AI Notes for Chiropractors: Consent and Data Checks Before Recording

Coding Liquids tutorial cover featuring Sagnik Bhattacharya for AI Notes for Chiropractors: Consent and Data Checks Before Recording.
Coding Liquids tutorial cover featuring Sagnik Bhattacharya for AI Notes for Chiropractors: Consent and Data Checks Before Recording.

Almost always yes, you should obtain the patient's consent before an AI note tool records or processes a visit, and tell them plainly what it does. Rules differ by country and state, so verify yours. The data checks come first: where audio and text are stored, whether the vendor trains on them, and how you delete them.

Consent and data are two separate questions that people blur. Consent is the patient's agreement to being recorded or having their words processed. Data checks are your own homework on the tool: what it keeps, who can see it, and what the plan you pay for actually promises. A tool with perfect consent wording can still be a bad choice if its terms let the vendor train on your clinic's recordings. So do the work in that order: the data terms first, the wording second, then a front-desk opt-out routine that does not depend on anyone's memory.

Follow me on Instagram@sagnikteaches

Why recording is different from typing

When you type a note, the patient's words pass through your head and you record what matters. When a tool records the visit, it captures everything said in the room: the history, the small talk, a partner's comment, a mention of a medication or a family problem. That raw material is more sensitive than your note and may be kept longer than you expect. Some tools keep audio only until the note is generated, others keep transcripts, and some keep both for set periods. Which one applies depends on the tool and the plan, and vendors change these terms, so read the current page rather than trust memory or an old review.

Connect on LinkedInSagnik Bhattacharya

Recording laws add a second layer. In some places only one party needs to agree to a recording; in others everyone does. A patient who has not agreed is a problem in the second kind of place however good your tool is. If you are unsure which applies, ask your professional body or an adviser before turning anything on.

Subscribe on YouTube@sagnikteaches

Step one: check the tool before you check the consent

Do the data work before you ever ask a patient. It is hard to write honest consent wording for a tool you have not read the terms of. Use the table as a one-page screen, comparing what each plan's terms say.

CheckWhat a good answer looks likeRed flag
Training on your contentStated as "not used to train models" for your planSilent, or "may be used to improve our services"
Audio retentionDeleted after the note is made, or a period you can setKept indefinitely, no delete option
Transcript and note storageStored in a named region, encrypted, deletable on requestRegion not stated
Data agreementA signed agreement making the vendor your processorTerms of service only
Staff accessAccess limited, logged, and described"Our team may review recordings"
Sub-processorsListed, with notice of changesNo list
Export and exitYou can export notes and delete everything when you leaveNo exit terms

The gap between plans is the point. A free or personal plan of a tool can have weaker terms than the clinic or business plan of the same product, particularly on training and on the signed agreement. Read the terms for the exact plan you will buy, and screenshot the page with the date. If a vendor says it does not keep audio, note the page address and the date you read it, since that sentence is what your consent wording will rest on.

The related tutorial on what is safe in a general chatbot without a business associate agreement goes deeper on that side, and the scribe comparison for chiropractors covers features.

The Complete Excel Course with AI Integration thumbnail

The Complete Excel Course with AI Integration

From formulas and pivot tables to Power Query, DAX, VBA and AI with Copilot, ChatGPT and Claude — hands-on from the first lesson.

By Sagnik Bhattacharya and Virginia Thorn, Primetime Emmy Award winner

Buy now

Step two: write consent wording that is honest and short

Good consent wording says what the tool does, what is kept, who sees it, and that the patient can say no. It is spoken in under thirty seconds and the same wording appears in your intake form and privacy notice.

Spoken script for the start of the visit

"I use a note-taking tool that listens to our conversation and drafts my notes.
I read and correct every note myself. [The audio is deleted once the note is made / the audio is kept for X days].
The company can't use it to train its software.
You can say no at any time and I'll write the notes by hand. Is that all right?"

Only include the bracketed lines that are true for your tool. If you cannot make the training sentence true, do not say it. That is a sign to change tool or plan.

Written wording for the intake form

AI-assisted notes: Our clinic uses approved software to turn the clinician's conversation with you into a draft record. The clinician checks and signs every note. We do not allow the software provider to use your information to train its products. You can decline at any visit, and declining will not affect your care. Tick here to agree: [ ]  Tick here to decline: [ ]

Check each sentence against your vendor terms. A consent line that says more than the vendor promises is a liability, not a protection.

Step three: an opt-out routine the front desk can run

Consent that exists only in the clinician's head fails the first time a new locum or a busy day hits. Build a routine that does not depend on memory.

  1. At booking or check-in: the intake form includes the AI-notes question. The answer goes into a field on the patient record, not a free-text note.
  2. Before each visit: the clinician sees the field when opening the record. A "declined" flag blocks switching the tool on.
  3. At the start of the visit: the clinician repeats the short script. A "yes" is logged in one click or one line.
  4. If the patient changes their mind mid-visit: stop recording, delete the partial audio if the tool lets you, and note that you did.
  5. After a decline: record the flag, write the notes by hand, and make no comment on it in the notes beyond the flag.
  6. Monthly: count visits with consent logged against visits where the tool ran. The numbers should match.

A worked example: a three-chiropractor clinic

Illustrative. A clinic with three chiropractors sees about 90 patients a week and wants to try an AI note tool. The owner runs the checks like this.

  • Week 1: shortlists two tools, reads the terms for the clinic plan of each, fills the table. Tool A says content is not used for training on its clinic plan and offers a signed data agreement. Tool B's terms are silent on training for its cheaper tier. Tool B is dropped.
  • Week 2: updates the intake form and privacy notice with the wording above. Adds a "AI notes: agreed / declined / not asked" field to the patient record. Trains the two receptionists on the opt-out routine.
  • Week 3: one chiropractor pilots with 20 consenting patients. Two of the 20 decline at the visit, so the clinician writes those notes by hand and flags the records.
  • Week 4: the owner checks the 18 AI-drafted notes against what the clinician would have written, using the SOAP note review checklist. Four need correction: two laterality errors, one wrong grade of pain, one missed contraindication. The owner treats those as the reason review is mandatory, not as a reason to quit.

Out of 20 patients, 18 agreed (90 per cent). Those are illustrative numbers: your own rate will differ, and it is worth tracking, because a falling agreement rate tells you your wording or your explanation needs work.

Four more situations you will meet

A patient asks "Where does the recording go?"

Have a one-sentence answer from the vendor's page. For example: "It is processed by our software supplier on secure servers, deleted after the note is made, and never used to train their system." If you cannot say that truthfully, tell the patient what you do know, and offer to write by hand.

A family member in the room

Ask them as well. Their voice will be captured. Where recording laws need everyone's agreement, a no from the relative means no recording. If the patient is a child, the parent or guardian decides, and you should record nothing if either the parent or the child objects.

A sensitive disclosure

If a patient begins to talk about something personal, such as abuse, a mental health crisis or a legal issue, pause the tool. Say "I'll stop the recording now and write this by hand." You can resume later. A pause control that is quick to find is a feature to test before you buy.

A locum or associate who does not use the tool

Your policy should cover them. Associates need access to the declined flag and the script, and your agreement with them should say whether they may use the tool at all. The same applies to a locum covering a holiday week.

Clinician review: the step that carries the liability

The note is your record. A smooth AI draft can contain errors that read perfectly well: a wrong side, an invented examination, a restated history that differs from what was said, or an omitted red flag. Review each note before the patient leaves or the same day, with a fixed routine:

  • Check side, region, grade and measurements against what you did.
  • Check that every examination finding in the note was actually performed.
  • Check red flags, contraindications and the plan.
  • Delete anything the patient did not say or that you did not do.
  • Sign only when you would be content for the patient to read it.

An illustrative before and after: the tool drafts "Neurological examination normal." The clinician did only a reflex check. The corrected note says "Lower limb reflexes tested, symmetrical. Full neurological examination not performed." The fix takes ten seconds and is the difference between an accurate record and a false one.

A sample note exchange

Illustrative prompt a clinic might use inside a scribe tool that allows custom instructions: "Write a SOAP note from this conversation. Use only what was said or done. If something is unclear, write [CHECK] instead of guessing. Do not include any information from outside the conversation." Illustrative output: "S: Low back pain, 3 weeks, worse sitting. Denies leg symptoms [CHECK: patient said 'not really', confirm]. O: Reduced lumbar flexion. [CHECK: grade not stated]. A: Mechanical low back pain. P: Manual therapy, advice on sitting, review in 1 week." The [CHECK] markers show the clinician exactly where to look, which is more useful than a confident paragraph that hides the gaps.

Reading the vendor terms without a lawyer

You do not need to read forty pages. Search each document for six words and read only the paragraphs around them: "train", "improve", "retain", "delete", "subprocessor" and "region". Copy each relevant sentence into a note with the page address and the date. Then ask the assistant you already use to help, using only the vendor's public terms, which contain no patient data:

Below are extracts from a vendor's terms. For each of these questions, answer YES, NO or NOT STATED, and quote the sentence:
1. Does the vendor use customer content to train or improve its models?
2. Is audio kept after the note is created? For how long?
3. Can the customer delete recordings and transcripts?
4. Does the vendor offer a signed data-processing agreement?
5. Where is data stored?
Do not infer. If the extract does not say, write NOT STATED.

EXTRACTS:
[paste]

Illustrative output: "1. NO: 'Customer content is not used to train our models on paid plans.' 2. NOT STATED. 3. YES: 'You may delete any session at any time.' 4. YES. 5. NOT STATED." Two NOT STATED answers become two emails to the vendor. Their reply, saved with the terms, is part of your evidence if a patient or board ever asks how you chose the tool.

Plan differences that change the answer

The same product often appears at three levels, and consent wording that is true at one level is false at another.

  • Free or personal plan: check first for training on content, short retention limits and absence of a data agreement. These plans are built for individuals, not for patient information.
  • Standard paid plan: often adds a no-training promise and more storage, but may still lack a signed agreement or audit logs.
  • Clinic, team or enterprise plan: usually where the signed agreement, access controls, admin settings and longer-term retention options appear.

Whichever you choose, the consent line should match that exact plan. If you upgrade or downgrade, re-read it. A clinic that downgrades to save $20 a month and silently loses the no-training clause has changed what patients agreed to.

When the clinician and the tool disagree about consent

Some tools show an on-screen consent prompt for patients, others rely on the clinician. Do not let a tool's own prompt replace your process. A vendor's built-in checkbox shows that someone ticked a box, not that the patient understood. Your spoken script and your logged field remain the record. If the tool offers a patient-facing statement, read it against your wording: they should say the same things.

Telehealth and home visits

Remote consultations add steps. The patient may be in a place where others can hear, a recording may already be running on the video platform, and recording rules may differ if the patient is in another state or country from you. Ask where the patient is at the start of the call, confirm they are alone or happy for others to hear, and tell them about the notes tool before starting it. If your video platform records and your notes tool records, you now have two recordings: decide which one you keep and delete the other on a schedule.

A before-and-after of the consent conversation

Wording matters more than clinicians expect. Compare two ways of asking the same thing.

Before: "Is it okay if I use my AI thing today? It just helps with the notes." The patient hears something casual and says yes without knowing it records, or says no because "AI" sounds alarming.

After: "I'd like to use a tool that listens to our visit and drafts my notes. I check every word of the note myself, and the company can't use your information to train its software. If you'd rather I didn't, I'll type the notes and nothing changes about your care. Which would you prefer?" The second version names the action, the safeguard and the alternative, ends with a real choice, and takes about twenty seconds.

Notice what the second version avoids: it makes no claim you cannot support, such as "it's completely secure", and it never implies that saying no will slow the appointment. Patients pick up on both.

A quick sum on the cost of getting it wrong

Suppose the clinic sees 90 patients a week for 48 weeks, so 4,320 visits a year. If the tool runs on every visit and consent is logged properly on 95 per cent, that still leaves 216 visits a year where the log is missing or unclear, which is more than four a week. That is why the monthly count matters. A gap of four a week is a process problem you can fix with a prompt on the screen; left alone, it becomes the file a patient or regulator asks about. Illustrative numbers, but the arithmetic is the same at any clinic size: small error rates multiply over thousands of visits.

When a recording slips through without consent

Have a short plan before you need it. If a recording was made without consent, tell the clinic lead the same day, delete the audio and transcript, and record what happened and what you did. If a vendor reports a breach, find out which patients and dates were affected using the export of your own logs, and follow your local reporting rules, which may include time limits to notify a regulator and affected patients. If you are unsure whether a slip needs reporting, ask your privacy adviser or professional body promptly rather than waiting.

Five spot checks on the consent setup

  1. Pick five patient records from the last month and confirm the consent field matches what happened.
  2. Ask the vendor to delete a test recording and confirm in writing that it was deleted.
  3. Read your vendor's terms again every quarter. Set a diary reminder.
  4. Make sure the privacy notice on your website and in reception mentions AI-assisted notes.
  5. Run one declined-consent test visit end to end, from the flag to a hand-written note.

If the clinic is thinking about the money side, the tutorial on whether an AI scribe is worth it for a small private clinic sets out the cost question. For a broader roll-out and how patients react, see rolling out an AI scribe without losing patient trust, and for the consent wording more generally, telling patients you use AI note-taking.

A final word on local rules. Privacy law, recording law and your professional board's guidance differ by country and, in some countries, by state. Nothing here replaces checking yours. Write down what you verified, when and from which source, and keep that file with your tool's terms. If you would rather map the checks with someone, that is what my AI implementation consultation covers, through the contact page.

Consent and data questions from chiropractors

Is verbal consent enough to record a visit?

Often it is acceptable, but it depends on your country, state and regulator, and some places require recording consent from every party. Verbal consent works best when you also log it in the record at the time. Check your own board's guidance, and use written consent for anything stored long term.

What if a patient says no?

Record nothing and write the note yourself. Flag the patient in your system so the next clinician does not switch the tool on by habit. Never let a refusal change the quality of care, the wait or the price.

Can I use a free AI notes app?

Think twice. Free tiers can use content to improve their models, may lack a data agreement and may offer weak deletion options. Use a tool whose paid plan states no training on your content, and which will sign the data terms your local privacy law requires.

Do I need consent for dictation without a patient present?

If you dictate after the visit, the audio holds your voice but the content still describes the patient. The consent question shifts to data handling: the tool must be approved, the data terms must fit, and your privacy notice should say that software helps draft notes.

Who is responsible if the AI note is wrong?

You are. The note is the clinician's record, whoever drafted it. Read it, correct it and sign it before it enters the file, and do not rely on a smooth summary to be accurate about positions, grades or contraindications.

Further reads

Sources: vendor privacy, data-use and security pages for AI note-taking tools; professional-board guidance on recording and records. Rules vary by country and state, so check your own.

Want a consent and data check written for your clinic?

On a 1:1 call we'll walk through the tools you are considering, set out the checks that apply to your clinic, and build a simple opt-out routine for the front desk.

Book a 1:1 call with me