Otter.ai and the EU AI Act: full analysis
Meeting transcription AI: where EU AI Act applies
Otter.ai's core product is meeting transcription — converting speech to text and generating AI summaries. For most business use, this is minimal risk under the EU AI Act: the AI assists human note-takers rather than making decisions about individuals or interacting with them in a potentially deceptive way. No Annex III high-risk classification, no Article 50(1) chatbot obligation for the transcription itself.
The picture changes with Otter's AI Meeting Agents — bots that join Zoom, Google Meet, or Microsoft Teams calls as a participant. When an AI bot joins a meeting, speaks, or responds to meeting participants, it becomes an AI system directly interacting with natural persons, potentially triggering Article 50(1). The disclosure must inform participants that they are interacting with or being recorded by AI.
GDPR is the bigger concern for most teams
For most Otter.ai deployments, the more pressing legal concern is GDPR, not EU AI Act. Recording and processing meeting conversations involves personal data. Every participant — employees, clients, partners — has data protection rights. Key GDPR requirements: identify your lawful basis for recording (typically legitimate interests or consent), inform participants before recording, honour data subject access and deletion requests for transcripts, and ensure Otter.ai is listed as a data processor in your records.
Special category data in meetings
Meetings sometimes include discussion of health conditions, personal circumstances, or other special category data. If your Otter.ai transcripts capture this type of data, GDPR Article 9 imposes heightened obligations. Consider whether sensitive meetings should be excluded from AI transcription by policy.