State-by-State Telehealth Recording Laws: What AI Scribes Need to Know
State-by-State Telehealth Recording Laws: What AI Scribes Need to Know
The mechanics of an AI scribe are straightforward: you record the session, the recording is transcribed, and the AI generates a clinical note. The legal framework around that recording is not straightforward at all.
Audio recording of a clinical session is governed by state wiretapping and eavesdropping laws — not HIPAA. HIPAA governs what happens to the data after it is recorded; state law governs whether the recording is legal in the first place. The distinction matters because wiretapping violations can carry criminal penalties, and because the rules differ significantly by state and become more complicated when your patient is physically located in a different state than you.
This post covers what you need to know before recording telehealth sessions for AI transcription: the consent framework, the states where all-party consent is required, the telehealth-specific complications, and the correct consent language for your intake forms.
One-Party vs. All-Party Consent: The Core Distinction
Every state's wiretapping law falls into one of two categories:
One-party consent: Recording is lawful as long as at least one party to the conversation consents. In a two-person clinical session, you are a party to the conversation. Your consent alone is sufficient — the patient's consent is not required for the recording to be legal. You should still inform patients and obtain consent as a matter of clinical ethics and your professional ethics code, but the recording is not illegal without patient consent.
All-party consent (two-party consent): All parties to the conversation must consent before recording. In a clinical session, this means both you and the patient must actively consent. Recording without the patient's explicit consent is a violation of state wiretapping law, even if you are in a different state.
The "two-party consent" terminology is slightly misleading for group or family sessions — it means all parties present, not exactly two. A couples therapy session with two clients requires consent from both.
States Requiring All-Party Consent
As of early 2026, the following states require all-party consent for recording of private conversations. This list reflects general-purpose wiretapping statutes; always verify against current state law and consult your attorney for jurisdiction-specific guidance.
| State | Consent Standard | Notes |
|---|---|---|
| California | All-party | Penal Code § 632; penalties include civil damages and criminal charges |
| Connecticut | All-party | CGS § 52-570d |
| Delaware | All-party | Del. Code tit. 11, § 2402 |
| Florida | All-party | Fla. Stat. § 934.03 |
| Illinois | All-party | 720 ILCS 5/14-2 |
| Maryland | All-party | Md. Code, Courts § 10-402 |
| Massachusetts | All-party | M.G.L. c. 272, § 99 |
| Michigan | All-party | MCL 750.539c |
| Montana | All-party | MCA § 45-8-213 |
| Nevada | All-party | NRS 200.620 |
| New Hampshire | All-party | NH RSA 570-A:2 |
| Oregon | All-party | ORS 165.540 |
| Pennsylvania | All-party | 18 Pa. Cons. Stat. § 5703 |
| Washington | All-party | RCW 9.73.030 |
All remaining states and the District of Columbia generally require only one-party consent under their wiretapping statutes, though this changes periodically and some states have nuanced exceptions.
California deserves specific attention. California's law applies when either party to the conversation is in California — not just when the recording device is there. If your patient is physically located in California during a telehealth session, even if you are in a one-party-consent state, California's all-party consent requirement may apply.
The Telehealth Problem: Which State's Law Applies?
Telehealth creates a jurisdiction problem that in-person practice does not have. When you are physically in one state and your patient is physically in another, which state's recording law controls?
Courts have not uniformly resolved this question, and the analysis varies by jurisdiction. The safest approach, adopted by most telehealth compliance attorneys, is to apply the more restrictive standard — meaning, if either the clinician or the patient is in an all-party consent state, obtain all-party consent before recording.
For clinicians who see patients across multiple states — a situation that became more common after the interstate telehealth licensing flexibility that followed the public health emergency — the correct approach is to know the location of your patients at time of service and apply the appropriate consent standard. Most modern telehealth platforms capture patient location at login; AI scribe workflows should build patient location confirmation into the session opening.
A practical policy for multi-state telehealth practice: obtain affirmative verbal consent to record from the patient at the start of every telehealth session, regardless of state. This creates a uniform workflow, eliminates the state-law analysis at session time, and is documented in the recording itself. It is also good clinical practice.
What Consent Must Cover for AI Transcription
General consent to record a clinical session does not automatically cover AI transcription and AI note generation. Patients consenting to recording reasonably assume the recording will be reviewed by their clinician — not processed through a third-party cloud AI system.
A complete AI scribe consent disclosure should cover:
- That the session will be audio-recorded (or audio-video recorded) for documentation purposes
- That the recording will be processed by an AI transcription service to produce a written transcript
- That the transcript will be used by an AI system to generate a clinical note draft
- The identity of the AI service provider or at minimum that it is a HIPAA-covered third-party service
- How long the recording and transcript are retained (and that they are deleted after note generation, if that is your policy)
- The patient's right to decline recording and the alternative documentation process if they decline
Item 5 is where many AI scribe vendors differ significantly. Some retain audio for quality improvement or model training — a practice that requires specific, affirmative patient disclosure to be defensible. If your AI scribe vendor retains audio, that retention must be in your consent documentation. If they do not retain audio, say so clearly — it is a meaningful reassurance for patients with privacy concerns.
Intake Form Language for AI Scribe Consent
The following is sample language for an informed consent addendum covering AI-assisted documentation. Have your attorney or professional liability carrier review it for your state and practice context.
SAMPLE CONSENT LANGUAGE — NOT LEGAL ADVICE
Sessions at this practice may be audio-recorded solely for clinical documentation purposes. Recordings are processed by a HIPAA-compliant AI service, which produces a written transcript and draft clinical note. The clinician reviews and approves all AI-generated notes before they enter your medical record. The recording is deleted after note finalization and is never used for AI model training. You have the right to decline recording; documentation will be completed by alternative means without any impact on your care.
End of sample language
Key elements: purpose limited to documentation, human review before the note enters the record, data retention policy stated, and the patient's right to decline preserved.
For patients who decline recording, have a documented alternative process — note-taking during session, post-session dictation, or manual documentation. The alternative should be documented in the chart, and the clinician should not pressure patients to consent to recording.
Special Situations: Group Therapy, Families, and Minors
Group therapy. Recording a group therapy session involves every group member. In an all-party consent state, all members must consent. In a one-party consent state, your consent as the facilitating clinician is typically sufficient, but all-party consent is advisable practice. Group member consent to recording should be included in the group participation agreement, not obtained verbally at session start each time.
Couples and family therapy. Each adult participant must consent to recording in all-party consent states. In a couple's therapy session, both partners must consent. Document both consents. If one partner declines recording and the other consents, the correct response is to proceed without recording, not to record with only one party's consent. (See also: couples therapy and multi-speaker AI transcription for the clinical diarization considerations.)
Minors. Consent to record a minor's therapy session implicates both the minor's assent and the parent or legal guardian's consent. State laws on minor consent for mental health treatment are complex and vary — a minor who has the legal right to consent to their own treatment in your state may or may not have the right to consent to recording without parental involvement. Consult your state's minor treatment consent statute and your professional association's guidance before recording sessions with minors.
Court-ordered treatment. Clients in court-ordered treatment have particular sensitivity to recording. Even where recording is legally permissible, consider the clinical implications of the therapeutic relationship before implementing AI scribe recording in these cases.
Verifying Current Law in Your State
State wiretapping laws change. The table above reflects early 2026 statutory positions, but legislative activity is ongoing. Before relying on this guide for compliance purposes, verify the current statute in your state through your state bar or a licensed attorney, and check your professional liability carrier's state-by-state guidance — carriers update this more frequently than most secondary sources. The National Conference of State Legislatures (ncsl.org) maintains a searchable legislative database current to the present session.
If you see patients in multiple states, verify the recording consent law for each state where patients are physically located during sessions. Check your state licensing board's guidance on AI-assisted documentation — some boards have published recording-specific guidance beyond the wiretapping statute.
The Clinical Case for Patient-Informed Consent Regardless of Law
Even in one-party consent states, there is a clinical case for informed consent to AI scribe recording that goes beyond legal compliance.
Patients who discover that their sessions are being recorded and transcribed by an AI — without prior disclosure — experience a significant rupture in therapeutic trust. Behavioral health treatment depends on a belief that the session is confidential, between the clinician and patient, and that information will be used as the patient understands it will be used. Surprise disclosure of AI transcription, even after the fact, undermines that trust in a way that is difficult to repair.
The disclosure conversation, done correctly, takes 2–3 minutes at the start of the first session. Most patients are not troubled by it. Some have questions — about who has access, whether the AI is "listening," whether the recording is stored. Clear answers to those questions, grounded in your vendor's actual data handling practices, satisfy most patients completely.
Patients who are troubled by AI recording, even with complete disclosure, have that right. The right to decline recording should be genuine, not a formality.
For more on HIPAA and patient disclosure requirements for AI-assisted tools, see HIPAA compliance for AI documentation and the AI scribe wiki on patient consent. For state licensing board guidance on telehealth practice, consult your board directly — this is one area where published guidance varies substantially by state and is updated more frequently than legal treatises.
Use Scriber with confidence across telehealth and in-person sessions. Review Scriber's data handling and consent framework or start a free trial with session recording that deletes audio after note generation.