---
title: "Advise a health practice on an ambient AI scribe that handles patient information"
url: "https://ailawframework.com/practice/health-and-medical-law/advise-a-health-practitioner-on-professional-obligations-when-using-ai-s/united-states"
type: "task_jurisdiction_version"
site: "AI Law Framework"
id: "A32-B7-1-US"
practice_area: "Health & Medical Law"
tier: "yellow"
lawyer_review: "required"
jurisdictions: ["US"]
last_reviewed: "2026-10-22"
---

# Advise a health practice on an ambient AI scribe that handles patient information

> Extract the vendor's described data flow: what is recorded, where it is stored, whether the vendor trains on it, and whether a business-associate contract is in the file. Do not classify the product as a medical device.

Canonical page: https://ailawframework.com/practice/health-and-medical-law/advise-a-health-practitioner-on-professional-obligations-when-using-ai-s/united-states  
Last reviewed: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Health & Medical Law](https://ailawframework.com/practice/health-and-medical-law.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | Extract the vendor's described data flow: what is recorded, where it is stored, whether the vendor trains on it, and whether a business-associate contract is in the file. Do not classify the product as a medical device. |
| What the lawyer must review | If the practice is a covered entity, § 164.502(a) limits use and disclosure of protected health information. A business associate may use or disclose it only as the § 164.504(e) contract permits or as law requires, and not in a way that would violate the subpart if the covered entity did it. The HHS page says an entity that is not a covered entity or business associate need not comply, and points to the § 160.103 definitions. You read those definitions and the contract before advising. Your own advice is governed by Formal Opinion 512 and Rules 1.1 and 1.6. This check did not open an FDA device classification for scribes. |
| Written for | United States |
| Applies to | [Advise a health practitioner on professional obligations when using AI scribes](https://ailawframework.com/practice/health-and-medical-law/advise-a-health-practitioner-on-professional-obligations-when-using-ai-s.md) |

## Checking plan

- What the AI does: Extract the vendor's described data flow: what is recorded, where it is stored, whether the vendor trains on it, and whether a business-associate contract is in the file. Do not classify the product as a medical device.
- Basis: Checked against the linked sources on 22 October 2026. Confirm the current instrument before reliance.

## Notes

- State medical-board positions on documentation tools differ. Open the board that licenses the practitioner.
- Do not send sample transcripts containing patient information to a public model.

## Sources

- [45 CFR § 164.502 (uses and disclosures of protected health information)](https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.502) (checked 2026-10-22)
- [HHS: HIPAA covered entities and business associates](https://www.hhs.gov/hipaa/for-professionals/covered-entities/index.html) (checked 2026-10-22)
- [ABA Formal Opinion 512, Generative Artificial Intelligence Tools (29 July 2024)](https://www.americanbar.org/content/dam/aba/administrative/professional_responsibility/ethics-opinions/aba-formal-opinion-512.pdf) (checked 2026-10-22)

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*