AI notetaker consent laws: when can you record and transcribe a meeting?

The short answer

It depends on three things: where every participant is located, whether the conversation is confidential, and whether the notetaker records on behalf of someone who is actually in the meeting. Federal law permits a recording when one party to the conversation consents. California and some other states require the consent of all parties to record a confidential communication. Because one video call can include people in several states, a cautious approach is to design notice for the strictest rule that could apply.

For a business owner the question matters twice: once when the meeting happens, and again if the company later considers licensing meeting transcripts. Transcripts captured without a defensible notice trail should stay out of any data inventory until counsel has cleared them.

What does the federal rule say?

The federal Wiretap Act, 18 U.S.C. 2511, makes it unlawful to intentionally intercept a wire, oral or electronic communication, or to knowingly use or disclose the contents of one that was unlawfully intercepted. Section 2511(2)(d) carves out an exception: a person not acting under color of law may intercept a communication if they are a party to it or one party has given prior consent, unless the purpose is to commit a criminal or tortious act.

In practice, an employee who joins a call and runs a notetaker for their own use is relying on their own consent as a party. The harder questions start when the tool records meetings its user does not attend, or when the vendor processes the content for purposes of its own.

What does California require?

California Penal Code section 632 prohibits intentionally eavesdropping on or recording a confidential communication with an electronic amplifying or recording device without the consent of all parties. A communication is confidential when the circumstances reasonably indicate that a party wants it confined to the people taking part; public gatherings and settings where people may reasonably expect to be overheard or recorded are excluded. Section 632.7 separately covers recording calls on cellular and cordless phones without all parties' consent.

Most internal business meetings, sales calls and client reviews look confidential under that test. If anyone on the call is in California, plan to meet the all-party rule. Other states set their own rules; our comparison of one-party and two-party consent states is a starting point, and counsel should confirm the current law for each state involved.

Where do AI notetakers raise new questions?

Tools such as Otter, Fireflies and Zoom AI Companion change who is recording and why. Four questions come up repeatedly:

• Who is the party? A notetaker that joins as a named attendee on a user's behalf differs from a bot that joins meetings its user never attends. Whether a vendor's bot counts as a party or as a third party listening in is a question for counsel, not a settings page.
• Did everyone get notice? An attendee labeled as a notetaker may go unseen by someone dialing in by phone. A spoken announcement reaches everyone.
• Does it auto-join? Calendar integrations can send a notetaker to every event, including external calls and meetings with lawyers or candidates.
• What does the vendor do with the content? The vendor's terms and the admin settings in force decide whether recordings can be used to improve the vendor's own models. Read the current terms rather than a summary of them.

This page does not track individual lawsuits involving notetaker vendors; ask counsel about current litigation in the states where you operate.

How do the rules apply in common meetings?

What disclosure and consent practices hold up best?

Notice that everyone hears, plus a record that it happened. Good practice includes:

• Put recording and AI-notetaker language in every calendar invite template.
• Announce the notetaker at the start of the call and pause for objections.
• Turn the notetaker off when anyone declines, and note that you did.
• Disable auto-join for external meetings, or require the user to be present.
• Exclude legal, board, HR and medical conversations by policy.
• Keep the platform's recording banner and consent prompts switched on.

A short opening line works on most calls:

Which consent records matter if transcripts might be licensed later?

The company has to show how notice was given before any transcript is considered. Gather these records first; they are worth having whatever you decide about licensing.

• The recording and AI-notetaker policy, with the dates each version was in force
• Employee acknowledgments of that policy
• Calendar invite templates and meeting-start scripts that mention recording
• Admin settings showing recording notices and consent prompts were enabled, with dates
• The notetaker vendor's terms in force, including any rights to use content for its own models
• A way to tell internal meetings from external ones, and where external participants joined from
• The retention schedule and any legal holds; see call and meeting recording retention
• A list of excluded meeting types such as legal, board and HR

Meeting history is only one part of a data inventory. The data inventory builder helps list systems and record types at a metadata level, and the page on meeting transcripts as AI training data covers what buyers look for. Who controls the recordings in the first place is covered in who owns Zoom and Teams meeting recordings.

Questions to ask your counsel

1. Which states' recording laws apply to our meetings, given where employees, clients and candidates join from?
2. Does our notetaker act as a party, or could it be treated as a third party intercepting the call?
3. Is notice in the invite enough, or do we need spoken notice and a recorded response?
4. What do our vendor terms allow the vendor to do with recordings and transcripts?
5. Which past recordings lack adequate notice, and should they be deleted on schedule, retained under a hold or excluded from any future use?
6. If we ever license meeting transcripts, what de-identification and consent evidence would we need?

This is general information, not legal, tax or financial advice. Confirm with your own counsel before acting, and check the current text of each law, because recording rules and their interpretation change.

Next step

If your company holds years of operational records beyond meetings, check the who qualifies baseline, including 50+ full-time employees at peak (contractors excluded), and apply at sourcex.si/apply. Advisers who work with business owners can register as a partner and introduce companies that fit.