Is It Legal to Record a Client Meeting?

TL;DR: Yes, you can legally record a client meeting in almost every jurisdiction, provided everyone on the call knows and the strictest applicable law is satisfied.

The catch is that recording law is only the first layer. Data protection law and your own profession's conduct rules sit on top of it, and the AI tool you record with can create liability of its own.

Done right, recording client meetings pays off. An AI note taker for client calls lets you stay fully present in the conversation while it keeps an accurate record of every decision and commitment.

What makes recording a client meeting different from other calls?

A client meeting comes with duties a casual call does not. You usually owe the client confidentiality, and the recording becomes a business record you have to protect and may have to produce later.

Four layers of rules can apply to the same client call:

• Recording law: Who has to consent before recording starts, set by wiretap and eavesdropping statutes
• Data protection law: What you must tell the client and how you store the file, under laws like GDPR, UK GDPR, and Canada's PIPEDA
• Professional and sector rules: Extra duties for lawyers, financial firms, and healthcare providers
• Contracts and vendor terms: NDAs, engagement letters, and the terms of the tool that captures the audio

A recording can pass the first layer and still fail another. Clearing wiretap law does not clear a bar rule or a client NDA.

What does US law require before you record a client call?

Federal law sets a one-party consent baseline. Under the Wiretap Act (18 U.S.C. § 2511), you can record a call you take part in without telling anyone else.

About a dozen states go further and require every participant to agree, including California, Florida, Illinois, Pennsylvania, and Washington. Counts vary because a few states, such as Connecticut and Oregon, treat phone calls and recording in-person conversations differently.

Why client calls almost always fall under the strictest rule

Client calls cross state lines constantly. You might sit in Texas while your client dials in from a California office, with their colleague joining from Chicago.

No federal rule settles which state's law governs that call, so the safe practice is to follow the strictest state any participant could be in. For a client relationship, that means treating every call as all-party consent.

In a one-party state, recording a client without telling them may be legal. But it is not a wise practice, and some professions forbid it outright.

What changes when your client is outside the US?

Outside the US, data protection law usually does more of the work than wiretap law. Once a business records an identifiable person, it needs a legal reason to process that recording and has to tell the person about it.

For more details regarding specific rules, refer to GDPR Articles 6, 13 and 28, Germany's criminal code § 201, and the UK's business monitoring regulations.

Across all four regions, the practical rule matches the US one. Tell every participant before recording starts and explain what the file is for.

Can lawyers record meetings with their clients?

Yes, lawyers can record meetings with an AI notetaker with the client's informed consent. Without it, a lawyer risks a professional conduct violation even where state wiretap law allows the recording.

What the ABA and state bars say

In ABA Formal Opinion 01-422 (2001), the ABA concluded that a lawful recording without consent does not by itself breach the Model Rules. The committee split on recording clients specifically, but agreed it is inadvisable.

Some state bars are stricter. Wisconsin's Ethics Opinion EF-24-01 (February 2024) found that recording a client without their knowledge and consent violates the duties of communication and honesty.

What the newest opinions on AI recording say

The New York City Bar's Formal Opinion 2025-6 (December 2025) was among the first ethics opinions to address AI notetakers on client calls directly. It concludes that lawyers must notify clients and get consent whenever an AI system records the call, either per call or through the engagement letter.

The opinion also asks lawyers to:

• Review AI transcripts and summaries for accuracy before anyone relies on them
• Weigh whether a verbatim record helps or hurts the client's privilege position
• Read the tool's terms on data storage and model training
• Know how to switch off default recording in Zoom or Teams

This builds on ABA Formal Opinion 512 (July 2024), which requires lawyers to weigh the risk of disclosure before entering client information into a generative AI tool. For self-learning tools, it calls for the client's informed consent, and says boilerplate engagement letter language is not enough.

Do financial advisers have to record client calls?

In Europe and the UK, investment firms must record client calls. In the US, recording is optional, but any recording or AI summary you keep can become a regulated record.

EU and UK: Recording is a legal duty

MiFID II Article 16(7) requires investment firms to record calls and electronic communications that relate to client orders and transactions. Firms must tell new and existing clients in advance, and face-to-face conversations can be documented through written minutes or notes.

The UK carries the same rule in the FCA's SYSC 10A, which requires the notice before the firm provides any investment service. Under this rule, failing to record a relevant client call is itself a breach.

US: Recordings can become regulated records

In the US, no SEC or FINRA rule requires advisers to record client meetings. Once a firm does, transcripts and summaries can fall under SEC Rule 17a-4 for broker-dealers or Rule 204-2 for investment advisers.

FINRA's 2026 Annual Regulatory Oversight Report names summarization as the top generative AI use case among member firms. It also notes that generative AI use can trigger existing supervision and recordkeeping rules, so check your archiving setup before you switch on a notetaker.

Can healthcare and therapy providers record client sessions?

Yes, but the vendor relationship has to be in place first. Under HIPAA, a company that records or transcribes protected health information for you is a business associate, and HHS lists an independent medical transcriptionist as a standard example.

That means a signed business associate agreement (BAA) with your recording or AI scribe vendor before you capture a single session. A consumer notetaker with no BAA is off the table for patient calls, however good its transcripts are.

HIPAA does not decide whether the patient must consent to the recording itself. State recording law does, so the all-party rules we discussed above still apply to telehealth and phone sessions.

For providers serving EU clients, health information is a special category of data under GDPR Article 9. Processing it needs one of the specific Article 9 conditions, such as explicit consent or the provision of health care, on top of a lawful basis.

Does an AI notetaker change the legal risk?

Yes, because the tool's vendor can become a third party to your client conversation. What the vendor does with the audio now carries legal weight.

What the Otter.ai ruling changed

On August 13, 2026, Judge Eumi K. Lee of the Northern District of California ruled on the motion to dismiss in In re Otter.AI Privacy Litigation. She let the federal and California wiretap claims proceed, along with claims under Illinois' biometric privacy law.

Under California law, the court found the plaintiffs had plausibly alleged that Otter acted as a third-party eavesdropper, because it allegedly kept recorded conversations to train its own models.

The court also declined to infer consent merely because the notetaker appeared in a meeting. The ruling is not a finding of liability, and the allegations remain disputed. The plaintiffs must move for class certification by May 13, 2027.

For anyone recording client calls, consent to recording does not necessarily authorize an AI vendor to reuse conversations for its own purposes.

What to check before you record clients with any AI tool

• Model training: Off by default, with training only if you opt in
• Data location: Where recordings are stored, and whether the vendor signs a data processing agreement
• Deletion: Whether you can permanently delete a recording on request
• Security: Independent certification such as SOC 2 Type II
• Participant notice: How the tool tells people it is recording
• Voiceprints: Whether speaker identification creates biometric data under laws like Illinois BIPA

What if your client wants to record the meeting?

Clients now bring their own notetakers to calls, and the same consent rules run in reverse. In an all-party consent state, your client needs your agreement before their tool records you.

The bigger risk is control. A recording made on the client's tool sits outside your security setup, and you may never see the transcript or summary it produces.

The NYC Bar's Formal Opinion 2025-6 suggests lawyers handle this in the engagement letter. Its recommendations translate well to any client-facing profession:

• Ask clients to give advance notice before they record with their own tool
• State that client-made AI summaries are not binding on you unless you get to review them
• Warn clients that a third-party tool may weaken confidentiality or privilege
• Agree on whose tool records the call when both sides want a record

If you keep your own recording of the same call, you also have a reference point when the two accounts of a meeting differ.

How do you get consent to record a client meeting?

Build consent into the relationship once, then confirm it on every call. This workflow holds up in all-party consent states and under GDPR.

1. Write it into the contract. Add a recording clause to your engagement letter or statement of work covering the purpose, the tool, how long you keep files, and the client's right to say no.
2. Flag it in the invite. Add one line to every calendar invite stating that the call will be recorded and transcribed, and name the tool.
3. Say it before the substance. Announce the recording at the start of the call and wait for each participant to agree.
4. Catch late joiners. Repeat the notice when someone new joins, since they missed the first one.
5. Keep proof. The recorded verbal yes is your evidence, so keep it with the transcript or log it in your CRM.
6. Delete on schedule. Remove recordings once their purpose ends, unless a regulator requires you to keep them longer.

If anyone says no, stop the recording and take notes by hand.

How does HappyScribe help you record client meetings responsibly?

HappyScribe'sAI notetaker is built to make the recording visible to everyone on the call. The legal duty to tell participants still sits with you, and the product supports it.

• Visible by default: The notetaker joins your video call as a named participant with its own video tile, and posts a chat message announcing the recording when it joins.
• Bot-free options: For in-person client meetings or calls where a bot feels intrusive, the browser recorder and mobile app capture audio directly once you have consent.
• No training on your data: HappyScribe uses no data for model training unless your workspace explicitly opts in.
• EU hosting and certification: Recordings are encrypted in transit and at rest in an ISO 27001-compliant EU data center, under SOC 2 Type II and GDPR compliance.
• Your retention schedule: Files stay until you delete them, and permanently deleted files cannot be recovered.

Custom summary templates let you structure notes for each client call type, so the reviewed summary is ready to send once the call ends. HappyScribe also comes with a notetaking app for mobile (available on iOS and Android) to cover in-person client meetings.

So, can you record your next client meeting?

Almost certainly, as long as your client knows before recording starts and agrees to it. Treat every client call as all-party consent, and check what your profession adds on top. Then choose a recording tool that keeps your client's words out of its training data.