Is It Legal to Use an AI Note-Taker in Florida?
An AI note-taker joins the call, introduces itself in the participant list, and quietly records everyone. Nobody objected, so everyone assumes that is consent. In Florida, it probably is not.
Is it legal to use an AI note-taker in Florida?
Only if everyone on the call has consented. Florida is an all-party consent state under section 934.03, and a violation is a third-degree felony carrying up to five years. Most AI note-takers ask permission from the person who scheduled the meeting, not from every participant — and the host’s consent is not the participants’ consent.
Why this is suddenly a live issue
These tools became normal faster than anyone thought about the law. They are useful, they are cheap, and they spread sideways through a company because one person tried one and shared the summary.
The legal position is now being tested directly. Otter.ai is reported to be facing consolidated federal claims over recording participants without their explicit consent, and Fireflies.ai has faced biometric privacy claims in Illinois. Those cases turn on a question that matters to every business using one of these: when the tool records, is the person who switched it on responsible for getting consent from everyone in the room?
We are not going to tell you how those cases come out. But you do not want your business to be the one finding out, and the mitigation costs nothing.
The part most people get wrong
Eleven states require all-party consent, and Florida is one
California, Connecticut, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, New Hampshire, Pennsylvania and Washington. If your business is in Florida, the strict rule is your default rule, not an out-of-state complication.
The strictest state on the call usually wins
Courts generally apply the most protective jurisdiction’s law when participants sit in different states. So a call between your Florida office and a client in California does not get easier — it gets stricter. For any business with out-of-state clients, this is the ordinary case rather than the edge case.
Silence is not consent, and a participant-list entry is not notice
A bot appearing in the attendee list is not the same as asking. Neither is a line buried in a calendar invitation nobody read. What holds up is an actual statement at the top of the call and an actual opportunity to object.
What to do about it, in about ten minutes
- Find out what is already connected. This is the step people skip. Note-takers are granted access once, by one person, and then persist silently — often with calendar access across the whole organisation. Ask for the list of applications holding permissions in your Microsoft 365 or Google tenant, who granted each one, and what it can reach.
- Decide which tool is approved. One, ideally. Then remove the others rather than leaving them connected and unused.
- Say it out loud at the start of the call. “I have an AI assistant taking notes — any objection?” Then honour the answer. That single sentence is the entire control.
- Turn it off for some conversations entirely. Anything covered by privilege, anything with patient information in it, HR matters, and disciplinary conversations. A summary of a termination meeting is a document you did not need to create.
- Write down where the recordings live and how long they are kept. Most of these tools retain indefinitely by default.
We found one on our own tenant
When we audited our own Microsoft 365 environment, a meeting recorder held calendar access across the organisation, granted long before by someone who had simply tried it. It was not malicious and it was not misuse. It was the ordinary way these things arrive: one click, no expiry, no alert, and no dashboard that would ever have shown it.
The same audit found ChatGPT able to read every file we owned. We revoked both and tightened the consent policy the same day, which is why we now check this for other people. The longer version of that story is here.
If you already have recordings
If your business has been recording calls or meetings without all-party consent, the sensible order is: stop the ongoing practice today, work out what exists and where, and take advice on the existing material before deleting anything. Deletion can create its own problems, and this is the point where a lawyer is worth more than an IT company.
What we can do is the technical half — find every tool that holds access, work out what each has been recording and where it is stored, and put the approved configuration in place so this does not rebuild itself in six months.
If you would like the audit run against your tenant, get in touch — (321) 221-7117, Monday to Friday, 8am to 6pm. More on how we approach AI consulting.
This is general information about Florida law, not legal advice. If you think you have a problem here, talk to an attorney.
