Are AI Note-Takers Legal in Australia? The Privacy Check Before Your Next Meeting
AI note-takers are one of the best time savers to land in small business in years. A bot joins the call, transcribes every word, writes the summary and lists who agreed to do what. The follow-up email practically writes itself.
They are also one of the easiest ways to break Australian privacy and recording rules without noticing. So are AI note-takers legal in Australia? Yes, when you use them properly. This guide explains what "properly" means in plain English: consent, where the recording goes, who can read it, and how long you keep it.
Quick answer: AI note-takers are legal in Australia when you use them properly. Tell everyone the meeting is being recorded and transcribed, get their agreement before you start, use a business account with data training switched off, limit who can read the transcripts, and delete recordings you no longer need. Recording rules differ by state, so consent from everyone is the safe default.
This article is general information, not legal advice. If you work in a regulated field such as health, law or financial services, check your professional obligations too.
Why AI note-takers deserve a closer look
A human taking notes writes down the decisions. An AI note-taker captures everything: the side comment about a staff member, the client's health issue mentioned in passing, the pricing you floated and then walked back, the bank details read out loud. All of it becomes a searchable file stored on someone's server.
That is the shift. You are no longer just "taking notes". You are recording a private conversation and creating a record of personal information. Two sets of rules apply to that:
| Rule set | What it covers | The question it asks |
|---|---|---|
| State and territory recording laws (surveillance and listening devices laws) | Recording a private conversation | Did the people in the conversation agree to be recorded? |
| The Privacy Act 1988 and the Australian Privacy Principles | Collecting, storing, using and sharing personal information | Is personal information handled fairly, securely and transparently? |
The Privacy Act generally applies to businesses with an annual turnover above $3 million, plus some smaller businesses such as health service providers. The recording laws apply to everyone. Either way, your clients expect you to handle their information carefully, whatever your turnover.
Are AI note-takers legal in Australia? It depends on consent
Australia has no single national recording law. Each state and territory has its own, and they do not all agree.
Some jurisdictions let a person who is part of a conversation record it without telling the others. Others are much stricter and generally expect the agreement of everyone in the conversation, with only narrow exceptions. Almost everywhere, publishing or sharing a recording of a private conversation is restricted, even where making the recording was allowed.
Now add the reality of modern meetings. Your video call might have you in Perth, a client in Sydney and a supplier in Melbourne. Which state's law applies? You do not want to be working that out after a complaint.
That is why the practical rule is simple:
Tell everyone, every time, before the recording starts, and give them a real option to say no.
Consent from everyone is the safe default in every state. It costs you one sentence at the start of the meeting. And it builds trust instead of eroding it, because people notice when a bot appears in the participant list that nobody mentioned.
What good consent looks like
- Say it out loud at the start: "I use an AI assistant to take notes so I can focus on you. It records and transcribes the call. Are you comfortable with that?"
- Put it in the invite: a line in the meeting invitation means nobody is surprised.
- Respect a no: turn it off and take notes the old way. Never record "just this once" anyway.
- Repeat it when people join late: someone who joins at minute 20 did not hear the first announcement.
The hidden risk: bots that join meetings on their own
Here is the part that catches businesses out. Many standalone AI note-takers connect to your calendar and join meetings automatically. That is convenient, until the bot turns up to:
- A performance or disciplinary conversation with a staff member
- A client call where health, financial or legal details are discussed
- A meeting you were invited to by another business, whose people never agreed to your bot
- A confidential negotiation, where a transcript is the last thing you want floating around
Worse, a staff member can connect one of these tools to their work calendar using a free personal account, without IT ever knowing. That is shadow AI in its purest form (we cover the wider problem in our guide to what not to paste into ChatGPT). The recordings then sit in an account the business does not control, under terms the business never agreed to.
The fix: switch auto-join off, approve one note-taker for the whole business, and make "a person decides when the bot joins" the rule.
Where do the recordings go?
This is the question I ask about every AI tool, because it is where most of the risk lives. Before you approve an AI note-taker, find out:
| Question | Why it matters | What "good" looks like |
|---|---|---|
| Is our data used to train AI models? | Your client conversations could help train a product used by everyone | Training off by default on a business plan, stated in writing |
| Which country is it stored in? | Sending personal information overseas brings extra Privacy Act obligations | Clear data location, ideally Australia for sensitive work |
| Who can see the transcripts? | Default sharing settings often send notes to every attendee, or the whole team | You control sharing, per meeting |
| How long is it kept? | Every stored recording is something that can leak | A retention setting you control, with automatic deletion |
| Can we delete it properly? | Clients may ask you to remove a recording | Deletion that removes the recording, transcript and summary |
| Who owns the account? | If a staff member leaves, their recordings should not leave with them | Business account, admin controls, access removed on exit day |
The Office of the Australian Information Commissioner (OAIC) has published guidance on privacy and the use of commercially available AI products. It recommends, as best practice, that organisations do not enter personal information, and particularly sensitive information, into publicly available AI tools. It also expects businesses to do their due diligence on AI products and to be open about how they use AI in their privacy policies.
A free, personal AI note-taker recording a client meeting is exactly the situation that guidance warns about.
Built-in note-taking vs standalone note-taker bots
You often do not need an extra tool at all. If your business already runs on Microsoft 365 or Google Workspace, the meeting platform you pay for may already transcribe and summarise.
| Built into your meeting platform | Standalone note-taker bot | |
|---|---|---|
| Where data lives | Inside the business system you already manage | With another vendor, often overseas |
| Who controls access | Your existing admin settings and permissions | A separate account, sometimes a personal one |
| Recording notice | The major platforms show everyone a notice when recording or transcription starts | Varies; some just appear as a participant |
| Joins automatically | Usually only when someone starts it | Often joins from the calendar unless you turn that off |
| Best for | Internal meetings and most client calls | Specific features your platform lacks |
My default advice: start with what is built in, on a business plan, before adding another vendor. Fewer tools means fewer places your client conversations can end up. (We make the same point about AI tools generally in our list of the best AI tools for Australian small business.)
Meetings where you should switch the note-taker off
Some conversations should not be recorded by an AI, even with consent. Make these "human notes only":
- HR conversations: performance, disciplinary matters, grievances, health and personal circumstances.
- Sensitive client details: health information, financial hardship, legal matters, anything about children.
- Confidential deals: negotiations, acquisitions, anything under a confidentiality agreement.
- Other people's meetings: if another organisation runs the call, ask before you bring your bot. Their rules apply.
- Anything you would not want read out in a dispute: if a transcript would make you nervous, you have your answer.
If you work in health, law or finance, your professional standards may set a higher bar than the general rules. Check them before you record clients.
A simple AI note-taker policy you can adopt this week
You do not need a 20-page document. Add a short section to your AI policy (our guide on how to write an AI policy includes a free template) that covers these six rules:
- One approved tool. Name the note-taker the business uses. No personal or free accounts for work meetings.
- Consent first, every time. Announce it, put it in the invite, and turn it off if anyone objects.
- No auto-join. A person decides when the note-taker joins a meeting.
- Red-list meetings stay human. HR, sensitive client details and confidential deals are never recorded by AI.
- Tight sharing and short retention. Transcripts go to the people who need them. Recordings are deleted after a set period, for example 90 days, unless there is a reason to keep them.
- Check before you send. AI summaries get things wrong. A human reads the summary before it goes to a client.
Then update your privacy policy so it says you may use AI tools to record and summarise meetings, and how that information is handled. The OAIC recommends exactly that kind of transparency.
The upside is real, so do it properly
None of this is a reason to avoid AI note-takers. The time savings are genuine. You stay present in the conversation instead of typing, nothing falls through the cracks, and follow-ups go out the same day. For a busy owner who spends hours a week in meetings, that adds up to real time back every month.
The businesses that win with AI are not the ones that use the most tools. They are the ones that use the right tools, set up safely, so they can move fast without a privacy headache waiting for them. After 25 years in IT and security, that is the pattern I see every time: the setup decides whether a tool is an asset or a liability.
Frequently asked questions
Do I need consent to use an AI note-taker in a meeting in Australia?
In practice, yes. Recording laws differ between states and territories, and some are strict about recording private conversations without everyone's agreement. Telling all participants the meeting will be recorded and transcribed, and getting their agreement before you start, is the safe approach everywhere in Australia.
Is it legal to record a Teams or Zoom meeting in Australia?
Recording a meeting can be legal when participants know and agree. Teams and Zoom show participants a notice when recording or transcription starts, which helps, but a notice alone is not a conversation. Announce it, put it in the invite, and stop recording if anyone objects.
Does the Privacy Act apply to AI meeting transcripts?
Yes, if your business is covered by the Privacy Act and the transcript contains personal information. A transcript that captures names, contact details, health or financial information is personal information, so collection, storage, security and disclosure obligations apply. Overseas storage can add extra obligations.
Are free AI note-takers safe for business meetings?
Usually not for client or staff conversations. Free and personal accounts give the business no control over where recordings are stored, who can access them or whether they are used to improve the product. Use a business plan with data training switched off and admin controls the business owns.
Should AI note-takers join client meetings automatically?
No. Turn auto-join off. A person should decide when a note-taker joins, so it never turns up uninvited to an HR conversation, a sensitive client call or another organisation's meeting.
How long should I keep AI meeting recordings?
Only as long as you need them. Set a retention period, for example 90 days for routine meetings, and delete recordings automatically after that. Keep the written summary or decisions if you need a record, and delete the raw recording.
The bottom line
So, are AI note-takers legal in Australia? Yes, when consent comes first, the tool runs on a business account, sharing is tight and recordings do not hang around forever. Get those four things right and you get all of the time savings with none of the privacy surprises.
If you want AI tools like this set up safely across your whole business, with the policy, permissions and security settings that make them stick, that is what our AI consulting work is built for. The easiest first step is a free AI Game Plan Session: 60 minutes to find where AI will save you the most time, and where your data is exposed right now.
