An AI notetaker joins the call, sits quietly in the participant list, and produces a transcript and summary within minutes of the meeting ending. It is genuinely useful, it has become entirely normal, and in a meaningful number of situations it is being used unlawfully by people who have never considered the question.
The legal framework here predates the technology by decades and was not written with a helpful robot in mind. It applies anyway.
What changed in 2026
- AI notetakers became default-on in many workplaces. Calendar integrations that automatically join every meeting removed the moment of deliberate choice that used to accompany hitting record.
- Transcripts started appearing in litigation. What used to be an unrecorded conversation is now a searchable document, and opposing counsel has noticed.
- Regulators began looking at biometric angles. Voice data receives special treatment under several biometric privacy laws, adding a layer on top of ordinary recording consent.
- Enterprise tooling grew controls. Admin settings to restrict recording by meeting type or participant domain became common, though most organisations have not configured them.
One-party and all-party consent
Recording laws in the US split broadly into two regimes.
One-party consent means one participant to the conversation may record it. If you are in the meeting, you can record. This is the federal standard and the rule in most states.
All-party consent means every participant must agree. A dozen or so states apply this, including several large ones, and it is the rule that causes problems.
| Situation |
Governing rule |
Practical answer |
| All participants in a one-party state |
One-party |
You may record |
| Any participant in an all-party state |
Usually the stricter rule |
Get everyone's consent |
| Participants in different countries |
Varies; often stricter |
Get everyone's consent |
| Unsure where anyone is |
Unknown |
Get everyone's consent |
The pattern is clear enough to be a policy: on any call where you do not personally know every participant's location, ask. Remote work has made "everyone is in the office in one state" an assumption you can rarely make, and the person who joined from a hotel in a different jurisdiction changes the analysis without telling anyone.
Outside the US, several frameworks treat recordings as personal data with their own basis-for-processing requirements, which is a different question from consent to record and often stricter.
Why a visible bot is not consent
The common defence is that the notetaker appears in the participant list, so everyone can see it. That conflates notice with consent.
Notice means people could have known. Consent means they agreed. Those are different standards, and the laws requiring all-party consent generally require the second. A participant who noticed a bot and said nothing has not obviously agreed to anything — particularly in a workplace, where declining to object to something your manager set up is not a free choice.
The stronger version, which some platforms implement, is an audible announcement plus a prompt each participant must acknowledge. That is much closer to consent. A silent icon is not.
The practical standard that holds up: ask out loud at the start, wait for an answer, and let the recording capture it. "I have the AI notetaker running — any objections?" takes four seconds and produces contemporaneous evidence inside the artefact itself. If someone objects, turn it off; that is the whole point of asking.
Transcripts are records
The legal exposure people underestimate is not the recording itself but what it creates.
An unrecorded conversation lives in participants' memories, which are imprecise and not producible. A transcript is a verbatim, searchable, timestamped document. In litigation, that document is discoverable. So is the AI-generated summary, which carries an additional wrinkle: it may characterise what was said in ways nobody actually said, and that characterisation is now part of the record.
Concretely, a candid discussion about a struggling employee, a product defect, or a competitor becomes a written record of exactly who said what. Retention policy matters here as much as consent — transcripts accumulating indefinitely in a SaaS tool nobody has audited are a liability that grows quietly.
Categories worth excluding by default: HR and disciplinary conversations, anything involving legal advice, anything touching health information, compensation discussions, and any conversation where candour is the point. The value of a transcript is lowest exactly where the risk is highest.
Common mistakes
- Assuming one-party consent because that is your state's rule. Participants elsewhere can change it.
- Treating the participant-list icon as consent. Notice is not agreement.
- Auto-joining every calendar event. Removes the judgement step from meetings where it matters most.
- No retention policy. Transcripts pile up indefinitely and nobody knows what is in them.
- Recording external calls without asking. Customers, candidates, and partners have not agreed to your internal norms.
- Sharing summaries broadly. A transcript circulated to people who were not in the meeting is a different disclosure from the meeting itself.
- Assuming the vendor handles compliance. They provide a tool and a settings page. The obligation is yours.
FAQ
Which rule applies when participants are in different states?
There is no single clean answer and it depends on the specific laws involved, but the conservative and widely-followed approach is to apply the strictest rule among the participants' jurisdictions. That is what most corporate counsel advise, and it avoids the question entirely.
Does a line in the calendar invite count as consent?
It is better than nothing and considerably weaker than a verbal confirmation. Someone who accepted an invite may not have read the description. Combine written notice with a verbal check at the start.
What about recording my own one-on-one for my notes?
Same rules. The purpose does not change the legal analysis, and a private recording of a conversation with a colleague in an all-party state carries the same exposure as any other.
Can I be fired for objecting to recording?
Employment law varies and this sits outside the recording statutes. In practice, an organisation that penalises objections has a bigger problem than transcripts — and it undermines any claim that consent was freely given.
Where to go next
For choosing tooling with the controls this requires, read AI note-taking apps. For the broader question of what AI tools should be allowed to see, AI disclosure at work, and for the personal-data side of accumulated records, digital estate planning.
This is general information, not legal advice. Recording laws vary by state and country and change; consult counsel for your specific situation.