Your Voice Is Your Password. Microsoft Recorded It.

Teams' transcription feature creates biometric voiceprints without telling users. Five Illinois residents say that violates state law. The class could include millions.

TL;DR: A class action filed February 5 in federal court alleges Microsoft Teams secretly creates "voiceprints" (biometric identifiers as unique as fingerprints) every time its transcription feature identifies who's speaking in a meeting. Microsoft's own documentation calls it "a voiceprint for each participant, akin to a fingerprint for their voice." The lawsuit targets the company for not telling Illinois users this was happening and not getting their consent, as required by the state's Biometric Information Privacy Act. The class covers every Illinois Teams user since March 2021. Damages could reach $5,000 per violation.

What Microsoft Didn't Tell You About "Who's Talking"

Every time Microsoft Teams transcribes a meeting and labels who said what, it needs to figure out which voice belongs to which person. The technology behind that is called "diarization," a process that analyzes your pitch, tone, speaking rhythm, and other vocal characteristics to separate speakers and assign their words to names [1].

Those vocal characteristics are unique to you. Like a fingerprint. Microsoft knows this. Their own Teams Rooms documentation describes the process as creating "a voiceprint for each participant, akin to a fingerprint for their voice" [2].

Five Illinois residents (led by Alex Basich, alongside Kristin Bondlow, Marquis Boyce, Jessica Brewer, and Jamari Brown) say Microsoft never told them any of this was happening. They never got a written notice. They never signed a consent form. They didn't even know their voice was being converted into a biometric identifier [1].

Under Illinois law, that's not just a privacy concern. It's a violation.

Why Illinois Matters

Illinois passed the Biometric Information Privacy Act (BIPA) in 2008, years before most people had heard the word "biometric." The law was almost prophetic. It requires companies to do three things before collecting biometric identifiers like voiceprints, fingerprints, or face scans [3]:

  1. Tell you in writing that biometric data is being collected
  2. Explain why and for how long the data will be stored
  3. Get your written consent

Microsoft, according to the complaint filed February 5 in the U.S. District Court for the Western District of Washington (Case No. 2:26-cv-00422), did none of this [1]. The company's privacy disclosures mention "speech technology" in general terms but never explicitly state that voiceprints are being generated or stored. There's no public retention or destruction policy for the biometric data. And nobody clicked "I agree" on a voiceprint consent form.

BIPA has real teeth. Negligent violations carry $1,000 per incident. Reckless or intentional violations: $5,000 each. Plus attorneys' fees [3].

320 Million Users. One Transcribe Button.

Microsoft Teams has 360 million monthly active users globally and 220 million daily active users as of mid-2025 [4]. Eight million companies in the US use it. Ninety-three percent of Fortune 100 companies run their communications through Teams.

The transcription feature that creates voiceprints? It's been available since mid-2021. Anyone who's ever been in a Teams meeting where someone hit "Transcribe" or "Record" has potentially had their voice converted into a biometric identifier, whether they knew about it or not [2].

The class in this lawsuit covers Illinois residents dating back to March 2021. With Illinois's population of 12.5 million and widespread enterprise Teams adoption, the potential class size is enormous.

A 2024 BIPA amendment limits damages for the "same method of collection" to a single recovery going forward. But violations before August 2024 may still be assessed under the old, per-scan standard [5]. That's three-plus years of meetings.

The Voiceprint Lawsuit Wave

Microsoft isn't alone. This lawsuit is part of a growing wave of BIPA cases targeting AI-powered meeting tools that identify speakers:

Fireflies.AI was hit with a BIPA class action in December 2025 (Case No. 3:25-cv-03399). The AI notetaker allegedly records and analyzes voices of meeting participants (including people who never signed up for the service) to create voiceprints without consent [6].

Otter.ai faced a similar suit in August 2025, alleging its transcription service captures and stores voiceprints to identify speakers across multiple meetings without BIPA-required consent [6].

Legal analysts at Fisher Phillips warned that employers, not just tech vendors, face liability for deploying these tools. If you authorized Teams transcription for your company meetings with Illinois employees, you might be on the hook too [6].

The theory is straightforward: any tool that identifies speakers, distinguishes voices, or ties transcripts to individuals is operating in biometric territory. And BIPA doesn't care whether you meant to collect biometrics. It cares whether you told people and got consent.

BIPA's Track Record: Billions in Settlements

Companies that dismiss BIPA lawsuits as nuisances should check the scoreboard:

  • Meta/Texas: $1.4 billion settlement in July 2024 for running facial recognition on Facebook photos for over a decade without consent [7]
  • Facebook/Illinois: $650 million in 2021 over the "Tag Suggestions" feature. Approximately 1.6 million Illinois users received about $397 each [8]
  • Google Photos: $100 million in 2022 for face grouping that collected biometric data without consent
  • Clearview AI: A 23% equity stake in the entire company, awarded to class members in a first-of-its-kind settlement in March 2025 [9]

One of the law firms representing the Teams plaintiffs, Labaton Keller Sucharow, was co-lead counsel in the $650 million Facebook settlement [8]. They know the playbook.

Microsoft hasn't publicly commented on the suit. Given it was filed five days ago, a formal legal response isn't due yet.

What You Can Do

Check Your Teams Settings

Teams lets attendees turn off speaker attribution in their profile settings. This won't stop transcription, but it can limit how your voice is tied to your identity. Look for the "speaker attribution" toggle in your Teams meeting settings.

Ask Before Recording

When someone enables transcription or recording in a meeting, Teams should display a notification. If you see it, you have the right to leave or object. In Illinois, you arguably need to give explicit consent before your voice is processed.

Talk to Your Employer

If your company uses Teams with transcription enabled, ask your IT department whether they've assessed BIPA compliance. Companies that deploy these tools without proper policies could share liability with Microsoft [6].

Know Your State's Laws

BIPA is the most powerful biometric privacy law in the US, but Texas and Washington state have similar (weaker) statutes. Several states are considering BIPA-style legislation. Your state attorney general's office can tell you what protections exist where you live.

The Bigger Problem

Here's what should bother you beyond the legal technicalities: Microsoft built a system that converts your voice into a biometric identifier, compared it to a fingerprint in their own documentation, and then didn't tell users that's what was happening.

This isn't a bug. It's a feature. The entire point of speaker diarization is to identify who's talking. To do that, the system has to analyze what makes your voice uniquely yours. That's a voiceprint. And voiceprints, unlike passwords, can't be changed. Once your voice biometric is captured, you can't reset it.

This pattern keeps repeating. Companies build useful features: facial recognition for photo tagging, voice identification for meeting transcripts, age verification through face scans. The feature works because it collects biometric data. The company knows it collects biometric data. But the disclosure is vague, the consent is buried, and users don't find out until a lawsuit spells it out.

Illinois wrote a law in 2008 that said: tell people what you're collecting and get their permission first. Eighteen years later, one of the biggest technology companies on Earth apparently couldn't manage that.

References

  1. USA Herald - Microsoft Teams Hit With Illinois Lawsuit Alleging Illegal Voice Data Collection (February 2026)
  2. Microsoft Learn - Voice Recognition in Microsoft Teams Rooms
  3. ACLU of Illinois - Biometric Information Privacy Act (BIPA)
  4. DemandSage - Microsoft Teams Statistics 2026
  5. Blank Rome LLP - Analyzing BIPA's Newest Class Action Trend: Targeting the Use of Voice-Powered Technologies
  6. Fisher Phillips - AI Meeting Tools Are the Latest Target of Illinois BIPA Class Actions
  7. Texas Attorney General - $1.4 Billion Settlement With Meta (July 2024)
  8. TechCrunch - Facebook Settles Illinois Class Action for $650 Million (March 2021)
  9. Biometric Update - Clearview Settles BIPA Lawsuit, Plaintiffs Take 23% of Company (2025)