Do I need patient consent to use an AI scribe?

HIPAA lets covered entities document treatment without separate patient authorization, so under federal law an AI scribe used to record a clinical encounter generally falls under permitted treatment use. HIPAA is the floor, not the ceiling: state recording-consent laws, state health privacy laws, and professional ethics can each add requirements. The safest approach is to get informed consent from every patient before activating the scribe, regardless of state.

What is the difference between one-party and two-party consent for AI recording?

One-party consent states require only one person in the conversation to agree to a recording, which the provider satisfies by choosing to use the scribe. Two-party (all-party) consent states require everyone in the conversation to agree, so you must obtain explicit patient consent before the AI scribe starts listening. California, Florida, Illinois, Massachusetts, Pennsylvania, and Washington are among the two-party states.

What should I tell patients about the AI scribe before recording?

Use plain language, not legal jargon. Tell the patient that an AI tool will record the conversation, that the recording is used to generate clinical documentation, how the audio and transcription are stored and protected, how long the data is retained, and that they can decline AI-assisted documentation without affecting their care. Offer it as an option and note what alternative documentation you will use if they say no.

Do I need a special consent form for an AI scribe, or is a template enough?

A generic consent form that only mentions documentation likely falls short, especially in Canada, where PIPEDA requires meaningful consent and patients must understand that an AI is recording and transcribing the visit. Build an AI scribe consent section into your standard intake paperwork so every new patient meets the question before their first visit, and have a healthcare attorney review the wording annually as recording laws change.

How do I document AI scribe consent, and what if a patient declines?

Written consent signed by the patient is preferred; verbal consent recorded in the medical chart is acceptable in many jurisdictions, and office signage is supplementary but not sufficient on its own. If a patient declines, disable the scribe for that encounter before it begins, document the visit through traditional methods, record the preference in their chart so it carries forward, and never let declining affect their care.

Does Transcribe Health help manage patient consent?

Yes. Transcribe Health includes built-in consent management, from customizable patient consent forms to per-encounter toggle controls that let a provider disable AI documentation instantly when a patient declines. Every plan includes a Business Associate Agreement, patient data is never used to train AI models, and data residency defaults to Canada.

Back to Blog

HIPAA Compliance

February 9, 2026

5 min read

Patient Consent for AI Medical Scribe Recording: State-by-State Guide

Navigate patient consent requirements for AI medical scribe recording across US states and Canadian provinces, including one-party vs two-party consent laws.

By Fatih Aktas, Founder & CEO

Published February 9, 2026

red padlock on black computer keyboard. Cover image for: Patient Consent for AI Medical Scribe Recording: State-by-State Guide. — red padlock on black computer keyboard. Photo by FlyD on Unsplash.

HIPAA doesn't require consent for treatment documentation, but state laws might

Heres where it gets confusing. HIPAA itself allows covered entities to use and disclose PHI for treatment, payment, and healthcare operations without explicit patient authorization. So under federal law, using an AI scribe to document a clinical encounter generally falls under permitted treatment use.

But HIPAA sets the floor, not the ceiling. State recording consent laws, state health privacy laws, and professional ethics standards can all impose additional requirements. And those vary wildly depending on where you practice.

The safest approach? Get informed consent from every patient before activating an AI scribe. Even if your state doesn't technically require it, transparency builds trust - and a signed consent form is your best defense if a patient later objects.

One-party vs two-party consent states

Recording consent laws in the United States fall into two categories:

One-party consent states require only one person in the conversation to consent to the recording. Since you (the provider) consent by choosing to use the scribe, this is typically satisfied automatically.

Two-party (all-party) consent states require everyone in the conversation to agree to the recording. In these states, you must obtain explicit patient consent before the AI scribe begins listening.

Two-party consent states

These states require all parties to consent to recording:

California
Connecticut
Florida
Illinois
Maryland
Massachusetts
Michigan
Montana
Nevada
New Hampshire
Oregon (for in-person conversations)
Pennsylvania
Washington

One-party consent states

All other states follow one-party consent rules. But even in these states, best practice is to inform patients and document their consent.

Important caveat: Some states have specific healthcare recording laws that override or supplement their general wiretapping statutes. California, for instance, has additional protections under the Confidentiality of Medical Information Act (CMIA) that go beyond standard two-party consent.

Canadian consent requirements

Canada handles this differently through provincial health privacy legislation:

Province	Primary Law	Consent Required?
Ontario	PHIPA	Implied consent for treatment, but recording notification recommended
British Columbia	PIPA / HIA	Express consent for collection of personal health information
Alberta	HIA	Deemed consent for treatment, notification recommended
Quebec	Act Respecting Health Services	Explicit consent required
Federal (PIPEDA)	PIPEDA	Meaningful consent with transparency about AI use

Under PIPEDA, organizations must obtain "meaningful consent" for collecting personal information. This means patients need to understand that an AI is recording and transcribing their visit, not just that documentation is happening. A generic consent form that doesn't mention AI likely falls short of this standard.

What your consent process should include

Regardless of your jurisdiction, an effective consent process for AI medical scribes covers these elements:

What to disclose to patients:

An AI tool will be recording the conversation
The recording will be used to generate clinical documentation
How the audio and transcription data will be stored and protected
How long the data will be retained
Their right to decline AI-assisted documentation
What alternative documentation methods are available if they decline

How to document consent:

Written consent form signed by the patient (preferred)
Verbal consent documented in the medical record (acceptable in many jurisdictions)
Signage in the office notifying patients of AI scribe use (supplementary, not sufficient alone)

When consent should be obtained:

During patient intake, before the first visit using the AI scribe
Renewed when there are material changes to how the AI tool works
Offered as an option - never forced

Handling patients who decline

Some patients will say no. You need a workflow for that.

Have a clear process for:

Disabling the AI scribe for that specific encounter before it begins
Documenting the encounter through traditional methods (manual notes, typing, dictation)
Recording the patient's preference in their chart so it carries forward to future visits
Not penalizing the patient - declining AI documentation cannot affect the quality of care they receive

Train your front desk and clinical staff on this process. It should be seamless. A patient who declines shouldn't feel like they're causing a disruption.

Practical implementation tips

Make it part of intake paperwork. Add an AI scribe consent section to your standard intake forms. This normalizes it and ensures every new patient encounters the question before their first visit.

Use plain language. Skip the legal jargon. Patients need to understand what's happening, not parse a contract. Something like: "We use an AI assistant that listens during your visit to help your doctor write accurate notes. The recording is encrypted and protected under HIPAA. You can opt out at any time."

Post visible notices. Put a simple sign in exam rooms: "This practice uses AI-assisted documentation. Please let us know if you have questions or prefer traditional documentation."

Review annually. Recording laws evolve. State legislatures are actively passing new AI-specific privacy laws. Have your healthcare attorney review your consent forms at least once a year.

Transcribe Health includes built-in consent management features - from customizable patient consent forms to per-encounter toggle controls that let providers disable AI documentation instantly when a patient declines.

This article is for informational purposes only and does not constitute legal or compliance advice. Recording consent laws vary by jurisdiction and are subject to change. The state and provincial information provided may not be current or complete. Consult with a qualified healthcare attorney in your jurisdiction for guidance on consent requirements specific to your practice.

Frequently asked questions

Do I need patient consent to use an AI scribe?: HIPAA lets covered entities document treatment without separate patient authorization, so under federal law an AI scribe used to record a clinical encounter generally falls under permitted treatment use. HIPAA is the floor, not the ceiling: state recording-consent laws, state health privacy laws, and professional ethics can each add requirements. The safest approach is to get informed consent from every patient before activating the scribe, regardless of state.
What is the difference between one-party and two-party consent for AI recording?: One-party consent states require only one person in the conversation to agree to a recording, which the provider satisfies by choosing to use the scribe. Two-party (all-party) consent states require everyone in the conversation to agree, so you must obtain explicit patient consent before the AI scribe starts listening. California, Florida, Illinois, Massachusetts, Pennsylvania, and Washington are among the two-party states.
What should I tell patients about the AI scribe before recording?: Use plain language, not legal jargon. Tell the patient that an AI tool will record the conversation, that the recording is used to generate clinical documentation, how the audio and transcription are stored and protected, how long the data is retained, and that they can decline AI-assisted documentation without affecting their care. Offer it as an option and note what alternative documentation you will use if they say no.
Do I need a special consent form for an AI scribe, or is a template enough?: A generic consent form that only mentions documentation likely falls short, especially in Canada, where PIPEDA requires meaningful consent and patients must understand that an AI is recording and transcribing the visit. Build an AI scribe consent section into your standard intake paperwork so every new patient meets the question before their first visit, and have a healthcare attorney review the wording annually as recording laws change.
How do I document AI scribe consent, and what if a patient declines?: Written consent signed by the patient is preferred; verbal consent recorded in the medical chart is acceptable in many jurisdictions, and office signage is supplementary but not sufficient on its own. If a patient declines, disable the scribe for that encounter before it begins, document the visit through traditional methods, record the preference in their chart so it carries forward, and never let declining affect their care.
Does Transcribe Health help manage patient consent?: Yes. Transcribe Health includes built-in consent management, from customizable patient consent forms to per-encounter toggle controls that let a provider disable AI documentation instantly when a patient declines. Every plan includes a Business Associate Agreement, patient data is never used to train AI models, and data residency defaults to Canada.

patient-consentrecording-lawshipaaai-scribestate-regulations

HIPAA Compliance

Related Resources

Our Compliance Standards

Ready to Try AI-Powered Documentation?

Join thousands of healthcare providers saving hours every day with Transcribe Health.

Start Free Trial

Transcribe Health