AI note takers in client meetings: consent laws by state

By Michael Nadalin, Founder, Market Lead · 16 October 2026 · 6 min read

A client books a 45 minute Teams call to go through a family provision claim. Your AI note taker joins automatically, records the whole conversation, transcribes it and drafts a file note before you have hung up. That saves real time. It also means a recording now exists of a confidential conversation, and the client may not know about it. Depending on where you and the client are sitting, that recording may also be an offence.

Australia has no single recording law. Each state and territory has its own surveillance or listening devices legislation, and they split into two camps. In some, a party to a private conversation can record it without telling anyone. In others, every principal party has to consent unless a narrow exception applies. Commonwealth telecommunications and privacy law sit on top of that, and so do your obligations under the conduct rules.

This post sets out where each jurisdiction lands, the traps specific to video calls and cloud transcription, and a consent process that works in every state so you do not have to work out which law applies before every meeting.

The state by state position on recording a private conversation

The key question in each Act is whether a person who is a party to a private conversation may record it without the consent of the other parties. Victoria, Queensland and the Northern Territory generally allow it. New South Wales, Western Australia, South Australia, Tasmania and the ACT generally require the consent of all principal parties, with limited exceptions such as recording that is reasonably necessary to protect the recording party's lawful interests.

Do not rely on the lawful interests exception for routine client meetings. It was designed for situations like recording a threat or securing evidence of a dispute, not for producing a convenient file note. If your argument for recording is that it helps you draft faster, that is an efficiency, not a lawful interest in the statutory sense.

The one-party states are not a free pass either. The Victorian Act restricts publishing or communicating a record of a private conversation without consent, and the Queensland Act has a similar restriction on communicating what was recorded. If the recording goes to a third party vendor for processing, you need to think about whether that is a communication of its contents.

Video calls, interstate clients and the Commonwealth layer

Most AI note takers are used on Teams, Zoom or phone calls, and that raises two more problems. First, your client may be in a different jurisdiction from you. If you are in Brisbane and the client is in Sydney, you cannot safely assume that Queensland law alone applies. Which Act applies to a conversation across state borders is not clearly settled, so the practical approach is to comply with the stricter regime.

Second, the Telecommunications (Interception and Access) Act 1979 (Cth) prohibits intercepting a communication passing over a telecommunications system without the knowledge of the person making it. Whether a particular AI tool's recording counts as interception depends on how it captures the audio and on technical questions about the Act that are not always straightforward. You do not need to resolve that. If every participant knows the call is being recorded and transcribed, the knowledge element is dealt with.

Bots that join meetings automatically make this worse. Many tools add themselves to every calendar invitation by default, including meetings arranged by the other side, by counsel or by an expert. Turn auto-join off and decide meeting by meeting.

Confidentiality, privilege and where the transcript goes

Even where recording is lawful, your duty of confidentiality under rule 9 of the Australian Solicitors' Conduct Rules (or the equivalent in your jurisdiction) still applies. Once an AI note taker records a conference, that audio and transcript usually leave your systems and are processed by a vendor, often offshore. Before you use the tool, find out where the data is stored, whether the vendor keeps it, whether it is used to train models, and who at the vendor can access it.

Privilege is the quieter risk. Sharing a confidential communication with a service provider under appropriate confidentiality terms does not normally waive privilege, but a weak contract, an unclear retention policy or a transcript that ends up shared through the tool's own links gives your opponent room to argue. Courts look at the substance, so the protections need to exist in practice, not just in your engagement letter.

The Privacy Act 1988 (Cth) also matters for firms it covers. Australian Privacy Principle 8 governs disclosure overseas and APP 11 requires reasonable steps to secure personal information. The statutory tort for serious invasions of privacy, introduced by the 2024 amendments, is another reason not to treat covert recording lightly.

A consent process that works in every state

The simplest compliance strategy is to treat every jurisdiction as an all-party consent jurisdiction. Then it no longer matters where the client is sitting, whether counsel joins from another state, or whether a family member wanders into the room halfway through.

Consent should be informed and recorded. Put it in the costs agreement or engagement letter, then confirm it out loud at the start of each recorded meeting so the confirmation appears in the transcript. Explain that the meeting will be recorded and transcribed by software, why you are doing it, and that the client can say no without consequence. Some clients will say no, particularly in family, criminal and employment matters. Respect that and take handwritten notes.

Where AI note takers earn their place, and where they do not

Used properly, these tools save time on routine conferences: initial instructions, updates and internal file reviews. The summary is a draft. Transcription makes mistakes with names, figures and legal terms, and a summary can sound confident while dropping the one qualification that matters. Read it against your own recollection before it goes on the file, because a file note you did not check is worse than no note at all when it is relied on later in a costs dispute or a negligence claim.

Some meetings should not be recorded. Conferences with a vulnerable client, sensitive settlement discussions with the other side, and anything where a verbatim transcript could be discoverable or used against your client all deserve a deliberate decision. Courts and tribunals have their own rules on recording proceedings, so do not take a note taker into a hearing without leave. Legal Brain is built for research rather than meeting capture, but the same rule applies to any AI tool in practice: know where the data goes, check the output, and make sure the client knows what you are doing.

Frequently asked questions

Is it legal to record a conversation without consent in Australia?

It depends on the state or territory. In Victoria, Queensland and the Northern Territory, a party to a private conversation can generally record it without the others' consent, though publishing or sharing it is restricted. In NSW, WA, SA, Tasmania and the ACT, you generally need the consent of all principal parties unless a narrow exception applies.

Do I need client consent to use an AI note taker in a meeting?

In practice, yes. Even in states where one party may record, sending the recording to a third party vendor raises confidentiality, privacy and possibly communication restrictions. Getting informed consent in writing at engagement and confirming it verbally at each meeting deals with all of those risks.

Which law applies if my client is in a different state?

Which surveillance law applies to a conversation across state borders is not clearly settled. The safe approach is to comply with the stricter regime, which usually means getting the consent of every participant before recording.

Does using an AI transcription tool waive legal professional privilege?

Sharing confidential communications with a service provider bound by confidentiality does not normally waive privilege. The risk comes from weak vendor terms, unclear retention, model training on client data, or transcripts shared through open links. Review the contract and settings before relying on the tool.