AI Chatbots, Note-Takers, and Wiretap Lawsuits: Are You Covered?

Two of the most common AI tools in business right now — the chat widget on your website and the AI note-taker that joins your meetings — are quietly creating one of the fastest-growing legal exposures of 2026: wiretap and recording lawsuits. And here's the part that catches owners off guard: the insurance you'd expect to cover it often excludes exactly this kind of claim.

If your site has a chat tool, or your team uses an AI assistant that records or transcribes calls and meetings, this one is worth five minutes. This guide covers why these suits are happening, where Washington law fits in, and the specific coverage gap to check for.

For the full picture across every policy AI touches, start with does your business insurance cover AI. This post goes deep on the wiretap exposure.

Why a Chatbot Is Getting Businesses Sued

Plaintiffs' lawyers have taken decades-old wiretap laws — written for phone taps — and aimed them at modern web tools. The theory: when a website chat widget or session-recording tool captures a visitor's interaction, or an AI note-taker silently records a meeting, that can count as intercepting a communication without consent.

The suits cluster around two tools:

• Website chat and tracking tools that record what a visitor types or does, often using third-party code embedded in the page.
• AI note-takers and meeting assistants that join calls and capture the conversation, sometimes without everyone on the call knowing.

California's wiretap statute (CIPA) is the engine behind most of these cases, partly because it sets damages at $5,000 per violation — which stacks fast across thousands of website visitors or recorded calls. Courts have let several of these claims move forward in 2026, including cases targeting AI meeting-recording vendors. The individual harm is small; the aggregate exposure is not.

Washington Has Its Own Recording Law

This isn't only a California problem. Washington is an all-party consent state. Under RCW 9.73.030, recording a private communication generally requires the consent of everyone involved. A website tool or AI note-taker that captures a conversation without clear, all-party consent can run into Washington's statute directly — no California plaintiff required.

For a Washington business, that means the exposure sits close to home. If your chat widget records sessions, or your team's AI assistant transcribes client calls, consent is the whole ballgame.

Where the Insurance Gap Is

Here's the problem. You'd assume a privacy claim like this lands on your cyber policy, or maybe your general liability. Increasingly, neither responds cleanly:

• Cyber and tech E&O forms have been adding exclusions for "wiretapping," "recording," and the unauthorized collection or distribution of information. Some carriers exclude statutory privacy violations outright; others cover them but only for defense costs, or under a reduced sublimit.
• General liability might seem to help through its personal-and-advertising-injury coverage, but many GL forms exclude violations of recording and privacy statutes, and the new AI endorsements narrow it further.

The result is a claim that falls between policies. You assumed you were covered; the exclusion says otherwise; and you're paying defense costs on a suit with per-violation damages. That's the worst-case version of a coverage gap, and it's exactly the one these lawsuits are creating.

What to Check

• 1. Look for a wiretapping or recording exclusion. Ask your agent to confirm, in writing, whether your cyber and liability policies exclude wiretap, recording, or statutory privacy claims.
• 2. Check whether coverage is defense-only or sublimited. "Covered" and "fully covered" are different. Find out if privacy-statute claims carry a reduced limit.
• 3. Confirm consent on every tool. A clear, up-front disclosure and all-party consent is your first line of defense — and it's far cheaper than litigating. Add it to your chat widget and your meeting practices.
• 4. Vet your vendors. The tool provider's own practices (how it records, stores, and uses data) can pull you into a claim. Know what your chatbot and note-taker actually do.

The fastest way to know where you stand is a short policy review. We'll read your exclusions against the AI tools you actually use. Start a review here.

Frequently Asked Questions

Can a website chatbot really trigger a lawsuit?

Yes. Plaintiffs are using wiretap and recording statutes to sue over website chat and tracking tools that capture visitor interactions, often arguing the recording happened without proper consent. California's CIPA drives most of these cases because it sets damages at $5,000 per violation, which adds up quickly across many website visitors.

Does my cyber insurance cover a wiretap or CIPA claim?

Not always, and that's the risk. Many cyber and tech E&O policies now exclude wiretapping, recording, and statutory privacy violations, or cover them only for defense costs or under a reduced sublimit. Check your specific policy for a wiretap or recording exclusion before you assume you're protected.

Is recording calls or meetings legal in Washington?

Washington is an all-party consent state under RCW 9.73.030, which generally requires the consent of everyone involved to record a private communication. A website tool or AI note-taker that records without clear, all-party consent can create exposure under Washington law, not just California's.

How do I reduce the risk from an AI note-taker?

Get clear, up-front consent from everyone before recording or transcribing, disclose that an AI tool is capturing the conversation, and review what your vendor does with the data. Consent is both your legal defense and, in many cases, the cheapest form of risk management available.

Related Reading

• Does Your Business Insurance Cover AI? — the full map of which policy responds to which AI risk
• Your Employees Are Using AI. Does Your Cyber Policy Cover It? — the data-leak and shadow-AI side
• Cyber Liability Coverage — the policy where privacy and recording exclusions usually live