ConsentPixel – Privacy · Verified

CIPA Case · Active litigation

Chamberlain v. Granola: The "Invisible" AI Note-Taker Wiretap Case

An AI note-taking app that quietly captures a meeting — with no bot visible in the participant list — is now facing a wiretap lawsuit for recording people who never agreed to be recorded. It's the clearest sign yet that the "capture before consent" theory driving website litigation is jumping to AI tools.

CP ConsentPixel Team Updated October 2026 11 min read Status: filed, early stage
All-party
consent — the theory at the heart of the claim
Nationwide
proposed class of people allegedly recorded without consent
$5,000
CIPA statutory damages per violation that recording claims point to (§637.2)

Case snapshot

Case
Chamberlain v. Granola, Inc.
Court
U.S. District Court, Northern District of California
Case number
3:26-cv-07926
Filed
July 30, 2026
Legal theory
Federal Wiretap Act / ECPA (18 U.S.C. §2511) and California Invasion of Privacy Act (Cal. Penal Code §630 et seq.) — all-party consent to record
Conduct at issue
AI note-taker alleged to "silently capture" conversations through a user's device without a visible bot, and to train AI models on captured communications by default
Plaintiff
Chamberlain (Florida resident), for a proposed nationwide class
Settlement
None — case is at an early stage
Status
Filed · company not yet responded No court has found any violation; allegations are unproven.

The Granola lawsuit moves the privacy-litigation story off the website and into the meeting room. Granola is an AI note-taker: it listens to a call or a meeting and produces a tidy summary. The complaint in Chamberlain v. Granola alleges that it does this by silently capturing the conversation through the user's device — without the little "so-and-so's notetaker has joined" bot that participants are used to seeing — so the other people on the call may never know software is recording them. Under California's all-party-consent recording law, recording people who haven't agreed is exactly the conduct the statute was built to punish. Different technology, identical principle to the website cases: something captured a communication before everyone consented.

Not legal advice. This is an educational summary of a newly filed complaint, current as of October 2026. The allegations are unproven, no court has ruled, and Granola had not yet responded as of publication. Nothing here characterizes any company as having broken the law. Consult qualified counsel about your own use of recording or AI tools.

What the case is about

Filed July 30, 2026 in the Northern District of California, Chamberlain v. Granola, Inc. brings claims under the federal Wiretap Act (ECPA) and the California Invasion of Privacy Act. The core allegation is that Granola's AI notepad "recorded and used private conversations without everyone's consent." According to the complaint, the app operates by silent capture — it listens through the device of the person using it, rather than joining the call as a visible participant — which means others on the call "may never learn that software is capturing what they say."

The complaint goes a step further than a typical recording claim. It alleges that Granola "uses captured communications to train AI models by default," without clear per-participant permission, and that once a conversation has been absorbed into a trained model, that data "cannot be cleanly extracted or deleted." The named plaintiff, a Florida resident, seeks to represent a nationwide class of people whose conversations were allegedly captured. The case is new; Granola had not yet filed a response as of publication.

The detail that makes it matter

The feature at the center of the case isn't a bug — it's a selling point. "No bot in the call" is marketed as a benefit: your meeting looks normal, no awkward robot participant, just clean notes afterward. The lawsuit reframes that same design as the problem. If the other participants can't see that recording is happening, they can't consent to it — and in an all-party-consent state, that absence of visible notice is precisely what creates liability.

That's a uncomfortable pattern for a whole category of products. The "invisible," "frictionless," "no one has to know" design that makes AI note-takers pleasant to use is the same design that strips away the notice consent law depends on. The second wrinkle — training models on captured audio by default, irreversibly — turns a one-time recording problem into a permanent-data problem. You can delete a recording; you can't easily un-train a model.

Consent-before-capture starts with your website

AI note-takers are a newer front, but the most common place a business captures data before consent is still its own website — trackers firing before a visitor agrees. ConsentPixel's free scanner shows you exactly what fires on your site before consent, so you can close the oldest version of this gap first.

Scan my site free →

The all-party-consent theory

California is a two-party (all-party) consent state: under CIPA, recording a confidential communication generally requires the consent of everyone party to it, not just the person doing the recording. Cal. Penal Code §632 prohibits recording a confidential conversation without all-party consent; §631 addresses interception. The complaint pairs these with the federal Wiretap Act (ECPA, 18 U.S.C. §2511), which prohibits intercepting the contents of a communication without proper authorization.

The logic maps cleanly onto an AI note-taker. If software captures the content of a meeting — the actual words spoken — and the participants on the other side never agreed, that is the classic recording-without-consent scenario, just with an AI transcription layer on top. The "user consented by installing the app" argument doesn't resolve it, because the user is only one party; the rest of the room didn't install anything.

The model-training allegation adds a dimension older recording cases didn't have. A traditional unlawful recording is, at least, a discrete file you can locate and delete. The complaint's claim that captured conversations are used to train AI models "by default," and then "cannot be cleanly extracted or deleted," describes harm that doesn't reverse. If true, a conversation someone never agreed to have recorded doesn't just sit in storage — it becomes part of a model's learned behavior, beyond the reach of a normal deletion request. That permanence is likely to feature in how courts weigh these cases, and it's a sharp reminder for any business evaluating an AI tool: the question isn't only "does it record?" but "where does what it records end up, and can that ever be undone?"

⚠ SB 690 does not help here
California's SB 690 reform narrowed the §638.51 pen-register theory used in website cases — but it left §631 and §632 fully intact. Recording claims like this one run on exactly the statutes SB 690 didn't touch. If anything, as the pen-register avenue closes, expect more attention on the recording theories that power cases like Granola. (More in our SB 690 explainer.)

Part of a bigger wave

Granola isn't alone. A cluster of 2026 cases targets the same "invisible AI note-taker" design across different products — Otter.ai has faced wiretap allegations over its meeting assistant, and the category as a whole is drawing scrutiny for recording and, in some suits, voiceprint/biometric concerns. The common thread is that the convenience feature — automatic, silent, always-on capture — collides with consent laws written for a world where recording was a deliberate, visible act.

For businesses, this matters in two directions at once. If you build a tool that captures conversations, the design question "can every participant tell this is happening, and did they agree?" is now a litigation question. And if you use an AI note-taker in your own meetings — sales calls, interviews, client sessions — you may be the one doing the recording in the eyes of the law, which means the consent obligation can land on you, not just the vendor.

There's a reason this category is attracting suits now rather than two years ago: adoption exploded. AI note-takers went from a niche productivity tool to a default setting in sales teams, recruiting pipelines, and customer-success orgs — often rolled out company-wide without anyone asking whether the people on the other side of those calls had agreed to be recorded and transcribed. Every one of those calls is a potential all-party-consent event, multiplied across every rep and every meeting. That volume is exactly the dynamic that made website tracking attractive to plaintiffs: a single, repeated, automated behavior that touches an enormous number of people the same way. The litigation tends to follow the adoption curve, and AI capture tools are now well up that curve.

Why it belongs on a CIPA tracker

At first glance an AI note-taker case looks out of place next to website-pixel settlements like Forbes or the healthcare portal cases. It belongs there because the underlying legal engine is the same CIPA machinery, and because it shows where the theory is heading.

DimensionWebsite pixel caseGranola (this case)
What's capturedClicks, IPs, identifiersThe actual content of spoken conversations
WhereOn a website, pre-consentIn a meeting, via silent capture
Core statute§631 / §638.51§631 / §632 + federal ECPA
Who's missing consentThe visitorEveryone on the call except the user
Shared principleSomething captured a communication before all parties consented.

Tracking the Granola case alongside the website cases is how you see the trajectory: the "capture before consent" theory started with cookies and pixels, and it's now reaching any technology that quietly ingests a communication. A business that only thinks about consent on its website is defending one door while another opens.

What this means for you

The direct lesson depends on which side of the tool you're on, but the principle is one sentence: if something you run captures a communication, every party to it needs to know and agree.

1If you use AI note-takersTreat the recording obligation as yours. Announce the recording, get agreement from everyone on the call, and check your tool's default settings — especially whether it trains on your conversations.
2If you build capture features"Invisible" and "no bot" are now liability designs in all-party-consent states. Visible notice and real consent are features, not friction.
3Don't forget the oldest frontThe most common place your business still captures before consent is your website. Trackers firing pre-consent are the same principle, and they're checkable today.
4Watch where the theory movesAs the pen-register avenue narrows under SB 690, recording and interception theories like this one are the ones still fully open to private plaintiffs.

Key takeaways

  • The lawsuit targets "invisible" recording. Chamberlain v. Granola alleges the AI note-taker silently captured conversations without all parties' consent.
  • The convenience is the liability. "No bot in the call" removes the notice that consent law depends on.
  • It runs on §631/§632 + ECPA. All-party-consent recording law — the statutes SB 690 left fully intact.
  • It's a category signal. Otter.ai and other AI note-takers face similar claims; the "capture before consent" theory is spreading from websites to AI tools.
  • The obligation can be yours. If you record meetings with these tools, the consent duty may land on you — not just the vendor.

Frequently asked questions

What is the Chamberlain v. Granola lawsuit about?

It's a proposed class action alleging that Granola's AI note-taking app recorded private conversations without everyone's consent. The complaint says the app "silently captures" meetings through the user's device — without a visible bot joining the call — so other participants may not know they're being recorded. It brings claims under the federal Wiretap Act (ECPA) and California's Invasion of Privacy Act, and was filed July 30, 2026 in the Northern District of California. The allegations are unproven.

Is this a CIPA case if it's about meetings, not a website?

Yes — it uses CIPA's recording and interception provisions (Cal. Penal Code §631 and §632) alongside the federal Wiretap Act. CIPA isn't limited to websites; it's a broad privacy statute covering recording and interception of communications. That's why an AI note-taker case and a website-pixel case can rest on the same underlying law, even though the technology is completely different.

Why is "no bot in the call" a legal problem?

Because California requires all-party consent to record a confidential conversation. When an AI note-taker captures a meeting without a visible indicator, the other participants may have no way to know recording is happening — so they can't consent. The feature that makes the tool convenient (nothing visibly joins the call) is the same feature that, per the complaint, removes the notice the law requires.

If I use an AI note-taker, am I the one at risk?

Possibly. In many situations the person operating the recording tool is the one doing the "recording" in the eyes of the law, which means the all-party-consent obligation can fall on you, not only the software vendor. The practical protection is simple: tell everyone on the call that it's being recorded or transcribed, get their agreement, and review whether your tool trains on or retains the content by default.

Does SB 690 affect this case?

No. SB 690 narrowed the §638.51 pen-register theory used in website tracking cases, but it left §631 (interception) and §632 (recording) fully intact and privately enforceable. Recording claims like the one against Granola run on those untouched statutes. As the pen-register avenue closes, recording and interception theories are likely to see more, not less, activity.

What's the connection to website tracking?

The same principle: something captured a communication before all parties consented. On a website, it's a tracker firing before a visitor agrees; in a meeting, it's an AI tool recording before participants agree. The Granola case shows the "capture before consent" theory extending beyond the browser. If you're addressing consent on your website but not elsewhere, you're covering one version of a broader exposure.

The bottom line

Granola is a glimpse of where consent litigation is going. The theory that started with cookies and pixels — you captured a communication before everyone agreed — is now being aimed at the AI tools quietly recording our meetings. The specific product will change; the principle won't.

For most businesses the practical response is two-sided: be deliberate about recording consent when you use these tools, and don't lose sight of the oldest and most common version of the same gap, which is still sitting on your website. One of those you can check in the next five minutes.

Close the consent gap you can see today

Before the next front, handle the first one. Scan your site and see every tracker that captures and transmits before a visitor consents.

Scan my site free →
14-day trial · no credit card required
CP

ConsentPixel Team

Website privacy & consent compliance

ConsentPixel tracks the consent-litigation landscape — from website pixels to AI capture tools — and helps operators fix the pre-consent data collection these cases target.

Sources & disclaimer. Facts drawn from the public complaint in Chamberlain v. Granola, Inc. (N.D. Cal. No. 3:26-cv-07926), current as of October 2026. The allegations are unproven; no court has found any violation and Granola had not responded as of publication. This article is general information, not legal advice.
Scroll to Top