Unapproved AI Notetakers
Four tiles on the call. Only three of them are people.
What Is Unapproved AI Notetakers?
An AI notetaker is a participant with perfect memory, its own storage and its own mailing list, and the only place it announces itself is the roster. In this exercise one joins a confidential HR consultation on a colleague's free trial, and the recap it publishes afterwards opens for anyone with the link. You practise checking a roster before anything sensitive is said, removing a tool mid-call, and reporting a recording that has already left the building.
What You'll Learn in Unapproved AI Notetakers
- Read a meeting roster before confidential discussion starts, and recognise a recording tool by its non-company joining address rather than its display name
- Understand that a colleague's free trial is an unassessed supplier arrangement, and that the meeting host decides what is allowed to record the meeting they run
- Remove an unapproved participant and lock the meeting, understanding that this protects what has not been said yet and never what has
- Treat an automated recap email and its link as a disclosure in their own right, since recaps go to the invite list and public links carry no sign-in and no expiry
- Judge what a supplier's retention, sharing and model-training settings mean for a deletion request, and report an unapproved recording naming the supplier, the individuals identifiable in it, and where the copies are now
Unapproved AI Notetakers — Training Steps
-
Nine O'Clock, Room 2
It is just before nine. You have the radiology night shift proposal open, the consultation paperwork half drafted, and thirty minutes with the two people who can sign it off. Tomas Berg is joining from the executive floor, Priya Lindqvist from Legal. Nils Brandt, the workforce planning contractor, is on the invite but has already said he cannot make it.
-
Open The Meeting Client
Two of the four night posts are being restructured, and the two people in those posts do not know yet. Nothing said in the next half hour is supposed to leave the call.
-
Start The Consultation
The meeting is on today's schedule. You are the host.
-
The First Four Minutes
You open the way you always open a consultation: the room, the scope, and the reminder that this goes no further until HR has spoken to the people affected. Priya needs the names for the paperwork, and Tomas reads them out.
-
Count The Room
Four tiles are on screen and only three people are talking.
-
Read The Fourth Tile
You stop the discussion and look properly at the fourth card.
-
Ask Whose It Is
You put the question to Tomas directly, and his answer is the one that comes up almost every time.
-
Remove It From The Call
Priya is right that the conversation stops until the tool is gone. Removing it does not undo the first four minutes, but it stops the next twenty from joining them.
-
Lock The Meeting
The notetaker is attached to Tomas's calendar entry, and it rejoins as readily as it joined. Locking the meeting closes the door behind it for the rest of the session.
-
Finish The Consultation
With the tool out and the meeting locked, the captions stop and the three of you can finish the discussion properly.
Security Framework Coverage
CIS Controls
- CIS 3 Data Protection
- CIS 14.4 Train Workforce on Data Handling Best Practices
- CIS 14.5 Train Workforce Members on Causes of Unintentional Data Exposure
NIST CSF
- PR.AT-01 Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks in mind
- PR.DS Data Security
GDPR
- Art. 5 Principles relating to processing of personal data (integrity and confidentiality)
- Art. 32 Security of processing
EU AI Act
- Art. 4 AI literacy