Disclaimer: This article provides general informational guidance and does not constitute legal advice. Consent requirements for AI medical scribes vary by jurisdiction, practice setting, and applicable laws. Consult qualified legal counsel and your compliance team before implementing consent procedures.
Whether you need patient consent to use an AI medical scribe depends on your state's recording laws, your practice setting, and your organization's policies. HIPAA alone doesn't require explicit patient consent for treatment-related uses of AI documentation tools. But many jurisdictions have separate recording consent laws that apply when a device captures patient audio. The safest approach: inform patients, offer a clear opt-out, and document their response.
Why consent matters (even when it's not strictly required)
There are practical reasons to address consent beyond legal obligation:
Trust. Patients who discover after the fact that AI was listening during their visit may feel their privacy was violated — even if the practice was lawful. Transparency prevents that reaction.
Risk management. A documented consent process protects the practice if a patient later raises concerns. Without a record, it's your word against theirs.
Professional standards. Medical ethics emphasize informed consent and patient autonomy. Using a new technology in the exam room falls within that principle, even if the law doesn't require a specific form.
Regulatory uncertainty. AI-specific healthcare regulations are evolving. What isn't required today may be required next year. Building consent into your workflow now means you won't scramble to retrofit it later.
How requirements differ by setting
Consent requirements aren't uniform. Three factors shape what's needed:
State recording laws
States fall into two categories:
- One-party consent states — only one participant in a conversation (you) needs to consent to recording. Most states follow this standard.
- Two-party (all-party) consent states — everyone being recorded must consent. This includes California, Florida, Illinois, Pennsylvania, Washington, and others.
If you practice in a two-party consent state and use an ambient AI scribe that records the patient's voice, you need patient consent for the recording itself — separate from any HIPAA consideration.
Facility and organization policies
Hospitals, health systems, and group practices often have their own consent and technology use policies. Even in a one-party consent state, your employer may require patient notification or written consent before using AI documentation tools. Check your organization's compliance office before implementing.
Payer and network requirements
Some insurance networks and accountable care organizations have data handling requirements that extend to AI tools used in clinical encounters. Review your contracts if you participate in value-based care programs.
Example consent language
The following examples are starting points — not legally vetted templates. Have your compliance team or legal counsel review and adapt them for your jurisdiction.
Intake form addition
Our practice uses an AI-assisted documentation tool to help create clinical notes from your visit. The tool may record portions of the encounter to generate accurate documentation. Audio is processed in accordance with our privacy practices and is not used for any purpose other than creating your medical record. You may request that the tool not be used during your visit — this will not affect the quality of your care.
☐ I understand and consent to the use of AI-assisted documentation during my visit. ☐ I prefer that AI-assisted documentation not be used during my visit.
Waiting room signage
Notice: AI-assisted documentation This practice uses AI technology to assist with clinical note-taking during visits. Audio from your encounter may be processed by a secure documentation tool to generate your medical record. Your data is protected under our privacy practices. If you have questions or prefer to opt out, please let your care team know.
Verbal disclosure script
"Before we get started — I use an AI tool that listens during our conversation and helps me write your visit notes. It's encrypted and secure, and I review everything before it goes into your record. Is that okay with you? If you'd rather I not use it, just let me know."
Tips for talking to patients about AI scribes
How you frame the conversation matters as much as the words. Patients respond to tone, confidence, and clarity.
Be matter-of-fact. Treat it like any other disclosure — similar to explaining that a medical student will be observing. Don't oversell the technology or make it sound experimental.
Lead with the benefit to them. "This lets me focus on you instead of a computer screen" resonates more than a technical explanation.
Keep it brief. One or two sentences at the start of the visit. Don't turn it into a five-minute presentation on AI.
Offer a real opt-out. Patients should feel they can say no without awkwardness. Have a plan for manual documentation if they decline.
Don't ask for consent in a way that pressures agreement. "You're okay with this, right?" is not informed consent.
What not to say
Avoid these pitfalls in patient communication:
- "It's just like having a scribe in the room." It's not. A human scribe is visible and accountable in a way software isn't. The comparison creates expectations that may not match reality.
- "Don't worry, it's completely HIPAA compliant." This oversimplifies compliance and may not be fully accurate depending on implementation. Say the tool is used in accordance with privacy requirements.
- "Your data is totally safe." Absolute claims about safety are risky. Describe specific safeguards instead.
- "Everyone uses these now." Social pressure is not informed consent.
- "We have to use it." Even if your organization mandates the tool, patients still have a right to opt out of recording.
Documenting consent
Whatever approach you use, create a record:
- If consent is part of the intake form, the signed form is your documentation
- If consent is verbal, note it in the patient chart (e.g., "Patient informed of AI documentation tool and consented to its use")
- If a patient declines, note that too, and document the visit manually
- Retain consent records according to your standard medical records retention policy
How this connects to HIPAA and data privacy
Patient consent is one piece of a larger compliance picture. For a deeper understanding of how HIPAA applies to AI scribes, read our guide on whether AI medical scribes are HIPAA compliant. If you're concerned about what happens to patient data after it's captured, our article on AI clinical documentation privacy risks covers data retention, model training, and vendor evaluation.
Dictum's security overview and HIPAA compliance page detail the specific safeguards in place, including encryption, auto-delete, and on-device processing options.
The bottom line
Patient consent for AI medical scribes isn't a single checkbox — it depends on where you practice, how the tool captures data, and what your organization requires. Start by understanding your state's recording laws, then build a disclosure process that's transparent, low-friction, and documented.
The goal isn't legal perfection on day one. It's creating a practice where patients know what's happening, feel respected, and can opt out without barriers.
Reminder: This content is for informational purposes only and does not constitute legal or compliance advice. Requirements vary by jurisdiction and practice setting. Consult your compliance officer or legal counsel before implementing consent procedures for AI documentation tools.