An AI note-taker in a meeting is lawful in most places if the people in it are told first and the organisation has a proper reason to use it; a few US states require every party's consent to record. Either way, its transcript and summary are raw material, and become minutes only once a person has checked them against what was decided and the meeting has approved them.
Whether you call it an AI note taker or an AI notetaker, we read each rule below where it is published, on 26 September 2026: the makers' help pages, statutes on official sites, the UK regulator's guidance and published university policies. This is general information, not legal advice. Your data protection officer, legal team or a lawyer answers for your own meeting, and we make no claim that any tool is compliant or accurate.
This guide comes from EdCitation, which neither records nor transcribes a meeting and does not draft minutes for anybody. Where it helps is the paperwork: its free Check your paper turns a written policy into a list of requirements, and Cite a source makes the reference for a statute or a regulator's guidance. Near the end we show what each returned on real documents, mistakes and all.
What does an AI note-taker actually do?
An AI note-taker turns the meeting's speech into text and asks a language model to summarise it into key points, decisions and action items. Some are features of the meeting software; others are separate services that join the call as an extra participant, as the University of Portsmouth (n.d.) describes them.
What the three big platforms say about their own tools
| Tool, as its maker names it | What it produces | How the people in the meeting are told | Accuracy warning on the maker's page |
|---|---|---|---|
| Microsoft Copilot in Teams, and intelligent recap | Key points, including who spoke and what they said, and suggested action items; recap adds AI notes and follow-up tasks | All participants see a notification when transcription starts | Answers "may not always be accurate" (Microsoft, n.d.-b); recap content may be "inaccurate, incomplete, or inappropriate" |
| Google Meet, "Take notes for me" | A Google Doc with Quick notes and Full notes tabs: summary, decisions, action items, details | Meet tells all participants and shows a pencil icon; an administrator can require explicit consent | Summary can be "incomplete, inaccurate, or not generated" |
| Zoom, Meeting summary with AI | A summary from speech-to-text data, with an optional transcript | The AI icon changes colour when AI features are active | The page we read notes the model picks pronouns for anyone who has not set their own |
| Your organisation's written policy on these tools | EdCitation's Check your paper reads it into a checklist | Not applicable | Our run below shows what it missed |
The details matter for consent and records. In Teams, Copilot can run without a transcript, but then nothing it heard survives the meeting; a transcript stays in the organiser's OneDrive until the organiser deletes it (Microsoft, n.d.-a; Microsoft, n.d.-d). Intelligent recap needs a Teams Premium or Copilot licence (Microsoft, n.d.-c). Google's notes go to the organiser's Drive, follow the organisation's retention policy, and can be shared with every invited guest, outside ones included (Google, n.d.). Zoom (n.d.) lets only the host start, stop or edit the summary, and says anyone who receives one may save and share it.
Is it legal to record a meeting or use an AI note-taker?
Usually, if you follow the law where each person is. US law asks whether the people recorded consented; the UK and EU ask whether the organisation has a lawful basis and has told people. "Consent" means different things in each.
| Jurisdiction | Consent rule | Source |
|---|---|---|
| United States, federal law | Lawful if the person recording is a party, or one party has consented, unless the purpose is a crime or a tort | 18 U.S.C. § 2511(2)(d) |
| California | Consent of all parties needed to record a confidential communication; open public proceedings are excluded | Cal. Penal Code § 632 |
| Maryland | The person must be a party and all parties must have given prior consent | Md. Code, Cts. & Jud. Proc. § 10-402(c)(3) |
| Montana | Recording with a hidden device needs the knowledge of all parties; a warning by one person lets either party record | Mont. Code Ann. § 45-8-213 |
| United Kingdom | Data protection: a lawful basis, a documented case that recording is necessary and proportionate, and telling people; consent rarely suits workers | ICO monitoring workers guidance |
| European Union | Data protection: one of six lawful bases in Article 6(1), consent being only one, and information given when data are collected | Regulation (EU) 2016/679, Arts. 4(11), 6, 7, 13 |
| Anywhere else | Not read for this guide | Ask a lawyer where the meeting's people are |
The United States: one party, unless the state says all
Federal law lets a private person record a conversation they are part of, or one where a party has given prior consent (18 U.S.C. § 2511(2)(d)). States can be stricter. California's section 632 punishes recording a confidential communication without every party's consent, but that term excludes proceedings open to the public, and the section excludes someone all parties know to be recording.
Maryland requires all parties' prior consent, and breaking the rule is a felony. Montana works through knowledge: a hidden recording needs every party's knowledge, and one person's warning lets either side record. When people join from different states, which law governs is a question for a lawyer; in our view the safe course is to meet the strictest.
The UK: data protection, as the ICO puts it
For an organisation, the Information Commissioner's Office applies the UK GDPR to recording. Its monitoring guidance notes that many video-conferencing apps can record audio, says audio needs much greater justification than video, and asks for a data protection impact assessment first (Information Commissioner's Office, n.d.-c). Consent is not usually the right basis between employer and worker, because workers may feel unable to refuse (Information Commissioner's Office, n.d.-a). Both pages are under review after the Data (Use and Access) Act.
The EU: the GDPR's own words
The GDPR defines consent as a freely given, specific, informed and unambiguous indication of a person's wishes (Art. 4(11)). Recital 43 says consent is unlikely to be valid where there is a clear imbalance, particularly with a public authority, and Article 13 requires the purpose and legal basis to be given when the data are collected. We did not read member states' own laws on recording.
Is an AI summary the same as the minutes?
No. Microsoft and Google warn that their output can be wrong, and minutes are the approved record of what a meeting decided, not an account of what was said. Our guide on what to include in meeting minutes sets out what that record needs.
The regulator adds two points. The ICO's AI guidance applies the accuracy principle to an AI system's outputs about people, not only its inputs, so a summary that pins the wrong remark on a named colleague is inaccurate personal data (Information Commissioner's Office, n.d.-e). And the ICO's notice for its own Copilot pilot says each output carries the line "AI-generated content may be incorrect" and a human must verify it (Information Commissioner's Office, n.d.-b). The University of Cambridge (2025) says the same of AI minutes: treat the output as a draft and amend it.
Our checklist for turning an AI summary into minutes
This procedure is ours, built on the pages cited here.
- Before the meeting, confirm your organisation allows the tool and that you are the organiser.
- Open with a consent statement (ours is below); minute that the tool was used and any objection.
- Stop the tool for any confidential item and minute that item by hand.
- Afterwards, read the summary beside the transcript. Check each decision against the motion as put, each name against who spoke, and every figure and date.
- Rewrite each action with one owner and a date (action items that get done).
- Cut what minutes do not need: asides, opinions about people, and anything personal the record does not require.
- Cite every document the meeting relied on: Cite a source builds each entry free, and Verify references checks a whole list.
- Circulate it marked as a draft, and have it approved at the next meeting (approving and correcting minutes).
- Once the minutes are approved, delete the recording and transcript as your retention rule says.
What about confidential and privileged discussions?
Switch the tool off before them. A transcript captures everything, legal advice and remarks about named people included, and sits in someone's storage until deleted. The makers document how to stop: turning Copilot off in Teams also turns off recording and transcription, people inside the host's organisation can stop Meet's notes, and Zoom's host can stop AI features and delete the meeting assets (Microsoft, n.d.-a; Google, n.d.; Zoom, n.d.).
What university policies say about sensitive meetings
The University of Portsmouth (n.d.) tells staff to avoid AI transcription where sensitive information is discussed, and Temple University (2024) rules out its Zoom tool for sensitive or controversial material, partly because notes can be passed on. Recording a closed session or legal advice is covered in our guide to confidential minutes, privilege and closed sessions; whether a transcript of advice stays privileged is for the body's lawyer, before the meeting.
Can the public see AI transcripts of a public body's meetings?
Often they can ask. The Freedom of Information Act 2000 defines information as "information recorded in any form" (s. 84), and the ICO treats a request for material not held as a document, such as a recording, like any other (Information Commissioner's Office, n.d.-d). A transcript or AI summary a public authority keeps fits that definition. Open council meetings are a separate matter: in England anyone attending may film them, as our guide to parish and town council minutes explains.
In the US, the University of Utah (2025) warns staff that recorded or transcribed content may be subject to public records requests; we did not read any state's records statute. Short retention helps: the ICO's own notice says its Teams recordings and transcripts are deleted automatically after 21 days, and Copilot prompts and responses after seven.
What do universities' and employers' AI note-taker policies say?
They agree on the basics and disagree on consent. The four universities we read all limit which tools may be used, and differ on whether people must agree or need only be told.
- University of Cambridge (2025): use the University's licensed Copilot, Gemini or NotebookLM and keep unauthorised bots out; tell the people affected, which does not mean seeking consent case by case but does mean providing or updating privacy notices.
- University of Portsmouth (n.d.): only the organiser may bring an AI assistant; tell participants at the start; if anyone objects at any point, turn it off; verify the output.
- Temple University (2024): certain Zoom AI Companion functions only, third-party note-takers prohibited, and no AI "without the express permission of meeting attendees".
- University of Utah (2025): approved tools only, and delete recordings and transcripts no longer needed.
- The ICO as an employer: Copilot on the lawful bases of public task or legitimate interest, not consent, with short deletion periods and human checking (Information Commissioner's Office, n.d.-b).
Your organisation's own policy wins; if it has none, ask the data protection officer first.
Our short consent statement
This wording is ours, for the chair to read at the start. It is not legal advice, and whether an announcement is enough in a state that requires every party's consent is for a lawyer to say.
We are using [tool] today to make a transcript and an AI summary. The summary is a draft: [role] will check it before anything goes out as notes or minutes. The transcript will be kept for [period] and then deleted. If you would rather not be transcribed, say so now or at any time and we will switch it off. We will also switch it off for any confidential item.
Where does EdCitation fit, and where does it not?
In the policy paper, not the meeting room. EdCitation takes no notes, makes no transcript and leaves minutes to people; its job is looking sources up. For the references in a paper on AI note-takers it is, in our view, the best tool, because each entry is built from the publisher's record or the page and the tool shows what it read, so a fault like the one below is visible, where a chatbot composes references from memory. Find sources covers some 300 million published works; Verify references, Cite a source and Check your paper cost nothing and need no account. See pricing for Pro ($8 a month) and Max ($24).
Portsmouth's policy in Check your paper
Check your paper is designed for coursework briefs, so a staff policy stretches it. We gave it Portsmouth's AI meeting assistants guidance, about 430 words. It returned no rules, since none of the policy's rules is something a paper can be measured against, and set aside 18 sentences for you to check, among them "Don’t invite an AI meeting assistant to a meeting if you aren’t the organiser", "At the start of the meeting, inform participants about the use of AI and give them the chance to object.", "If anyone objects at any point during the meeting, turn off the tool immediately" and "Always verify AI-generated content for accuracy, as it may misinterpret discussions, leading to miscommunication." Read the policy yourself as well.
An ICO page in Cite a source
Given the ICO's page on monitoring methods, Cite a source returned the APA 7 entry "Specific data protection considerations for different ways or methods of monitoring workers. (2026)." and the address. It named no author, where the ICO is the group author, and its year matches a date in the page's hidden metadata (17 August 2026) that the page does not display. Our list gives the ICO as author and "n.d." with a retrieval date.
Quick questions
Do I need everyone's consent to use an AI note-taker?
In California, Maryland and other all-party states, for a confidential conversation, yes. Under US federal law one party is enough; in the UK and EU the organisation needs a lawful basis and must tell people.
Can I send the AI summary out as the minutes?
Not without checking it. Microsoft and Google both warn that their summaries can be wrong or incomplete, and minutes need the meeting's approval.
Do participants get told when Teams, Meet or Zoom takes AI notes?
Each maker describes a signal: a transcription notice in Teams, a message and pencil icon in Meet, a changed icon in Zoom. A notice is not always consent, so say it aloud too.
Can EdCitation take notes or write minutes for my meeting?
No. EdCitation does not record or transcribe meetings and writes no minutes. Its free Check your paper reads a written policy into a checklist, though our run shows a person must still read it.
Is an AI meeting transcript covered by freedom of information?
In the UK, if a public authority holds it, very likely: the Act covers information recorded in any form. Ask the authority's FOI officer about exemptions.
References
- 18 U.S.C. § 2511 (2023). https://www.govinfo.gov/content/pkg/USCODE-2023-title18/html/USCODE-2023-title18-partI-chap119-sec2511.htm
- Cal. Penal Code § 632 (2016). https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN§ionNum=632
- Freedom of Information Act 2000, c. 36, s. 84. https://www.legislation.gov.uk/ukpga/2000/36/section/84
- Google. (n.d.). "Take notes for me" in Google Meet. Google Meet Help. Retrieved September 26, 2026, from https://support.google.com/meet/answer/14754931
- Information Commissioner's Office. (n.d.-a). Data protection and monitoring workers. Retrieved September 26, 2026, from https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/monitoring-workers/data-protection-and-monitoring-workers/
- Information Commissioner's Office. (n.d.-b). Microsoft 365 Copilot [Privacy notice]. Retrieved September 26, 2026, from https://ico.org.uk/global/privacy-notice/microsoft-365-copilot/
- Information Commissioner's Office. (n.d.-c). Specific data protection considerations for different ways or methods of monitoring workers. Retrieved September 26, 2026, from https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/monitoring-workers/specific-data-protection-considerations-for-different-ways-or-methods-of-monitoring-workers/
- Information Commissioner's Office. (n.d.-d). The right to recorded information and requests for documents. Retrieved September 26, 2026, from https://ico.org.uk/for-organisations/foi/freedom-of-information-and-environmental-information-regulations/the-right-to-recorded-information-and-requests-for-documents/
- Information Commissioner's Office. (n.d.-e). What do we need to know about accuracy and statistical accuracy? Retrieved September 26, 2026, from https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/what-do-we-need-to-know-about-accuracy-and-statistical-accuracy/
- Md. Code, Cts. & Jud. Proc. § 10-402 (2026). https://mgaleg.maryland.gov/mgawebsite/Laws/StatuteText?article=gcj§ion=10-402&enactments=false
- Microsoft. (n.d.-a). Catch up on meetings with Microsoft Copilot in Teams. Microsoft Support. Retrieved September 26, 2026, from https://support.microsoft.com/en-us/teams/copilot/catch-up-on-meetings-with-microsoft-365-copilot-in-teams
- Microsoft. (n.d.-b). Frequently asked questions about Copilot in Microsoft Teams. Microsoft Support. Retrieved September 26, 2026, from https://support.microsoft.com/en-us/teams/platform/frequently-asked-questions-about-copilot-in-microsoft-teams
- Microsoft. (n.d.-c). Recap in Microsoft Teams. Microsoft Support. Retrieved September 26, 2026, from https://support.microsoft.com/en-us/teams/meetings/recap-in-microsoft-teams
- Microsoft. (n.d.-d). Start, stop, and download live transcripts in Microsoft Teams meetings. Microsoft Support. Retrieved September 26, 2026, from https://support.microsoft.com/en-us/teams/meetings/start-stop-and-download-live-transcripts-in-microsoft-teams-meetings
- Mont. Code Ann. § 45-8-213 (2025). https://mca.legmt.gov/bills/mca/title_0450/chapter_0080/part_0020/section_0130/0450-0080-0020-0130.html
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation). (2016). Official Journal of the European Union, L 119, 1–88. https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679
- Temple University. (2024). Guidelines for generative artificial intelligence (GenAI) note-taking tools. https://teaching.temple.edu/sites/teaching/files/media/document/Temple%20AI%20Notetaker%20Guidelines.pdf
- University of Cambridge. (2025). AI guidance. Information Compliance. https://www.information-compliance.admin.cam.ac.uk/data-protection/guidance/ai-guidance
- University of Portsmouth. (n.d.). AI meeting assistants: Responsible use guidance. Retrieved September 26, 2026, from https://myport.port.ac.uk/it-support/staff-it-support/staff-software-articles/ai-meeting-assistants-responsible-use-guidance
- University of Utah. (2025, September 22). Using meeting transcription and summarization tools? Be sure to choose approved software. https://ai.utah.edu/blog/posts/2025/transcription-tool-guidance.php
- Zoom. (n.d.). Using meeting summary with AI. Zoom Support. Retrieved September 26, 2026, from https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0058013