Article

May an AI Tool Transcribe Client Meetings?

By Saba Khalvashi, Co-Founder & CEO

Published · Updated · Legal status September 2026

Minutes are among the most obvious uses of AI in a firm. This is also where three areas of law meet: criminal law, professional law and data protection. The FAQ of the German Federal Chamber of Tax Advisors of 27 October 2026 addresses transcription of conversations explicitly.

Is transcribing client meetings allowed?

In principle, yes. The BStBK classes file memos, conversation notes and transcription as dictation AI and considers their use in tax practice permissible if it complies with the law and professional rules. It also notes that offline use is preferable and that no confidential content may reach public AI tools.

Because § 201 StGB makes the unauthorised recording of the privately spoken word a criminal offence. The BStBK is explicit that consent given afterwards is not sufficient. In practice, the firm asks everyone present before starting, including anyone who joins later. A spoken yes is enough, silence is not. The firm records this in the client file, so the proof stays available for as long as the memos do. If anyone declines, the conversation goes ahead without recording.

What do § 203 StGB and § 62a StBerG do?

They govern who may learn the content. Tax advisors are bound to secrecy under § 57 StBerG, and § 203 StGB makes breaches a criminal offence. § 62a StBerG allows access for service providers to the extent the service requires it. The BStBK applies this to AI vendors too. For that, the firm must:

  • select the vendor carefully (para. 2),
  • conclude a contract in text form that binds the vendor to secrecy and instructs it on the criminal consequences (para. 3),
  • ensure a comparable level of protection for services provided abroad (para. 4).

This has to happen before the vendor gains knowledge of the data. The data processing agreement can contain this obligation. If it doesn't, it isn't enough.

What does the GDPR require?

Dictation AI regularly processes personal data. As a minimum, the BStBK names a legal basis, transparency towards those affected, a data processing agreement, processing in the EU where possible and clear deletion concepts. High-risk use adds a data protection impact assessment.

What does a firm check before using it?

CheckBasisWhat the firm does
Consent from everyone involved§ 201 StGBAsk before starting, record it in the client file
Vendor secrecy§ 62a(3) StBerGContract in text form, before any data flows
Vendor abroad§ 62a(4) StBerGCheck for a comparable level of protection
Data processingArt. 28 GDPRConclude a data processing agreement
Impact assessmentArt. 35 GDPRAssess the risk, prepare one if high
Informing clientsGDPR, BStBK FAQUpdate the privacy notice
Review of content§ 57 StBerGCheck and approve every set of minutes

What does a tool without a meeting bot change?

It changes who sits in the conversation, not whether it is captured. A bot appears as an additional participant. With capture on the device, as with TaxMeet (Next Intelligence GmbH, Berlin), that participant disappears. Because the conferencing platform then shows no recording notice of its own, the spoken question before the start takes over that role. Consent from everyone involved is still needed, as are contractual safeguards with the vendor processing the data. TaxMeet's terms of use expressly make consent the firm's responsibility. We provide template wording for the invitation, the conversation and the record.

More selection criteria are in the article What should I check when choosing a vendor?

Common questions.

Is it enough if the client agrees afterwards?

No. According to the BStBK FAQ, prior consent from everyone involved is required. Consent given afterwards is not sufficient.

Does a tool without a meeting bot change anything about consent?

No. Without a bot there is no additional participant in the call, but the conversation is still captured. Consent from everyone involved remains necessary.

Does the tool have to be hosted in Germany?

The BStBK FAQ names no duty to host in Germany. It recommends European vendors or data centres in the EU. For services abroad, § 62a(4) StBerG requires a comparable level of protection.

Does this also apply to lawyers?

For lawyers, § 43e BRAO contains a corresponding rule on service providers. § 201 StGB applies to everyone anyway. Law firms should assess the professional-law position under their own rules.

Sources

  1. Bundessteuerberaterkammer: FAQ: KI im steuerberatenden Berufsstand (as of 27 October 2026, in German), accessed 30 October 2026
  2. Gesetze im Internet: § 201 StGB, violation of the confidentiality of the spoken word (in German), accessed 30 October 2026
  3. Gesetze im Internet: § 203 StGB, violation of private secrets (in German), accessed 30 October 2026
  4. Gesetze im Internet: § 62a StBerG, use of service providers (in German), accessed 30 October 2026
  5. Gesetze im Internet: § 43e BRAO, use of service providers (in German), accessed 30 October 2026

This article is for information only and is not legal or tax advice.

See TaxMeet on a sample conversation.

See in 30 minutes how a confidential client meeting becomes finished work.