AI Scribe Doctor Visit Privacy: What Patients Should Know

More doctors and healthcare practices are using AI to help document medical visits. You may hear that an AI scribe is listening to your conversation and turning it into notes for your medical record.

For clinicians, that can mean less time typing and more time talking with patients. For patients, it can raise a different set of questions: What is being recorded? Who can see it? How long is it stored? And can you say no?

The answers depend on the AI scribe, the healthcare provider using it, and how the technology is configured.

Here's what to know about AI scribe doctor visit privacy, including how AI scribes work, what HIPAA covers, what can happen to recordings, and what you can ask before your visit.

TL;DR: Key Takeaways

• An AI scribe listens to a medical visit and helps create the clinical notes that go into your medical record.
• Some AI scribes are fully automated, while others involve a human reviewer or combine AI with traditional medical scribing.
• AI scribes used by covered healthcare providers generally have to follow HIPAA privacy and security requirements.
• You can ask what is being recorded, how the recording is used, who can access it, and whether you can opt out.
• Depending on the vendor and healthcare provider, recordings or transcripts may be stored, reviewed, or used to improve an AI model.
• Certain types of health information, including some mental health, substance use, HIV, and reproductive health information, may have additional privacy protections.
• If you're concerned about an AI scribe, ask your clinician about the specific tool before or at the beginning of your visit.

Have questions about how your health information is handled online? Try August AI's free symptom assessment to help think through your symptoms while keeping your information private. If you have severe symptoms or think you may be having a medical emergency, don't use online triage.

Call 911 or go to the nearest ER immediately. AI triage isn't a diagnosis. For non-emergency care that can be handled remotely, a US-licensed clinician can review your symptoms and prescribe treatment when clinically appropriate.

What Is an AI Scribe?

An AI scribe is a technology that listens to a medical visit and creates a written summary for the clinician.

The clinician can then review, edit, and add the information to the medical record.

There isn't just one type of AI scribe. Some are software programs that listen to a conversation and generate documentation automatically. Others use a hybrid approach, where a person reviews or edits the AI-generated note. Some healthcare practices also use trained human scribes who work alongside AI-assisted documentation tools.

The goal is fairly straightforward: reduce the amount of time clinicians spend typing notes.

AI scribes are increasingly being used in primary care, urgent care, and specialty practices. For patients, the main privacy question isn't simply whether AI is being used. It's what happens to the information the AI collects.

Are AI Scribes Covered by HIPAA?

In most cases, yes.

If an AI scribe is being used by a covered healthcare provider, such as a doctor's office, hospital, or health system, or by a vendor acting as its business associate, the service generally has to follow HIPAA privacy and security rules.

HIPAA includes requirements related to how protected health information is accessed, stored, transmitted, and protected.

The HIPAA Privacy Rule also allows covered healthcare providers to use and disclose protected health information for certain purposes, including treatment, payment, and healthcare operations, without getting a separate authorization for every use. AI-assisted documentation may fall within these activities depending on how the service is being used.

That doesn't mean every AI scribe can use your information however it wants.

There are still rules around access, security, disclosure, and handling protected health information. For more detail, see the HHS overview of the HIPAA Privacy Rule.

What Actually Happens to the Recording?

This is where things can get more complicated.

The answer depends on the specific AI scribe and the agreement between the vendor and healthcare practice.

Common possibilities include:

• The recording is deleted after the note is created. Some services keep the audio only long enough to generate and review the clinical note, then delete it.
• The recording is retained temporarily. A vendor may keep audio for quality assurance, editing, or clinical review before deleting it.
• A transcript becomes part of the medical record. In some cases, a transcript or portions of it may be attached to your medical record.
• The information is used to improve the AI model. Some vendors may use de-identified recordings or other data to train or improve their systems. Whether this happens depends on the vendor's practices and its agreement with the healthcare provider.

This is why asking, "Is this HIPAA compliant?" may not give you the complete answer you're looking for.

You may also want to know whether the recording is retained, whether it's used for model improvement, who can access it, and whether the audio itself becomes part of your medical record.

Can You Say No to an AI Scribe?

Usually, yes.

If your clinician plans to use an AI scribe, you can generally ask not to have it used. Some practices ask for verbal consent at the beginning of the visit. Others may use a written consent form or provide information about the technology as part of the intake process.

If you decline, your clinician can still document the visit using traditional methods, such as typing notes during or after the appointment.

If you have concerns, it's best to raise them before the conversation gets underway. You can simply ask what technology is being used and whether you have the option to decline.

What About Sensitive Topics?

Not all health information raises the same privacy considerations.

Some types of information have additional protections or specific rules that may apply. This can include certain mental health notes, substance use disorder records, HIV information, and reproductive health information in some circumstances.

If you know that your visit will involve sensitive information, ask your clinician how the AI scribe handles those parts of the conversation.

Some systems may have features designed to handle sensitive content. In other cases, a clinician may choose to document certain portions of the visit manually.

You can also ask your clinician to turn off the scribe for part of the conversation if you would prefer that information not be recorded.

What Questions Should You Ask Your Clinician?

You don't need to be an expert in AI or privacy law to ask reasonable questions.

Before the visit or when the appointment begins, you can ask:

• What AI scribe or documentation tool are you using?
• Is the recording deleted after the note is created?
• How long is the recording retained?
• Is the recording or transcript used to train or improve the AI model?
• Who can access the recording or transcript?
• What happens if I decline the AI scribe?
• How do you handle sensitive information?
• What happens if there is a data breach or unauthorized access?

Your clinician may not know every detail about the vendor's data practices. That's okay. They may be able to check with the practice's compliance team or the vendor.

The point isn't to make the conversation complicated. It's to understand what you're agreeing to before your health information is processed by another system.

What About Telehealth and AI Scribes?

AI scribes aren't limited to in-person appointments.

They can also be used during telehealth visits. A video appointment can be transcribed in much the same way as an in-person conversation.

If you're having a telehealth visit, ask whether an AI scribe is being used, whether the video or audio itself is recorded, how long recordings are retained, and whether transcripts are added to your medical record.

The same basic privacy questions apply whether you're sitting in a doctor's office or talking to a clinician through a screen.

Legitimate telehealth services should be transparent about how they handle patient information. If you're not sure how a service works, ask before booking. For more on evaluating a telehealth provider, see our guide on is telehealth legit? How to check a service before you pay.

Third-Party Tracking and Health Information

AI scribes aren't the only technology that can affect your health privacy.

Healthcare websites and telehealth platforms may also use analytics tools, tracking pixels, and other technologies that collect information about how people use their websites.

The FTC and HHS have warned healthcare providers about potential privacy risks associated with online tracking technologies.

This is a separate issue from AI scribe privacy, but it's worth keeping in mind.

When you're using a healthcare website, patient portal, or telehealth service, don't assume that every piece of technology involved is doing the same thing. If privacy is important to you, review the service's privacy information and ask questions about how your data is handled.

Conclusion

AI scribes can make medical documentation easier for clinicians and may give them more time to focus on the patient instead of typing.

But AI scribe doctor visit privacy is a reasonable thing to think about before your appointment.

HIPAA generally applies when an AI scribe is used by a covered healthcare provider or its business associate, but that doesn't tell you everything about how a specific recording is handled. Vendors may differ in how long they retain recordings, whether transcripts become part of the medical record, and whether data is used to improve their systems.

If you're uncomfortable with an AI scribe, ask your clinician what is being recorded, who can access it, how long it is stored, and whether you can decline.

You don't need to understand every technical detail. A few straightforward questions can give you a much clearer picture of how your health information is being handled.