Voice Assistant Privacy Consent and Likeness Matrix

Voice Assistant Privacy Consent and Likeness Matrix

People and roles

A voice interaction can involve the account holder, active speaker, bystander, recorded third party, person discussed, voice actor, person whose likeness is simulated, customer, employee, child, reviewer, vendor, and downstream recipient.

Account-holder consent does not automatically resolve every person's rights or expectations.

Interaction path

Map microphone activation, wake or start state, visual and audible notice, background capture, audio transport, speech recognition, model processing, generated voice, transcript, logs, human review, retention, training or improvement use, sharing, deletion, and incident handling.

NIST's Privacy Framework supports lifecycle and affected-person analysis. It does not supply jurisdiction-specific consent.

Product evidence

The product record must identify the exact account, plan, application, voice mode, settings, retention state, data controls, and documentation date. Current product behavior cannot be inferred from the May 2024 GPT-4o demonstration.

OpenAI's GPT-4o System Card documents evaluated voice risks. A vendor evaluation does not certify a voice experience for a particular setting.

Likeness and impersonation

Naturalness, voice casting, voice cloning, similarity, authorization, deception, and disclosure are separate questions.

The FTC's voice-cloning record describes fraud and authentication concerns. The FCC's 2024 declaratory ruling concerns artificial or prerecorded voice calls under the TCPA. Neither source is a universal rule for every assistant interaction.

Decision matrix

The evaluator should record the setting, people, purpose, task, consequence, identity disclosure, capture indicator, allowed data, consent or other authority, interruption, correction, retention, access, training use, deletion, export, impersonation safeguards, accessibility, child and bystander treatment, and exit.

The result can be allow for the exact setting, modify the interaction, require qualified review, or reject.