Is it legal to record a meeting in Iceland?

Almenn hegningarlög nr. 19/1940, 228. gr., as substituted in 2021: whoever violates the inviolability of another's private life by prying into, producing (útbúa), obtaining (afla), copying, displaying, recounting, publishing or distributing, without authorisation, documents, data, visual material, information or comparable material concerning that person's einkamálefni, private affairs, shall be liable to a fine or imprisonment for up to one year, provided the conduct is liable to cause the victim harm. The fourth paragraph disapplies it where the conduct is justifiable by reference to public or private interests.

There is no dedicated eavesdropping or secret-recording offence in the Icelandic penal code. The full consolidated text was searched for the Icelandic words for recording, eavesdropping, a call and a conversation, and nothing beyond 228. gr. was found.

So the framing is neither eavesdropping on others nor recording another's words, but a general privacy offence built on producing or obtaining material about another's private affairs without authorisation.

Qualified, and this is the important paragraph. Nothing in 228. gr. excludes a participant. Útbúa, to produce, and afla, to obtain, plainly describe making a recording, and there is no "of others" or non-participation element anywhere in it.

Three limiters do the work instead, and all three are genuinely uncertain applied to a work meeting. Einkamálefni, private affairs: a commercial or professional meeting is not obviously the private affairs of the people in it, and this is the strongest argument that 228. gr. does not reach a business meeting transcript. It is an argument, not an authority. Í heimildarleysi, without authorisation: announced recording with agreement is authorised. Liable to cause the victim harm: a locally stored transcript that never leaves the device is a weak candidate for this.

No Icelandic authority was found applying 228. gr. to a participant recording a meeting. We are not publishing a yes for Iceland.

Iceland's answer is the strictest in this survey, and Persónuvernd's guidance on audio recordings states it in this order: "Almennt mega einstaklingar ekki taka upp samtöl eða samræður annarra einstaklinga." Generally, individuals may not record the conversations or discussions of other individuals. Then three requirements: the individuals who are audible on the recording must give their consent; those being monitored must be informed and signs posted conspicuously; and there must be a special legitimate need for the monitoring.

And there is a point that kills a hedged notice. On calls, Persónuvernd says the other party must be notified at the outset; no notification is needed where the other party is beyond doubt aware; and where notified, the person intending to record must attend to the information duty, so wording such as "the call may be recorded" might not comply with the data protection laws on fairness and transparency.

So: express consent from everyone audible, conspicuous notice, a special legitimate need, and a notice that says the recording is happening rather than that it might. Use the long form and get an answer.

Before we start: I record my meetings so I can write up notes afterwards. It runs on my laptop, the audio is transcribed on this machine and never uploaded, and the audio itself is not saved anywhere, only the text, in a file I keep. Is everyone alright with that? If anyone would rather I didn't, say so now and I'll turn it off.

The one relief is Persónuvernd's second bullet: no notification is needed where the other party undoubtedly knows. That is a narrow implied-awareness carve-out, not an implied-consent one. Nothing was found on the calendar-invite form.

GDPR applies as well, and the analysis is the ordinary European one: a meeting recording is personal data about every identifiable speaker, a transcript without speaker labels is still personal data, the household exemption is read narrowly and a work meeting has a direct connection to a professional activity, you need a lawful basis, and Art. 13 wants the information at the time the data are obtained, which for an always-on recorder means before the substance of the meeting. The European framework covers all of that once rather than on every country page.

Iceland has no works council system of the German kind; the counterparties are trade unions and shop stewards. Electronic monitoring (rafræn vöktun) is separately regulated by the data protection act, lög nr. 90/2018, and by Persónuvernd's rules on electronic monitoring.

Neither was opened in our research, so we are not going to print article and rule numbers for them. Persónuvernd maintains workplace pages whose content we also did not open. This is a gap, and an Icelandic employer rollout needs it filled before anyone relies on a summary.

Persónuvernd, whose site now lives on island.is, and its position is the reason Iceland ranks where it does. In one line: individuals generally may not record others' conversations, everyone audible must consent, monitoring needs a special legitimate need and conspicuous notice, and a "may be recorded" formulation may fail the fairness and transparency test.

One honest caveat about reading it: the guidance sits under vöktun, monitoring, and a participant's own transcript is arguably a different thing. We read it as a consent requirement for this scenario, and that reading is ours.

Start with what does not help, because it is what our own positioning tempts us into claiming. Earkeep transcribes on your own device, never writes the audio to disk and sends nothing anywhere. On the criminal layer in Iceland that changes nothing at all. A recording made without the other speakers' consent is the same act whether it was processed on your laptop or uploaded to somebody's cloud, because the provision is about making the recording rather than about where it ends up.

Where the architecture genuinely helps is data protection: no transfer, no third party in the chain, no processor agreement to sign, and nothing to reconcile if someone asks you to delete what was said. And in the conversation itself, "it stays on my laptop and the audio is never saved" is a shorter thing to explain than what a cloud notetaker requires, which makes the agreement easier to actually obtain.

Earkeep announces itself to nobody. There is no bot in the participant list and no banner on anyone else's screen, so where the announcement is what makes the recording lawful, the whole of it depends on you saying something. What the app gives you is somewhere to go when the answer is no: a pause from the live edge that releases the microphone and the system audio stream, so the operating system's own recording indicator visibly goes dark; a never-record marking for a meeting on a connected calendar; and a purge that takes the lines out of the file on your own disk with no server copy anywhere. It does not make any recording lawful, and no tool can.

• Almenn hegningarlög nr. 19/1940, 228. gr.
• Persónuvernd, aðrar tegundir vöktunar (hljóðupptökur)
• Persónuvernd, eftirlitsmyndavélar og vöktun
• GDPR, EUR-Lex

• European recording laws: the four layers, the controller question, and all 32 countries.
• Telling people you're recording: the scripts, and the three ways to stop.
• Private by design: why the audio never leaves your computer.

This page is legal information, not legal advice. It summarises provisions and guidance rather than replacing them, and we are not lawyers. If the answer matters, ask someone who can be held to their answer.