outside the scope of the constitutional interception prohibition. The recorded party's privacy interest in the conversation is limited because they chose to communicate with the recorder.

The recording may be used as evidence in civil, labor, or criminal proceedings, subject to the general rules of evidence admissibility. Courts have admitted participant recordings as documentary evidence in a wide range of cases, including labor disputes, contract disputes, and family law matters.

In-Person Conversations

The same one-party framework applies to in-person conversations. A participant in a face-to-face meeting, whether in a private location or a public space, may record that conversation without the knowledge or consent of other participants.

The location matters for context but not for the basic legality of participant recording. Recording a conversation in a private home, an office, a restaurant, or a public park is equally permissible for participants under federal law.

Conversations in Public Spaces

Recording conversations or activities in public spaces where no reasonable expectation of privacy exists is generally unrestricted. This includes recording police officers exercising their public duties, public meetings, protests, court proceedings in open session, and interactions with public officials in public spaces.

Mexico's constitutional framework for press freedom and the right to information supports the right to record in public spaces. The Suprema Corte de Justicia de la Nación (SCJN) has affirmed this principle in multiple decisions addressing the rights of journalists and citizens to document public events.

Recording public officials in the performance of their duties has additional protection under Mexico's transparency laws, including the Ley General de Transparencia y Acceso a la Información Pública.

Third-Party Interception: Strict Prohibition

While participant recording is broadly lawful, third-party interception (capturing communications you are not a party to) is severely restricted and criminalized.

What Constitutes Third-Party Interception

Third-party interception includes:

• Installing a listening device (bug) in a location to capture others' conversations
• Tapping a telephone line to intercept calls you are not a party to
• Accessing voicemail, email, or text messages without authorization
• Using software to intercept data transmissions on a network without consent
• Hiring a private investigator to wiretap another person's communications

All of these acts require a judicial authorization under Article 16 of the Constitution and the CNPP if done by law enforcement. If done by a private party without authorization, they constitute federal crimes under CPF Article 177.

Judicial Authorization Requirements

For law enforcement agencies, obtaining judicial authorization for communications interception requires demonstrating:

1. A nexus to a listed serious federal offense (organized crime, kidnapping, drug trafficking, etc.)
2. Probable cause to believe the target is involved in the alleged offense
3. That other investigative methods are insufficient or have been tried
4. Specific identification of the communications to be intercepted
5. A defined time period not to exceed sixty days initially

The authorization is reviewed by a federal judge. Mexico's constitutional reform of 2008 created a system of federal judges (jueces de control) specifically empowered to oversee investigative techniques including wiretapping requests.

Private Party Interception

Private individuals and businesses have no legal mechanism to obtain judicial authorization for interception. The CNPP authorization process is available only to designated law enforcement authorities. A private citizen who installs a recording device to capture a third party's conversations, or who intercepts electronic communications they are not a party to, commits a federal crime under CPF Article 177 regardless of their motivation.

This applies even in domestic situations. A spouse who intercepts the other spouse's telephone calls without consent commits a federal crime under the CPF.

2025 Data Protection Reform: INAI Dissolved, SecAnti Takes Over

What Changed

On December 20, 2024, the Mexican government published a decree ordering the extinction of the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI). A new legal framework was enacted by decrees published in the Diario Oficial de la Federación on March 20, 2025, comprising:

• A new Ley General de Transparencia y Acceso a la Información Pública (replacing the 2015 version)
• A new Ley General de Protección de Datos Personales en Posesión de Sujetos Obligados (LGPDPPSO), replacing the 2017 version

A 30-day transition period followed. INAI formed a Comité de Transferencia to hand off substantive matters, resources, and the National Transparency Platform.

Who Enforces What Now

The Secretaría Anticorrupción y Buen Gobierno (SecAnti, operating at gob.mx/buengobierno) assumed direct responsibility for personal data protection enforcement. A new deconcentrated body within SecAnti called Transparencia para el Pueblo (established March 21, 2025) assumed the access-to-information guarantee function that INAI previously held.

For businesses and individuals regulated under the private-sector LFPDPPP: enforcement authority is now the Secretaria Anticorrupcion y Buen Gobierno, not INAI. Sanctions, investigation procedures, and ARCO rights mechanisms are managed by SecAnti.

For public-sector entities (government agencies): the new LGPDPPSO (March 20, 2025 version) governs, also under SecAnti's jurisdiction.

Practical Impact for Businesses

The transition did not change the substantive obligations under the LFPDPPP. Privacy notices, consent requirements, purpose limitation, security obligations, and ARCO rights remain the same. The change is institutional: complaints, investigations, and enforcement actions that were addressed to INAI are now addressed to the Secretaria Anticorrupcion y Buen Gobierno. Organizations that had INAI-facing compliance programs should update their privacy notices and internal procedures to reflect the new authority.

State Penal Codes and Federal Primacy

Mexico's legal system is federal. The federal criminal framework (the CPF and CNPP) is dominant for communications interception offenses.

How State Laws Interact

Mexico's 31 states plus Mexico City each have their own state penal codes. Some state codes contain provisions that address privacy violations, unauthorized recording, or invasion of privacy that may apply to conduct not covered by the CPF.

However, the key principle is federal primacy in communications law. Because communications interception is a federal matter under Article 16 of the Constitution and the federal criminal codes, federal law governs the most serious recording violations.

State Variations Worth Knowing

Mexico City (CDMX): The Código Penal para el Distrito Federal contains provisions addressing the recording of images and sounds that violate a person's privacy (Article 226 Bis). This provision addresses non-consensual recording of intimate images and their distribution and carries penalties of six months to four years in prison. The federal Ley Olimpia (CPF Art. 199 octies) now operates alongside this provision in the Federal District.

Jalisco: Jalisco's state penal code includes provisions targeting unauthorized recording in private spaces, with penalties that may supplement federal prosecution in egregious cases.

Nuevo León: As a major business hub, courts in Nuevo León have addressed workplace recording disputes with consistency, generally upholding the federal one-party participant framework for employee recordings made in self-defense.

Estado de Mexico: As noted in the deepfakes section, the Estado de Mexico enacted state-level penalties in late 2025 for AI-manipulated intimate images.

General principle: When a state law imposes stricter privacy protections than federal law, the stricter standard may apply to conduct that falls within state jurisdiction. But for telephone interception and electronic communications, federal law and federal courts are the primary forum.

Workplace Recording in Mexico

Employees Recording Conversations

An employee who is a participant in a workplace conversation (with a supervisor, a colleague, or a client) may record that conversation under the federal one-party framework. Mexican labor courts have admitted such recordings as evidence in wrongful termination cases, discrimination claims, and workplace harassment proceedings.

The guiding principle from Mexican labor law jurisprudence is that an employee recording a conversation they participate in is not violating any law, and the recording may be used to protect their labor rights. This principle aligns with Article 6 of Mexico's Constitution, which protects the right to information as a fundamental human right.

Employer Recording and Monitoring

Employers in Mexico face a more complex framework when recording employees. Several competing legal considerations apply.

Labor Law obligations: The Ley Federal del Trabajo (LFT) does not explicitly authorize or prohibit employer recording, but labor tribunals have applied the principle that employees retain a reasonable expectation of privacy in personal communications. Covert recording of employees in personal spaces (break rooms, restrooms) would be a violation of privacy rights.

LFPDPPP compliance: Employer recording programs are subject to the LFPDPPP. Employees must be provided with a privacy notice explaining that calls, meetings, or activities may be recorded, for what purpose, and how the data will be protected. Express consent may be required for continuous monitoring programs.

Legitimate business purpose: Employers may lawfully record customer-facing calls for quality assurance, training, and compliance purposes provided they comply with LFPDPPP notice requirements and inform customers at the start of calls that the conversation may be recorded.

CCTV and video surveillance: Installation of cameras in the workplace is permitted for security and productivity monitoring purposes, subject to restrictions. Cameras may not be installed in private spaces (restrooms, changing areas, medical areas) and employees must be notified of their presence. Covert surveillance not disclosed to employees creates significant legal exposure under both the CPF and the LFPDPPP.

Call Center and Customer Service Recording

Call centers operating in Mexico must comply with LFPDPPP requirements. The standard practice (announcing at the start of a call that it may be recorded for quality and training purposes) satisfies both the notice requirement and the one-party consent framework. Customers who continue the call after the notice are deemed to have implicitly consented to the recording.

Business-to-business calls in commercial contexts follow the same rules. Recording a business negotiation you are a party to is lawful; recording a competitor's internal call you are not a party to is a federal crime.

Recording Police and Public Officials

Recording police officers, government employees, and elected officials performing their public duties is lawful in Mexico and is strongly protected under Articles 6 and 7 of the Constitution (right to information and freedom of expression) and Mexico's transparency laws. The Suprema Corte de Justicia de la Nación has affirmed in multiple decisions that citizens and journalists have the right to document the exercise of public authority.

Any attempt by a police officer or government official to confiscate a recording device, delete recordings, or physically prevent recording of official conduct may itself constitute an abuse of authority under the CPF. The Ley para la Protección de Personas Defensoras de Derechos Humanos y Periodistas provides formal protection mechanisms for journalists and human rights defenders who document state conduct.

Recording court proceedings in open session is generally permitted, subject to any specific judicial order restricting recording in a particular proceeding.

Cross-Border Recording: US-Mexico

Which Law Applies

For a telephone or video call between parties in different countries, the operative question is where the recording occurs. Mexican law applies to the recording if the person doing the recording is physically located in Mexico at the time of the call. US law (federal Wiretap Act and relevant state law) applies to the recording if the person doing the recording is physically in the United States.

For cross-border calls where one party is in Mexico and one is in the United States:

• The Mexican participant may record under Mexico's one-party framework without notifying the US participant.
• The US participant may record under the applicable US federal and state law (federal one-party consent baseline under 18 U.S.C. § 2511(2)(d), subject to stricter state rules in two-party states like California or Florida).
• If the recording is later used in a Mexican proceeding, Mexican courts apply Mexican evidentiary rules. If used in a US proceeding, US courts apply US evidentiary rules.

Practical Rule for Travelers

Travelers entering Mexico from the United States or Canada should apply Mexican recording law from the moment they are within Mexican territory. A recording made while the traveler is physically in Mexico is governed by Mexican law regardless of the nationality of the parties or the location of the server processing the communication.

For business calls with US counterparts: participant recording in Mexico is lawful under Mexican federal law. If the US counterpart is in California, the US participant faces a two-party consent requirement under California Penal Code § 632, but the Mexican participant's conduct is judged by Mexican law alone.

Recording in Specific Contexts

Legal Proceedings and Evidence

Recordings made by participants are generally admissible as evidence in Mexican civil, criminal, labor, and administrative proceedings. Courts treat participant recordings as documentary evidence.

The Suprema Corte de Justicia de la Nación has addressed the admissibility of participant recordings in multiple tesis. The general position is that a recording made by a participant does not violate constitutional rights because the recording party consented to their own participation in the conversation, and the other party's privacy interest in the conversation extends only to protection against third-party interception.

Recordings must be authenticated (demonstrated to be genuine and unaltered) to be given full evidentiary weight. Chain of custody, metadata, and technical authentication play important roles in highly contested proceedings.

Journalism and Public Interest Recording

Mexico's constitutional framework strongly supports press freedom and the right to inform. Journalists enjoy broad protection to record public officials, document public events, and capture information of public interest.

The Ley para la Protección de Personas Defensoras de Derechos Humanos y Periodistas provides mechanisms for protecting journalists who document corruption, human rights abuses, and matters of public concern.

Recording public officials in the performance of their duties (police officers, government employees, elected officials) is protected activity under both the right to information and press freedom guarantees. Any attempt to obstruct recording of public officials performing public functions may itself constitute an abuse of authority under the CPF.

Minors

Recording conversations involving minors requires particular care. Mexico's Ley General de los Derechos de Niñas, Niños y Adolescentes protects minors' right to privacy and dignity. Publishing or distributing recordings of minors without parental consent can give rise to both civil liability and, in egregious cases, criminal prosecution. Courts in Mexico take a particularly protective view toward minors in privacy disputes.

Penalties for Illegal Recording

Criminal Penalties

Unauthorized third-party interception under CPF Article 177 carries:

• Six to twelve years in prison for the underlying interception
• Fines of 300 to 600 times the daily minimum wage
• Aggravated penalties if the interception is conducted by a public official, if the intercepted content is subsequently published or used for extortion, or if organized crime is involved

Unauthorized revealing or use of content from intercepted private communications under CPF Article 211 bis carries:

• Six to twelve years in prison
• Fines of 300 to 600 days' minimum wage

Non-consensual recording or distribution of intimate sexual images under CPF Article 199 octies (Ley Olimpia) carries:

• Three to six years in prison
• Fines of 500 to 1,000 UMAs
• Penalties increased by up to one half in aggravated circumstances (intimate partner, public official, minor victim) under CPF Article 199 decies

LFPDPPP Administrative Sanctions

The Secretaría Anticorrupción y Buen Gobierno (formerly INAI) can impose administrative sanctions for violations of the LFPDPPP, including improper recording by businesses:

• 100 to 160,000 times the daily minimum wage for most violations
• 200 to 320,000 times the daily minimum wage for violations involving sensitive personal data
• Sanctions doubled for repeat violations or intentional misconduct

Civil Liability

Victims of illegal recording may also pursue civil claims for moral damages (daño moral) under Article 1916 of the Código Civil Federal. Article 1916 provides that any person who causes moral damage to another by an unlawful act is obligated to repair it through financial compensation. Courts have awarded damages in cases involving unauthorized recording of private conversations, particularly when the recordings were used for extortion, reputational harm, or domestic abuse. Moral damages claims are independent of criminal prosecution and may be pursued in parallel.

Business Compliance Guide

If your business records communications in Mexico, a compliance program should include the following elements.

Privacy Notice Requirements

Every business that records calls or meetings must have a privacy notice (aviso de privacidad) that discloses:

• The identity and contact information of the data controller
• The purposes for which audio recordings will be processed
• How long recordings will be retained
• With whom recordings may be shared
• The mechanisms through which individuals may exercise their ARCO rights (access, rectification, cancellation, and objection)

The privacy notice must be made available before or at the moment of collection. For call recordings, this typically means a recorded announcement at the start of the call.

Consent Mechanisms

For standard customer service recordings, implied consent after clear notice (the recorded announcement) is generally sufficient. For more sensitive recording programs (covert workplace monitoring, biometric voice data, or long-term surveillance), express written consent may be required.

Employee Policies

Update employment contracts and workplace policies to include:

• Clear disclosure of any recording programs
• Explanation of the purposes (quality assurance, compliance, security)
• Employee acknowledgment and consent
• Restrictions on unauthorized recording by employees of confidential business information

Data Retention and Security

Establish documented retention schedules for recordings: how long they are kept, who has access, and how they are deleted. Implement encryption and access controls. Conduct regular security risk assessments, as required by LFPDPPP regulations.

Cross-Border Data Transfers

If recordings made in Mexico are transferred to servers or personnel outside Mexico (for example, to a parent company in the United States or Europe), the cross-border transfer provisions of the LFPDPPP apply. Adequate legal mechanisms (data transfer agreements, standard contractual clauses) must be in place.

Enforcement Contact (Post-March 2025)

Direct LFPDPPP compliance inquiries and enforcement matters to the Secretaria Anticorrupcion y Buen Gobierno at gob.mx/buengobierno. The INAI website and complaint portals are no longer operative for new filings; SecAnti manages the data protection authority function going forward.

Summary: Key Rules at a Glance