Posted on

Nov 2, 2026

Is AI Scribing Legal in Alaska? (2026 Compliance Guide for Healthcare Providers)

Quick Answer

Yes, AI scribing is legal in Alaska when implemented in compliance with state recording consent laws and federal HIPAA regulations. Alaska is a one-party consent state for recording conversations, which means that only one party to a conversation needs to consent to its recording. However, healthcare providers must also satisfy HIPAA requirements for protecting patient health information, which introduces additional compliance obligations beyond state recording law alone.

Practice in Alaska? Scribing.io is fully compliant with Alaska recording laws. Try it free.

Recording Consent Laws in Alaska

Alaska's wiretapping and electronic surveillance statute is found in Alaska Statutes § 42.20.310, which makes it a crime to use an eavesdropping device to hear or record a conversation without the consent of at least one party to that conversation. This statute specifically addresses the use of electronic devices to intercept oral communications.

Under AS § 42.20.310, a person commits a crime if they use an eavesdropping device to hear or record a private conversation without the consent of a party to that conversation. The key element is that at least one participant in the conversation must consent to the recording.

For healthcare providers, this means that if you (the provider) are a party to the clinical encounter and you consent to the AI scribe recording the conversation, you have satisfied Alaska's recording consent requirement under state law. You do not need the patient's consent solely to comply with Alaska's wiretapping statute.

However, as discussed below, HIPAA and professional ethical standards create additional consent considerations that go beyond what state recording law requires.

One-Party vs Two-Party Consent: What It Means for Your Practice

Understanding the distinction between one-party and two-party consent is critical for compliance:

  • One-party consent (Alaska's standard): Only one participant in the conversation must agree to the recording. Since the healthcare provider is a participant in the clinical encounter, the provider's own consent satisfies Alaska's statutory requirement under AS § 42.20.310.

  • Two-party (all-party) consent: All participants in a conversation must agree to the recording. Alaska does not follow this standard.

While Alaska's one-party consent framework is legally permissive, healthcare providers should not interpret this as a reason to forgo patient notification. There are several reasons to still inform patients and obtain their acknowledgment:

  1. HIPAA compliance: Federal law requires safeguards around the use and disclosure of protected health information (PHI), and patients have a right to understand how their information is being used.

  2. Informed consent principles: Medical ethics and Alaska Medical Board standards generally require transparency with patients about the tools and processes used in their care.

  3. Trust and patient relationship: Disclosing the use of AI scribing technology maintains transparency and supports the provider-patient relationship.

  4. Telehealth considerations: If you provide telehealth services to patients in other states, you must comply with the recording laws of those jurisdictions, some of which are all-party consent states (e.g., California, Washington, Florida).

HIPAA Requirements on Top of State Law

Regardless of Alaska's permissive recording consent law, any AI scribing tool used in a clinical setting must comply with the Health Insurance Portability and Accountability Act (HIPAA), specifically the Privacy Rule (45 CFR Part 164, Subpart E) and the Security Rule (45 CFR Part 164, Subpart C).

Key HIPAA Compliance Requirements for AI Scribing

  • Business Associate Agreement (BAA): Under 45 CFR § 164.502(e) and 45 CFR § 164.504(e), any AI scribing vendor that creates, receives, maintains, or transmits PHI on behalf of a covered entity must sign a BAA. This is non-negotiable. Do not use any AI scribing service that refuses to execute a BAA.

  • Minimum Necessary Standard: Under 45 CFR § 164.502(b), the AI scribe should only access, process, and retain the minimum amount of PHI necessary to perform its scribing function.

  • Access Controls and Encryption: Under the Security Rule (45 CFR § 164.312), electronic PHI (ePHI) generated by the AI scribe must be encrypted both in transit and at rest, with appropriate access controls.

  • Audit Controls: Under 45 CFR § 164.312(b), the system must maintain logs of who accessed PHI and when.

  • Patient Rights: Under 45 CFR § 164.524, patients retain the right to access their medical records, including any documentation generated by an AI scribe. Under 45 CFR § 164.526, patients may request amendments to their records.

  • Notice of Privacy Practices (NPP): Under 45 CFR § 164.520, your NPP should be updated to reflect the use of AI scribing technology and how PHI is processed through these tools.

Data Retention and De-identification

Ensure your AI scribing vendor has clear data retention policies. Audio recordings used for transcription should be processed and deleted or de-identified in accordance with your BAA terms. The de-identification standards in 45 CFR § 164.514 should be followed if any data is retained for purposes beyond direct clinical documentation.

Patient Consent Best Practices for Alaska

Even though Alaska's one-party consent law does not legally require patient permission to record, best practices for healthcare providers include the following:

1. Inform Patients Before the Encounter

Provide clear, plain-language notice that an AI scribing tool will be used during the visit. This can be done through:

  • Signage in the waiting area or exam room

  • A statement on intake forms

  • Verbal disclosure at the beginning of the encounter

  • A notice in the patient portal for telehealth visits

2. Obtain Written Acknowledgment

While not strictly required under Alaska's recording law, obtaining written acknowledgment protects the practice. A sample acknowledgment might state:

"Our practice uses an AI-powered medical scribing tool to assist with clinical documentation. This tool may record portions of our conversation to generate accurate clinical notes. All recordings and notes are handled in compliance with HIPAA. You may opt out of AI scribing at any time without affecting the quality of your care."

3. Offer an Opt-Out Option

Patients should be given the option to decline AI scribing. If a patient opts out, the provider should have a workflow in place to document the encounter manually or through traditional methods.

4. Update Your Notice of Privacy Practices

Include language about AI scribing in your HIPAA Notice of Privacy Practices to ensure compliance with 45 CFR § 164.520.

5. Special Considerations for Telehealth

Alaska has significant telehealth usage due to its geography. If you are providing remote healthcare services:

  • Determine the patient's physical location at the time of the visit.

  • If the patient is in a two-party (all-party) consent state, you must obtain their explicit consent before recording.

  • Document the patient's location and consent status in the medical record.

  • Be aware that Alaska's telehealth regulations under Alaska Admin. Code tit. 12, § 40.967 and related provisions require that telehealth services meet the same standard of care as in-person services.

What Happens if You Don't Comply?

State Law Violations

Violating Alaska's recording statute (AS § 42.20.310) is a criminal offense. Under AS § 42.20.310, unauthorized eavesdropping is classified as a misdemeanor. Convictions can result in fines and potential jail time, as well as civil liability for damages.

HIPAA Violations

HIPAA violations are enforced by the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR). Penalties under 42 U.S.C. § 1320d-5 and 42 U.S.C. § 1320d-6 are tiered based on the level of culpability:

Tier

Culpability Level

Penalty Per Violation

Annual Maximum

Tier 1

Did not know (and reasonably should not have known)

$137–$68,928

$2,067,813

Tier 2

Reasonable cause (not willful neglect)

$1,379–$68,928

$2,067,813

Tier 3

Willful neglect, corrected within 30 days

$13,785–$68,928

$2,067,813

Tier 4

Willful neglect, not corrected

$68,928+

$2,067,813

Note: Penalty amounts are adjusted annually for inflation. The figures above reflect approximate 2026 levels based on published HHS adjustments. Verify current amounts with the HHS Office for Civil Rights.

Professional Licensing Consequences

The Alaska State Medical Board has authority to investigate complaints and take disciplinary action against licensed physicians. Using AI scribing tools without proper safeguards could be viewed as a failure to meet the standard of care, potentially resulting in license review.

Civil Liability

Patients who believe their privacy has been violated may pursue civil claims, including:

  • Invasion of privacy torts

  • Breach of confidentiality

  • Claims under state consumer protection statutes

Implementation Checklist

Use this checklist to ensure your Alaska practice is compliant when implementing AI scribing:

Action Item

Verify BAA: Confirm your AI scribing vendor has executed a HIPAA-compliant Business Associate Agreement.

Review vendor security: Ensure the vendor provides encryption in transit and at rest, access controls, and audit logging per the HIPAA Security Rule.

Update Notice of Privacy Practices: Add language describing the use of AI scribing technology and how PHI is handled.

Create patient notification materials: Develop signage, intake form language, and/or verbal scripts informing patients about AI scribing.

Implement opt-out workflow: Establish a clear process for patients who decline AI scribing, including alternative documentation methods.

Obtain written acknowledgment: Add an AI scribing acknowledgment to patient intake or consent forms.

Train staff: Educate clinical and administrative staff on how the AI scribe works, how to disclose it to patients, and how to handle opt-outs.

Address telehealth scenarios: For remote visits, establish protocols to confirm patient location and apply the appropriate state's consent laws.

Conduct risk assessment: Perform a HIPAA Security Risk Assessment (required under 45 CFR § 164.308(a)(1)(ii)(A)) that includes the AI scribing tool.

Establish data retention policies: Define how long audio recordings and transcripts are retained, and ensure deletion protocols are in place.

Review regularly: Schedule periodic compliance reviews to ensure ongoing adherence to state and federal requirements as laws evolve.

This guide is provided for informational purposes only and does not constitute legal advice. Healthcare providers should consult with a qualified healthcare attorney licensed in Alaska for guidance specific to their practice. Laws and regulations are subject to change; verify all cited statutes and regulations for the most current versions.

Still not sure? Book a free discovery call now.

Frequently

asked question

Answers to your asked queries

What is Scribing.io?

How does the AI medical scribe work?

Does Scribing.io support ICD-10 and CPT codes?

Can I edit or review notes before they go into my EHR?

Does Scribing.io work with telehealth and video visits?

Is Scribing.io HIPAA compliant?

Is patient data used to train your AI models?

How do I get started?

Still not sure? Book a free discovery call now.

Frequently

asked question

Answers to your asked queries

What is Scribing.io?

How does the AI medical scribe work?

Does Scribing.io support ICD-10 and CPT codes?

Can I edit or review notes before they go into my EHR?

Does Scribing.io work with telehealth and video visits?

Is Scribing.io HIPAA compliant?

Is patient data used to train your AI models?

How do I get started?

Still not sure? Book a free discovery call now.

Frequently

asked question

Answers to your asked queries

What is Scribing.io?

How does the AI medical scribe work?

Does Scribing.io support ICD-10 and CPT codes?

Can I edit or review notes before they go into my EHR?

Does Scribing.io work with telehealth and video visits?

Is Scribing.io HIPAA compliant?

Is patient data used to train your AI models?

How do I get started?

Didn’t find what you’re looking for?
Book a call with our AI experts.

Didn’t find what you’re looking for?
Book a call with our AI experts.

Didn’t find what you’re looking for?
Book a call with our AI experts.