Posted on
Aug 2, 2026
Is AI Scribing Legal in Maine? (2026 Compliance Guide for Healthcare Providers)
Quick Answer
Yes, AI scribing is legal in Maine when implemented in compliance with state recording consent laws and federal HIPAA regulations. Maine is a one-party consent state for recording conversations, which means that only one party to a conversation needs to consent to the recording. However, healthcare providers must still satisfy HIPAA requirements and follow ethical best practices regarding patient notification and consent.
Practice in Maine? Scribing.io is fully compliant with Maine recording laws. Try it free.
Recording Consent Laws in Maine
Maine's wiretapping and electronic surveillance law is codified under Title 15, Chapter 705, §709 of the Maine Revised Statutes. This statute governs the interception of wire and oral communications in the state.
Under 15 M.R.S. §709, it is unlawful to intercept any wire or oral communication unless at least one party to the communication has given prior consent. This makes Maine a one-party consent state. As a healthcare provider, if you are a participant in the clinical encounter being recorded by an AI scribe, your own consent satisfies the minimum legal threshold under Maine law.
Key provisions to understand:
15 M.R.S. §709 — Prohibits interception of communications without the consent of at least one party.
15 M.R.S. §710 — Establishes criminal penalties for violations of the wiretapping statute.
15 M.R.S. §711 — Addresses the admissibility and disclosure of intercepted communications.
It is important to note that while one-party consent is the legal minimum, healthcare ethics and HIPAA regulations impose additional obligations that go beyond the state recording statute.
One-Party vs Two-Party Consent: What It Means for Your Practice
In a one-party consent state like Maine, the provider participating in the patient encounter can legally consent to the AI scribe recording on their own behalf. You do not need the patient's explicit permission under state wiretapping law to record the encounter.
However, this legal minimum should not be confused with best practice. Here is how the two frameworks compare:
Factor | One-Party Consent (Maine) | Two-Party Consent States |
|---|---|---|
Who must consent to recording? | One participant (e.g., the provider) | All parties to the conversation |
Patient notification required by state law? | Not required under 15 M.R.S. §709 | Yes, explicit consent required |
HIPAA still applies? | Yes, always | Yes, always |
Best practice recommendation | Inform and document patient awareness | Obtain written consent |
Even though Maine law permits one-party consent, medical practices should strongly consider notifying patients about AI scribing as part of their standard intake process. This protects the provider-patient relationship and reduces the risk of complaints to the Maine Board of Licensure in Medicine.
HIPAA Requirements on Top of State Law
Regardless of Maine's one-party consent framework, any AI scribing tool used in a clinical setting must comply with the Health Insurance Portability and Accountability Act (HIPAA), specifically:
The HIPAA Privacy Rule (45 CFR Part 164, Subpart E) — Governs the use and disclosure of protected health information (PHI). AI-generated clinical notes contain PHI and must be handled accordingly.
The HIPAA Security Rule (45 CFR Part 164, Subpart C) — Requires administrative, physical, and technical safeguards for electronic PHI (ePHI). Any AI scribe platform that processes, transmits, or stores audio recordings or transcriptions must implement encryption, access controls, and audit logging.
Business Associate Agreements (BAAs) — Under 45 CFR §164.502(e) and 45 CFR §164.504(e), you must execute a BAA with any AI scribing vendor that handles PHI on your behalf. Without a signed BAA, using the tool is a HIPAA violation regardless of its technical security.
The HIPAA Breach Notification Rule (45 CFR Part 164, Subpart D) — If an AI scribing platform experiences a data breach involving unsecured PHI, notification obligations apply to both the covered entity and the business associate.
Additionally, your Notice of Privacy Practices (NPP), required under 45 CFR §164.520, should be reviewed and updated to reflect the use of AI-assisted documentation tools. While HIPAA does not explicitly require patient consent for treatment-related uses of PHI (which includes clinical documentation), transparency about AI involvement in note-taking is considered an emerging best practice.
Patient Consent Best Practices for Maine
While Maine law sets a low bar for recording consent, healthcare providers should implement robust consent and notification protocols. The following best practices balance legal compliance, patient trust, and risk management:
Inform patients verbally at the start of each encounter. A brief statement such as, "We use an AI-assisted documentation tool during our visits to help ensure accurate medical records. The recording is used solely for clinical documentation purposes," is sufficient.
Include AI scribing disclosure in your intake paperwork. Add a clearly written section to your patient intake forms or consent documents that explains the use of AI scribing, what data is captured, and how it is stored and protected.
Offer an opt-out mechanism. While not legally required under Maine's one-party consent law, allowing patients to opt out of AI-recorded encounters demonstrates respect for patient autonomy and can prevent complaints.
Update your Notice of Privacy Practices. As noted above, your NPP should reference the use of AI documentation tools to maintain transparency under HIPAA.
Document consent or notification in the patient record. Whether you obtain written consent or simply provide verbal notice, document that the patient was informed. This creates a defensible record.
Train all clinical and administrative staff. Ensure everyone in the practice understands the AI scribing workflow, consent protocols, and how to handle patient questions or opt-out requests.
What Happens if You Don't Comply?
Non-compliance with recording consent laws and HIPAA carries significant consequences:
State Law Violations (Maine)
Under 15 M.R.S. §710, unlawful interception of communications is a criminal offense in Maine. While one-party consent provides substantial protection for providers who are participants in the conversation, improper use (such as recording encounters you are not a party to) could trigger criminal liability.
Civil liability may also arise under state tort law if a patient claims invasion of privacy.
Complaints to the Maine Board of Licensure in Medicine could result in disciplinary proceedings, including license sanctions, if recording practices are deemed unethical or harmful to patients.
HIPAA Violations (Federal)
The U.S. Department of Health and Human Services Office for Civil Rights (OCR) enforces HIPAA. Civil monetary penalties range from $141 to $2,134,831 per violation category (adjusted annually for inflation), with annual caps of up to $2,134,831 per identical provision.
Failure to execute a BAA with your AI scribing vendor is itself a HIPAA violation, independent of whether any breach occurs.
Willful neglect of HIPAA requirements that goes uncorrected can result in the highest tier of penalties.
Reputational and Operational Risk
Patient trust is foundational to clinical practice. Undisclosed AI recording — even if technically legal — can damage your reputation if patients learn about it after the fact.
Negative publicity from a HIPAA breach or patient complaint can have lasting effects on patient volume and practice viability.
Implementation Checklist
Use this checklist to ensure your Maine-based medical practice is fully compliant when deploying AI scribing technology:
Confirm your AI scribing vendor is HIPAA-compliant and willing to sign a Business Associate Agreement (BAA).
Execute the BAA before processing any patient encounters through the AI scribe.
Verify the platform uses end-to-end encryption for audio transmission and data storage.
Confirm the platform provides access controls and audit logs consistent with the HIPAA Security Rule.
Update your Notice of Privacy Practices to disclose the use of AI-assisted documentation.
Add an AI scribing disclosure to your patient intake forms or consent documents.
Develop a verbal notification script for providers to use at the start of encounters.
Establish a patient opt-out process and document opt-out requests in the medical record.
Train all staff — clinical and administrative — on AI scribing workflows and consent procedures.
Conduct a HIPAA risk assessment that includes the AI scribing tool in your technology inventory.
Establish a data retention and deletion policy for audio recordings and AI-generated transcripts.
Review compliance annually and whenever the AI scribing vendor updates its platform or terms of service.
This guide is provided for informational purposes and does not constitute legal advice. Healthcare providers should consult with a qualified healthcare attorney licensed in Maine for guidance specific to their practice.
