AI Notetaker Mitigations and Attorney Client Privilege

General
, ,
1

Nudge has a pretty good write up on the risks of AI Notetaking apps, especially 3rd party shadow AI.

I created a list to help with detection and mitigation. This list will not prevent the addition of notetakers to Teams or Zoom, but it does limit shadow AI sprawl by nerfing access with both firewall/proxy and secure email gateway blocks.

https://github.com/BadSamuraiDev/bs-lists/blob/main/ai-meeting-notetakers.md

Microsoft has partially deployed a new policy to prevent unauthorized notetakers joining your tenant. More information can be found on Office365 IT Pro’s write up.

Not legal advice

Please consult your counsel on this topic to familiarize yourself with the legal risks of AI. There are some critically important, and ongoing, case-law how these tools can break attorney client privilege. Therefore, it is paramount incident response teams clear usage, even if approved, with your counsel.

2

Just a note to be 10000% clear that the above is not legal advice and IFIN does not and will not provide such.

3

Updated to be more clear. One of the links is to a real lawyer, which is not a recommendation, I simply found the article to be one of the most succinct write-ups on this topic that many IR teams may not be familiar with.