Is It Legal to Record Meetings With an AI Notetaker? Rules by State

An AI notetaker records a meeting's audio, sends it to a vendor's servers, transcribes it and writes a summary. Under federal law and in most states that is lawful if one participant, including the person who turned the tool on, consents. In California, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Pennsylvania and Washington, and in some situations in Connecticut, Michigan, Nevada and Oregon, every participant must consent or be told in a way the statute accepts. The rule is set by the state where each participant sits, not where the host is.

The legal pages on this topic say 'about a dozen states' without naming them or citing a statute, and the vendor pages were written to sell a recorder. Since August 2025 the vendors themselves have been sued: Otter.ai in a consolidated class action in the Northern District of California, Fireflies.ai in two Illinois biometric suits, Granola in July 2026, and a biometric claim over Microsoft Teams transcription in February 2026. This guide gives the statute for each state with its penalty, what the lawsuits allege, what each platform tells participants, and a script that satisfies the strictest state.

The federal rule and its trap

The federal Wiretap Act, 18 U.S.C. 2511(2)(d), makes it lawful for a person to intercept a communication "where such person is a party to the communication or where one of the parties to the communication has given prior consent", unless the interception is "for the purpose of committing any criminal or tortious act". That is the one-party rule: if you are in the meeting and you start the notetaker, federal law is satisfied. Violations carry up to five years' imprisonment and civil damages under section 2520.

The trap is in the exception. The plaintiffs suing Otter.ai argue that the interception is for a tortious purpose because the vendor, which is not a party to the meeting, retains the audio and uses it for its own commercial ends. If that theory holds, the one-party rule does not protect the vendor, and the employer that relies on the vendor's consent flow inherits the problem. It has not been decided.

The all-party states, with statutes

State wiretap and eavesdropping laws are stricter than federal law in the states below. Statute text marked "read" was checked against the legislature's site on October 19, 2026; the rest rests on the Reporters Committee for Freedom of the Press summaries, which are dated 2019 to 2021, and should be confirmed before you rely on a penalty figure.

Washington's rule is the one to design around. A recorded announcement at the start of the meeting that the meeting is being recorded and transcribed, made before the AI tool begins, is consent under RCW 9.73.030(3). Whether a bot's automated join message satisfies it has not been tested.

The split-rule states

• Connecticut. Criminal eavesdropping law is one-party, but General Statutes 52-570d creates civil liability for recording a telephone call without every party's consent given in writing, orally on the recording, or by a recorded warning. Video meeting audio is likely to be treated the same way. Civil damages and fees only.
• Michigan. The statute reads as all-party, but Michigan appellate courts since Sullivan v. Gray (1982) have held a participant may record their own conversation. The Michigan Supreme Court has not ruled, so the participant exception is not settled.
• Nevada. Telephone calls require all-party consent under NRS 200.620; in-person conversations are one-party under NRS 200.650. Where a video meeting falls has not been decided. Felony and civil damages of $100 per day or $1,000.
• Oregon. ORS 165.540 is one-party for telecommunications but requires that all participants in an in-person conversation be "specifically informed" of recording (read). A notetaker on a video call is probably a telecommunication; a phone recording a conference room is a conversation and everyone in the room must be told. Class A misdemeanor.
• Delaware. Two statutes conflict, one one-party and one all-party, and no Delaware state court has resolved it. Treat as all-party.

Every other state and the District of Columbia follow the one-party rule for a participant's own recording.

Participants in different states

The California Supreme Court held in Kearney v. Salomon Smith Barney (2006) that California's all-party rule applied to a Georgia firm recording calls with its California clients, because California's interest in protecting its residents outweighed Georgia's one-party rule. No court has applied that reasoning to an AI notetaker, but the principle is that the participant's state can govern, not the host's. For a distributed team the only safe rule is the strictest state present, which in practice means announce and get consent in every meeting. Most organizations find it simpler to adopt that as the universal rule than to check attendee locations.

The lawsuits against the vendors

Two patterns run through the complaints. First, the person who was recorded without agreeing was not the account holder: a client, a candidate, a colleague who joined a call where someone else's bot was running. Second, the harm alleged is the vendor's own use of the audio, for voiceprints or training, which the host's consent does not cover. Both point at the same employer control: no notetaker joins a meeting with external participants unless every participant has been told what tool is recording, who holds the recording and what the vendor does with it.

What each platform tells participants

• Microsoft Teams. Microsoft's support page states that when a recording starts, "everyone will be notified automatically". The page describes no separate notice for transcription alone, which is what the Illinois suit is about.
• Google Meet. Google's help page states that Meet "informs all meeting participants that notes are being taken" with a pencil icon, and that an administrator can require an explicit consent prompt, which is off by default.
• Zoom AI Companion. Zoom's support documentation describes the host enabling the summary and choosing who receives it. We could not confirm the wording of the in-meeting indicator shown to participants and do not describe it.
• Third-party bots (Otter, Fireflies, Fathom, Read AI). The bot joins as a named participant. Fathom's privacy policy places the duty to obtain "the necessary permissions and consents from other meeting participants" on the user. Fireflies' policy contains no participant notice and tells non-account participants to ask the host to delete their data.

A participant list entry reading "Otter.ai Notetaker" is notice to anyone who reads it. It is not consent, and in Washington it is not the recorded announcement the statute describes. In the Massachusetts framing it probably makes the recording not secret. Nowhere does it discharge the host's duty to say so out loud.

Which vendors train on your meetings

Employer notice laws are a separate duty

If the employer, rather than an individual, deploys a notetaker across its meetings, state electronic monitoring notice laws apply on top of consent law. New York Civil Rights Law 52-c requires written notice on hiring, acknowledged by the employee, and a posted notice, stating that telephone, email and internet use "may be subject to monitoring at any and all times and by any lawful means", enforced by the Attorney General with penalties of $500, $1,000 and $3,000 for successive violations. Connecticut General Statutes 31-48d requires prior written notice of the types of monitoring; a 2026 amendment reported to take effect October 1, 2026 expands it, and we have not read the enacted text. Delaware requires daily or acknowledged one-time notice. None of these notices is consent to record under wiretap law; they are a second requirement, covered in our employee monitoring laws by state table with wording in our monitoring policy template.

A consent script and a policy clause

Spoken at the start, before the tool begins, while the recording is running: "This meeting is being recorded and transcribed by [tool name]. The recording and transcript are held by [company] and processed by [vendor]. If anyone does not consent, say so now and I will turn it off." Then wait. That wording satisfies Washington's recorded-announcement rule, Montana's warning exception, Massachusetts's no-secret-recording rule, Oregon's specifically-informed rule and Connecticut's recorded-warning option, and gives every all-party state an opportunity to object. An objection means the tool goes off, not that the objector leaves.

Written, in the calendar invitation: "This meeting will be recorded and transcribed by [tool name]. Reply before the meeting if you do not consent." Written advance notice plus the spoken announcement is the belt-and-braces approach for external meetings.

The policy clause for section 2 of your AI use policy: "AI notetakers may be used only from the approved list, only by the meeting host, and only after the host has given the spoken notice and received no objection. No notetaker may be set to join meetings automatically. Notetakers may not be used in meetings concerning an individual employee's performance, health, discipline or dismissal, in interviews with candidates, or in any meeting with legal counsel. Transcripts are company records, retained for [number] days, and are not shared outside the attendee list without the host's approval."

The exclusions in that clause are where the exposure concentrates. Interviews create Illinois Artificial Intelligence Video Interview Act duties and biometric exposure. Meetings with counsel risk waiving privilege by disclosure to a vendor. Performance and health meetings create records that will be discoverable in any later dispute, written by a model that misheard.

Key takeaways

• An AI notetaker records and transcribes audio, so wiretap law applies. Federal law and most states require one participant's consent; the host's consent suffices.
• California, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Pennsylvania and Washington require all parties' consent or a statutory form of notice. Connecticut, Michigan, Nevada, Oregon and Delaware have split or unsettled rules.
• Washington deems consent given if one party announces the recording to everyone and the announcement is itself recorded. A spoken announcement before the tool starts is the design standard.
• The participant's state can govern, following Kearney v. Salomon Smith Barney (2006), so distributed teams should follow the strictest rule in every meeting.
• Otter.ai (consolidated class action, filed August 2025), Fireflies.ai (two Illinois biometric suits), Granola (July 2026) and Microsoft Teams transcription (February 2026) are all defendants. The common allegation is recording people who were not the account holder.
• Otter's June 2026 privacy policy lists training on de-identified recordings as a purpose. Fireflies, Zoom and Microsoft say they do not train on meeting content. Fathom trains with an opt-out.
• A bot named in the participant list is notice, not consent, and does not meet Washington's recorded-announcement rule.
• Employer monitoring notice laws in New York, Connecticut and Delaware apply separately when the company deploys a notetaker, and do not substitute for recording consent.