Illinois AI Meeting Recording Laws (2026)

Illinois requires all-party consent under 720 ILCS 5/14-2, which makes it unlawful to record a private conversation in a surreptitious manner without the agreement of every participant. AI meeting tools that build speaker profiles may also trigger the Biometric Information Privacy Act (740 ILCS 14), which mandates written consent before collecting voiceprints, creating dual legal exposure.

Illinois is one of the most legally demanding states for AI meeting recording tools. Where most states require consent from only one party to a conversation, Illinois demands consent from all parties under its eavesdropping statute. That alone would make the state challenging for AI meeting recorders, but Illinois layers on a second, arguably more powerful law: the Biometric Information Privacy Act (BIPA), which treats voiceprints as protected biometric data requiring written consent, purpose disclosure, and public retention policies before any collection can occur.

The result is a dual-threat legal framework that has already produced multiple lawsuits against AI meeting tool providers. Companies operating these tools in Illinois face potential criminal prosecution under the eavesdropping statute, class action liability under BIPA, and new employment discrimination restrictions under HB 3773. This guide covers each layer of Illinois law, the active litigation, penalties, and what it all means for anyone using AI meeting tools in or with participants in Illinois. Consult an attorney for advice specific to your situation.

Illinois Eavesdropping Law: All-Party Consent

The Current Statute

Under the Illinois eavesdropping statute, 720 ILCS 5/14-2, a person commits eavesdropping when he or she "uses an eavesdropping device, in a surreptitious manner, for the purpose of overhearing, transmitting, or recording all or any part of any private conversation to which he or she is not a party unless he or she does so with the consent of all of the parties to the private conversation." Subsection (a)(2) applies the same rule to a private conversation the recorder is a party to, which includes a conversation transmitted by wire such as a video call, and subsection (a)(3) covers intercepting or transcribing a private electronic communication to which the recorder is not a party. Our Illinois recording laws guide covers the statute in general terms.

Two elements have to be met, not one. The recording must capture a private conversation, and it must be made in a surreptitious manner. Section 14-1(g) defines "surreptitious" as "obtained or made by stealth or deception, or executed through secrecy or concealment." A recording made openly, where the device and its operation are apparent to the participants, does not obviously satisfy that element even if not every participant affirmatively agreed. Illinois courts have not squarely applied the surreptitious-manner element to an AI notetaker, so how far it reaches in this context is unsettled.

That two-element structure is a critical distinction from one-party consent states like Idaho or Indiana, where a participant's own consent is sufficient no matter how the recording is made. It also means the safest reading for anyone recording in Illinois is still to obtain consent from every participant, because relying on openness alone means relying on an element that has not been tested for this technology.

History: Unconstitutional, Then Re-enacted

Illinois's eavesdropping statute has a turbulent legal history. On March 20, 2014, the Illinois Supreme Court declared the original statute unconstitutional in People v. Clark, 2014 IL 115776. The court held that the prior version was overbroad because it criminalized the recording of conversations where no party had a reasonable expectation of privacy, including recording police officers in public.

On December 30, 2014, Governor Pat Quinn signed SB 1342, which created the current eavesdropping law. The re-enacted version narrowed the statute's scope in two ways that matter here: it limited the offense to "private conversations," defined as oral communications between two or more persons where at least one party intended the communication to be private under circumstances reasonably justifying that expectation, and it added the surreptitious-manner element discussed above.

What Counts as a "Private Conversation"

The re-enacted statute defines a private conversation as one where at least one participant intended the communication to be private under circumstances that reasonably justify that expectation. A business meeting conducted over Zoom, Teams, or Google Meet between a limited number of identified participants would generally qualify as a private conversation under this standard.

Public meetings, broadcasts, and conversations where participants have no reasonable expectation of privacy fall outside the statute's scope. Section 14-2(e) also provides that nothing in the Article prohibits an individual who is not a law enforcement officer from recording a law enforcement officer in the performance of his or her duties in a public place, or in circumstances in which the officer has no reasonable expectation of privacy.

Application to AI Meeting Tools

When an AI meeting recorder captures a private virtual meeting in Illinois, whether the eavesdropping statute is violated turns on both elements. If the tool records without the participants' knowledge, by stealth, deception, secrecy, or concealment, the operator needs the consent of all parties. If the tool joins openly as a named, visible participant and announces that it is recording, the surreptitious-manner element is genuinely contested, and a prosecution under 14-2 would be a harder case.

That is a narrow and untested defense, not a green light. It does nothing for the BIPA analysis below, which, where a tool creates voiceprints, applies to open and covert recording alike. The practical guidance is unchanged: obtain consent from every participant before recording begins.

BIPA: The Biometric Privacy Layer

The Biometric Information Privacy Act (740 ILCS 14), enacted in 2008, creates a separate and independent legal framework that applies to AI meeting tools operating in Illinois. BIPA governs the collection, use, storage, and destruction of biometric identifiers, which explicitly include voiceprints.

Why Voiceprints Matter for AI Meeting Tools

BIPA defines "biometric identifier" to include "a retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry." BIPA does not define "voiceprint." Illinois plaintiffs argue that AI meeting tools which perform speaker identification, speaker diarization (labeling who said what), or voice-based sentiment analysis create voiceprints as part of their processing, and in August 2026 a federal court let BIPA claims on that theory proceed against Otter.ai at the pleading stage. No court has yet decided that speaker labeling creates a voiceprint. If it does, those voiceprints are protected biometric data subject to strict consent and handling requirements.

BIPA's Core Requirements

Under 740 ILCS 14/15, a private entity must meet the first three requirements below before collecting a biometric identifier (subsection (b)), and an entity that possesses biometric data must also meet the fourth (subsection (a)):

1. Written notice: Inform the individual in writing that biometric data is being collected or stored
2. Purpose disclosure: Inform the individual of the specific purpose and length of time for which the data will be collected, stored, and used
3. Written release: Obtain a written release from the individual authorizing the collection
4. Public retention policy: Develop and make publicly available a written policy establishing a retention schedule and guidelines for permanently destroying biometric data when the initial purpose is satisfied or within three years of the individual's last interaction, whichever comes first

These requirements create significant compliance challenges for AI meeting tools. If a tool like Otter.ai or Fireflies.ai creates voiceprints when it joins a meeting and processes voices, the entity collecting them must, under BIPA, provide written notice to each Illinois participant, explain exactly why it is collecting their voiceprint and how long the data will be kept, obtain each participant's written release, and maintain a publicly available retention and destruction policy. Notably, none of this turns on whether the tool recorded openly or covertly, which is why BIPA is the stronger exposure of the two.

The 2024 BIPA Amendment

On August 2, 2024, Governor JB Pritzker signed SB 2979, which amended BIPA's damages provisions. The amendment provides that collecting the same biometric identifier from the same person by the same method more than once is a single violation, as is repeatedly disclosing the same person's data to the same recipient, so that person can recover at most once for each, rather than once per scan or disclosure. This change addressed concerns that damages could multiply into astronomical sums based on repeated routine biometric scans, but it does not eliminate the per-person damages structure that makes class actions viable.

BIPA Statutory Damages

Even with the 2024 amendment limiting repeated collection from the same person by the same method to one recovery, the potential class-wide liability for an AI meeting tool with thousands of Illinois users remains substantial. Under 740 ILCS 14/20 a prevailing party "may recover" these amounts, and in Cothron v. White Castle, 2023 IL 128004, the Illinois Supreme Court said that BIPA damages appear to be discretionary rather than mandatory, so a court can award less than the per-violation figures. Even so, a class claim covering thousands of Illinois participants can seek very large sums.

Litigation Against AI Meeting Tools

Three lawsuits filed in 2025 target AI recording tools, and all three have connections to Illinois law. Two concern meeting notetakers and one concerns AI phone features. Two are no longer pending: Cruz v. Fireflies.AI Corp. was voluntarily dismissed without prejudice in March 2026, and Lisota v. Heartland Dental was dismissed with prejudice in July 2026. They are discussed below as illustrations of the legal theories, not as active litigation.

Cruz v. Fireflies.AI Corp. (C.D. Ill., Dec. 2025, voluntarily dismissed Mar. 2026)

Filed on December 18, 2025, in the Central District of Illinois (Case No. 3:25-cv-03399), this BIPA class action alleged that Fireflies.ai's meeting assistant collected voiceprints from virtual meeting participants without providing the required written notice, obtaining written consent, or maintaining a public data retention and destruction policy. The plaintiff voluntarily dismissed the case without prejudice on March 11, 2026, so it is no longer pending; a complaint is an allegation, not a court ruling, and this one was never decided on the merits.

The complaint specifically alleged that the Fireflies tool records, analyzes, transcribes, and stores voices of meeting participants, including the voices of people who are not Fireflies users, without any of the safeguards BIPA requires. The complaint sought to represent a class of all Illinois residents whose biometric speaker data was collected by Fireflies without consent, but the case was dismissed before any class was certified or any allegation was tested in court.

In re Otter.AI Privacy Litigation (N.D. Cal., including Walker v. Otter.ai)

Walker v. Otter.ai, filed on August 26, 2025, in the Northern District of California (Case No. 5:25-cv-07187), alleged that Otter.ai's transcription software collects and uses voiceprints from meeting participants without providing written notice, obtaining written consent, or maintaining the required public retention schedule. In October 2025 the court consolidated it with three related suits as In re Otter.AI Privacy Litigation (No. 5:25-cv-06911).

The plaintiffs allege that Otter's system captures voiceprints during video conference calls and uses those voiceprints to identify speakers in later meetings. The proposed class includes all individuals whose voiceprints were collected by Otter.ai while they were in Illinois during the five years preceding the complaint. On August 13, 2026 the court let both BIPA claims proceed, along with the federal Wiretap Act and California privacy claims. It treated whether BIPA reaches the alleged collection, which turns on whether the conduct occurred primarily and substantially in Illinois, as a factual question for later. The case is now in discovery, and no court has decided whether Otter violated BIPA.

Lisota v. Heartland Dental (N.D. Ill., filed July 2025, dismissed July 2026)

Filed on July 3, 2025, in the Northern District of Illinois, this case takes a different legal angle. Plaintiff Megan Lisota alleged that dental support organization Heartland Dental used RingCentral's AI product to listen to, analyze, and transcribe patient calls in violation of the Federal Wiretap Act (18 U.S.C. Section 2511). The complaint noted that RingCentral's AI provided real-time voice transcription, call highlights, automated summaries, and sentiment voice analysis.

The court first dismissed the federal claim on January 13, 2026, and on July 24, 2026 it dismissed the case with prejudice and entered judgment for the defendants. It held that any interception happened in the ordinary course of RingCentral's business as the communication service provider, an exception for providers under 18 U.S.C. 2510(5)(a)(ii). It was a phone-call case, not a meeting-recorder case, and the provider exception does not reach BIPA claims, which rest on a separate legal theory.

The Broader BIPA Enforcement Landscape

Illinois BIPA lets any aggrieved person sue (740 ILCS 14/20), which has produced extensive class action litigation, and that enforcement directly affects AI meeting tools.

Landmark BIPA Settlements

The Clearview AI settlement, approved by the district court on March 20, 2025, was notable for its structure: class members would have received a 23% equity stake in Clearview AI valued at approximately $51.75 million, rather than a cash payment. It would have resolved claims that Clearview scraped facial images and created biometric identifiers without consent. On July 13, 2026 the Seventh Circuit vacated that approval and sent the case back for further proceedings, so the settlement is not final.

These settlement figures illustrate the financial stakes for AI meeting tool providers that collect voiceprints from Illinois residents without BIPA-compliant consent procedures.

HB 3773: AI Employment Discrimination (Effective Jan. 1, 2026)

Illinois HB 3773, signed by Governor Pritzker on August 9, 2024 and effective January 1, 2026, adds a third regulatory layer for AI meeting tools used in workplace settings. The law amends the Illinois Human Rights Act to expressly prohibit employers from using AI that has the effect of subjecting employees to discrimination based on protected classes.

What HB 3773 Covers

The law prohibits employers from using AI, including generative AI, in ways that discriminate against employees with respect to recruitment, hiring, promotion, renewal of employment, selection for training or apprenticeship, discharge, discipline, tenure, or the terms, privileges, or conditions of employment. It also prohibits using zip codes as a proxy for protected classes.

Notice Requirements

HB 3773 requires employers to notify employees and applicants when AI is being used during any of these employment processes. This notice requirement applies regardless of whether the AI tool's use is directly discriminatory.

How This Applies to AI Meeting Tools

AI meeting tools that go beyond basic transcription into sentiment analysis, performance evaluation, or participation tracking could fall within HB 3773's scope. For example, an AI meeting tool that analyzes an employee's speaking patterns, engagement level, or communication style during meetings, and that data influences employment decisions, could trigger both the notice requirement and the anti-discrimination provision.

The Illinois Department of Human Rights (IDHR) is developing implementing rules, but the core statutory requirements took effect on January 1, 2026.

Popular AI Meeting Tools and Illinois Compliance

The major AI meeting tools each face distinct compliance challenges in Illinois.

Otter.ai joins meetings as a visible bot and announces its presence in meeting chat. That visibility cuts against the surreptitious-manner element of the eavesdropping statute, so an open, self-announcing bot is not a clear 14-2 violation, though it also falls short of the actual all-party consent the statute contemplates when the element is met. What the notification plainly does not satisfy is BIPA's written consent requirement, and Otter faces active class action litigation under BIPA (In re Otter.AI Privacy Litigation, where BIPA claims survived a motion to dismiss in August 2026).

Fireflies.ai joins as a bot participant named "Fireflies.ai Notetaker." The same analysis applies: the named, visible bot weakens an eavesdropping theory, but the notification mechanism does not constitute the written consent BIPA requires. Fireflies faced BIPA litigation over this practice (Cruz v. Fireflies.AI Corp.), which the plaintiff voluntarily dismissed without prejudice in March 2026.

Microsoft Copilot in Teams operates differently by providing platform-level recording notifications and requiring the meeting organizer to enable recording, which all participants can see. This approach makes an eavesdropping claim harder still, but written BIPA consent for voiceprint collection would remain a separate obligation.

Zoom AI Companion provides visual and audio indicators when active. Zoom's approach of requiring the host to enable AI features and providing clear participant notices addresses the eavesdropping issue more directly, but BIPA's written consent requirement remains a separate obligation.

Every BIPA suit described above was brought against the vendor. Courts have not decided whether a host or employer who switches on a vendor's tool is also responsible for BIPA consent, so businesses with Illinois participants should check whether their tool creates speaker profiles and obtain written consent where it does.

Penalties for Violations in Illinois

Eavesdropping Penalties (720 ILCS 5/14-4)

The offense classifications below come from 720 ILCS 5/14-4; the sentencing ranges come from 730 ILCS 5/5-4.5.

BIPA Penalties (740 ILCS 14/20)

Combined Exposure

An AI meeting tool that surreptitiously records a private meeting without all-party consent and simultaneously collects voiceprints without BIPA-compliant procedures faces both criminal eavesdropping charges and civil BIPA class action liability. Eavesdropping is a felony, and 720 ILCS 5/14-6 also lets any party to the recorded conversation sue the eavesdropper, or a principal who directed or knowingly benefited from it, for actual and punitive damages and an injunction. BIPA claims typically target the company behind the tool.

Employer and Workplace Considerations

Illinois employers face a complex compliance landscape when deploying AI meeting tools.

Three-Layer Compliance Framework

Employers must navigate three separate legal requirements simultaneously:

1. Eavesdropping compliance: Obtain consent from all meeting participants before activating any AI recording or transcription tool in private meetings, and never let a tool record covertly
2. BIPA compliance: Provide written notice, obtain written releases, and maintain public retention policies for any voiceprint data collected by AI tools
3. HB 3773 compliance: Notify employees when AI is used in employment-related processes, and ensure AI tools do not produce discriminatory effects

Practical Steps for Employers

Organizations using AI meeting tools with Illinois participants should consider implementing a written AI meeting recording policy that addresses all three legal requirements. Before activating AI recording in any meeting with Illinois participants, obtain documented consent from all participants that satisfies both the eavesdropping statute and BIPA. Maintain a publicly available biometric data retention and destruction policy. Audit AI meeting tools for any sentiment analysis, performance evaluation, or other features that could implicate HB 3773. Train managers and meeting organizers on Illinois's unique requirements.

Remote Work and Multi-State Meetings

The growth of remote work has amplified the practical impact of Illinois's strict consent requirements. Even if an employer is based outside Illinois, a participant joining from Illinois may bring the state's eavesdropping and BIPA requirements into play. Courts have not settled when an Illinois statute reaches a recording made by someone in another state; it depends on how much of the conduct happens in Illinois. The safe practice for a company headquartered in Idaho with one employee working from Chicago is to treat that meeting as covered and get everyone's consent.

Federal Law Context

Federal wiretap law under 18 U.S.C. Section 2511 establishes a one-party consent baseline, but Illinois's stricter standard can apply to conduct occurring in Illinois. The federal law does not preempt state wiretapping statutes that provide greater privacy protections.

The "Capability Test" (Ambriz v. Google, N.D. Cal. 2025)

In Ambriz v. Google (N.D. Cal., Feb. 10, 2025), a federal judge refused to dismiss California wiretapping claims over Google's contact-center AI. On whether a software vendor is a third-party eavesdropper under California Penal Code 631, the court noted that trial courts are split between requiring actual use of the recordings and asking only whether the vendor is capable of using them, and it applied the broader capability approach first used in Javier v. Assurance IQ (N.D. Cal. 2023).

That pleading-stage ruling is a California-law decision, not a federal Wiretap Act rule, and it binds no other court. In October 2026 the same judge dismissed the remaining plaintiffs' claims on consent and intent grounds (with leave to amend) and sent others to arbitration. For Illinois users, it shows that vendors able to process meeting data beyond transcription can face additional liability theories in other states.

The Ordinary Course of Business Exception

The Lisota v. Heartland Dental dismissal (N.D. Ill., with prejudice July 24, 2026) rested on the federal exception for a communication service provider acting in the ordinary course of its business, 18 U.S.C. 2510(5)(a)(ii). The court applied it to RingCentral as the provider of the phone service. It is not a business-use defense for companies that deploy AI tools, it does not apply to BIPA claims or Illinois eavesdropping claims, and it does not create a general safe harbor for AI meeting recording.

More Illinois Laws

• Illinois Data Privacy Laws
• Illinois Deepfake Laws
• Illinois Employee Monitoring Laws
• Illinois Recording Laws

Frequently Asked Questions

Is it legal to use an AI meeting recorder like Otter.ai or Fireflies.ai in Illinois?

Not without extra steps. Illinois requires all-party consent under 720 ILCS 5/14-2 for a private conversation recorded in a surreptitious manner, so a tool that records covertly needs every participant's agreement. Separately, and regardless of how visible the tool is, most AI meeting tools process voices to identify speakers, which can trigger Illinois' Biometric Information Privacy Act (740 ILCS 14) and its written consent requirements. Courts have not decided whether speaker labeling creates a voiceprint, or whether a host or employer who switches on a vendor's tool shares BIPA responsibility with the vendor, so the safe practice is to get written consent where the tool builds speaker profiles.

Do I have to notify everyone in a meeting before turning on an AI notetaker in Illinois?

Notice and consent are not the same thing, and the safe practice is to get consent. The eavesdropping statute, 720 ILCS 5/14-2, applies to recording done in a surreptitious manner, which section 14-1(g) defines as made by stealth or deception or executed through secrecy or concealment. A bot that joins openly under its own name and announces itself is arguably not recording surreptitiously, so whether 14-2 is violated in that situation is genuinely contested and has not been settled by an Illinois court. That argument does nothing for BIPA, which requires a written release before a voiceprint is collected whether the recording was open or covert. Obtaining actual consent from every participant satisfies both.

Why does Illinois' Biometric Information Privacy Act (BIPA) matter for AI meeting tools?

AI meeting tools that identify speakers, label who said what, or run voice based sentiment analysis may create a voiceprint, which BIPA (740 ILCS 14) lists as a protected biometric identifier, although no court has yet decided that speaker labeling does so. Before collecting it, an operator generally must provide written notice, disclose the purpose and retention period, obtain a written release from each participant, and maintain a publicly available data retention and destruction policy. Where BIPA applies, it can be the broader exposure of the two Illinois laws because, unlike the eavesdropping statute, it does not matter whether the recording was surreptitious.

What are the penalties for illegally recording a meeting in Illinois?

Eavesdropping is a Class 4 felony for a first offense, punishable by 1 to 3 years in prison and up to a $25,000 fine, and a Class 3 felony (2 to 5 years) for a subsequent offense. Illegally recording a law enforcement officer, State's Attorney, or judge carries its own enhanced penalty: a Class 3 felony (2 to 5 years) for a first offense and a Class 2 felony (3 to 7 years) for a subsequent offense. Separately, a court may award up to $1,000 per negligent BIPA violation or $5,000 per reckless or intentional violation (the Illinois Supreme Court has said these damages are discretionary), plus attorney fees, and these claims are frequently brought as class actions. The eavesdropping law also lets any party to the recorded conversation sue for actual and punitive damages under 720 ILCS 5/14-6.

Does Illinois' new AI employment law (HB 3773) affect AI meeting recording tools?

It can, for tools used in employment decisions. HB 3773, effective January 1, 2026, prohibits employers from using AI that has a discriminatory effect on employees and generally requires notice when AI is used in hiring, promotion, discipline, or similar decisions. An AI meeting tool that analyzes an employee's sentiment, engagement, or communication style, where that data feeds into employment decisions, could trigger HB 3773's notice and anti-discrimination requirements in addition to the eavesdropping and BIPA rules.