AI Use Cases
Are AI Note-Takers Legal in Australia? The Consent Rules
AI note-takers now auto-join meetings. In five Australian states, recording a client or staff call without everyone's consent is an offence. Here's the fix.
A bot recorded your meeting. That can be an offence.
A bot joined your last client meeting, listened to everything, and emailed a transcript to whoever organised the call. You probably didn't ask the client if that was okay. In five of Australia's eight states and territories, that single omission can be a criminal offence — not a privacy slip, an offence under listening-device law. The tool was trying to save you ten minutes of typing. It may have exposed you instead.
This is now an everyday risk, not an edge case. AI note-takers stopped being a thing you sought out. Through 2025 and 2026 they moved inside the tools you already use — Copilot in Microsoft Teams, Gemini in Google Meet, Zoom's AI Companion — and a wave of standalone bots, Otter, Fireflies, Fathom and Read.ai, now join meetings automatically off your calendar invites, often before a human has said hello. Recording went from a deliberate act to a default setting or an auto-accepted invite. The transcript is genuinely useful. The quiet recording that produces it is where the risk hides.
Australia doesn't have one recording law. It has eight.
There is no single federal rule on recording a private conversation. Each state and territory has its own, and they split into two camps. In Victoria, Queensland and the Northern Territory, a participant may record a private conversation they're part of — Victoria's Surveillance Devices Act 1999, Queensland's Invasion of Privacy Act 1971, the NT's Surveillance Devices Act. In New South Wales, Western Australia, South Australia, Tasmania and the ACT, you need the consent of every principal party; being in the room doesn't make it legal. That split follows law firm Hamilton Locke's guide to the law in Australia.
Two things make this sharper than it looks. First, the stricter camp is the majority — five of eight — and it includes the country's two largest markets, NSW and WA. If anyone on a call sits in an all-party state, the safe move is to treat the whole call as all-party. Second, even where recording is lawful, communicating or publishing that recording to someone who wasn't a party is separately restricted — so forwarding the AI summary can breach a rule the recording itself didn't. Phone and internet calls add a federal layer on top, the Telecommunications (Interception and Access) Act 1979, which chiefly targets third-party interception.
Recording-consent law by jurisdiction
All-party consent
5 of 8
NSW, WA, SA, Tas, ACT — everyone must agree
Participant consent
3 of 8
Vic, Qld, NT — a party may record
Want to know what this means for your business? We'll map it in one call.
Book a callThe transcript is the second exposure
The recording law is only half of it. The transcript itself is a record of personal information, which pulls it under the Privacy Act 1988 and the Australian Privacy Principles the moment it captures a name, a health detail, a complaint or an HR conversation. By default, many of these tools save that transcript to the meeting organiser's cloud drive and share it across the whole domain — so a candid board discussion or a performance conversation can sit, searchable, in a folder half the office can open.
For a professional-services firm this lands hard. The meetings you most want summarised — client advice, a dispute, a staff grievance — are exactly the ones carrying confidential and sensitive content. We've written about how an AI transcription tool running during a sensitive discussion can waive legal privilege you can't restore once it's gone. And the same consent-and-notice discipline you'd apply to monitoring your own staff applies to recording the people across the table. If you can't say which of your meeting tools record by default, or where those transcripts land, map where AI already touches your business before the next client call.
Four steps, none of them expensive
You don't need to ban the tool. You need to stop the defaults making the decision for you. Turn off auto-record and auto-join, so recording becomes a choice rather than an accident. Make consent a habit: at the top of any recorded call, say the AI note-taker is on and ask if everyone's comfortable — and treat all-party consent as the national rule, because it's the only one that's safe in every state.
Then write it down. A one-line policy settles which meetings may be recorded, who can open the transcript, how long it's kept and when it's deleted. Finally, check your storage defaults and move transcripts out of a shared drive into a restricted location. Do that and you keep the ten minutes the tool saves without betting a client relationship — or a privilege claim — on a setting nobody ever looked at.
Key takeaways
Common questions
Are AI note-takers legal in Australia?
It depends on your state. In Victoria, Queensland and the Northern Territory a participant may record a conversation they're part of. In New South Wales, Western Australia, South Australia, Tasmania and the ACT you need every party's consent — being on the call isn't enough. Because five of the eight states and territories require all-party consent, the safe rule for any business operating across borders is to get everyone's agreement before recording.
Does a meeting transcript fall under the Privacy Act?
Yes, once it captures personal information — a name, a health detail, a complaint, an HR discussion. That brings it under the Privacy Act 1988 and the Australian Privacy Principles, which govern how you collect, store, share and secure it. Default settings that save transcripts to a shared drive and open them to the whole organisation are where most of the risk sits.
How do I use an AI note-taker without breaking the law?
Turn off auto-record and auto-join so recording is a choice. Announce the tool and get consent at the start of the call, treating all-party consent as the rule. Write a short policy covering which meetings can be recorded, who can access the transcript and how long it's kept — and restrict where transcripts are stored.
Sources
Assumptions & methodology
- The state-by-state recording-consent split — participant/one-party in Victoria (Surveillance Devices Act 1999), Queensland (Invasion of Privacy Act 1971) and the Northern Territory (Surveillance Devices Act), and all-party consent in NSW (Surveillance Devices Act 2007), WA (Surveillance Devices Act 1998), SA (Surveillance Devices Act 2016), Tasmania (Listening Devices Act 1991) and the ACT (Listening Devices Act 1992) — follows law firm Hamilton Locke's guide 'Recording private conversations: the law in Australia' (8 August 2025). These Acts are technical and carry exceptions (for example, a recording reasonably necessary to protect a person's lawful interests); confirm the position in your jurisdiction before relying on it.
- That AI note-takers commonly save transcripts to the organiser's cloud by default and share them across a domain, and that a visible bot is not reliable consent, draws on SmartCompany's reporting (25 June 2025); specific behaviour varies by tool and configuration.
- Last reviewed 12 October 2026. General information, not legal advice — confirm what applies to your business and jurisdiction before relying on it.
Talk to us
Do you know which of your meeting tools are recording?
AI note-takers are already in your calls — the question is whether you've set the consent, storage and access rules around them, or let the defaults decide. A short conversation will map where recording and transcription touch your business, and what to lock down first. Book a call.