---
title: "Check an ambient clinical scribe against the privacy rules"
url: "https://ailawframework.com/practice/health-and-medical-law/build-a-compliance-checklist-for-an-ambient-clinical-scribe-product/united-states"
type: "task_jurisdiction_version"
site: "AI Law Framework"
id: "A32-T1-R4-US"
practice_area: "Health & Medical Law"
tier: "yellow"
lawyer_review: "required"
jurisdictions: ["US"]
last_reviewed: "2026-10-22"
---

# Check an ambient clinical scribe against the privacy rules

> From the vendor's papers, list what audio or text the product takes, who can retrieve it, how long it is kept, and whether the vendor is described as a business associate. Do not classify the product as a device.

Canonical page: https://ailawframework.com/practice/health-and-medical-law/build-a-compliance-checklist-for-an-ambient-clinical-scribe-product/united-states  
Last reviewed: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Health & Medical Law](https://ailawframework.com/practice/health-and-medical-law.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | From the vendor's papers, list what audio or text the product takes, who can retrieve it, how long it is kept, and whether the vendor is described as a business associate. Do not classify the product as a device. |
| What the lawyer must review | You decide whether the product may be used. 45 CFR § 164.502 bars a use or disclosure of protected health information that the subpart does not permit. The HHS breach page, describing 45 CFR §§ 164.400 to 164.414, requires notice to individuals without unreasonable delay and no later than 60 days after discovery of a breach of unsecured protected health information, and media notice when more than 500 residents of a State or jurisdiction are affected. A business associate notifies the covered entity. The Food and Drug Administration page that was requested did not load, so this check does not classify the product as a medical device. Formal Opinion 512 applies to information relating to a representation that the product would receive. |
| Written for | United States |
| Applies to | [Build a compliance checklist for an ambient clinical-scribe product](https://ailawframework.com/practice/health-and-medical-law/build-a-compliance-checklist-for-an-ambient-clinical-scribe-product.md) |

## Checking plan

- What the AI does: From the vendor's papers, list what audio or text the product takes, who can retrieve it, how long it is kept, and whether the vendor is described as a business associate. Do not classify the product as a device.
- Basis: Checked against the linked sources on 22 October 2026. Confirm the current instrument before reliance.

## Notes

- Do not call the scribe a medical device. No device page was opened.
- Section 164.504(e), on the terms of a business-associate contract, was not opened.

## Sources

- [45 CFR § 164.502 (uses and disclosures of protected health information)](https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.502) (checked 2026-10-22)
- [HHS: HIPAA Breach Notification Rule](https://www.hhs.gov/hipaa/for-professionals/breach-notification/index.html) (checked 2026-10-22)
- [ABA Formal Opinion 512, Generative Artificial Intelligence Tools (29 July 2024)](https://www.americanbar.org/content/dam/aba/administrative/professional_responsibility/ethics-opinions/aba-formal-opinion-512.pdf) (checked 2026-10-22)

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*