Skip to content

Consulting and recruiting

AI note-takers in candidate interviews: consent, retention, ownership

By SourceX Editorial · Reviewed by Noah Loul ·

Short answer

An AI note taker in candidate interviews should run only on six controls: written notice before the call, consent that meets the strictest recording rule that may apply, storage in an approved system, retention tied to hiring-record rules, deletion confirmed at the vendor, and client sharing limited to recruiter-reviewed summaries, never raw recordings.

Key takeaways

  • Interview transcripts capture things recruiters would never write down, including health, family and salary history disclosures.
  • Candidates should be told before the call, in writing, that an AI note-taker will be used and how to decline.
  • A transcript belongs in the ATS or another approved system, not in a vendor account tied to one recruiter.
  • Clients should receive a recruiter-reviewed summary rather than the recording or the full transcript.
  • Tools that score or analyze candidates raise more legal questions than tools that only take notes.

What changes when a candidate interview is transcribed?#

Transcribing a candidate interview turns a conversation into a verbatim hiring record. Candidates mention things in passing that a recruiter would never type into the ATS: a medical appointment, a child care arrangement, a religious holiday, a current salary, a pending visa. Once transcribed, those details sit in a searchable file, often held by a vendor.

That record can matter later. Hiring records can become evidence in discrimination claims, and a transcript showing that a protected characteristic came up may be read in ways the recruiter never intended. It also becomes data the firm must protect, retain correctly and delete on time.

Accuracy is the third change. Transcription tools mishear accents, technical terms and names, and AI summaries can state a candidate's experience more strongly or weakly than they described it. A summary that reaches a client without a recruiter's check can misrepresent the candidate, so review before filing should be a fixed step, not a courtesy.

Step-by-step checklist: from notice to client sharing#

The checklist below follows one interview from scheduling to the moment information reaches a client. Each step names what to check and the mistake staffing firms most often make at that point.

Step-by-step checklist: from notice to client sharing
StepWhat to checkCommon mistake
NoticePrivacy notice covers recording and AI processing; the interview invitation says a note-taker will be usedRelying on a general website notice the candidate never saw
ConsentConsent captured at the start of the call under the strictest rule that may apply; a real option to declineTreating silence or staying on the call as consent
StorageTranscript saved to the ATS or an approved system with desk-level accessLeaving files in a vendor account tied to a recruiter's own login
RetentionPeriod matched to hiring-record rules and to what the notice saysKeeping raw audio indefinitely because nobody set a rule
DeletionRaw audio removed once the summary is filed; deletion requests honored where law gives the right; vendor deletion confirmedDeleting in the ATS but not at the vendor
Client sharingCandidate agreed to be submitted; client contract terms; summary reviewed by the recruiterForwarding the full recording or transcript to a hiring manager

What should the candidate notice say?#

The candidate notice should explain the note-taker in plain words before the interview, not in the middle of it. Put it in the invitation and repeat the key points when the call starts, so a candidate who missed the email still hears them.

A good notice covers these points without legal jargon:

  • That an AI tool will record or transcribe the conversation and produce a summary.
  • What is captured: audio, a transcript, a summary, or some combination.
  • Who will see it: the recruiting team and, for summaries only, the client if the candidate is submitted.
  • How long each item is kept and when it is deleted.
  • That the candidate can decline and the interview will go ahead with manual notes.
  • How to ask for access to or deletion of their information, where the law provides that right.
  • That an outside vendor processes the recording on the firm's behalf.

Which laws may apply?#

Several sets of laws may apply to an AI note-taker in candidate interviews, and which ones depends on where the candidate, the recruiter and the client sit. Recording consent comes first: state wiretap and eavesdropping laws split between letting one participant consent for everyone and requiring every participant to agree, and a candidate dialing in from another state can change which rule matters. GDPR may apply to candidates in the EU.

State privacy laws vary on applicants. The CCPA's temporary exemption for employee and applicant information expired on January 1, 2023, and in April 2026 the California Privacy Protection Agency opened preliminary rulemaking on how the CCPA applies to employees, job applicants and contractors. Colorado's attorney general, by contrast, says the Colorado Privacy Act does not cover people acting in an employment context, such as job applicants.

Some states and cities have rules aimed at AI or automated tools in hiring, including tools that analyze video interviews. Speaker identification built on voiceprints may raise biometric privacy questions; Illinois's Biometric Information Privacy Act, for example, allows liquidated damages of $1,000 per negligent and $5,000 per intentional or reckless violation. Employment discrimination laws make transcripts potential evidence, and recordkeeping rules set minimum retention periods for hiring records. Counsel assesses these for your firm's footprint; the checklist above is a starting point, not a conclusion.

Who owns an interview transcript?#

An interview transcript is usually controlled by the staffing firm that created it, but control is shared in practice. The candidate has privacy rights over their information that can include access and deletion depending on the law, the client holds whatever copy it receives under its own policies, and the vendor's terms may give it rights to process or even improve its service with the content.

Get each party's position in writing before the tool goes live.

Who owns an interview transcript?
PartyWhat it typically holdsWhat to confirm
Staffing firmThe recording, transcript and summary it createdStorage location, access rules, retention and deletion
CandidatePrivacy rights in their own informationNotice given, consent captured, rights requests process
ClientSummaries or notes it receivesContract terms on candidate data and AI tools
Note-taker vendorProcessing copies under its termsModel training switched off, deletion on request, data location

Illustrative: a staffing firm pilots an interview note-taker#

Illustrative: a fictional IT staffing firm lets recruiters trial an AI note-taker for first-round screens. Within a short time, transcripts sit in individual vendor accounts, some recruiters forward full transcripts to hiring managers, and nobody has set a retention rule.

The privacy lead pauses the trial and resets it. The firm moves to one company-managed account with model training switched off, connects it to the ATS, updates the candidate privacy notice and the interview invitation template, and sets raw audio to be deleted once the recruiter files a reviewed summary. Clients now receive the summary only. Because candidates join from many states, the firm asks for consent from every participant on every screen, so recruiters follow one rule everywhere instead of checking each candidate's location.

Can interview transcripts ever be licensed?#

Interview transcripts are among the most personal records a staffing firm holds, so in a SourceX review they are usually excluded from licensed packages. De-identified interview notes, question banks and structured outcomes are more often considered, and only after the Rights step of the SourceX five-step transaction confirms what the candidate notice and consent language allowed.

Where interview-derived records do proceed, the SourceX Evidence Packet records the notice and consent basis, the privacy treatment, the permitted use and the supplier's release authorization. A note-taker program set up well today keeps that later decision open; one set up loosely usually closes it.

Frequently asked questions

Can a candidate refuse the AI note-taker?

They should be able to, and the interview should go ahead with manual notes. Make clear that declining does not count against them, and record the choice so the next recruiter does not turn the tool on by mistake. Some laws may require an opt-out in any case.

Do interview intelligence tools that score candidates raise extra issues?

Yes. Once a tool rates answers, flags traits or ranks candidates, it moves from documenting the interview to evaluating the person. Rules on automated hiring tools, bias audits and disclosure may then apply in some jurisdictions, so review scoring features separately with counsel.

What if the client records its own interviews with our candidates?

The client's recording falls under the client's policies and notices, not yours. Ask clients whether they record, tell candidates before the interview, and avoid receiving copies unless you need them and can store them under your own rules.

Should recruiters be allowed to use their own note-taker accounts?

No. Personal accounts put candidate information outside the firm's control, retention and deletion processes, and the firm may not even know the files exist. Approve one tool, manage it centrally and block or discourage personal sign-ups for interview work.

Should the full transcript live in the candidate's ATS record?

Many firms keep only the reviewed summary in the candidate record and hold the raw transcript separately, with tighter access and a shorter retention period. That keeps day-to-day recruiting work on the summary and limits how many people can open verbatim interview content.

How long should interview recordings be kept?

Raw audio usually has the shortest justified life, because the summary and transcript carry what the firm needs. Set periods for each item against the hiring-record rules that apply to you and the promises in your notice, then confirm that the vendor deletes on the same schedule.

Sources

  • The California legislature ended its 2022 session without extending the CCPA employee and business-to-business personal information exemptions, so the exemptions expired on January 1, 2023. Source
  • The California Privacy Protection Agency initiated preliminary rulemaking on April 20, 2026 focused on how the CCPA applies to personal information of employees, job applicants and independent contractors, with preliminary comments accepted through May 20, 2026. Source
  • The Colorado Attorney General states that the Colorado Privacy Act protects personal data of Colorado residents acting in an individual or household context, does not cover personal data of individuals acting in a commercial or employment context such as a job applicant, and does not apply to data maintained for employment records purposes. Source
  • The Illinois Biometric Information Privacy Act (740 ILCS 14/20) lets a prevailing party recover liquidated damages of $1,000 per negligent violation or $5,000 per intentional or reckless violation (or actual damages if greater). Source

Related resources

See if your company qualifies

A short company assessment. No data uploads are needed.

See if you qualify