AI Meeting Notetakers in Canada: Consent, Privacy and Recording Rules for Teams

The short answer

In Canada, the Criminal Code lets a participant record a conversation they're part of, but that one-party rule is not the whole story for a business. Privacy law (PIPEDA, and Quebec's Law 25 for Quebec residents) expects you to tell people a meeting is being recorded, explain why, and get their consent, with express consent for sensitive discussions. For AI meeting notetakers, the practical rule is: announce it, offer an opt-out, switch it off for sensitive meetings, and choose a vendor that doesn't train on your recordings.

AI meeting notetakers are now in most video calls. A bot joins, records, transcribes and emails everyone a summary. It's useful, and it's also a recording device that sends conversations to a third party. In August 2026 a US federal court let a major privacy lawsuit against one notetaker vendor proceed. Here's what Canadian teams need to know about AI meeting notetakers and privacy, as of October 2026. This is general information, not legal advice.

One-party consent: what the Criminal Code allows

Section 184 of the Criminal Code makes it an offence to knowingly intercept a private communication. The exception in section 184(2)(a) covers anyone who has the consent, "express or implied", of the person who made the communication or the person it was intended for. In plain terms, if you're a participant in the conversation, you can consent to recording it yourself. That's what "one-party consent" means in Canada.

Two limits are easy to miss. First, it's a criminal-law rule, and it doesn't settle your obligations under privacy law. Second, the exception relies on a participant's consent. If a bot joins a meeting nobody on the call invited, or keeps recording after its owner leaves, that comfort gets thinner.

PIPEDA: notice, purpose and consent

For businesses handling personal information in commercial activity, PIPEDA sets the expectations. There's no OPC guide specific to AI notetakers yet, but its guidance on recording customer telephone calls, updated October 8, 2026, maps closely onto a recorded video meeting:

• Inform people. "The organization must inform the customer that they are recording a call."
• State the purpose in the narrowest accurate terms, and list every purpose the recording may serve.
• Get consent. Continuing after being told is usually implied consent, but recordings with voiceprints or other sensitive information may require express consent.
• Offer a choice. "Customers must be given a choice about whether their voice is recorded." If recording isn't essential, offer an alternative.
• Limit retention based on why you recorded it in the first place.

The OPC's May 2026 findings on OpenAI add a sharper edge for AI tools. In that joint investigation, the federal, Alberta and BC commissioners said that where information is likely sensitive or a practice falls outside people's reasonable expectations, "express consent will generally be required", and found that using user chats for model training should have had express consent. If your notetaker vendor uses meeting content to train its models, your participants probably don't expect that.

Quebec's Law 25 adds three more checks

If anyone in the meeting is in Quebec, Quebec's private-sector privacy law, as amended by Law 25, applies to their personal information. As McCarthy Tétrault summarises the key provisions:

• Section 8.1: if you use technology that can identify, locate or profile a person, you must inform them and explain how to activate that feature. Speaker identification in a notetaker is worth reviewing under this lens.
• Section 17: before personal information collected in Quebec is communicated outside the province, including to another Canadian province, you need a privacy impact assessment, and a written agreement reflecting its conclusions. Most notetaker vendors store data outside Quebec.
• Penalties can reach the greater of $25 million or 4% of worldwide turnover for penal offences.

Why the US Otter.ai ruling matters to Canadian teams

Many Canadian businesses meet with US clients, and some US states require consent from everyone on a call. On August 13, 2026, the US District Court for the Northern District of California partly denied Otter.ai's motion to dismiss in In re Otter.AI Privacy Litigation. Claims under the federal Wiretap Act, California's Invasion of Privacy Act and Illinois's biometric privacy law survived.

The reasoning is the part to remember. Software that acts purely as an extension of the user generally isn't an eavesdropper. But the court found the plaintiffs had plausibly alleged that Otter "independently collects, retains, and uses communications for its own commercial purposes", such as improving its models, and wrote that "software providers may qualify as third-party interceptors under these circumstances." No final ruling has been made. Still, the takeaway is clear: a vendor that trains on your meetings looks less like your tool and more like an extra listener.

Practical rules for AI meeting notetakers on your team

Turn the law into a one-page policy staff will actually follow:

1. Announce it twice. Put "This meeting will be recorded and transcribed by [tool] for [purpose]" in the invite, and say it again when the recording starts.
2. Make opting out easy. If anyone objects, switch the bot off and take notes manually. Don't make people justify it.
3. Keep it out of sensitive meetings by default. Performance reviews, health discussions, legal advice and disciplinary meetings should need a deliberate decision to record, with express consent.
4. Ask before bringing a bot to someone else's meeting. On a client's call, the host decides.
5. Configure the vendor. Turn off use of your content for model training where the setting exists, set a retention period, restrict who can see transcripts, and know where data is stored. For Quebec participants, document the section 17 assessment.
6. Treat transcripts as records. They can be requested in an access request or in litigation. Don't keep them longer than you need.
7. Update your monitoring policy. Ontario employers with 25 or more employees must have a written policy on electronic monitoring. If notetakers record staff, consider describing them there.

The same principles apply to AI that answers or records phone calls; our guide to AI receptionist costs in Canada covers that side. For the vendor-review questions, our article on connecting AI to business data safely has a checklist. Clinics and practices should be stricter still; see our notes for healthcare businesses.

Key takeaways

• Canada's Criminal Code allows a participant to consent to recording, but privacy law still expects notice, a stated purpose and consent.
• Sensitive meetings and vendor model training point toward express consent, based on the OPC's 2026 OpenAI findings.
• Quebec's Law 25 adds disclosure for profiling features and a privacy impact assessment before data leaves the province.
• The August 2026 Otter.ai ruling shows vendors that use meeting data for their own purposes can be treated as third-party listeners in the US.
• This is general information, not legal advice.

Frequently asked questions

Is it legal to use an AI notetaker in a Canadian meeting without telling anyone?

The Criminal Code's one-party consent rule may permit a participant to record, but businesses also face privacy-law duties to tell people, explain the purpose and get consent. Recording customers or staff without notice is a risk under PIPEDA and provincial laws.

Do I need consent from everyone to record a Zoom or Teams meeting in Canada?

Criminally, consent from one participant is enough. For a business, the safer standard is to notify everyone and let anyone opt out, and to get express consent for sensitive topics. US participants may be in states that require all-party consent.

Does Quebec Law 25 apply to AI meeting notetakers?

If personal information of people in Quebec is collected, yes. Pay attention to the disclosure rule for technology that can identify or profile people, and the privacy impact assessment required before information is sent outside Quebec, including to vendors elsewhere in Canada.

Sources

1. Criminal Code, section 184 — Justice Laws Website, Government of Canada
2. Recording of Customer Telephone Calls — Office of the Privacy Commissioner of Canada, modified October 8, 2026
3. PIPEDA Findings #2026-002: Overview of the Joint Investigation of OpenAI OpCo, LLC — Office of the Privacy Commissioner of Canada, May 6, 2026
4. Sweeping privacy reform comes into force in Quebec — McCarthy Tétrault, October 2, 2023
5. In re Otter.AI Privacy Litigation (2026) — US District Court, N.D. California, via FindLaw, August 13, 2026
6. Written policy on electronic monitoring of employees — Government of Ontario

How Flowmatix can help

We put this into practice for businesses in Toronto and around the world through our Transcription, business process automation, cybersecurity services. Want to know what it would take for your business? Get a personalised quote in about 3 minutes.