Recording Consent Laws by State

Before you can record a telehealth visit and process it through an AI scribe, you need to understand your state's recording consent laws. They vary significantly — some require everyone on the call to consent; others require only one party.

Get this wrong and you could face criminal liability, civil liability, or both. Get it right and your AI scribe deployment is legal.

The two legal frameworks: One-party vs. all-party consent

One-party consent states: In one-party consent (also called "one-party notice" or "single-party consent") states, only one party on the call needs to consent to recording. If you are a party to the call, you can record it without the other person's knowledge or consent.

For telehealth: You (the clinician) can record the visit without telling the patient, legally speaking. However, best practice is to inform patients anyway for ethical and trust reasons.

All-party consent states (two-party states): In all-party consent (also called "two-party consent" or "all-party notice") states, everyone on the call must consent to recording. If the patient does not know or agree to the recording, it is illegal.

For telehealth: You must tell the patient the visit is being recorded and obtain explicit consent before you start recording.

State-by-state breakdown

One-party consent states (38 states + DC)

You can record without the other party's knowledge or consent. However, for AI scribes, you should still inform the patient as a best practice.

Alabama, Alaska, Arizona, Arkansas, Colorado, Connecticut, Delaware, Florida, Georgia, Hawaii, Idaho, Illinois, Indiana, Iowa, Kansas, Kentucky, Louisiana, Maine, Maryland, Michigan, Minnesota, Mississippi, Missouri, Montana, Nebraska, Nevada, New Hampshire, New Mexico, New York, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, Rhode Island, South Carolina, South Dakota, Tennessee, Texas, Utah, Vermont, Virginia, Washington DC, West Virginia, Wisconsin, Wyoming

(Yes, this is 39 jurisdictions. That is how many one-party consent states there are.)

What this means for your AI scribe: Legally, you do not need to ask the patient's permission before recording and processing through Scriber. However, you should still:

Inform the patient at the start of the visit that you are recording for documentation purposes.
Document their acknowledgment in the note.
If the patient declines, honor that request (even though you are not legally required to).

Transparency builds trust and reduces patient complaints.

All-party consent states (11 states)

You must obtain explicit consent from all parties before recording. Recording without consent is a crime in these states.

California, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, New Hampshire, Pennsylvania, South Carolina, Washington

(Note: Florida appears in both lists because Florida law is complex — it is technically one-party, but with exceptions that make it nearly all-party in some contexts. Safe approach: treat Florida as requiring consent.)

What this means for your AI scribe: You must:

Inform the patient, before the visit starts or before you press record, that the visit will be recorded.
Obtain explicit consent. This can be verbal ("Do you consent to recording?") documented in the note, or written consent on a form.
Do not record until you have consent.
If the patient declines, do not record. Have a manual documentation process ready.

California specifics: California (Penal Code § 632) is strict all-party consent. Recording a conversation without all parties' consent is a felony (up to 16 months imprisonment and/or $1,000 fine). Telehealth visits are "conversations" under California law.

If you are a clinician in California or treating California residents via telehealth, you must get explicit consent. Many practices use a standing consent form during intake: "I consent to recording of my telehealth visits for documentation purposes."

How to get and document consent

Option 1: Verbal consent documented in the note

At the start of the visit: "This visit will be recorded, and an AI transcription tool will generate a note from the recording. The recording will be deleted after the note is generated. Do you consent?"

Patient says "Yes."

In the note: "Patient consented to recording and AI documentation at the start of the visit."

This is legally sufficient in all states (including all-party consent states) because the patient has explicitly agreed.

Option 2: Written consent on intake form

During initial intake: Your intake form includes: "I consent to recording of my telehealth visits. The recording will be deleted after a note is generated. Yes / No"

Patient checks "Yes" and signs.

In each subsequent visit note: You do not need to re-document consent every time — the intake consent covers all future visits. However, many practices add: "Recording with prior consent; AI documentation enabled."

This is legally sufficient in all states.

Option 3: Doxy.me or platform-based consent

If your telehealth platform (Doxy.me, Zoom, Google Meet) has a consent flow that notifies patients that recording is happening, that satisfies the requirement:

Doxy.me consent prompt: Some Doxy.me configurations show patients a message at the start of the call: "This session is being recorded for documentation purposes." Patients can proceed or decline.

If the patient proceeds, consent is implied. If they decline, you do not record.

This is the most automated approach and is legally compliant.

Option 4: Electronic consent at the start of the visit

Some practices use a digital consent form sent via email or SMS before the visit: "Click here to consent to recording for this visit."

Patient clicks, consent is documented, and you can proceed with recording.

This is overkill for most practices, but some large organizations use it for compliance documentation.

What consent should include

Legally sufficient consent for telehealth recording with an AI scribe includes:

Notification that recording is happening. "This visit will be recorded."
Notice of AI processing. "The recording will be transcribed and used to generate a note."
Notice of audio deletion. "The recording will be deleted after the note is generated."
Affirmative consent. Patient must explicitly agree (yes/no, signed, verbally acknowledged).

Simple example: "Your visit is being recorded for documentation purposes. An AI tool will transcribe the recording and generate a clinical note. The recording will be deleted after the note is created. Do you consent? Yes / No"

This covers all the legal bases.

What if a patient declines consent?

If a patient declines recording (which they always have the right to do), you have options:

Option 1: Manual documentation Clinician takes notes by hand, types notes after the call, or uses a human scribe. Scriber is not used. Visit proceeds normally.

Option 2: Reschedule for in-person visit Some practices have in-person appointments, which can be recorded and scribed more easily (fewer consent complexities).

Option 3: Discuss the value Some practices explain why recording helps: "The note will be more accurate, and I can focus on you instead of typing. It helps me provide better care." Many patients consent once they understand the benefit.

If a patient still declines, honor the request. You cannot legally record without consent in all-party states, and even in one-party states, recording a patient who explicitly declines is ethically problematic.

Cross-state scenarios

If you are treating patients across multiple states, you must comply with the stricter standard:

Scenario: You are in Texas (one-party) treating a California patient (all-party).

California law applies because the patient is in California. You must obtain explicit consent, even though you are not in California.

Scenario: You are in Illinois (all-party) treating a Texas patient (one-party).

Illinois law applies because you are in Illinois. You must obtain explicit consent.

Scenario: You are in New York (one-party) treating a Washington patient (all-party).

Both apply — comply with the stricter standard (Washington, all-party). Obtain explicit consent.

Safe approach across state lines: Always obtain explicit consent, regardless of state. This covers all bases and is the most transparent approach.

Criminal vs. civil liability

Criminal liability: In all-party consent states, recording without consent is a crime. This means:

Potential arrest and prosecution.
Criminal fine and/or jail time.
Criminal record.

This is rare for healthcare violations, but it is the law. If you knowingly record a patient without consent in California and face prosecution, the penalties are serious.

Civil liability: In any state, a patient can sue you for recording without consent or violating privacy expectations. This means:

Damages (compensation to the patient).
Attorney fees.
Potential settlement requirements.

This is more common than criminal prosecution and can be costly even if you ultimately prevail.

Regulatory liability: State medical boards can discipline you for recording without consent:

License suspension or revocation.
Mandatory reporting to the Federation of State Medical Boards.
Loss of ability to practice.

This is the most serious consequence for clinicians because your license is your livelihood.

Documentation for your compliance file

Keep records showing you have a lawful recording and consent process:

Intake forms with signed consent for recording and AI processing.
Visit notes documenting consent at the start of calls.
Your practice policy on recording and AI scribe use.
Training records showing you trained staff on recording consent laws in their state.
Audit logs from your AI scribe vendor showing when recording started and when audio was deleted.

If a regulator or plaintiff ever asks "Did you have consent?", you have evidence.

Practical checklist for your practice

Identify all states where you treat patients. (If you are nationwide, you are in both one-party and all-party consent states.)
Assume all-party consent. Obtain explicit consent from all patients before recording, regardless of state. This is the safest approach.
Update your intake form to document consent for recording and AI processing.
Train clinicians on your state's laws and your consent process.
Document consent in every note or reference your standing consent form.
Have a manual documentation process ready for patients who decline recording.

Bottom line

Recording consent laws vary by state. In one-party consent states, you can legally record without the patient's knowledge. In all-party consent states, you must obtain explicit consent. The safest approach for any AI scribe deployment is to inform every patient that recording is happening and obtain affirmative consent — this is legal in all 50 states and builds patient trust.

If you treat patients in multiple states, assume the stricter standard (all-party consent) and always ask. Scriber makes this easy: inform the patient, get consent, and you are compliant.

Recording Consent Laws by State | Scriber Wiki