AI Meeting Notetakers Raise Privacy and Legal Risks for Businesses

Growing concerns over AI meeting transcription tools

Artificial intelligence notetaking applications that automatically record, transcribe, and summarize virtual meetings are drawing sharp criticism from legal and human resources professionals who warn the convenience comes with substantial privacy and security risks.

Amy Dufrane, chief executive of HRCI, a human resources training and certification provider, stated bluntly: "There are huge risks to the organization on AI notetakers. I don't think companies should use it at all."

The core concern centers on what happens to meeting data once these AI tools capture it. Confidential personnel discussions, corporate strategies, trade secrets, and potentially incriminating remarks all become data points that could end up accessible to unintended parties.

Why it matters

The legal implications extend beyond general privacy concerns. A February ruling by a New York federal judge ordered a criminal defendant to provide prosecutors with documents created for his attorneys because the materials had been shared with Anthropic's Claude AI system—potentially destroying attorney-client privilege. For businesses handling sensitive information, the stakes involve not just competitive intelligence but fundamental legal protections.

Where meeting data actually goes

Uncertainty about data storage location and retention periods represents a primary risk factor. Some technology companies resell data collected from their notetaking tools or use confidential meeting transcripts to train their AI models, according to privacy advocates.

Justin Daniels, a corporate attorney at Baker Donelson in Atlanta, explained the legal exposure: "People who use AI notetakers, they don't always know where the data goes. And in my context, if the data goes anywhere else and they're not aware of it, that attorney-client-privileged conversation may not be attorney-client-privileged anymore."

Text transcripts pose particular risks because they're far easier and cheaper to store and search than video or audio files, according to Thorin Klosowski, senior security and privacy analyst at the Electronic Frontier Foundation.

The voiceprint problem

Many AI notetakers create unique acoustic signatures—voiceprints—for each speaker to distinguish between participants. Chris Pluymers, an associate attorney at The Dillon Law Group, noted these biometric profiles could be exploited by bad actors to access bank accounts or commit fraud.

In Illinois, voiceprints are classified as biometric identifiers under the state's Biometric Information Privacy Act, which requires written notice and informed consent before collection. The law also mandates documented data retention schedules and destruction policies—requirements most companies using these tools haven't implemented, according to Pluymers.

Practical steps for meeting participants

Experts recommend several protective measures:

Check for AI notetakers when joining meetings by looking for bot attendees or recording notifications, though not all platforms make their presence obvious. Participants can state upfront that company policy prohibits recording, or request the notetaker be disabled for sensitive portions of discussions.

Daniels said he won't discuss substantive matters until any AI notetaker is shut off: "I just don't want to take the risk."

For organizations deploying these tools, Danielle Kays, a partner at Fisher Phillips specializing in privacy and employment law, advises understanding whether vendors retain recordings indefinitely, use them for AI training, and what metadata persists even after content deletion.

The Associated Press first reported these details on the privacy and legal concerns surrounding AI meeting notetakers.