Lawsuit: AI Illegally Recorded Doctor-Patient Encounters

Artificial Intelligence & Machine Learning , Litigation , Next-Generation Technologies & Secure Development Lawsuit: AI Illegally Recorded Doctor-Patient Encounters Patients Allege Health Entities Did Not Get Consent to Record Conversations Marianne Kolbasuk McGee (HealthInfoSec) • April 13, 2026     Credit Eligible Get Permission A federal lawsuit alleges Sutter Health and MemorialCare, both California entities, use Abridge AI's AI-enabled medical transcription tool to unlawfully record patient-doctor conversations during appointments. (Image: Abridge AI) A proposed federal class action lawsuit alleges two California healthcare organizations violated patient privacy laws in their use of an artificial intelligence-enabled tool that records, transcribes, and processes sensitive conversations between clinicians and patients. See Also: New OnDemand Webinar | Overcoming Top Data Compliance Challenges in an Era of Digital Modernization The April 8 lawsuit alleges that Sutter Health and MemorialCare Medical Foundation violated California privacy, medical information confidentiality and unfair business practices laws, as well as a federal wiretapping law, in their use during patient appointments of an AI-enabled recording tool by Abridge AI. "Through this system, highly sensitive medical communications were intercepted, recorded and processed without patients’ informed consent," allege plaintiffs in San Francisco federal court. The suit targets medical use of an "ambient clinical documentation" system developed by Abridge AI, a Philadelphia startup described by a co-founder as "SoundCloud plus RapGenius for medicine." "Unlike traditional medical documentation - where a physician manually records relevant information during or after a consultation - the Abridge system electronically records the live oral communication itself," the lawsuit states. The platform captures the substance of what the patient and physician say, converts the recorded speech into text and applies AI models to generate structured clinical documentation. The recorded conversations and transcripts are "transmitted outside the clinical environment and retained, stored, or otherwise processed on infrastructure associated with the Abridge platform," the lawsuit alleges. The lawsuit says intimate health information captured by the tool includes symptoms, medical history, diagnoses, medications and treatment plans, mental health disclosures and family medical history. "Plaintiffs did not receive clear notice that their medical conversations would be recorded by an AI platform, transmitted outside the clinical setting, or processed through third-party systems," the lawsuit alleges. A Sutter Health spokesperson in a statement to ISMG said the organization is aware of the lawsuit and is reviewing the matter. "We take patient privacy seriously and are committed to protecting the security of our patients’ information. Technology used in our clinical settings is carefully evaluated and implemented in accordance with applicable laws and regulations." Neither MemorialCare nor Abridge AI immediately responded to ISMG's requests for comment on the litigation. Critical Considerations Abridge's transformation from a 2019 startup to a company with sales in more than 250 health systems, by its count, comes from a recognized healthcare problem: the burden of converting patient interactions into structured clinical notes. One 2023 study cited data showing that roughly six out of 10 American physicians show at least one symptom of burnout. The study fingers the documentation and billing demands of electronic health records as a prominent contributor to mounting medical discontent. "Documentation requirements have escalated and have inherently changed from paper-based records. Many clerical tasks have also shifted to become additional physician responsibilities," it states. Abridge has signed up some of the largest U.S. healthcare systems such as Northern Virginia's Inova Health, Memorial Sloan Kettering, the Mayo Clinic and UCHealth in Colorado. Customer testimonials can verge on the ecstatic. "The freed-up time has increased efficiency for the entire care team to where we've dropped responses to patient calls down to seconds," said one. But organizations should review a host of important regulatory, privacy, security and other related issues before signing up. "Data governance is paramount," said attorney Lee Kim, founder of consulting firm Keytera and former longtime cybersecurity and privacy principal at the Healthcare Information Management and Systems Society. "Entities need to understand what data is being captured, whether it is necessary, how it is processed, who can access it and how long it is retained, including for the organization and vendors and downstream entities," she said. "From a privacy standpoint, a notice needs to be posted and patients must be given the ability to opt-out of having their conversation transcribed," said regulatory attorney Rachel Rose. "If patients are recorded without their knowledge or consent, then it is potentially both a HIPAA and a state law privacy violation. Additionally, because the conversation morphs into a written record, the Security Rule would also apply," she said. Also, depending on how the AI software works, if the company providing the software retains a copy, whether or not they review each transcription or recording, then a HIPAA business associate agreement is required, Rose said.