---
title: "Client consent to processing medical records in an approved tool"
url: "https://ailawframework.com/precedents/personal-injury-and-compensation/firm-consent-ai-medical-records"
type: "precedent"
site: "AI Law Framework"
id: "a21-firm-consent-ai-medical-records"
area_id: "A21"
kind: "letter"
ai_level: "yellow"
version: 1
task_ids: ["A21-B6-2", "A21-T1-R2", "A32-T1-R8"]
law_stated_as_at: "2026-10-23"
---

# Client consent to processing medical records in an approved tool

> Consent the client signs before the firm puts medical records into an approved tool. It is not permission to use a public tool, and the work goes on without the tool if the client does not sign.

Canonical page: https://ailawframework.com/precedents/personal-injury-and-compensation/firm-consent-ai-medical-records  
Law stated as at: 2026-10-23

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

- Kind: Letter. A letter or email you adapt and send.
- Practice area: [Personal Injury & Compensation](https://ailawframework.com/precedents/personal-injury-and-compensation.md)
- Jurisdictions: Australia, Victoria, Queensland, New South Wales
- AI level: Yellow. You and the tool draft together, with you directing. You check every statement you rely on.
- Law stated as at: 2026-10-23
- Status: Maintained. Checked on 2026-10-23 against the 4 authorities it cites, for 4 jurisdictions.

## When to use it

Use when a plaintiff firm proposes to upload a client's medical or other health records to a firm-controlled tool to prepare a chronology or to find gaps. The client signs it. Do not use it for a public chatbot, or as a privacy notice standing alone.

## Used for these tasks

- [Build a PI medical chronology with AI](https://ailawframework.com/practice/personal-injury-and-compensation/build-a-pi-medical-chronology-with-ai.md)
- [Build a medical chronology from the record set](https://ailawframework.com/practice/personal-injury-and-compensation/build-a-medical-chronology-from-the-record-set.md)
- [Map health-privacy duties across the records systems](https://ailawframework.com/practice/health-and-medical-law/map-health-privacy-duties-across-the-records-systems.md)

## How AI may be used

The tool may fill the client's name, the matter and the approved tool from the file, and a lawyer checks the letter with the client before it is signed.

**AI may:**

- Insert the client's name, the matter number and the name of the approved tool from the file
- Leave blank any tool, location or retention setting that is not on the approved-tool record

**AI must not:**

- Must not describe a public tool as approved, or say that signing allows use of a public chatbot
- Must not say that a privacy notice is enough, or that consent is implied
- Must not send the letter, or treat an unsigned copy as consent
- Must not promise a destruction date the file does not support

**The lawyer checks:**

- The named tool is on the approved list and matches the contract that was reviewed
- The client has read the letter, had a chance to ask questions, and has signed it, or has refused
- A refusal is recorded and the records are not uploaded

## Authorities

- [OAIC, guidance on privacy and the use of commercially available AI products](https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/guidance-on-privacy-and-the-use-of-commercially-available-ai-products)
- [OAIC, APP 11: security of personal information](https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-11-app-11-security-of-personal-information)
- [Legal Profession Uniform Law Australian Solicitors' Conduct Rules 2015 (NSW) r 9.2.1](https://legislation.nsw.gov.au/view/whole/html/inforce/current/sl-2015-0244)
- [Queensland Law Society, Australian Solicitors' Conduct Rules](https://www.qls.com.au/practising-law-in-qld/ethics/australian-solicitors-conduct-rules)

## Full text and drafting notes

The full text and the drafting notes are not part of this public page. Signed-in firm accounts can read them at https://ailawframework.com/precedents/personal-injury-and-compensation/firm-consent-ai-medical-records and through the signed-in MCP connector https://ailawframework.com/mcp/firm.

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*