Estimated reading time: 7 minutes · Last updated:
Ambient AI scribes, tools that record a doctor's visit and turn the audio into a draft clinical note, are now governed by state rules that federal privacy law does not supply. Louisiana requires a spoken disclosure before any recording begins. Rhode Island requires patient notice and a clinician review of the note. California requires a disclaimer on AI-generated clinical messages that no licensed provider has read. HIPAA carries no patient-notice requirement written specifically for AI scribes. The laws arrive as use spreads quickly. Fortune reported that Abridge supports upward of 100 million clinical conversations a year, and Cleveland Clinic logged more than 3.5 million encounters on Ambience Healthcare's scribe in its first year.
Key takeaways
- Louisiana: Louisiana's Act 649, in force since 1 August, makes a licensed professional say aloud that AI transcription is in use before recording, and a professional who skips it can face licensing board discipline.
- Rhode Island: Rhode Island's Use of Artificial Intelligence by Healthcare Providers Notification Act took effect on passage in June, requiring patient notice and an accuracy review of AI-written notes, with no penalty named.
- California: California's AB 3030, in force since 1 January 2025, targets AI-generated patient messages rather than visit recordings, requiring a disclaimer unless a licensed provider read the message first.
- HIPAA gap: HIPAA lets hospitals use patient information for treatment without authorization and binds transcription vendors through business associate agreements, but sets no patient-notice rule for AI scribes.
- Adoption: Doximity's survey of 3,151 physicians found ambient listening and AI scribe use rose from 20% to 29%, while 47% said their institution's AI decision-making is still evolving.
Table of contents
- Key takeaways
- How Fast AI Scribes Moved Into the Exam Room
- Why Doctors Adopted Scribes Before Hospitals Wrote Policies
- What Louisiana and Rhode Island Require Before the Recording Starts
- Why HIPAA Leaves the Notice Duty to State Law
- Will State Scribe Rules Hold Up
- What to be careful about
- Frequently asked questions
How Fast AI Scribes Moved Into the Exam Room
An ambient AI scribe starts with a microphone in the exam room. It captures the exchange between doctor and patient, builds a draft note from the audio and passes that draft to the physician, who checks it before it is filed in the medical record. The doctor no longer types through the appointment. In return, every visit becomes a recording.
The tools now operate at large scale. Fortune reported in June 2026 that Abridge runs in more than 300 health systems and handles upward of 100 million clinical conversations annually. Microsoft said in March 2026 that its Dragon Copilot scribe is part of the daily routine for more than 100,000 clinicians. Among hospitals on Epic Systems' electronic health record, nearly two-thirds now use ambient AI, as first reported by PYMNTS in February 2026.
Cleveland Clinic shows how quickly one health system can switch over. Its clinical leaders wrote in npj Health Systems that the organisation moved more than 4,000 of its outpatient clinicians to the Ambience Healthcare tool over about four months beginning in March 2025. Twelve months on, upward of 4,800 clinicians had used it across more than 3.5 million encounters.
Why Doctors Adopted Scribes Before Hospitals Wrote Policies
The pull is paperwork. Doximity, the professional network for U.S. physicians, polled 3,151 doctors in two waves: March and April 2025, then November 2025 through January 2026. Between the first wave and the second, the share using ambient listening or AI scribes climbed from 20% to 29%. Three-quarters of the physicians who use AI told Doximity it has already reduced their administrative work.
Institutional governance has not kept pace. In the same survey, 47% of physicians described the process for making AI decisions at their institution as "still evolving." Just 8% called it clear.
That mismatch explains why legislators stepped in. Clinicians are adopting the tools because they save time, while many hospitals are still deciding who approves them and on what terms. When internal rules are unsettled, the question of whether a patient is told about the microphone can be left to individual habit. Louisiana and Rhode Island have now answered it in statute.
What Louisiana and Rhode Island Require Before the Recording Starts
Louisiana's Act 649 took effect on 1 August. Before any part of a visit is recorded for AI transcription, a licensed healthcare professional must tell the patient aloud that a recording device, software or service is being used. A professional who fails to give that disclosure can be disciplined by their licensing board, which gives the rule an enforcement route.
Rhode Island went further on process but lighter on consequences. Its Use of Artificial Intelligence by Healthcare Providers Notification Act requires any provider using AI to document a visit to notify the patient, then check the AI-drafted note for accuracy afterward. The law took effect on passage in June and names no penalty. Its sponsor, State Sen. Pamela Lauria, a nurse practitioner, said patients "want as much transparency as possible."
Both statutes are drafted around the scribe itself rather than AI in general. Rhode Island's text applies to AI used "to document in-person or telehealth visits." Louisiana's reaches any recording device, software or service capturing an appointment "to be transcribed by artificial intelligence."
Why HIPAA Leaves the Notice Duty to State Law
The Health Insurance Portability and Accountability Act, or HIPAA, sets the rules for how providers and their technology vendors handle protected patient information. It does not contain a patient-notification requirement aimed at AI scribes. Its Privacy Rule allows a hospital to use patient information for treatment without asking the patient's permission.
The Department of Health and Human Services names a transcription vendor as the type of contractor that must sign a business associate agreement. That contract holds the vendor to the same privacy obligations as the hospital. So HIPAA governs what happens to the note once it exists, but says nothing about announcing the microphone. The obligation to tell a patient that recording is under way comes from state laws such as those in Louisiana and Rhode Island. BakerHostetler observed in its 2026 Data Security Incident Response Report that state recording laws can stack per-visit notice and consent obligations on top of HIPAA.
California took a different route. AB 3030, in force since 1 January 2025, requires a disclaimer on any message about a patient's clinical information produced by generative AI, unless a licensed provider read it first. It regulates the outgoing message, not the recording.
| State | Law | In effect | What it requires | Penalty |
|---|---|---|---|---|
| Louisiana | Act 649 | 1 August | Verbal disclosure before recording for AI transcription | Licensing board discipline |
| Rhode Island | Use of Artificial Intelligence by Healthcare Providers Notification Act | On passage in June | Patient notice and accuracy review of AI note | None named |
| California | AB 3030 | 1 January 2025 | Disclaimer on unreviewed generative AI clinical messages | Not stated |
Will State Scribe Rules Hold Up
The case for
- Louisiana ties its disclosure rule to licensing board discipline, giving it a working enforcement mechanism.
- Rhode Island's required accuracy review puts a clinician check on every AI-written note before it is relied on.
- Patients already using digital tools may accept a spoken disclosure without much friction, according to PYMNTS Intelligence survey data on digital health use.
The case against
- Rhode Island names no penalty, so compliance depends on providers acting voluntarily.
- HIPAA sets no AI-scribe notice rule, leaving patients in states without such laws dependent on hospital policy.
- With 47% of physicians in the Doximity survey describing institutional AI decision-making as still evolving, internal policies may lag state requirements.
What to be careful about
- Health systems operating across several states face differing obligations: a spoken disclosure in Louisiana, notice plus review in Rhode Island and a message disclaimer in California.
- Clinicians in Louisiana who omit the verbal disclosure risk discipline from their licensing board.
- Rhode Island's review requirement adds a documentation step that could erode some of the time savings physicians cite.
- State recording laws can add per-visit consent duties beyond HIPAA, which BakerHostetler flagged as an exposure for providers.
The bottom line
Patients may take the new disclosures in stride. A PYMNTS Intelligence study built on an April 2025 survey of 2,021 U.S. consumers found more than 6 in 10 had used at least one digital tool to manage their healthcare in the past year, and 36% had used a provider portal. People accustomed to apps and portals already accept software between them and their doctor. What Louisiana and Rhode Island add is a duty to say, out loud, when that software is also listening. The open question is coverage. Three states have now written rules, each different, while HIPAA stays silent on notice. Until more legislatures act, whether a patient hears about the microphone depends largely on where the exam room is.
What to watch
- Watch for the first disciplinary action by a Louisiana licensing board under Act 649's disclosure rule; no date has been set for any such case.
- Watch whether Rhode Island lawmakers add a penalty to the Use of Artificial Intelligence by Healthcare Providers Notification Act, which currently names none; no date has been set.
- Watch for further states drafting scribe-specific disclosure laws modelled on Louisiana or Rhode Island; none has been announced.
Frequently asked questions
Is an AI scribe company covered by HIPAA?
Yes, in the sense that HHS lists a transcription vendor as the kind of contractor that must sign a business associate agreement. That agreement binds the vendor to the same privacy rules as the hospital using it.
What happens if a Louisiana doctor records a visit without telling the patient?
Under Act 649, a licensed healthcare professional who skips the spoken disclosure before AI transcription can face discipline from their licensing board. The law took effect on 1 August.
Does California's AB 3030 require consent to record a visit with AI?
No. AB 3030, in force since 1 January 2025, requires a disclaimer on generative AI messages about a patient's clinical information unless a licensed provider read them first. It addresses the message, not the recording.
Related reading
