AI Meeting Recording Laws by State: Complete Guide (2026)

Whether an AI meeting recorder is legal in the United States depends on state law. Federal law under 18 U.S.C. 2511 permits one-party consent, but 13 states require all-party consent for at least some conversations (Connecticut and Nevada only for phone calls, Oregon only for in-person conversations and video calls, and Delaware has two conflicting statutes), and recording without every participant's agreement can be charged as a felony in eight of those 13 states.

AI meeting recorders like Otter.ai, Fireflies, Fathom, and built-in tools from Zoom, Microsoft Teams, and Google Meet have transformed how organizations capture meeting content. They also raise serious legal questions under federal and state wiretapping laws that were written decades before AI transcription existed.

Whether an AI meeting recorder is legal depends on where meeting participants are located, how the tool obtains consent, and whether courts classify the AI bot as a recording device or an unauthorized third-party interceptor. Federal litigation and state legislative action are actively reshaping this legal landscape.

Federal Law: The Starting Point

The Electronic Communications Privacy Act (ECPA), codified at 18 U.S.C. Section 2511, prohibits intentionally intercepting wire, oral, or electronic communications. The critical exception: one party to the communication can consent to recording without notifying others. That protection does not apply if the recording is made "for the purpose of committing any criminal or tortious act" (18 U.S.C. 2511(2)(d)).

Federal criminal penalties include up to 5 years imprisonment and fines up to $250,000. In a civil suit, a court may award the greater of actual damages plus the violator's profits, or statutory damages of $100 for each day of violation or $10,000, whichever is greater (18 U.S.C. 2520(c)(2)).

The Third-Party Question

The central legal question for AI meeting recorders: is the AI bot a "party" to the conversation, or a "third party" intercepting it?

In Ambriz v. Google (N.D. Cal., Feb. 10, 2025), a federal judge refused to dismiss California wiretapping claims over Google's contact-center AI. On the question of whether a software vendor is a "third party" eavesdropper under Penal Code 631, the court noted that trial courts are split: some require that the vendor actually use the recordings for its own purposes, while others ask only whether it is capable of doing so. The court applied the broader "capability" approach, first used in Javier v. Assurance IQ (N.D. Cal. 2023). The ruling bound no other court, and in October 2026 the same judge dismissed the remaining plaintiffs' claims on consent and intent grounds (with leave to amend) and sent others to arbitration.

In the Otter.ai case in August 2026, the court reached third-party status on a narrower basis: the plaintiffs plausibly alleged that Otter actually keeps meeting conversations and uses them to improve its own models. Both rulings interpret California law at the pleading stage, but they matter for any AI meeting recorder that stores or reuses meeting data beyond transcription.

The Otter.ai Class Action

In re Otter.AI Privacy Litigation (N.D. Cal., No. 5:25-cv-06911) consolidates four lawsuits filed between August and September 2025:

The consolidated case (formerly Brewer v. Otter.ai) is brought against Otter.ai, Inc. alone. On August 13, 2026, Judge Eumi K. Lee granted Otter's motion to dismiss only in part. The federal Wiretap Act claim, the California Invasion of Privacy Act claim, both Illinois BIPA claims, and the unjust enrichment, UCL and declaratory relief claims are proceeding.

The court held that plaintiffs plausibly alleged Otter is a third-party eavesdropper under Penal Code 631 because it allegedly keeps and uses meeting conversations to train its own models, and that this same alleged use could be a "tortious" purpose that defeats the federal one-party consent exception. The computer-fraud (CFAA and CDAFA) and Washington Privacy Act claims were dismissed with leave to amend, and the privacy tort survived only for a plaintiff whose call involved medical information.

Otter answered the complaint on September 17, 2026, and the case is now in discovery, with a class certification motion due in May 2027. These are pleading-stage rulings: no court has found that Otter actually broke any law.

A separate Illinois biometric-privacy suit against Fireflies.ai (Cruz v. Fireflies.AI Corp., C.D. Ill., filed December 2025) was voluntarily dismissed without prejudice on March 11, 2026; a similar suit was later filed in the Northern District of Illinois and is pending. Earlier suits over AI call tools have mostly failed or been dropped: Galanter v. Cresta (a California CIPA claim over contact-center AI) was voluntarily dismissed in September 2025, and Lisota v. Heartland Dental, a federal Wiretap Act case over RingCentral's AI phone features, was dismissed with prejudice on July 24, 2026 under the Act's "ordinary course of business" exception for communication service providers.

One-Party vs. Two-Party Consent States

The legal risk of using AI meeting recorders varies dramatically by state. In one-party consent states, the meeting host's consent may be sufficient. In two-party (all-party) consent states, every participant must at least be told about the recording, and in most of them must agree to it, before an AI tool records. Some of these states accept notice instead of agreement: Oregon requires that every participant be informed and exempts video meetings where everyone knew or reasonably should have known of the recording, Connecticut's civil rule for phone calls is met by a recorded announcement or a beep tone, and Montana bars recording with a hidden device and, separately, purposely intercepting an electronic communication such as a video call, but both offenses exempt recordings made after the participants are given a warning (Mont. Code 45-8-213(1)(c), (2)(a)(iii), (3)).

In California, the state Supreme Court has said that clearly telling everyone at the start of a call that it is being recorded means the call is not confidential under Penal Code 632. For calls involving a cell or cordless phone, however, Penal Code 632.7 requires the consent of all parties with no confidentiality element, and the court left open in Smith v. LoanMe (2021) whether a notice followed by staying on the call counts as consent.

Two-Party (All-Party) Consent States

These 13 states require consent from all participants for at least some conversations; Connecticut and Nevada apply the rule to phone calls only, Oregon to in-person conversations and video calls only, and Delaware has two conflicting statutes. Recording without every participant's agreement can be charged as a felony in eight of them (California, Florida, Illinois, Maryland, Massachusetts, Nevada, New Hampshire and Pennsylvania). Connecticut's felony eavesdropping statute applies only when no party consented, and in the remaining states the offense is a misdemeanor.

Three rows above need a caveat. Delaware has two conflicting statutes: its privacy offense, 11 Del. C. 1335(a)(4), reads as all-party, but its wiretap act, 11 Del. C. 2402(c)(4), allows a participant, or a person with one party's prior consent, to record. No controlling Delaware decision has resolved the conflict, so getting everyone's consent is the safe course. Connecticut's criminal eavesdropping statute (Conn. Gen. Stat. 53a-189, applying the wiretapping and mechanical-overhearing definitions in 53a-187) is a one-party-consent crime: the Class D felony applies to intercepting a conversation without the consent of any party, not to simply lacking unanimous consent. Connecticut's all-party framing comes from a separate civil statute, Conn. Gen. Stat. 52-570d, which is satisfied by all-party consent, a recorded verbal notice at the start of the call, or a repeating beep tone, and which only allows a civil damages claim, not criminal charges. Oregon's ORS 165.540 also splits by communication type: recording a telephone call requires consent from only one participant, but in-person conversations require every participant to be specifically informed. Since 2021, ORS 165.535 has defined a "conversation" to include a communication through a video conferencing program, so an AI recorder on a Zoom, Teams or Google Meet video call falls under the inform-every-participant rule, not the one-party phone-call rule. The same statute exempts recording a private meeting held through a video conferencing program if all others involved knew or reasonably should have known that the recording was being made (ORS 165.540(6)(a)(C)), so a clearly announced AI notetaker on a video call may fall outside the offense.

The penalty column splits more sharply than a blanket felony warning suggests. A violation can be charged as a felony in California, Florida, Illinois, Maryland, Massachusetts, Nevada, New Hampshire and Pennsylvania. Delaware caps the offense at a class A misdemeanor, because 11 Del. C. 1335(c) reserves the class G felony for the visual-image offenses in subsections (a)(6), (a)(7) and parts of (a)(9), not for intercepting a conversation under (a)(4). Oregon caps it at a Class A misdemeanor as well: ORS 165.540(9) states that a violation of subsection (1) or (2)(b) is a Class A misdemeanor, and the section contains no felony grading at all. Washington's offense is a gross misdemeanor. Montana caps a recording conviction at six months in county jail and a $500 fine (Mont. Code 45-8-213(4)(a)); the statute's longer terms for repeat convictions apply only to its threatening, harassing and intimate-image offenses, not to recording.

One-Party Consent States

In these 37 states plus DC, the meeting host's consent as one party may be sufficient to authorize AI recording. However, a vendor that uses meeting data for its own purposes can still face claims. In the Otter.ai case, the court let a federal Wiretap Act claim proceed on the theory that using conversations to train the vendor's own models could be a tortious purpose that removes the federal one-party protection. The California "capability" cases, such as Ambriz v. Google, apply California law, not one-party states' statutes.

Michigan is a notable case within this group. Its eavesdropping statute, MCL 750.539c, bars eavesdropping on the private conversations of others. In Sullivan v. Gray, 117 Mich. App. 476 (1982), the Court of Appeals held that the statute unambiguously excludes participant recording, so a meeting participant can record without notifying the other parties.

AI Meeting Recorder Compliance Comparison

Not all AI meeting tools handle consent the same way. The table below compares how major tools notify participants and obtain consent.

HIPAA and Healthcare Meetings

When meetings involve Protected Health Information (PHI), AI meeting recorders must comply with HIPAA requirements. The AI tool vendor must sign a Business Associate Agreement (BAA) with the healthcare provider before processing any PHI.

Tools offering HIPAA-compliant enterprise plans with BAA include Fireflies.ai, Otter.ai (Enterprise only), Fathom, and Krisp. Free-tier AI tools should never be used for meetings involving patient information, as they may use data for model training by default.

HIPAA civil penalties are adjusted for inflation every year. Under the current HHS schedule (45 CFR 102.3) they range from $145 per violation to about $2.19 million per violation, depending on culpability, with a calendar-year cap of about $2.19 million for identical violations.

Attorney-Client Privilege

The NYC Bar issued Formal Opinion 2025-6 addressing AI recording of attorney-client conversations. Key requirements include obtaining client consent before using AI to record or transcribe, evaluating AI vendor data storage and training practices, and independently verifying AI-generated transcripts for accuracy.

AI-generated meeting transcripts are discoverable evidence. Using an AI recorder during privileged conversations creates risks of inadvertent waiver if the vendor's employees can access stored content.

Employer Mandates and Workplace Rights

Employers increasingly mandate AI meeting recorders for performance tracking, compliance, and training. The NLRA (Section 7) protects employees' rights to engage in concerted activity. Under the NLRB's Stericycle standard, a work rule that would reasonably tend to chill those rights, such as a broad recording ban, is presumptively unlawful unless the employer proves it advances a legitimate and substantial business interest that a more narrowly tailored rule could not serve. Stericycle remains the Board's standard for judging workplace rules, though the current Board has signaled it may revisit it.

In most all-party consent states, an employer cannot lawfully record a confidential conversation through an AI tool without every participant's agreement, though in some (such as Oregon, Connecticut and Montana) clear notice can be enough. Whether an employer can discipline an employee who refuses is a question for employment law, not the recording statute.

Illinois HB 3773 (in effect since January 1, 2026) specifically prohibits AI-driven employment discrimination and requires employer notice when AI is used for hiring, promotion, or discipline decisions.

Cross-State Meetings

When meeting participants are in different states, courts have not settled which state's law governs. In Kearney v. Salomon Smith Barney (2006), the California Supreme Court held that California law applied when a business in a one-party state (Georgia) recorded calls with California clients, but it applied that rule only going forward and used Georgia law for damages from the past recordings. The Nevada Supreme Court, by contrast, held in Ditech Financial v. Buckles (2017) that Nevada's statute does not apply to a call recorded outside Nevada.

So a meeting that includes a participant in an all-party state such as California may be governed by that state's law, depending on the court. Organizations with employees or clients in multiple states can avoid the question by obtaining affirmative consent from all participants before enabling any AI recording tool.

Recent and Pending AI Laws

Several recent and pending laws affect AI meeting recorders:

• New York S5077: Would require the consent of both the sender and the receiver for recording under New York's wiretapping definition (Penal Law 250.00); it remains in the Senate Codes Committee
• Texas TRAIGA (HB 149): In effect since January 1, 2026; requires government agencies and health care providers to disclose when consumers are interacting with AI
• Illinois HB 3773: In effect since January 1, 2026; prohibits AI-driven employment discrimination and requires notice when employers use AI for covered decisions
• California SB 942: AI Transparency Act requiring detection tools and watermarks, in effect since August 2, 2026

This guide provides general legal information, not legal advice. Recording laws are complex and vary significantly between jurisdictions. Consult an attorney for advice specific to your situation.

Frequently Asked Questions

Are AI meeting recorders legal in the United States?

The legality depends on your state. Federal law allows one-party consent, but 13 states require all-party consent for at least some conversations (Connecticut and Nevada only for phone calls, Oregon only in person and on video calls, and Delaware has two conflicting statutes). In those states, every participant must at least be told about an AI recording before it begins, and in most of them must agree to it. Even in one-party consent states, a vendor that uses meeting recordings for its own purposes, such as training its AI models, can face federal wiretap claims.

What is the difference between one-party and two-party consent for AI meeting recording?

In one-party consent states, the meeting host's consent may be sufficient to use an AI recorder. In two-party (all-party) consent states, every participant must at least be told before an AI tool records, and in most of them must agree; a few, such as Oregon and Connecticut, accept clear notice. Penalties vary widely: a violation can be charged as a felony in eight of the 13, reaching seven years in Pennsylvania, while Delaware, Montana, Oregon and Washington cap the offense at a misdemeanor and Connecticut's all-party rule is civil only.

Can I refuse to let an AI bot record my meeting?

You can always object, and in most all-party consent states recording you without your agreement is unlawful. In some of those states, such as Oregon and Connecticut, notice can be enough, and in California a clear announcement at the start generally means the conversation is not confidential under Penal Code 632 (though for calls involving a cell phone, Penal Code 632.7 requires every party's consent, and whether staying on after a notice counts is unsettled), so your practical choice may be to ask that the bot be removed or to leave the meeting. In one-party consent states the host's consent is usually enough, though federal law and many state statutes withdraw that protection when a recording is made for a criminal or tortious purpose, and many organizations will remove the bot on request.

Is the Otter.ai recording notification sufficient consent?

Courts have not decided this question. The consolidated Otter.ai class action alleges that Otter's default auto-join feature and limited participant notification do not amount to valid consent under federal and state wiretapping laws. In August 2026 the court let the core wiretap, California privacy and Illinois biometric claims proceed past a motion to dismiss; the case is now in discovery.

Can my employer force me to use an AI meeting recorder?

It depends on your state's consent laws and employment law protections. In most two-party consent states, recording a confidential conversation requires every participant's agreement, though in some states clear notice is enough. Whether an employer can discipline an employee who refuses is decided by employment law, not the recording statute. The NLRA also protects certain employee rights regarding workplace recording.

What penalties exist for illegally using an AI meeting recorder?

Penalties vary by state and range from misdemeanors (up to about a year in jail and fines in the low thousands) to felonies (up to 7 years prison, $15,000 fine in Pennsylvania). Federal penalties include up to 5 years imprisonment and a $250,000 fine, and in a civil suit a court may award statutory damages of $100 a day or $10,000, whichever is greater.

Does HIPAA apply to AI meeting recorders in healthcare?

Yes. When meetings involve Protected Health Information, the AI tool vendor must sign a Business Associate Agreement with the healthcare provider. Free-tier AI tools should never be used for meetings involving patient information, as they may use data for model training by default.

Which AI meeting recorders ask participants for consent directly?

Zoom AI Companion has a built-in consent mechanism that requires participants to actively accept a consent notice before unmuting or activating their camera. Microsoft Teams Copilot also offers explicit recording consent for audio conferencing participants.