Family meeting transcripts and AI leakage: what an AI recorder and a pasted transcript give away in ChatGPT or Claude.

After a serious incident, a facility manager meets the family, and more services now record the meeting so that nothing said is lost. A recorder writes a transcript, and the transcript is then pasted into ChatGPT or Claude to produce minutes, a letter and a complaint file note. It holds every word as spoken: the son’s description of his father’s injuries, a worker’s name, an earlier warning, the family’s money, a sister who is not in the room and a promise to go to the Commission. This page marks every item in a realistic transcript, shows where the tool gets a name wrong, and shows how the same minutes are produced on Ermos.

The family meeting transcript

Produced automatically after a meeting the manager recorded with the family, and used to write the minutes and the complaint response.

Meeting transcript
Kurrajong Gardens Aged Care · Tuesday 27 October 2026, 3.15pm · Produced automatically by the meeting recorder on the manager’s laptop. Speaker labels assigned by the tool.

Present:

[00:00:30] Lorraine Keane:

[00:00:44] Graham Baxter: Yes. I want a copy of whatever comes out of it.

[00:02:10] Graham Baxter:

[00:03:25] Lorraine Keane:

[00:06:40] Graham Baxter:

[00:07:15] Lorraine Keane: I will find Deb’s note of that conversation and I will tell you what it says.

[00:11:02] Beatriz Santos:

[00:14:30] Graham Baxter:

[00:16:50] Graham Baxter:

[00:19:20] Lorraine Keane:

[00:24:05] Graham Baxter:

[00:26:40] Lorraine Keane: I understand. I will write to you with our findings by Friday. Whatever you decide, we will support it.

An invented transcript. Speaker labels and wording are invented. Hover or tap any highlighted line for the analysis; the full list is below.

What leaves the service

  1. 1
    The attendees

    Three named people at a named service. Personal information, and the key that ties each line below to a person and to a resident. Privacy Act guide.

  2. 2
    The consent exchange

    An agreement to record and transcribe. The consent covers the service’s own recorder. It does not cover sending the transcript to another company. State and Territory surveillance devices laws restrict recording private conversations, and the service should take its own advice on the position in NSW. Privacy Act guide.

  3. 3
    A son describing his father’s injuries

    Bruising and what a man with dementia said. Health information about a resident, in his son’s words. Section 168 of the Aged Care Act 2024 ties the use of residents’ personal information to delivering their care. Patient data guide.

  4. 4
    A named worker and a matter under investigation

    The worker’s name, when he was stood down and that police and the Commission have been told. Unreasonable use of force is a reportable incident under section 16, and the Commission’s guidance sets 24 hours for Priority 1. Protected information under section 21, and an allegation that is not a finding. Privacy Act guide.

  5. 5
    An earlier warning

    A family member says he raised rough handling in August, and the manager promises to find the note. A statement the service must check against its own records before it responds, and a named staff member. Privacy Act guide.

  6. 6
    The family’s fees and the sale of the house

    That the family is behind and when the house settles. Financial information is personal information but not sensitive information under the Privacy Act, and it is the detail a payment redirection scam needs. Privacy Act guide.

  7. 7
    A sister and a gift

    Another family member’s view of her brother, and a $45,000 gift from the resident. The personal information of two people who are not residents, and a family dispute. Privacy Act guide.

  8. 8
    A threat to complain and to move him

    A family is entitled to complain to the Commission and to choose another home. What the service said at this point belongs in its own complaint record, and a stated intention to leave is commercially sensitive. Privacy Act guide.

  9. 9
    A nurse reading the plan aloud

    A line from the behaviour support plan and an admission that the allocation did not match it. Health information, and the service’s own record of a contributing failure. Patient data guide.

  10. 10
    A mistake the tool made

    The tool wrote “Dr Nye” where the speaker said Dr Nair. Automatic transcripts contain errors, and a wrong name in a complaint file is still wrong wherever it was processed. A person must check the transcript against the recording.

What happens in Frontier Models (ChatGPT, Claude)

  • The whole document is transmitted to the provider’s servers. On personal plans the user cannot choose where it is stored or processed, and for the major providers that has generally meant outside Australia, under that country’s legal process. Some business plans offer storage in Australia, but the provider still receives the content.
  • On consumer tiers, prompts can be retained and used to train future models.
  • The provider’s staff and systems can reach the content under the provider’s own policies.
  • Once sent, the service no longer controls it. Retention and deletion happen on the provider’s terms.

The same document on Ermos

Ermos Dominion

The document is drafted on a unit in your office, from your own templates and the resident’s record. Every marked item stays on the unit, which keeps working with the internet switched off. Nothing in it is transmitted to an AI provider, so there is no disclosure to analyse: the confidentiality work is the same as for your file server.

Ermos Edge

Your documents, the index and your access boundaries stay on your own instance in an Australian data centre. When a staff member asks for this draft, only their question and the excerpts they are permitted to see go to a named Australian provider, who is contractually barred from keeping the content or training any model on it. Nothing is processed outside Australia.

Frontier Models (ChatGPT, Claude)Ermos EdgeErmos Dominion
Where the document is processedProvider servers, generally offshore on personal plansYour instance in an Australian data centre; answers generated in AustraliaThe unit in your office
Who can read itProvider staff and systems, under policyYour staff, within the boundaries you set. The named Australian provider processes only permitted excerpts, under contract, and keeps nothingYour staff only
Is it keptOn the provider’s termsKept on your instance; the provider is barred from retaining itStays on the unit
Can it train a modelOn consumer tiers, yesNo, by contractOnly your own unit learns from it, on your hardware

Part of AI data leakage in aged care providers.

Common questions

Do ChatGPT and Claude use the information in a family meeting transcript?
The whole transcript is sent to the AI company's servers and processed there to produce the minutes or a letter. As at October 2026, whether a conversation on a personal plan (ChatGPT Free, Plus or Pro; Claude Free, Pro or Max) can be used to train the models depends on a setting each user controls. Business plans (ChatGPT Business and Enterprise, Claude Team and Enterprise) and the developer APIs sit under commercial terms, and OpenAI and Anthropic each say they do not train on that content by default (OpenAI, Anthropic). On either product, the thumbs up and thumbs down buttons can send a whole conversation back for training. This transcript holds bruises on a resident's arms, a named agency worker who was stood down, a family three weeks behind on fees and a $45,000 gift.
Can we use ChatGPT or Claude for a family meeting transcript if we remove the names?
Not safely, because the story identifies the people without their names. Removing names rarely makes a document anonymous. Information stays personal information while the person is reasonably identifiable, and the OAIC warns that information can be at risk of re-identification even when it has been de-identified or anonymised. A resident with bruises on both arms, a stood-down agency worker, a house settling on 14 November and a sister who distrusts her brother over a $45,000 gift all point to one family. The Office of the Australian Information Commissioner (OAIC) recommends in its guidance on commercially available AI products that organisations do not enter personal information, and particularly sensitive information, into publicly available generative AI tools, because of the significant and complex privacy risks.
Is it safe to use an AI note-taker or meeting recorder for a family meeting transcript?
Not until the service has answered some questions. Recording and transcription tools send the audio or transcript to the tool's vendor, so the same questions apply about where it is stored, whether it trains a model and who can review it. The OAIC's guidance also tells organisations to review carefully the terms and settings that will apply to their use of any AI product. Graham Baxter agreed to the service's recorder, and that agreement does not cover sending the transcript to another company.
How can an aged care service use AI for a family meeting transcript without sending it to ChatGPT or Claude?
Ermos is built so the document stays under your control. On the Dominion AI unit it is drafted inside your office and none of it is sent to an AI provider. On Ermos Edge your documents and index stay on your own instance in an Australian data centre, and only the question and the excerpts the user is permitted to see go to a named Australian provider that is contractually barred from keeping them or training any model on them. Ermos writes the minutes from the transcript and the service's own minutes template. The facility manager reads them against the recording and signs them before they are used.
Do we need the family's consent to record a meeting?
State and Territory surveillance devices laws restrict recording private conversations, and the agreement of the people in the meeting is the usual answer, so the service should ask at the start and keep the exchange. Telling people where the recording and transcript will go, including any AI tool, is also good practice, and the Privacy Act asks organisations it covers to take reasonable steps to tell people about collection. Take advice on the exact NSW position.
Does the Privacy Act cover what a relative says about other family members?
Yes, where the organisation is covered. The Privacy Act treats an activity in the course of providing aged care as a health service, and the OAIC says a small organisation providing a health service is covered. A relative's account of a sister or a gift is personal information about people who are not residents, and it sits in the same transcript as the resident's health information.
Why check an AI transcript against the recording?
Automatic transcripts mishear names, doses and dates, and the transcript can become the basis for minutes and a complaint response. A wrong word about a medicine or a person is still wrong wherever it was produced. The speaker labels are assigned by the tool and can be wrong too. A person who was in the meeting should read the transcript against the recording before it is used.

See Dominion answering from your own documents.

A demonstration takes 30 minutes, uses no client data, and comes with no obligation.

Book a demo
Keep reading
AI data leakage in aged care providers AI for healthcare AI and patient data All professions