Should Your Meeting Room Be Allowed to Record Everything You Say?

No. A meeting room should not record everything by default. Recording, transcription and AI recaps should be things your organisation switches on deliberately, for a stated purpose, with everyone in the room told first. Singapore's Personal Data Protection Act (PDPA) treats an identifiable voice or face as personal data. The technology in a modern room makes recording easy, and that makes setting a clear default more important.

This post looks at the room itself: the microphones, cameras and room systems that sit on the wall, and how consent works when ten people share one device. It builds on our earlier piece, Are Smart Meeting Room Cameras a Privacy Nightmare?, which covers AI framing and people counting. Three companion posts cover the rest: smart glasses in Someone in Your Meeting Could Be Wearing AI Smart Glasses, uninvited transcription bots in The Meeting Was Confidential. So Why Is There an AI Transcript?, and a practical policy template in Does Your Company Need a Policy Against AI Recording Devices? This is general information drawn from official PDPC, Singapore Statutes Online and vendor pages, not legal advice.

Is the meeting room already recording you?

Usually not, but the room is always listening while a call is live. A video bar or speakerphone has to pick up speech to send it to the far end. That is not the same as storing it. Storage starts when someone presses record, turns on transcription, enables an AI recap, or lets a third-party notetaker into the call.

The problem is that people in the room often cannot tell which of those is happening. A light on the bar may mean the camera is active, the microphones are live, or the device is updating. Your staff need to know what each indicator means and who can start a recording.

What does the PDPA say about recording voices?

The PDPC's Advisory Guidelines on the PDPA for Selected Topics (revised 23 May 2024) deal with recordings in Chapter 4. Paragraph 4.2 notes that "an audio recording may comprise personal data if an individual can be identified" from it, for example from their voice. Paragraph 4.33 adds that its CCTV guidance generally applies whether a system captures video only or video and audio.

The Act itself, as published on Singapore Statutes Online, sets the basic rules an organisation works within:

• Consent (section 13). An organisation generally needs consent to collect, use or disclose personal data, unless deemed consent applies or the law requires or authorises it.
• Informed consent (section 14). Consent counts only if the person was told the purpose first.
• Notification (section 20). The purposes must be given before or at the time of collection. Separate notice rules apply to employment-related purposes.
• Reasonable purpose (section 18). The purpose must be one a reasonable person would consider appropriate.
• Retention (section 25). Stop keeping the data once the purpose is served and there is no legal or business need.

The guidelines also say the PDPA does not prescribe how consent is obtained, and that written or recorded consent is good practice (paragraph 4.10). They give no specific rule for meeting rooms. How these points apply to your organisation is a question for your data protection officer or lawyer.

Who is responsible when an employee presses record?

Usually the organisation. Section 4(1)(b) of the Act says its data protection Parts impose no obligation on an employee acting in the course of employment. The PDPC's example at paragraph 4.8 explains that where an employee records for the company, the company must meet the obligations.

That is why "anyone can record any meeting" is a weak default. Every recording an employee starts becomes the organisation's data to protect, explain and eventually delete. Recording permissions should sit with roles that understand those duties.

Why is consent harder in a shared room?

On a laptop, each person gets their own prompt. In a room, one device represents everyone sitting at the table. Microsoft's documentation for its "Require participant agreement for recording and transcription" policy shows the gap clearly.

When that policy is on, Microsoft says participants are muted with cameras off once recording starts, and must answer yes or no before they can speak or share. The policy is off by default. Microsoft also lists Teams Rooms on Android and Teams Rooms on Windows as auto-consented endpoints: the room gets a notification and its consent is logged as auto consent or not applicable. In other words, the five people in the room do not each click anything.

So the room needs a human step. Announce recording at the start, put a short notice on the door, and give people a real option to leave the room or join from their own device if they object.

What should the room hardware do to help?

Hardware cannot give consent, but it can make the room's state obvious. Look for three things: a clear mute control, a visible indicator of when microphones are live, and a physical way to cover the camera.

• The Yealink UVC40 E2 All-in-One USB UHD 4K Video Bar (S$645.00) lists an electric lens cap that covers the lens automatically, alongside an 8-microphone array. As a USB bar, recording is controlled by the meeting app on the connected PC.
• The Jabra Speak2 75 UC Wireless Conference Speakerphone (S$415.00) has a mute button and what Jabra calls a Microphone Quality Indicator, a light ring showing how well a voice is being picked up. Jabra lists a pickup range of up to 2.5 m.
• The Jabra PanaCast 50 Video Bar (S$1,575.00) uses eight beamforming microphones and lists PeopleCount and room usage insights. If you enable those, decide who can see the data and say so in your notice.
• For a dedicated room system, the Yealink MeetingBar A40 (Price on request) runs Microsoft Teams Rooms on Android, so the auto-consent behaviour above applies to it.

Prices as listed on 25 Oct 2026. The room's network and firmware matter as much as its features; see Your Video Conference Is Confidential. But What About the Room Equipment?

Should some meetings never be recorded?

Yes, and it helps to name them in advance. Typical candidates are disciplinary and grievance meetings, legal advice sessions, sensitive HR conversations and board discussions about transactions. Many organisations allow notes but not recordings in these sessions.

For these meetings, admins can apply a stricter meeting policy to the organisers who run them, or turn recording off for specific rooms. Board meetings are covered in our companion post Should AI Be Allowed to Attend a Confidential Board Meeting?

A room that records only when someone decides it should, and tells everyone when it does, is easier to defend than one that records by default.

What to do next

1. Set the default to off. Recording, transcription and AI recaps are switched on per meeting, by people allowed to do so.
2. Restrict who can record. Use meeting policies so only organisers or named roles can start a recording.
3. Decide on participant agreement. Consider Teams' participant agreement policy for organisers who handle sensitive meetings, knowing room systems auto-consent.
4. Put a notice on every room door. State which AI features are on and that meetings may be recorded when announced.
5. Announce at the start. The organiser says the meeting is being recorded and why, before anything sensitive is said.
6. Set expiry. Give recordings and transcripts a default expiry that matches the purpose.
7. List no-record meetings. Name the meeting types where recording is not allowed.
8. Write it down. Turn these rules into a short policy; our AI recording device policy template gives a starting point.

SourceIT supplies meeting room hardware from Yealink, Jabra, Logitech and HP Poly with local warranty. Use Request for Quotation on the product page or email sales@sourceit.com.sg.

Frequently asked questions

Is a recording of a meeting personal data in Singapore? It can be. The PDPC's advisory guidelines say an audio recording may be personal data if a person can be identified from it, for example from their voice, and identifiable images are personal data too.

Do we need consent to record a meeting under the PDPA? The PDPA generally requires consent and notice of purpose to collect personal data, subject to exceptions such as deemed consent. How it applies to a particular meeting is a question for your data protection officer or lawyer; this is not legal advice.

Are people told when a Teams meeting is recorded? Microsoft says all meeting participants receive a notification in their Teams app when recording starts, and that guests cannot start or stop a recording.

Does everyone in a Teams Room give consent individually? No. Microsoft lists Teams Rooms on Android and Windows as auto-consented endpoints when its participant agreement policy is on, so an announcement and a door notice are still needed for people in the room.

Who is responsible if an employee records a meeting for work? Section 4(1)(b) of the PDPA says its data protection obligations do not fall on an employee acting in the course of employment; the PDPC's guidelines explain that the organisation must comply instead.

How long should meeting recordings be kept? The PDPA's retention obligation says to stop keeping personal data once the purpose is served and there is no legal or business need. Set an expiry period on recordings that matches the purpose.