Zoom does prompt participants for consent when a recording starts, but the only way to refuse is to leave the meeting, which is a weak basis for the freely given consent GDPR expects. Zoom's prompt helps with transparency; it does not, on its own, give you a defensible lawful basis or a real choice to stay and opt out.
What Zoom actually does
Zoom's consent behaviour is documented. When "joining a meeting that is already being recorded or the host begins recording, participants are asked to provide consent." The choice is binary: "Click OK to grant consent" or "Click Leave and then Leave Meeting to opt out and exit the meeting." Participants already in the call "will be prompted for consent" when the host starts recording. (Zoom Support, retrieved 2026-07-26.)
Zoom's recording consent prompt asks participants to click OK or leave the meeting when recording starts. It is affirmative in form, but because the only alternative to consenting is to exit the call, it does not offer a way to remain and decline. Under GDPR, consent conditioned on leaving is unlikely to count as freely given, so the prompt supports transparency more than it establishes a lawful basis.
Why "consent or leave" is a GDPR problem
GDPR requires consent to be freely given, which means a genuine choice without detriment. A prompt where declining forces you out of a meeting you may need to attend is close to conditioning participation on consent, which regulators treat sceptically. For internal calls with staff the imbalance is sharper still. The practical answer is not to lean on Zoom's prompt as your lawful basis, but to inform participants in advance, decide your basis deliberately, and use the prompt as one transparency signal among several.
The disclaimer you may not be able to customise
Zoom offers a recording-consent disclaimer and an audio notification, but customisation is gated by plan: Zoom's documentation indicates that Basic, Pro, Business, and Free Trial accounts with fewer than 100 licenses cannot customise the recording consent disclaimer text. (Zoom Support, retrieved 2026-07-26.) So the wording many EU teams would want to tailor for their notice may not be editable on smaller plans.
Where Germany and the EU go further
National law can demand more than a click-through. In Germany, recording a confidential conversation without agreement can engage §201 StGB, and workplace monitoring usually involves the works council; we cover that in AI notetaker consent, §201 StGB, and the Betriebsrat. The wider legal picture is in recording sales calls under GDPR in Europe.
How Numi handles consent on Zoom
Numi's meeting bot joins Zoom as a named, visible participant, so the recording is never covert and attendees can be told before it starts, then the audio runs through an EU-only pipeline, transcribed on self-hosted models in Frankfurt, stored and analysed in the EU under an Article 28 AVV, with no training on your data. It does not replace your consent process, but it removes the covert-recording problem and keeps the assistant's data path in Europe. See the full setup in a GDPR-compliant AI notetaker for Zoom.