AI meeting notes and transcription in a UK business: the rules, the tools, and a policy you can adopt this week.
By Zain Masroor · 16 October 2026 · 11 min read
An AI notetaker records voices, names and whatever is discussed, so using one is processing personal data and UK GDPR applies from the moment recording starts. The practical rules: everyone in the meeting is told before it starts that it is being recorded and transcribed and why; the firm has a lawful basis, which for internal and client meetings is usually legitimate interests with a balancing test rather than consent, because staff cannot freely refuse; the tool provider is a processor under a written agreement that says whether your recordings train its models; transcripts have a retention period and a home; and someone reviews AI notes before they are shared or relied on, because they mishear names, confuse speakers and invent decisions. Covert recording of staff is justified only in exceptional circumstances. Otter and Fireflies business tiers cost about $19 to $20 a user a month annually; Gemini in Meet is included in Workspace Business plans; Copilot takes notes in Teams. The policy below is one page.
Talk it through: book a free 30-minute call →Why it is a data protection matter
A recording captures voices, which identify people, and a transcript captures names, opinions and often special-category information: health, in an HR meeting; legal matters, in a client call. The firm is the controller and the tool is a processor. The ICO’s employment guidance treats monitoring of workers as needing justification, transparency and proportionality, and its Employment Practices Code treats covert monitoring as justifiable only in exceptional circumstances. None of that prohibits AI notes; all of it requires that they be done openly, on a stated basis, with a processor agreement and a retention period.
The five rules
Five rules cover the ICO’s expectations for a small firm. Each is a sentence; together they are the policy.
The tools, and what they cost
Four common routes. Gemini in Google Meet takes notes and is included in Workspace Business plans, under the Workspace DPA. Microsoft 365 Copilot takes notes in Teams for firms on that licence. Otter.ai’s Business tier is listed at about $19.99 a user a month on annual billing with a minimum number of seats, and Fireflies.ai’s Business tier at about $19 a user a month annually, both with free tiers whose data terms differ. Claude and ChatGPT do not join meetings but summarise a transcript pasted in on a business plan. The right choice for most firms is the one inside the platform they already pay for, because it needs no new processor, no new login and no bot joining the call.
| Tool | Where it works | Cost (read Sep 2026) | Processor position |
|---|---|---|---|
| Gemini in Meet | Google Meet | Included in Workspace Business plans | Workspace DPA; no training on content |
| Microsoft 365 Copilot | Teams | Part of the Copilot licence | Microsoft 365 terms |
| Otter.ai Business | Zoom, Meet, Teams via bot | About $19.99 a user a month annually, seat minimum | Business tier terms; check training and retention |
| Fireflies.ai Business | Zoom, Meet, Teams via bot | About $19 a user a month annually | Business tier terms; check training and retention |
| Claude or ChatGPT (business plan) | Summarise a pasted transcript | Existing seat | Processor under DPA; no training |
Prices in the currency each vendor lists; convert at the day’s rate. Check each vendor’s current terms for training and retention on the tier you buy.
A one-page policy
Adopt as it stands, with the bracketed items filled in.
Where firms go wrong
A bot joining a client call unannounced, which the client notices and remembers. Transcripts of HR meetings on an individual’s free account. Actions “agreed” in the AI notes that nobody agreed, acted on because nobody checked. And the consent form nobody can refuse, which is the basis that fails when tested. All four are avoided by the five rules, and the rules take a week to put in place.
Common questions
Is it legal to use an AI notetaker in UK meetings?
Yes, if participants are told before it starts, the firm has a lawful basis, the tool is a processor under a written agreement, transcripts have a retention period, and covert recording is not used. It is processing personal data, so UK GDPR applies.
Do I need consent to record and transcribe a meeting?
Usually not, and consent is the wrong basis for staff, who cannot freely refuse. Legitimate interests with a balancing test and clear notice is the usual basis; special-category discussions need a condition and possibly a DPIA.
Do I have to tell people the meeting is being transcribed by AI?
Yes, before it starts, every time, and stop if someone objects. Covert recording of staff is justifiable only in exceptional circumstances.
Are Otter and Fireflies GDPR compliant?
On their business tiers, with a processor agreement and the training and retention terms checked, they can be used compliantly. Free and personal tiers have different terms and are not for work meetings.
Which AI notetaker should a small business use?
The one inside the platform it already pays for: Gemini in Meet for Google firms, Copilot in Teams for Microsoft firms. A third-party bot adds a processor and a login and is worth it only for a specific reason.
Can we rely on AI meeting notes as the record?
Only after a person has reviewed the actions and decisions. AI notes mishear names, confuse speakers and record decisions that were not made.
Want the policy adopted and the tool configured?
We set up the notetaker in the platform you already use, write the balancing test, adopt the policy and run a short session so every team does it the same way.
★ 5.0 on Google, every review five starsFree call · Fixed price in writing · Code and accounts yours from day one