AI notetakers are one of the most popular AI tools in small business. A bot joins your Zoom or Teams call, writes up the meeting and sends a tidy summary with action items. Almost nobody reads the fine print on where those recordings go. A federal judge in California just made that fine print a lot more important, and the reason has to do with what the vendor does with your conversations after the meeting ends.
What happened
On August 13, 2026, Judge Eumi Lee of the Northern District of California ruled on Otter.ai's motion to dismiss a consolidated privacy class action, according to UC Today. The case combines four proposed class actions filed in August and September 2025. The plaintiffs say Otter's assistant joined calls and recorded and transcribed people who never agreed to it, then used those recordings to improve its products and train AI.
The judge let the central claims go forward: the federal wiretap law, California's Invasion of Privacy Act and Illinois's biometric privacy law. She dismissed the computer hacking claims and some narrower privacy claims, many with permission to refile. UC Today stresses that the ruling does not decide whether Otter broke the law. It only finds the plaintiffs have said enough to keep going.
The reasoning is the part business owners should study. Otter argued it is just a tool used at the direction of the meeting host, not an outside eavesdropper. Law firm Baird Holm explains that the court found the complaint plausibly alleged Otter kept and used conversation data for its own commercial purposes, including building machine learning models. That opened the door to treating Otter as a third party listening in, rather than a mere service provider. The court also accepted, at this stage, that speaker identification profiles could count as biometric identifiers under Illinois law.
Otter is not alone. Baird Holm notes that in July a proposed class action was filed in the same court against Granola, another AI note-taking provider. That suit alleges Granola records audio directly from the user's computer without appearing as a participant, so others on the call may not know.
Why it matters for your business
This is not legal advice, and the case is early. But three lessons already hold.
Your consent is not everyone's consent. Some states, California among them, require every party to agree before a conversation is recorded. When your notetaker joins a call with a client, a job candidate or a vendor, you may be the one recording them.
What the vendor does with the data changes the legal picture. The court's reasoning turned on the allegation that Otter used conversations to train its own AI. A vendor that only processes your data for you looks like a tool. A vendor that keeps it for its own benefit can look like a third party. That difference is written in the terms of service and settings most companies never check.
Sensitive calls carry more risk. UC Today reports the court saw the alleged capture of private medical, financial and professional conversations as a possible concrete injury. Law firms, clinics, HR teams and financial advisers should pay close attention.
What we'd do
- Inventory the bots. Find out which notetakers your staff have connected to their calendars. Many were added by individuals, not IT.
- Read the data terms. Does the vendor use your recordings to train its models? Can you turn that off? Is there a business plan with stricter terms? Choose accordingly.
- Announce every recording. Say it at the start of the call and put it in the invite. Make it easy for any participant to say no.
- Set no-record zones. Interviews, medical or legal matters, disciplinary meetings and calls with outside counsel should default to no AI recording.
- Limit retention. Keep the summary you need and delete raw recordings on a short schedule.
- Turn off auto-join for external meetings unless the host chooses it each time.
Our view
Notetaker vendors have a fair point: the account holder chose the tool and invited it to the call, and treating every transcription service as a wiretapper could make ordinary business software unworkable. Courts may still land there. But the ruling puts the weight where it belongs, on the question of who benefits from the recording. We like these tools. We also think any business that lets a bot record outsiders without telling them, and without knowing where the audio goes, is taking a risk it does not need to take. Pick a vendor that does not train on your calls, tell everyone in the room, and this stays a productivity tool instead of a lawsuit.
Want a system like this in your business?
A discovery conversation is where we map it: what to automate first, where the human checkpoints go, and what it would take.
Book a discovery conversation →