Recording therapy: consent laws and practice policy
Summary
Whether you can record a therapy session turns on two separate questions. First, your state's recording law: some states require every party's consent, others only one. Second, clinical informed consent — every ethics code requires the client's specific, documented permission to record, and the right to decline without penalty. A recording is protected health information the moment it exists, so it follows the same confidentiality and security rules as the rest of the chart.
By Gale Editorial · Updated 2026-07-26. Every figure cited to a dated source. How we write.
Can therapy sessions be recorded, and who has to consent?
Yes — a therapy session can be recorded, but only when two separate requirements are both met, and the first of them varies by state. Once a recording exists it is protected health information, so it lives under the same confidentiality and security obligations as the rest of the chart, and it must be created and stored on HIPAA-compliant terms 1Ref 1HHS Office for Civil Rights (2026).HIPAA Privacy Rule and Sharing Information Related to Mental Health.That a session recording is protected health information subject to HIPAA confidentiality and security once it exists.. The threshold question is not whether recording is allowed in general, but whether it is lawful in your state and properly consented in your room.
Getting one layer right does not cover the other. A recording your state's law permits still needs the client's clinical consent; a consent form the client signed does not make an otherwise-unlawful recording lawful. Settle both before you press record.
Two consent layers: your state's recording law and clinical consent
Recording sits under two rulebooks at once. The first is your state's electronic-recording (wiretapping) law, which governs whether a conversation may be recorded at all and whose permission is required: states split between all-party consent, where everyone recorded must agree, and one-party consent, where a single participant's agreement suffices. Because that line is set state by state, confirm your own state's rule and never assume a neighboring state's standard applies.
The second layer is clinical, and here the professions converge: each discipline's ethics code requires informed consent specific to recording before you record — the APA code for psychologists 2Ref 2American Psychological Association (2017).Ethical Principles of Psychologists and Code of Conduct.The APA ethics requirement of informed consent specific to recording, and the elements a recording consent should cover, for psychologists., the ACA code for counselors 3Ref 3American Counseling Association (2014).ACA Code of Ethics.The ACA ethics requirement of informed consent to record for counselors., and the NASW code for social workers 4Ref 4National Association of Social Workers (2021).NASW Code of Ethics.The NASW ethics requirement of informed consent to record for social workers.. Meeting your state's recording law does not excuse the ethical consent; meeting the ethical consent does not make an unlawful recording lawful. You need both.
What informed consent to record must cover
Informed consent to record is more than a signature line. It should name the purpose of the recording (supervision, the client's own review, training), where the file will be stored and for how long, who will have access, how it will be secured, and the client's right to decline recording without any effect on their care — and to withdraw that consent later. Put it in writing, date it, and record it as a distinct consent rather than folding it silently into the general intake packet 2Ref 2American Psychological Association (2017).Ethical Principles of Psychologists and Code of Conduct.The APA ethics requirement of informed consent specific to recording, and the elements a recording consent should cover, for psychologists..
Revisit the consent when the purpose changes. A recording made for your own supervision is not automatically cleared for a training presentation or an outside consultation; a new use generally needs a new agreement. Keeping the consent narrow and specific is what keeps it genuinely informed.
Where a recording lives: the chart versus psychotherapy notes
A recording is part of the record, but exactly which part matters. Most session recordings belong to the general designated record set, discoverable and accessible to the client like other protected health information. If instead you keep the recording as part of your separately maintained psychotherapy notes — the process notes you store apart from the chart — it inherits their heightened protection and their exclusion from the ordinary access right 5Ref 5HHS Office for Civil Rights (2026).Does HIPAA provide extra protections for mental health information compared with other health information?.That psychotherapy notes are kept separate with heightened protection and excluded from the ordinary access right, governing where a recording sits.. Decide deliberately where a given recording sits, because that choice controls who can later reach it.
Be conservative with the file itself. A recording captures the client's own words verbatim, so it is among the most sensitive items you hold. Retention, encryption, and a clear deletion date should be settled before you make the first recording, not after a request for it arrives.
Recording telehealth sessions and AI scribes
Telehealth adds a platform to the consent picture. If your video service or an AI scribe captures audio or generates a transcript, that vendor is creating or receiving PHI on your behalf and needs a business-associate agreement before any session runs through it; the platform's built-in record button does not change your obligation to obtain the client's specific consent first. APA's telepsychology guidance frames the added duties — competence with the medium, consent tailored to remote care, and security of the transmission and the stored file 6Ref 6American Psychological Association (2013).Guidelines for the Practice of Telepsychology.Telepsychology duties of competence, remote-care informed consent, and security of the medium for recorded telehealth sessions..
The same rule reaches ai scribes in the therapy room: an automated note-taker that listens is recording, and the client must agree to it as they would to any other recording. Name the tool, explain what it captures and stores, and log the consent — do not let a default setting record for you silently.
Minors, couples, and groups: whose consent counts
When more than one person is in the room — or the client cannot consent alone — recording needs everyone's permission. For a minor or an incapacitated adult, HIPAA generally defers to state law on who acts as the personal representative and can authorize recording on the client's behalf, with narrow exceptions in abuse or endangerment situations 7Ref 7HHS Office for Civil Rights (2026).Personal Representatives.That HIPAA defers to state law on who acts as a personal representative authorizing recording for a minor or incapacitated adult, with abuse/endangerment exceptions.. Involve the minor to the extent appropriate, and remember that a teen's own consent rights over sensitive care can complicate both recording and later access to the teen records.
- Couples. Everyone recorded must consent; for couples records the release and the recording alike require both partners' agreement.
- Groups. In a recorded group, group confidentiality means every member — not just the one in focus — has to agree before the session is captured, and any member's refusal typically ends the recording.
When the client wants to record you
A client may ask to record their own sessions, and the same state recording law applies to them as to you. In a one-party-consent state a client can generally record a conversation they are part of; in an all-party state they need your agreement too. You cannot forbid what the law permits, but you can set a written practice policy on recording that both sides agree to at intake — covering client recordings, your recordings, and what happens to each.
Decide your stance in advance rather than in the moment. A clear, neutral policy — the recording patient is welcome to, or is asked not to, under stated terms — protects the therapeutic frame and prevents an awkward mid-session negotiation. If a recording is later sought by a third party, treat that as a separate legal-process question, the same posture you would take toward the law-office letter requesting records.
Common questions
Run your practice on Gale
The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.
Start or manage a practice →References
- 1.HHS Office for Civil Rights (2026). HIPAA Privacy Rule and Sharing Information Related to Mental Health. U.S. Department of Health and Human Services. linkThat a session recording is protected health information subject to HIPAA confidentiality and security once it exists.
- 2.American Psychological Association (2017). Ethical Principles of Psychologists and Code of Conduct. American Psychological Association. link ✓The APA ethics requirement of informed consent specific to recording, and the elements a recording consent should cover, for psychologists.
- 3.American Counseling Association (2014). ACA Code of Ethics. American Counseling Association. link ✓The ACA ethics requirement of informed consent to record for counselors.
- 4.National Association of Social Workers (2021). NASW Code of Ethics. National Association of Social Workers. link ✓The NASW ethics requirement of informed consent to record for social workers.
- 5.HHS Office for Civil Rights (2026). Does HIPAA provide extra protections for mental health information compared with other health information?. U.S. Department of Health and Human Services. linkThat psychotherapy notes are kept separate with heightened protection and excluded from the ordinary access right, governing where a recording sits.
- 6.American Psychological Association (2013). Guidelines for the Practice of Telepsychology. American Psychological Association. linkTelepsychology duties of competence, remote-care informed consent, and security of the medium for recorded telehealth sessions.
- 7.HHS Office for Civil Rights (2026). Personal Representatives. U.S. Department of Health and Human Services. linkThat HIPAA defers to state law on who acts as a personal representative authorizing recording for a minor or incapacitated adult, with abuse/endangerment exceptions.
https://www.gale.care/for-providers/pr-session-recording-consent · 7 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.