Guide

Recording therapy: consent laws and practice policy

Summary

Whether you can record a therapy session turns on two separate questions. First, your state's recording law: some states require every party's consent, others only one. Second, clinical informed consent — every ethics code requires the client's specific, documented permission to record, and the right to decline without penalty. A recording is protected health information the moment it exists, so it follows the same confidentiality and security rules as the rest of the chart.

By Gale Editorial · Updated 2026-07-26. Every figure cited to a dated source. How we write.

Where a recording lives: the chart versus psychotherapy notes

A recording is part of the record, but exactly which part matters. Most session recordings belong to the general designated record set, discoverable and accessible to the client like other protected health information. If instead you keep the recording as part of your separately maintained psychotherapy notes — the process notes you store apart from the chart — it inherits their heightened protection and their exclusion from the ordinary access right 5. Decide deliberately where a given recording sits, because that choice controls who can later reach it.

Be conservative with the file itself. A recording captures the client's own words verbatim, so it is among the most sensitive items you hold. Retention, encryption, and a clear deletion date should be settled before you make the first recording, not after a request for it arrives.

Recording telehealth sessions and AI scribes

Telehealth adds a platform to the consent picture. If your video service or an AI scribe captures audio or generates a transcript, that vendor is creating or receiving PHI on your behalf and needs a business-associate agreement before any session runs through it; the platform's built-in record button does not change your obligation to obtain the client's specific consent first. APA's telepsychology guidance frames the added duties — competence with the medium, consent tailored to remote care, and security of the transmission and the stored file 6.

The same rule reaches ai scribes in the therapy room: an automated note-taker that listens is recording, and the client must agree to it as they would to any other recording. Name the tool, explain what it captures and stores, and log the consent — do not let a default setting record for you silently.

When the client wants to record you

A client may ask to record their own sessions, and the same state recording law applies to them as to you. In a one-party-consent state a client can generally record a conversation they are part of; in an all-party state they need your agreement too. You cannot forbid what the law permits, but you can set a written practice policy on recording that both sides agree to at intake — covering client recordings, your recordings, and what happens to each.

Decide your stance in advance rather than in the moment. A clear, neutral policy — the recording patient is welcome to, or is asked not to, under stated terms — protects the therapeutic frame and prevents an awkward mid-session negotiation. If a recording is later sought by a third party, treat that as a separate legal-process question, the same posture you would take toward the law-office letter requesting records.

Common questions

It depends on your state's recording law. All-party (two-party) consent states require everyone recorded to agree; one-party states require only one participant's consent. Because that split is set state by state, confirm your own statute before recording. Separately, every ethics code requires the client's informed consent to record regardless of what the recording law permits, so in practice you obtain clear consent either way.

Usually yes. Most recordings belong to the general designated record set and are accessible to the client like other protected health information. If you keep a recording as part of your separately maintained psychotherapy notes, it inherits their extra protection and their exclusion from the ordinary access right. Decide deliberately where a recording sits, since that choice controls who can reach it later.

Yes. An AI note-taker that captures audio or produces a transcript is recording, so the client must consent to it as they would any other recording, and the vendor needs a business-associate agreement before a session runs through it. Name the tool, explain what it captures and stores, and log the consent as a distinct item rather than burying it in the intake packet.

That turns on the same state recording law that applies to you. In a one-party-consent state a client can generally record a conversation they are in; in an all-party state they need your agreement too. You cannot prohibit what the law allows, but a written recording policy agreed at intake lets both sides know where they stand before it comes up.

In writing, dated, and separate from the general consent form. It should state the purpose, where the recording is stored and for how long, who can access it, how it is secured, and the client's right to decline or withdraw consent without affecting care. Treating it as its own consent — not a line buried in intake — is what makes it genuinely informed.

Run your practice on Gale

The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.

Start or manage a practice →

References

  1. 1.HHS Office for Civil Rights (2026). HIPAA Privacy Rule and Sharing Information Related to Mental Health. U.S. Department of Health and Human Services. linkThat a session recording is protected health information subject to HIPAA confidentiality and security once it exists.
  2. 2.American Psychological Association (2017). Ethical Principles of Psychologists and Code of Conduct. American Psychological Association. linkThe APA ethics requirement of informed consent specific to recording, and the elements a recording consent should cover, for psychologists.
  3. 3.American Counseling Association (2014). ACA Code of Ethics. American Counseling Association. linkThe ACA ethics requirement of informed consent to record for counselors.
  4. 4.National Association of Social Workers (2021). NASW Code of Ethics. National Association of Social Workers. linkThe NASW ethics requirement of informed consent to record for social workers.
  5. 5.HHS Office for Civil Rights (2026). Does HIPAA provide extra protections for mental health information compared with other health information?. U.S. Department of Health and Human Services. linkThat psychotherapy notes are kept separate with heightened protection and excluded from the ordinary access right, governing where a recording sits.
  6. 6.American Psychological Association (2013). Guidelines for the Practice of Telepsychology. American Psychological Association. linkTelepsychology duties of competence, remote-care informed consent, and security of the medium for recorded telehealth sessions.
  7. 7.HHS Office for Civil Rights (2026). Personal Representatives. U.S. Department of Health and Human Services. linkThat HIPAA defers to state law on who acts as a personal representative authorizing recording for a minor or incapacitated adult, with abuse/endangerment exceptions.

https://www.gale.care/for-providers/pr-session-recording-consent · 7 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.

Findability, by specialty

How practices like yours get found in local search and AI answers — the honest playbook, per specialty.

SEO for private practices · SEO for AI search / answer engines (all verticals)