AI notetaking tools are increasingly common in virtual meetings, but they pose significant security risks, including the potential loss of attorney-client privilege and the unauthorized creation of biometric voiceprints. Experts warn that these tools convert sensitive corporate data into searchable text, which may be stored indefinitely, resold, or used to train future artificial intelligence models.
The Security Risks of AI Meeting Assistants
While AI notetakers promise to streamline workflows by summarizing key points and task lists, they fundamentally transform private conversations into corporate data. Amy Dufrane, chief executive of human resources training and certification provider HRCI, argues the risks to organizations are too high, suggesting companies should avoid using them entirely.
A primary concern involves data residency and retention. According to Justin Daniels, a corporate attorney at Baker Donelson, users often do not know where their data goes. This lack of transparency can jeopardize legal protections; in a February case, a New York federal judge ordered a criminal defendant to turn over documents to prosecutors because they had been shared with an AI tool, potentially waiving attorney-client privilege.
Text-based AI transcripts are significantly easier for third parties to search, store, and analyze compared to raw video or audio files, making them a higher-value target for data breaches, according to the Electronic Frontier Foundation (EFF).
Protecting Your Voiceprints and Biometric Data
Many AI notetakers create “voiceprints”—unique acoustic signatures used to label speakers as “Speaker 1” or “Speaker 2.” Chris Pluymers, an associate attorney at The Dillon Law Group, warns that these biometric profiles could be exploited to bypass security measures, such as phone-based banking verification.
Legal protections vary by region. In Illinois, the Biometric Information Privacy Act categorizes voiceprints as biometric identifiers, requiring written notice and informed consent before collection. Pluymers notes that many AI vendors lack the necessary data destruction policies or retention schedules required to comply with such laws, making proactive management essential for employees.
How to Maintain Meeting Privacy
Participants can take specific steps to mitigate privacy risks during virtual calls. Thorin Klosowski, a senior security and privacy analyst at the EFF, suggests that checking for bot attendees or recording notifications is the first step when joining a meeting.
- Set Boundaries Early: If a meeting is sensitive, state clearly that recording is not authorized. Amy Dufrane suggests citing company policy to remove the pressure from individual employees.
- Request Deactivation: You can ask for the notetaker to be turned off during specific, delicate portions of a discussion.
- Verify Data Policies: Before using a tool, confirm whether the vendor retains transcripts or metadata indefinitely and if that data is used to train AI models, advises Danielle Kays, a partner at Fisher Phillips.
If an uninvited AI bot appears, politely state: “I prefer we keep this meeting without AI recording or transcript tools and I’d be happy to take my own notes and share a recap if that’s helpful.”
Frequently Asked Questions
Can I stop an AI notetaker from joining my meeting?
Yes. You can ask the host to remove the bot or state at the beginning that company policy prohibits recording.
What happens to the data captured by AI notetakers?
Data practices vary by vendor. Some companies store transcripts indefinitely, some resell the data, and others use it to train their AI models. Always review the specific privacy policy of the tool being used.
Are voiceprints legally protected?
In some jurisdictions, like Illinois, voiceprints are considered biometric identifiers protected by law. These laws often mandate informed consent and clear data destruction policies.
Have questions about workplace technology or privacy? Share your stories with us or subscribe to our newsletter for the latest updates on digital security and workplace trends.