Tunisia Recording Laws: All-Party Consent Rules and Penalties (2026)

Tunisia's Recording Consent Framework: All-Party Required

Tunisia classifies as an all-party consent jurisdiction. No one may legally record a private conversation, telephone call, or electronic communication without the knowledge and agreement of every person involved. That rule applies to individuals, businesses, and organizations alike.

The legal foundation for this standard draws from several sources: the 2022 Constitution, the 2004 data protection law, the Penal Code, and the telecommunications code. Together, these statutes create a layered framework where recording without consent can trigger criminal liability under more than one law simultaneously.

But Tunisia's recording laws carry a significant asterisk. The state has carved out broad exceptions for itself. Through counter-terrorism legislation passed in 2015 and a cybercrime decree issued in 2022, the government holds sweeping authority to intercept, monitor, and record communications with minimal judicial oversight. That imbalance between citizen obligations and state power defines the current landscape.

Constitutional Basis: Article 30 of the 2022 Constitution

The starting point for understanding Tunisia's recording laws is Article 30 of the constitution adopted in 2022 under President Kais Saied. The provision states that the government is responsible for "protecting the privacy and inviolability of the home and confidentiality of correspondence, communications and personal data."

This constitutional language establishes privacy as a fundamental right, not merely a policy preference. Courts interpreting recording-related offenses do so against this backdrop.

However, the 2022 Constitution also contains emergency powers provisions. Tunisia has operated under a declared state of emergency since November 2015. During a state of emergency, constitutional rights become subject to limitation by executive authority. That reality creates tension between the privacy protections written into Article 30 and the surveillance capabilities the government exercises in practice.

Organic Law 2004-63: The Data Protection Framework

Scope and Requirements

Organic Law No. 2004-63 of July 27, 2004 established Tunisia's comprehensive data protection regime. At the time of its passage, the law made Tunisia one of the most progressive countries in Africa and the Arab world on personal data protection.

The law applies to any processing of personal data, which includes audio recordings, video recordings, photographs, and any other medium that captures identifiable information about a person. Under Article 1, every person has the right to protection of personal data relating to their private life as a fundamental right.

Key requirements under the law:

• Prior consent is required before collecting personal data from or about an individual
• Written consent is mandatory for processing sensitive categories of data
• Prior declaration to the National Authority for the Protection of Personal Data (INPDP) is required before any data processing activity begins
• Purpose limitation applies, meaning data collected for one purpose cannot be used for another
• Data subjects have the right to access, correct, and object to the processing of their personal information

How This Applies to Recording

Any recording of a person constitutes processing of personal data under the law. Recording a phone call captures voice data. Filming someone captures their image. Both qualify as personal data collection requiring prior consent.

The consent requirement under Law 2004-63 is what creates Tunisia's all-party consent standard for recording. Because every person captured in a recording is a data subject whose personal information is being processed, each person must consent before the recording takes place.

Penalties Under Law 2004-63

The law contains criminal penalties across several articles:

• Article 86: Two to five years imprisonment and a fine of 5,000 to 50,000 Tunisian dinars (approximately USD $1,600 to $16,000) for violations of provisions related to cross-border data transfers and processing restrictions
• Article 87: Two years imprisonment and a fine of 10,000 dinars for violations related to processing sensitive data without authorization
• Failure to declare processing activities to the INPDP carries up to one year imprisonment and a fine of 5,000 dinars

The attempt to commit these offenses is also punishable.

The INPDP: Enforcement Authority

Law 2004-63 created the Instance Nationale de Protection des Donnees Personnelles (INPDP), an independent authority charged with enforcing the data protection framework. The INPDP receives mandatory prior declarations of processing activities, reviews requests for sensitive data handling and cross-border transfers, and investigates complaints.

In 2018, the INPDP issued Decision No. 5, establishing specific conditions and procedures for the installation of cameras and video surveillance systems. Any business or individual operating surveillance cameras must comply with these conditions or face penalties.

The Penal Code: Correspondence and Secrecy Provisions

Tunisia's Penal Code, originally enacted in 1913 and amended numerous times since, contains provisions addressing the diversion of correspondence and revelation of secrets. These articles, found in Section VII of the code, criminalize the interception, opening, or disclosure of private communications.

The Penal Code provisions apply alongside the data protection law. A person who records a private conversation without consent may face charges under both the Penal Code (for violating communication secrecy) and Law 2004-63 (for processing personal data without authorization).

Penalties under the Penal Code for correspondence-related offenses include imprisonment ranging from six months to five years and fines of 120 to 1,200 dinars, depending on the specific article violated and the circumstances of the offense.

Telecommunications Code: Article 85 and Encryption Rules

The Telecommunications Code (Law No. 2001-1) governs the technical and legal framework for communications in Tunisia. Article 85 addresses the disclosure of content of communications and electronic exchanges, imposing penalties on anyone who unlawfully reveals the substance of intercepted communications.

The code also contains strict rules on encryption. Unauthorized use of cryptography is punishable by up to five years in prison. Any use of encrypted communications requires prior permission from the Agence Nationale de Certification Electronique (ANCE). This provision has drawn criticism from privacy advocates who argue that encryption is a basic tool for protecting communications privacy.

Phone Calls vs. In-Person Conversations

Phone Call Recording

Recording telephone conversations in Tunisia without the consent of all parties violates Law 2004-63, the Telecommunications Code, and potentially the Penal Code. The prohibition covers:

• Personal phone calls between individuals
• Business and commercial calls
• VoIP calls through platforms such as WhatsApp, Zoom, or Teams
• Automated call recording systems used by businesses

A business that records customer calls must obtain clear, informed consent from the caller before recording begins. The consent must be specific to the recording, not buried in general terms of service.

In-Person Conversations

The same all-party consent requirement applies to face-to-face conversations. Recording a meeting, a negotiation, or any private discussion without the knowledge and permission of all participants is illegal.

Using a hidden microphone, activating a phone's voice recorder in a pocket, or wearing any concealed recording device to capture a private conversation violates Tunisian law. The location does not matter. A private conversation held in a public cafe still qualifies as a private communication for purposes of the recording laws.

Public Spaces and Photography Restrictions

Tunisia imposes significant restrictions on recording and photography in public spaces that go beyond the private conversation context.

Photographing government buildings, military installations, police stations, and embassies is prohibited for national security reasons. Photographing police officers, military personnel, and other public servants is also restricted. Violations can lead to arrest and confiscation of equipment.

For professional filming and photography, a general filming permit from the Tunisian Ministry of Culture is required. Professional equipment including DSLRs, large lenses, audio recorders, and lighting gear may require a separate permit from the Tunisian Agency for External Communication (ATCE) or the National Telecommunication Regulatory Authority.

Filming of administrative and political institutions without specific authorization is not allowed and can result in arrest.

Workplace Surveillance and Employee Monitoring

Workplace recording in Tunisia falls under the combined framework of Law 2004-63 and the INPDP's 2018 Decision No. 5 on video surveillance.

Employers who install surveillance cameras must:

• Notify employees about the existence, location, and purpose of recording equipment
• File a prior declaration with the INPDP before installing any surveillance system
• Limit recording to areas justified by legitimate security or operational needs
• Exclude private areas such as restrooms, changing rooms, and break areas from surveillance
• Establish retention periods and delete recordings when no longer needed for the stated purpose

Audio recording of employees in the workplace faces even stricter rules than video surveillance. Continuously recording employee conversations is not permitted. Any audio monitoring requires specific justification and consent from the employees being recorded.

The 2025 Bill on Protection of Personal Data, currently under consideration, would further strengthen workplace data protection by requiring all organizations to maintain a Record of Processing Activities detailing the purposes, categories, recipients, and retention periods for all data processing, including surveillance recordings.

State Surveillance: Law 2015-26 on Counter-Terrorism

Broad Surveillance Powers

Basic Law 2015-26 of August 7, 2015 on combating terrorism and money laundering is where Tunisia's recording laws take a sharp turn. The law grants security and intelligence services exceptional powers to use "special investigative techniques," including:

• Surveillance and monitoring of suspected individuals
• Interception of all forms of communication
• Recording of phone conversations
• Infiltration of suspected groups by undercover officers

These powers require advance judicial authorization and are limited to a period of four months. Article 56 of the law contains protections for content collected through interception. Article 61 addresses audio-visual recordings obtained during investigations.

Limited Safeguards

The law includes some checks on state power. Parliament added a provision making state agents liable to a one-year prison sentence if they conduct surveillance or infiltrate groups without judicial authorization.

The 2019 amendments (Basic Law 2019-09) increased penalties for unauthorized state surveillance to between one and five years imprisonment and fines ranging from 1,000 to 5,000 dinars.

But critics, including Human Rights Watch, the International Commission of Jurists, and Amnesty International, have pointed to significant gaps. Article 54 of the amended law does not require investigators seeking judicial approval to specify the type of communication being surveilled or the length of the surveillance period. That vagueness gives security services wide latitude.

The State of Emergency Factor

Tunisia has maintained a continuous state of emergency since the November 2015 terrorist attack in Tunis. Under emergency conditions, the surveillance powers granted by Law 2015-26 operate with fewer constraints. The extended emergency has normalized what was designed as an extraordinary measure.

Decree-Law 2022-54: Cybercrime and Its Abuse

What the Decree Contains

President Kais Saied issued Decree-Law No. 2022-54 on September 13, 2022, ostensibly to combat crimes related to information and communication systems. The decree grants authorities broad powers to:

• Monitor internet use and collect personal data
• Intercept communications based on a written decision from a public prosecutor or investigating judge
• Access stored data and traffic data from telecommunications providers

Article 10 of the decree authorizes the interception of communications subject to a written and reasoned judicial decision. Agents who breach professional secrecy obligations related to intercepted data face six months imprisonment and a fine of 20,000 dinars. If the agent holds a senior position, the penalty increases to five years and 30,000 dinars. If the breach harms national security or public order, the penalty rises to ten years and 50,000 dinars.

Use Against Critics and Journalists

Instead of targeting cybercriminals, the decree has been widely used to silence dissent. Human Rights Watch documented at least 20 journalists, lawyers, students, and other critics detained, charged, or placed under investigation for public statements made online or in media interviews.

By November 2024, more than 80 citizens had been arrested under Decree-Law 2022-54. The targets include political opponents, activists, lawyers, journalists, human rights defenders, and ordinary social media users.

The Committee to Protect Journalists reported that Tunisia reached a troubling milestone in its December 2024 prison census: at least five journalists behind bars, the highest number since the organization began tracking in 1992. Radio journalists Mourad Zghidi and Borhen Bsaies spent more than 500 days in prison. After completing an eight-month sentence, new investigations were opened against them, effectively extending their imprisonment.

In October 2024, the Ministry of Justice announced that anyone who created or shared images or videos that undermine "moral values" would be prosecuted. In February 2025, a journalist and social media editor was sentenced to five years in prison for distributing content critical of President Saied.

International Criticism

The decree has drawn condemnation from virtually every major international human rights organization:

• Article 19 called the decree a "grave threat to freedom of expression"
• The International Commission of Jurists demanded its repeal as "draconian"
• Amnesty International documented how cybercrime investigations expose new threats to free expression
• Access Now called on the president to scrap the decree
• Reporters Without Borders noted Tunisia's press freedom ranking plummeted from 72 in 2019 to 118 in 2024

Press Freedom and Journalist Protections

Tunisian law does not provide specific protections for journalists who record conversations or events as part of their reporting duties. Journalists are subject to the same all-party consent requirements as any other citizen.

The practical situation for press freedom has deteriorated significantly since 2021. The National Syndicate of Tunisian Journalists documented 167 violations against journalists, photographers, and media personnel between April 2024 and April 2025, the highest level recorded in recent years. Ten prison sentences were issued against journalists during that period, with six implemented.

Freedom House's 2025 Freedom on the Net report found that only 8 percent of Tunisians surveyed felt free to express their opinions on social media. Seventy-eight percent identified government surveillance as a cause of shrinking freedoms online.

A survey by Citizen Lab listed Tunisia as one of 45 countries where devices were likely breached by Pegasus spyware, though it remains unclear whether the Tunisian government is a Pegasus client.

Business Compliance: Practical Steps

Organizations operating in Tunisia need to take the following steps to comply with recording and surveillance laws:

For call recording:

• Obtain explicit verbal or written consent before recording any call
• Provide a clear opt-out mechanism
• File a prior declaration with the INPDP
• Store recordings securely with defined retention periods

For workplace surveillance:

• Register all surveillance systems with the INPDP
• Post visible notices informing employees and visitors of recording
• Exclude restrooms, changing areas, and private spaces
• Conduct a data protection impact assessment

For data handling:

• Appoint a data protection officer if processing personal data at scale
• Maintain records of all processing activities
• Implement technical and organizational security measures
• Prepare for the 2025 Bill on Personal Data Protection, which would introduce GDPR-aligned requirements

Penalties Summary

The table below summarizes the penalties that apply to recording-related offenses in Tunisia:

Offense	Law	Penalty
Processing personal data without consent	Law 2004-63, Art. 86	2-5 years prison, 5,000-50,000 TND fine
Processing sensitive data without authorization	Law 2004-63, Art. 87	2 years prison, 10,000 TND fine
Failure to declare processing to INPDP	Law 2004-63	1 year prison, 5,000 TND fine
Violation of correspondence secrecy	Penal Code	6 months-5 years prison, 120-1,200 TND fine
Unauthorized use of cryptography	Telecom Code	Up to 5 years prison
State agent conducting unauthorized surveillance	Law 2015-26 (as amended)	1-5 years prison, 1,000-5,000 TND fine
Breach of secrecy by surveillance agent	Decree-Law 2022-54, Art. 10	6 months prison, 20,000 TND fine
Same, by senior official	Decree-Law 2022-54, Art. 10	5 years prison, 30,000 TND fine
Same, causing harm to national security	Decree-Law 2022-54, Art. 10	10 years prison, 50,000 TND fine