Is AI Scribing Legal in Wyoming? (2026 Compliance Guide for Healthcare Providers)

Quick Answer

Yes, AI scribing is legal in Wyoming when implemented in compliance with state recording consent laws and federal HIPAA regulations. Wyoming is a one-party consent state for recording communications, meaning that only one party to a conversation needs to consent to the recording. For healthcare providers, this means the physician or clinician participating in the encounter can legally consent to the AI scribe recording the visit. However, HIPAA compliance, professional ethics, and patient trust considerations impose additional requirements beyond the bare minimum of state wiretapping law.

Practice in Wyoming? Scribing.io is fully compliant with Wyoming recording laws. Try it free.

Recording Consent Laws in Wyoming

Wyoming's wiretapping and electronic surveillance law is codified under Wyoming Statutes § 7-3-702, which governs the interception of communications. Under this statute, it is unlawful to intercept, attempt to intercept, or procure another person to intercept any wire, oral, or electronic communication — unless one of the parties to the communication has given prior consent to the interception.

This means Wyoming follows the one-party consent framework. As long as at least one participant in the conversation (such as the healthcare provider) consents to the recording, the recording is lawful under Wyoming state law.

Key provisions to be aware of:

• Wyo. Stat. § 7-3-702: Prohibits unauthorized interception of communications but includes an exception when one party consents.

• Wyo. Stat. § 7-3-708: Addresses penalties for unlawful interception, including potential criminal liability.

• Wyoming does not have a separate statute specifically addressing AI-generated clinical documentation as of 2026.

It is important to note that while one-party consent satisfies the criminal wiretapping statute, healthcare providers have additional ethical and regulatory obligations that go beyond the floor established by this law.

One-Party vs Two-Party Consent: What It Means for Your Practice

In a one-party consent state like Wyoming, the healthcare provider who is a party to the patient encounter can legally authorize the AI scribing tool to record and transcribe the conversation without separately obtaining the patient's explicit consent under state recording law.

This contrasts with two-party (or all-party) consent states — such as California, Florida, or Washington — where every party to the communication must agree to the recording. In those states, failing to get patient consent before activating an AI scribe could constitute a criminal offense.

However, even in Wyoming, best practices for healthcare providers include:

• Informing patients that an AI tool is being used to document the encounter. Transparency builds trust and reduces the risk of complaints to licensing boards or regulatory agencies.

• Documenting notification in the patient's chart. Even if explicit written consent is not legally required by Wyoming recording law, maintaining a record of notification is a sound risk management practice.

• Allowing patients to opt out. Patients who are uncomfortable with AI-assisted documentation should be offered an alternative (e.g., manual note-taking). This aligns with the principles of patient autonomy and informed consent in medical ethics.

From a practical standpoint, the legal permissibility of one-party consent does not eliminate the need for transparency. The Wyoming Board of Medicine and other licensing bodies may view undisclosed AI recording as an ethical concern, even if it does not violate the wiretapping statute.

HIPAA Requirements on Top of State Law

Regardless of Wyoming's one-party consent framework, any AI scribing tool used in a clinical setting must comply with the Health Insurance Portability and Accountability Act (HIPAA), specifically the Privacy Rule (45 CFR Part 164, Subpart E) and the Security Rule (45 CFR Part 164, Subpart C).

Key HIPAA requirements for AI scribing implementations:

• Business Associate Agreement (BAA): Under 45 CFR § 164.502(e) and § 164.504(e), any AI scribing vendor that creates, receives, maintains, or transmits protected health information (PHI) on behalf of a covered entity must execute a BAA. Without a valid BAA in place, using the AI scribe constitutes a HIPAA violation — regardless of state law compliance.

• Minimum Necessary Standard: Under 45 CFR § 164.502(b), the AI tool should be configured to access and process only the minimum amount of PHI necessary to perform its documentation function.

• Data Encryption and Security: The Security Rule (45 CFR § 164.312) requires that electronic PHI (ePHI) be protected with appropriate administrative, physical, and technical safeguards. Audio recordings and transcripts generated by AI scribes are ePHI and must be encrypted in transit and at rest.

• Patient Rights: Under 45 CFR § 164.524, patients have the right to access their medical records, which may include AI-generated notes. Under 45 CFR § 164.526, patients have the right to request amendments to their records if the AI-generated documentation contains errors.

• Breach Notification: Under 45 CFR §§ 164.400–414, if an AI scribing vendor experiences a data breach involving unsecured PHI, both the covered entity and the business associate have notification obligations.

HIPAA applies uniformly across all 50 states and preempts state law only where state law is less restrictive. Because HIPAA's privacy and security requirements are generally more demanding than Wyoming's recording consent law, providers must treat HIPAA as the primary compliance framework for AI documentation tools.

Patient Consent Best Practices for Wyoming

While Wyoming's one-party consent law sets a low threshold for legal recording, healthcare providers should adopt a higher standard of practice to manage risk, maintain patient trust, and satisfy professional ethical obligations:

1. Provide verbal notification at the start of every encounter. A simple statement such as: "I use an AI-assisted tool to help document our visit today. The recording is used only to generate your clinical notes and is protected under our privacy practices. You may opt out at any time."

2. Include AI scribing disclosure in intake paperwork. Add a brief section to your Notice of Privacy Practices or patient intake forms explaining that AI-assisted documentation tools may be used. This satisfies HIPAA's Notice of Privacy Practices requirement under 45 CFR § 164.520 and creates a written record.

3. Obtain written consent for sensitive encounters. For behavioral health visits, substance use disorder treatment (which has additional protections under 42 CFR Part 2), and other sensitive contexts, consider obtaining separate written consent for AI-assisted recording.

4. Post visible signage in clinical areas. Notices in waiting rooms and exam rooms informing patients that AI documentation tools are in use provide an additional layer of transparency.

5. Document patient opt-outs. When a patient declines AI scribing, document this preference in their chart and ensure the tool is deactivated for that encounter.

6. Review AI-generated notes before finalizing. The provider remains legally and professionally responsible for the accuracy of the medical record. AI-generated documentation should be reviewed and authenticated by the clinician before it becomes part of the official patient record.

What Happens if You Don't Comply?

Non-compliance with Wyoming recording law, HIPAA, or professional ethics standards can result in serious consequences:

Implementation Checklist

Use this checklist before deploying an AI scribing solution in your Wyoming practice:

• Verify one-party consent compliance: Confirm that at least one party to each recorded encounter (the provider) consents to the recording.

• Execute a Business Associate Agreement (BAA) with your AI scribing vendor, as required by HIPAA.

• Update your Notice of Privacy Practices to disclose the use of AI-assisted documentation tools (45 CFR § 164.520).

• Add AI scribing disclosure to patient intake forms.

• Train staff on how to notify patients verbally about AI documentation at the start of encounters.

• Post signage in clinical areas about AI-assisted documentation.

• Establish an opt-out workflow for patients who decline AI recording.

• Verify data encryption standards for audio recordings and transcripts (in transit and at rest).

• Confirm data storage and retention policies comply with both HIPAA and Wyoming medical records retention requirements.

• Implement a review process requiring clinicians to authenticate all AI-generated notes before they are finalized in the medical record.

• Conduct a HIPAA risk assessment that includes the AI scribing tool as part of your organization's ePHI environment.

• Review 42 CFR Part 2 requirements if your practice involves substance use disorder treatment, as additional consent requirements apply.

• Consult with a healthcare attorney licensed in Wyoming to review your specific implementation and address any unique circumstances.

This guide is for informational purposes only and does not constitute legal advice. Laws and regulations may change. Healthcare providers should consult with a qualified attorney for guidance specific to their practice.