Patient consent for AI scribes: what to say, what to document, and how recording laws fit

By Selam Koch, PMHNP-BC, founder of OneStep Scribe and practicing psychiatric nurse practitioner. Published August 2026.

An AI scribe records the session. That fact changes the visit before the first symptom is discussed: the patient is now being recorded in what may be the most private conversation they have all year. The technology is usually the easy part; the real work is human: what to say to the patient, what to write in the chart, and what to do when someone says no. This guide covers that work for prescribers and therapists. It is not legal advice. Recording consent is governed by federal and state law: federal law sets a one-party baseline, states can and do impose stricter rules, and nothing here substitutes for an attorney who knows yours. What it offers is a workable pattern: a plain-language way to introduce the tool, documentation language for agreement and refusal, and guidance for the complicated cases of minors, telehealth, and rooms holding more than one patient.

Why the consent conversation matters clinically

Psychiatric care runs on disclosure. Patients tell you about suicidal thoughts, substance use, intrusive memories, and the parts of their marriage nobody else hears, and they do it because the room feels safe. A recording device changes the room. That is not a reason to avoid the technology. It is a reason to be the one who brings it up. A clinician who names the tool, explains it in a sentence or two, and offers a genuine way out is telling the patient: I tell you things before you have to ask. That strengthens the alliance. The opposite discovery, that sessions were recorded and nobody said so, can end a treatment relationship outright, and in psychotherapy the damage tends to outlast any apology.

The stakes rise as the work gets more intimate, and certain presentations raise them further. Patients with trauma histories may have specific reactions to being recorded. Patients with paranoid ideation may need the mechanics explained concretely, or may need the tool off entirely. Asking first is how you find out which patient is in front of you. It costs about thirty seconds of one visit, the cheapest alliance protection available.

The legal layer: one-party and all-party recording laws

Recording consent laws mostly descend from wiretap and eavesdropping statutes written decades before anyone imagined a progress note drafted from session audio, and they still govern. Most states follow one of two broad models, though a few have mixed or context-dependent rules that fit neither bucket cleanly. In a one-party consent state, a conversation may lawfully be recorded when one participant consents, and the clinician is a participant, so in many of these states the clinician's own consent can satisfy the wiretap statute. But some states layer healthcare-specific privacy rules on top of the wiretap rule, and the analysis can differ when a third-party service is the one capturing the audio, so this is one of the questions to put to counsel. In an all-party consent state, everyone being recorded must consent, which in a clinical session means the patient, and in a family session everyone in the room.

This guide deliberately includes no state-by-state table. Those tables age badly, statutes carry definitions and exceptions a table flattens, and a policy built on a chart from the internet is built on nothing. Verify your state's current law with an attorney, and if you practice across state lines, verify each one.

More important, do not let a one-party statute set your practice standard. Lawful and clinically sound are different tests, telehealth can pull another state's law into your visit, and the rule that survives every complication is simple: the patient always knows, and the patient can always say no.

One distinction worth keeping straight: recording consent law is separate from HIPAA. HIPAA governs what happens to identifiable health information once it exists, and it is why your scribe vendor should sign a business associate agreement before any session is processed. The state statute governs whether the capture itself is lawful. Clearing one layer does not clear the other, and the consent conversation sits on top of both.

What to say: a pattern, not a legal script

The introduction works best short, in your own voice, and before the recorder starts. It needs to cover three things: what the tool does, what happens to the recording, and that the patient can decline without any effect on their care. Everything else is detail the patient can ask for.

A plain-language introduction pattern

"Before we start, I want to mention that I use a documentation tool that listens during our visit and drafts my note afterward, so I can focus on you instead of typing. The recording is used only to create the note and is handled under the same privacy rules as the rest of your chart. If you would rather I not use it, today or ever, just tell me. I will take notes the way I always have, and it changes nothing about your care. Are you comfortable with that?"

Why this shape works: it covers the three required elements in four sentences. What the tool does, stated so a patient could repeat it back. What happens to the recording, without a privacy lecture. And a real exit, offered before the patient has to ask for one. It is a pattern, not a script and not legal language. Say it in your own words, and run your practice's version past your attorney before it becomes policy. One caution on the middle sentence: it is only true if your vendor has signed a BAA and does not retain audio for other purposes, such as model training. Verify how your specific vendor stores, retains, and deletes audio before you use any sentence like it, and adjust the line to match what your vendor actually does.

Be ready for follow-up questions, because engaged patients ask them. Where does the audio go? How long is it kept? You should know the honest answers for the tool you actually use, and "I don't know, let me find out" is a fine answer delivered once. Do not oversell. The tool drafts the note and you review every word before signing; say that. Promising that the AI is always accurate, or that nothing could ever go wrong with the data, invites exactly the trust collapse the conversation exists to prevent.

Documenting consent in the note

The chart should show that the discussion happened, what the patient decided, and, after a decline, how the note was produced instead. One or two sentences carries all of it.

Documentation lines that do the job

Patient agreed: "Discussed the use of an AI documentation assistant that records the session audio to draft the clinical note. Patient had the opportunity to ask questions and agreed to its use."

Patient declined: "Discussed the use of an AI documentation assistant. Patient preferred that the session not be recorded. The tool was not used, and this note was completed by dictation after the visit."

If you work from a structured template, keep the recording consent line separate from the medication consent your note already carries. In OneStep Scribe's own note structure, for example, the INFORMED CONSENT section near the plan documents medication consent: the patient agreed to continue or start a medication after a discussion of risks, benefits, side effects, and alternatives. That line has a specific job, and folding recording consent into it muddies both. Give the scribe discussion its own sentence wherever your template has room.

Then there is frequency. A common approach is to treat scribe consent as standing consent: discussed once, documented once, presumed to continue until revoked, though some institutions require periodic reconfirmation by policy. Standing consent is a reasonable default; re-litigating consent at every encounter would be strange for the patient and useless for the chart. But standing consent should not mean a line from two years ago silently covering everything since. Refresh it briefly after a long gap, at the start of a new episode of care, when the technology changes in a way the patient would notice, and when someone new joins the session. Each refresh is one line in the note.

When the patient declines

Some patients will say no, and given what some are working on, some should. A decline handled well can itself build trust. The response has three parts. First, turn it off, visibly and without commentary. Second, document the visit the way you did before these tools existed: dictate after the session, or write the note yourself. From the patient's side the visit proceeds identically. Third, record the decline in neutral language. "Patient preferred that the session not be recorded" is complete. "Patient refused the scribe despite reassurance" is editorializing, and it teaches whoever reads the chart to see the patient as difficult for exercising an option you offered.

Do not renegotiate at every visit. Patients remember what they told you, and repeated asking reads as pressure regardless of intent. Leave the door open passively; some patients revisit the question on their own once trust is established, and the note records the change when they do.

Special situations

Minors and guardians

With minors, the general pattern is guardian consent plus the minor's assent: the guardian agrees, and the young person gets an age-appropriate explanation and a genuine chance to object. An adolescent who does not want a session recorded has told you something worth honoring, whatever the guardian signed. State law adds a layer, because many states allow minors to consent to certain mental health services on their own at certain ages, and where the minor is the one consenting to treatment, the minor's agreement to recording may be the one that matters. That is a question for counsel who knows your state. And if the guardian steps out and part of the session is the adolescent alone, make sure the consent conversation covered that portion too.

When capacity is in doubt

Consent to recording, like any consent, requires decision-making capacity: the patient can understand what the tool does, appreciate that it applies to them, and express a choice. Acute psychosis, mania, dementia, intellectual disability, and involuntary or inpatient settings can all impair that capacity, sometimes temporarily. When capacity is impaired, involve the guardian or authorized decision-maker as you would for any other treatment decision, and reassess as the patient's state changes, because capacity lost in an acute episode often returns. When in doubt, leave the recorder off. A manually written note costs a few minutes; recording a patient who could not meaningfully agree to it costs more.

Telehealth

Telehealth complicates the legal question in one specific way: the patient is somewhere else, possibly another state, and recording statutes can attach to where the patient sits rather than where you do. A clinician in a one-party state seeing a patient in an all-party state should not assume the home statute travels. The safe pattern requires no legal analysis at the point of care: obtain explicit consent from everyone on the call for every recorded telehealth session, and confirm and document the patient's physical location at the start, which telehealth documentation standards expect regardless. The second wrinkle is people off camera. A partner in the kitchen or a parent in the doorway is being recorded too the moment they speak. Asking who else is present serves clinical purposes anyway and keeps the recording honest.

Couples, family, and group settings

In any multi-person session, treat consent as all-party no matter what your state's statute says, because clinically it is. Every participant gets the explanation, every participant can decline, and one decline means the recorder stays off for that session. Group therapy raises the hardest version: members disclose in front of each other on an understanding of confidentiality that a visible recording device strains, and consent from eight people is eight separate conversations. Many practices simply do not use the scribe in group settings, a defensible policy and an easy one to write down.

Written or verbal?

Whether scribe consent must be written is mostly a policy question rather than a settled legal rule, and the answer can vary by state, payer, and institution. A common and sensible pattern: add a paragraph about the AI scribe to intake paperwork so a signed acknowledgment exists, then confirm verbally at the first recorded visit and document that confirmation in the note. The signature creates the durable record; the conversation does the clinical work. A form without the conversation misses the point, and a conversation without a record leaves you explaining an empty chart later. Ask your attorney which combination your situation requires, and revisit the paperwork when you change vendors or the technology changes materially.

The one bright line: never record a patient without their knowledge. No one-party statute makes covert recording of a clinical session sound practice, no documentation benefit outweighs what discovery does to the treatment relationship, and no AI scribe, mine included, should ever run behind an unaware patient's back. If the consent conversation has not happened, the recorder does not start.

Quick reference: the consent moments

Moment	What to do	What to write
First recorded visit	Introduce the tool in plain language and invite questions	That the discussion happened and what the patient decided
Ongoing visits	Rely on standing consent; stay alert for hesitation	Nothing extra under most policies
New episode of care	Revisit consent briefly after a long gap or a new treatment course	One line noting consent was reconfirmed
Patient declines	Proceed without recording; dictate or write the note manually	The decline in neutral language and the documentation method used
Minor patient	Guardian consent plus the minor's assent; check state minor consent laws	Who consented and who assented
Telehealth	Confirm the patient's location; assume the stricter state's standard	Location and consent, both expected in telehealth notes anyway
Couples, family, group	Every participant consents or the recorder stays off	Whose consent was obtained, or that the tool was not used

Frequently asked questions

Do I need patient consent for an AI scribe in a one-party consent state?

Ask anyway. One-party consent laws describe the minimum for lawful recording, not good clinical practice. A patient who discovers mid-treatment that sessions were recorded without their knowledge has a reason to distrust everything else you have told them, and telehealth can pull a different state's law into the visit. Whatever a statute technically permits, covert recording of a clinical encounter is inconsistent with the transparency professional ethics require; no recognized clinical ethics guidance endorses it. Verify your own state's law with counsel, then obtain consent regardless.

Does consent for an AI scribe need to be written, or is verbal consent enough?

In most cases this is a practice policy question rather than a settled legal rule, and requirements can differ by state and by payer or institutional policy. Many practices add AI scribe consent to their intake paperwork so a signed acknowledgment exists, then confirm verbally at the first recorded visit and document that confirmation in the note. Ask your attorney or compliance professional which combination your state and your contracts expect.

Do I have to re-ask for consent at every visit?

Many practices treat AI scribe consent as standing consent: obtained once, documented, and presumed to continue until the patient revokes it, though some institutions require periodic reconfirmation by policy. A brief refresh is still wise when meaningful time has passed, when a new episode of care begins, when the technology changes in a way the patient would care about, or when a new person joins the session. A one-line mention in the note keeps the record current without turning every visit into a consent ceremony.

What should I do if a patient declines the AI scribe?

Turn it off and carry on. Document the visit by dictation after the session or by writing the note manually, exactly as you did before adopting the tool. Record the decline in the note in neutral language, note what documentation method you used instead, and do not revisit the question at every appointment. A decline is a preference to respect, not a symptom to chart, and pressuring a patient to accept recording damages the alliance the tool is supposed to protect.

Who consents to an AI scribe for a minor?

Generally the parent or guardian consents and the minor gives assent, but state law complicates this. Many states let minors consent to some mental health care on their own at certain ages, and in those situations it may be the minor whose agreement matters. Explain the tool to both the guardian and the young person in words each can understand, and ask counsel how your state's minor consent rules apply to recording.

How does telehealth change recording consent?

The patient's physical location during the visit may determine which state's recording law applies, in addition to your own. A clinician in a one-party consent state seeing a patient sitting in an all-party consent state should assume the stricter standard governs. The practical answer is to obtain explicit consent from everyone on the call for every recorded telehealth session, and to confirm and document the patient's location at the start of the visit, which telehealth documentation standards expect anyway.

Is AI scribe consent the same thing as HIPAA authorization?

No. HIPAA governs how identifiable health information is used and disclosed, and it is the reason your AI scribe vendor should sign a business associate agreement. A formal HIPAA authorization form is generally not what a scribe requires; use for treatment documentation typically falls under HIPAA's treatment and operations permissions, with the vendor covered by the BAA, and that HIPAA layer is separate from state recording law and from the consent conversation. State recording laws govern whether the audio capture itself is lawful, and the consent conversation serves the clinical relationship on top of both. Satisfying one layer does not satisfy the others, so treat the BAA, the recording law, and the patient conversation as three separate requirements.

Related guides

OneStep Scribe records only when you start it.

OneStep Scribe is an AI scribe built for psychiatric clinicians, founded by a practicing PMHNP. It drafts the complete note for your review and signature, and when a patient declines recording, you can dictate after the session and receive the same structured note. Clinician accounts are NPI-verified.

Start a 14-day free trial

This article is educational and reflects one clinician's understanding of consent practices and recording laws at the time of writing. It is not legal advice, and it is not billing or payer-specific advice; recording consent laws vary by state and change over time, so consult a qualified attorney or compliance professional before setting policy for your practice. Nothing here guarantees any legal, payer, or audit outcome. CPT is a registered trademark of the American Medical Association.