How should we describe the main privacy risks?

The risks identified by the organisation will depend on its use case. Common areas to consider include:

• Unauthorised access to recordings or transcripts
• Recording someone without adequate information
• Processing excessive or unnecessary information
• Inaccurate transcription or summarisation
• Sensitive information being captured unexpectedly
• Information about third parties being recorded
• Data being retained longer than necessary
• Incorrect information being transferred into a case record
• Unclear data flows involving subprocessors
• AI-generated information being relied upon without appropriate human review