“Georgia Is One-Party Consent” Is Not a Notetaker Policy

Thursday, 2:15 p.m. You are forty minutes into a closing call. The lender is walking through the payoff. Your client is explaining, in more detail than you would like, why the guarantor’s finances look the way they do.

Then you notice a tile in the corner of the screen. It is not a person. It is a notetaker.

Nobody on your side invited it. You assume it belongs to lender’s counsel. Lender’s counsel assumes it belongs to you.

Everything your client just said is now in a transcript. Maybe a voiceprint, too. On a vendor’s server. Under terms nobody on the call has read.

You are in Georgia. One-party consent. You are fine. Right?

In August 2026, a federal court gave that assumption a problem.

Georgia’s one-party consent rule does not make an AI meeting notetaker safe for client calls. In August 2026, a federal court allowed wiretap and biometric privacy claims to proceed against a notetaker vendor accused of recording without everyone’s consent and reusing recordings for its own purposes. Georgia lawyers still owe duties of competence, communication, confidentiality, and supervision under the Georgia Rules of Professional Conduct, whether or not the recording is lawful.

What did the court decide in In re Otter.AI Privacy Litigation?

On August 13, 2026, in In re Otter.AI Privacy Litigation (N.D. Cal. 2026), a federal court let federal wiretap, California eavesdropping, and Illinois biometric privacy claims go forward against an AI notetaker vendor. It is a pleading-stage ruling. Nothing has been proven. But the reasoning goes straight to the tool sitting in your calendar.

The plaintiffs say the notetaker sat in their Zoom and Teams meetings as a silent participant, recorded without everyone’s consent, and kept their conversations and voiceprints to train its models. Among them were people discussing private medical and financial matters with professionals.

The reasoning that matters for your firm fits in one line. A tool that only works for its user is just a recorder. A vendor that keeps and reuses what it hears may be a separate listener in the room.

Two more points worth knowing:

• One-party consent was not a shield. Under the federal Wiretap Act, the one-party exemption disappears if the recording serves a tortious purpose, and the court held that chasing profit does not rule out a tort.
• A visible bot is not knowing consent. The court would not assume a participant understood he was being recorded and retained just because the bot appeared on screen. That particular claim was dismissed on other grounds, with leave to amend.

Several other claims were dismissed, mostly with leave to amend. No lawyer was a party, and no lawyer was sanctioned. The questions it raises are already sitting in your firm.

Why doesn’t “Georgia is one-party consent” settle the question?

O.C.G.A. § 16-11-66(a) permits recording when one party to the conversation consents. That is the starting point, not the finish line. Three problems remain. The vendor may be a separate listener. Out-of-state participants may be protected by stricter laws. Your ethics duties apply whether or not the recording is lawful.

Myth: “Georgia is one-party consent, so our notetaker is fine.”

Fact: One-party consent answers one question. A notetaker raises at least three.

1. The vendor problem. Georgia’s statute lets “a party to the communication” record. It does not say whether a vendor that keeps and reuses your call counts as one. The Otter court’s reasoning shows why that question matters.
2. The participant problem. Your lender’s counsel may dial in from California. A borrower may join from Illinois. California and Washington require consent from all parties for certain recordings. Illinois regulates voiceprints through its biometric privacy law.
3. The ethics problem. The Georgia Rules of Professional Conduct do not ask whether you satisfied the wiretap statute. They ask whether you understood the tool, told the client, protected the information, and supervised the work.

In 20+ years of real estate finance law, I have watched closing participant lists run long. Lenders. Underwriters. Borrowers. Outside counsel. Every name on that list is a person whose voice a notetaker can capture.

The reality is that a lawful recording can still be an unethical one.

What do the Georgia Rules of Professional Conduct require when a notetaker joins a client call?

Five Georgia Rules of Professional Conduct apply the moment a notetaker joins. Rule 1.1 requires you to understand the tool. Rule 1.4 requires you to tell the client. Rule 1.6 protects information about the representation. Rules 5.1 and 5.3 require firm policy and supervision of nonlawyer assistance, and Georgia guidance treats AI as nonlawyer assistance.

Here is how each rule reads against a notetaker:

• Rule 1.1 (competence). You cannot competently use a tool when you do not know where its recordings go.
• Rule 1.4 (communication). The client deserves to know a machine is listening and what happens to the recording.
• Rule 1.6 (confidentiality). A recording on a vendor’s server is client information outside your walls.
• Rule 5.1 (firm policy). Partners and supervising lawyers must have measures in place. “Everyone uses their own notetaker” is not a measure.
• Rule 5.3 (nonlawyer assistance). The notetaker works like an assistant. You are responsible for its conduct.

An unmanaged notetaker is a sleepwalking paralegal. It sits in every meeting. It writes everything down. It answers to someone else.

What does the State Bar of Georgia Generative AI Toolkit say about notetaker vendors?

The State Bar of Georgia Generative AI Toolkit does not mention notetakers by name. Its warnings still map directly onto them. The Toolkit treats AI as a nonlawyer assistant under Rule 5.3. It warns that a tool can use confidential client data to improve itself. It tells lawyers to ask whether a vendor trains on identifiable client data.

The Toolkit is informal guidance, not a rule or a formal ethics opinion. It still tells you exactly what questions the Bar expects you to ask:

• Training. Will the vendor train its model on identifiable client data?
• Retention. Does the tool retain prompts and output, or purge them, when the contract ends?
• Clickwrap terms. Standard-form clickwrap agreements may expressly exclude any obligation of confidentiality.

That last point lands hard on notetakers. The person who signed up for the tool usually clicked “I agree” in a few seconds. Nobody reviewed those terms, and they still govern every call the tool records.

The experimental era is over. The questions are written down now.

What does national guidance add?

ABA Formal Opinion 512 requires informed client consent before a lawyer puts representation information into a self-learning AI tool. Boilerplate engagement-letter consent is not enough. Two New York City Bar opinions address recording directly. They are out-of-state and persuasive only, but they point the same way: disclose, obtain consent, and default to not recording.

• ABA Formal Opinion 512. Persuasive national guidance, not binding in Georgia. It tells lawyers to read and understand a tool’s Terms of Use and privacy policy.
• NYC Bar Formal Opinion 2025-6. Out-of-state and persuasive only. Clients should be notified and consent obtained when an AI system records a call. Lawyers should examine storage, discoverability, training, and deletion.
• NYC Bar Formal Opinion 2026-2. Out-of-state and persuasive only. It extends those principles to non-client conversations. It recommends a default of not recording absent a good reason.

None of these bind a Georgia lawyer. All of them describe the same risk the Otter plaintiffs allege.

How does an ungoverned notetaker setup compare to a governed one?

The difference comes down to eight decisions. Each one either leaves the vendor in control or puts the firm in control. The left column describes how most notetakers enter a firm: through a calendar integration and a clickwrap. The right column describes a setup you can defend to a client, a regulator, or opposing counsel.

Decision Point	Wild West	Governance Way
Joining the call	Bot auto-joins from the calendar integration	Bot joins only when a lawyer activates it for that meeting
Consent	“It’s in the participant list”	Spoken announcement and consent from every participant, logged
Vendor terms	Clickwrap accepted by whoever signed up	Negotiated agreement with no-training and deletion rights in writing
Voice data	Speaker profiles built silently	Speaker identification off, or covered by written consent where required
Jurisdiction	“Georgia is one-party consent”	Every participant’s location checked; all-party and biometric states treated as all-party consent
The transcript	AI summary saved straight to the file	Lawyer reviews and adopts the summary before it enters the file
Client’s own bot	Ignored	Addressed in the engagement letter; client warned of confidentiality and privilege risk
Accountability	No owner, no training	Named policy owner; staff trained annually

Is your firm harboring a Statutory Time Bomb?

Run the Notetaker Diagnostic below. Answer each question Yes or No. Questions 2, 3, and 4 carry the most weight. They mirror the conduct alleged in the Otter case: silent joining, no consent from everyone recorded, and vendor reuse. A single “No” on any of those three puts your firm in the highest-risk tier.

The Notetaker Diagnostic

1. Does the firm have a written list of AI notetakers approved for client matters, with all others prohibited?
2. Is auto-join turned off, so no notetaker enters a meeting unless a lawyer activates it for that specific meeting?
3. Before recording starts, is the notetaker announced and consent obtained from every participant (clients, opposing counsel, lenders, agents, witnesses), with the consent documented?
4. Does the firm’s written contract with the vendor, not a clickwrap, prohibit training on your recordings, transcripts, and voice data?
5. Do you know where recordings, transcripts, and speaker profiles are stored, for how long, and can you delete them on demand?
6. Does the engagement letter address AI recording, including the client’s own AI tools?
7. Does a lawyer review every AI transcript or summary before it is saved to the file or relied on?
8. Has every staff member who schedules or runs calls been trained on the notetaker policy in the last 12 months, and is there a named policy owner?
9. When any participant is outside Georgia, does the firm check whether that state requires all-party consent or regulates voiceprints?
10. Is there a written response step for a call recorded by accident, or by an outside participant’s bot?

Scoring

• Statutory Time Bomb: any “No” on Question 2, 3, or 4.
• Fragile Hybrid: “Yes” on Questions 2, 3, and 4, but two or more “No” answers among the other seven.
• Digital Fortress: “Yes” on Questions 2, 3, and 4, and no more than one “No” among the other seven.

What are the three steps to bring AI notetakers under governance?

Governance takes three moves. First, find every notetaker and lock down the one you keep. Second, install a consent protocol that covers every person on the call. Third, put a lawyer between the transcript and the file, and train the people who run the calls. Each step answers a specific failure alleged in the Otter case.

1. Inventory and lock down. Find every notetaker in use, including personal accounts and calendar integrations. Turn off auto-join. Approve one tool under a negotiated agreement with no-training and deletion rights.
2. Install a consent protocol. Use a scripted announcement before any recording. Add an engagement-letter clause covering firm and client AI recording. Default to not recording calls with opposing counsel, witnesses, and third-party closing participants unless there is a stated reason.
3. Review, retain, train. A lawyer reviews and adopts summaries before they enter the file. Adopt a written retention and deletion schedule. Train staff annually under a named policy owner.

What does this look like inside a Georgia firm?

This Forensic Case File is a composite scenario, not a real matter. It shows how the setup alleged in the Otter case can form inside an ordinary closing. No single step feels reckless. The risk builds from defaults nobody chose.

Forensic Case File: The Friday Afternoon Refinance

Friday, 3:40 p.m. A Georgia firm is closing a commercial refinance. Lender’s counsel dials in from Chicago. The borrower’s CFO joins from San Diego.

Nobody on the firm’s side launched a notetaker. An associate’s personal account did, through a calendar integration she connected last spring.

The bot sits in the participant list. No one announces it. Everyone assumes it belongs to someone else.

It captures payoff figures, a guarantor’s financial statements, and a side discussion about an environmental report. The vendor’s clickwrap permits training on user content. Speaker profiles now exist for two people in states with stricter laws.

Monday morning, lender’s counsel asks who recorded the call and where the file lives. The firm cannot answer either question.

Nobody has sued. Nobody has filed a grievance. The same setup is running in your firm.

What is the bottom line?

In re Otter.AI Privacy Litigation (N.D. Cal. 2026) allowed wiretap and biometric claims to proceed against a notetaker vendor on the theory that a vendor reusing calls may be a separate listener. Georgia’s one-party consent statute does not answer that risk, and GRPC Rules 1.1, 1.4, 1.6, 5.1, and 5.3 apply either way.

Find out where your firm stands. Take the AI Liability Quiz and find out whether your firm is a Statutory Time Bomb, a Fragile Hybrid, or a Digital Fortress.

This article is provided for general informational purposes and does not constitute legal advice or create an attorney-client relationship. The case discussed is at the pleading stage and involves allegations only. Georgia attorneys should evaluate their own practices against the current Georgia Rules of Professional Conduct and current State Bar guidance.