Doesn't this break wiretapping laws (depending on the user's geographic location) and possibly GDPR/NDAs(if left on while at work)?

Ethically most people probably wouldn't be happy to find out that you recorded a conversation with them.