Disclosure: I have no affiliation with PointClickCare, Abridge, Sutter Health, MemorialCare, Sharp HealthCare, or any vendor named here. Nobody named here spoke with me. Every legal claim below is an allegation in a filed complaint, not a finding of fact. Judge the argument with all of that on the table.
Five Ambient AI Findings, Stated Before the Argument
- Patients are suing three California health systems over ambient AI scribes that allegedly recorded them without consent.
- One complaint alleges the AI wrote consent language into charts for visits where the patient says nobody ever asked, across a proposed class of more than 100,000 visits.
- HIPAA permits recording, but state eavesdropping laws determine whether a senior living healthcare provider may record.
- In October 2026, ambient AI documentation becomes commercially available in the senior care EHR with the largest install base, capturing audio via a phone app.
- I reviewed public job postings across 85 senior living and long-term care organizations. No U.S.-based senior living housing operator I could find advertises an implementation, regulatory, and compliance role with “artificial intelligence” in the title.
Patients Are Suing Three Health Systems Over AI That Recorded Them Without Consent
On November 26, 2025, a patient sued Sharp HealthCare in San Diego Superior Court.
The complaint, Saucedo v. Sharp Healthcare, alleges that, beginning in April 2025, Sharp used an ambient AI tool called Abridge to record conversations between patients and clinicians.
The AI Recording Problem
According to public documents, Sharp HealthCare did not inform its patients that audio recordings were being made.
Recording without telling anyone is bad enough – but the allegation that follows is worse.
The legal complaint alleges the AI automatically wrote statements into patient charts saying staff had advised the patient of the recording and the patient had agreed – for visits where the patient says that conversation never happened. The proposed class covers more than 100,000 patient visits. KPBS reported the filing in December.
And the allegation goes further than the missing consent, alleging that the software created a written record claiming that staff had obtained it.
Two additional lawsuits followed:
Sutter Health and MemorialCare are defending a class action in the U.S. District Court for the Northern District of California over the same product. That complaint alleges violations of the California Invasion of Privacy Act, the Confidentiality of Medical Information Act, California’s Unfair Competition Law, the federal Wiretap Act, and intrusion upon seclusion.
No court has ruled on any of it. These are complaints; defendants will likely answer them -but the question they raise does not depend on who wins.
Fisher Phillips and Alston & Bird both published client alerts about it. That should tell healthcare professionals just how seriously the healthcare bar takes this exposure.
HIPAA Permits Recording. BUT – State Eavesdropping Law Likely Makes Recording Patients a Crime.
Ask a technology vendor whether their ambient AI complies with all federal and state regulations.
What did they say about HIPAA? Did you get a response? They might have to check with the lawyers, and you might hear about a business associate agreement and encryption.
But those responses don’t answer whether the law lets you switch on the microphone without telling a patient. HIPAA doesn’t require patient consent to record a treatment encounter.
Recording to document treatment counts as a treatment, payment, and operations use. HIPAA permits it. If you looked to HIPAA to tell you whether you may record, HIPAA says yes.
Your state’s eavesdropping statute(s) decide whether you may record RE patients.
State legislatures likely wrote their eavesdropping laws decades before anyone imagined an AI scribe.
Correction, August 23, 2026. An earlier version of this article said twelve states make it a crime to record without the consent of every participant. That was wrong, and the error was mine. I have now read each statute on the state legislature’s own website. Below is what each one actually says, with the operative words quoted.
Three states do not use a consent standard at all.
- Oregon requires that every participant be “specifically informed that their conversation is being obtained.” ORS 165.540(1)(c). That is notice. Nobody has to agree.
- Connecticut reaches recording “without the consent of at least one party thereto, by a person not present thereat.” Conn. Gen. Stat. 53a-187(a)(2). A participant is present, so the criminal statute does not reach them.
- Montana prohibits recording “by use of a hidden electronic or mechanical device” and “without the knowledge of all parties.” Mont. Code Ann. 45-8-213(1)(c). Knowledge, not agreement, and only a concealed device.
Five states do require the consent of every party, and each one carries a qualifier that matters in a senior living building.
- Maryland requires all-party consent. Cts. & Jud. Proc. 10-402.
- California requires consent of all parties, but only to a “confidential communication,” which Penal Code 632(c) defines to exclude any circumstance “in which the parties to the communication may reasonably expect that the communication may be overheard or recorded.” A semi-private room with staff walking in may fall outside the statute entirely.
- Illinois requires consent of all other parties, but only where the device is used “in a surreptitious manner.” 720 ILCS 5/14-2(a)(2). Open recording is not eavesdropping there.
- Washington requires consent of all persons, and then RCW 9.73.030(3) says consent “shall be considered obtained whenever one party has announced to all other parties… in any reasonably effective manner” that recording is about to occur, provided the announcement itself is recorded. An announcement becomes consent by operation of law.
- Pennsylvania requires all parties’ prior consent under 18 Pa.C.S. 5704(4), and protects only speech uttered with “an expectation that such communication is not subject to interception under circumstances justifying such expectation.” 5702.
New Hampshire requires all-party consent, and grades the offense by who is holding the recorder: a participant who records without it commits a misdemeanor under RSA 570-A:2, I-a, rather than the class B felony under I.
Delaware cannot be classified. 11 Del. C. 2402(c)(4) makes it lawful to intercept “where the person is a party to the communication.” 11 Del. C. 1335(a)(4) makes it a crime to intercept “without the consent of all parties thereto… including private conversation.” Two Delaware statutes contradict each other on the same conduct, and no Delaware state court has reconciled them.
Florida prohibits interception of an oral communication and permits it under Fla. Stat. 934.03(2)(d) when all parties have given prior consent. Michigan I am leaving out. The Michigan Legislature’s own website would not return the text of MCL 750.539c for me or for a second research system, and I will not describe a criminal statute I could not read.
Every quotation above comes from the state legislature’s own website, read on August 23, 2026. I recommend confirming your own states against current code before you rely on it. The Reporters Committee for Freedom of the Press and the Digital Media Law Project both maintain state-by-state guides. Read that list with a senior living map in your head.
A vendor who answers a recording question with a BAA has answered a different question.
A BAA governs how a vendor handles data it already holds. But a state’s eavesdropping statute(s) govern whether organizations and individuals could lawfully capture the audio in the first place.
I write this from experience, as an investigative reporter who’s covered Maryland politics for over a decade.
About Maryland (because I live in Maryland)
- Section 10-402 makes a violation a felony in Maryland, punishable by up to 5 years and a $10,000 fine.
- Section 10-410 gives the recorded person a private right of action for actual damages, but not less than liquidated damages of $100 a day or $1,000, whichever is higher, plus punitive damages, attorney’s fees and costs.
For a senior living operator, civil exposure compounds over a long stay and names the community as the defendant.
Oregon and Vermont Each Change the Answer for Bedside Recording
- Oregon requires notice, not consent. Under ORS 165.540(1)(c) it is a crime to obtain a conversation “if not all participants in the conversation are specifically informed that their conversation is being obtained.” Being informed is not the same as agreeing. The Ninth Circuit, sitting en banc, upheld that statute on January 7, 2025 in Project Veritas v. Schmidt, describing Oregon’s interest as ensuring “that its residents know when their conversations are recorded.” A violation is a Class A misdemeanor.
- Connecticut splits the answer: all-party for recorded phone calls, one-party in person under the criminal statute, with separate civil exposure. Which answer applies depends on which exposure you are asking about, and most people never ask the second question.
- Vermont is the only state without a general wiretap statute, making it one-party by default. Its state Supreme Court held in State v. Geraw, 795 A.2d 1219 (Vt. 2002), that the Vermont Constitution bars police from secretly recording inside a home – without a warrant.
Has any court decided whether that reasoning reaches a private caregiver recording in a resident’s room? You might soon find out.
In senior living, a resident’s room is their home. Vermont has no state statute directly regulating a private party recording an in-person conversation, which leaves the federal one-party rule as the baseline. I have not found a Vermont case applying Article 11 to a private, non-governmental recorder.
PointClickCare’s Vox Advantage Records Care Conversations Through a Staff Member’s Phone
On August 12, 2026, PointClickCare, a North American health tech company, announced Vox Advantage, ambient AI documentation built natively into its EHR. It reached limited availability that day.
PointClickCare’s release states that it will become commercially available in October 2026.
Two things in that release decide how hard the consent problem gets:
- The first is how Vox Advantage captures audio. Not a room microphone. Not a dedicated device. An Apple or Android mobile app. A staff member’s phone, in a resident’s room.
- The second is what the company says about consent. The release gives it one clause inside a three-part sentence: the product “uses relevant clinical context before an interaction begins, builds consent into every session, and turns care conversations into documentation.” Five words for consent, sitting between two features. The release does not say what building consent into a session means, who obtains it, or how the product records that it happened.
Pay attention to this sentence from PointClickCare’s latest release: “Care teams remain in control with sign-off on every note before it becomes part of the chart.“
What’s Required
A clinician approving every note before it enters the record is precisely the control that the Sharp complaint says was missing – and PointClickCare earns credit for building it. That particular sentence governs what goes into the patient’s chart – but it doesn’t govern whether the microphone should have been on.
Commercially available means purchasable.
But that doesn’t mean “deployed.” Nothing happens in any community until that community buys it, contracts for it, configures it, trains staff, and switches it on.
Keep in mind that October is right around the corner; senior living operators, I’d imagine, are on the phone with general counsel daily.
4 Reasons Recording Patient Consent Is Harder in Assisted Living Than in a Doctor’s Office
The health systems now in litigation faced a narrower version of this problem. A clinic visit is usually two people in a closed room for fifteen minutes, but a care conversation in assisted living is not always two people in a closed room.
1) The room rarely holds two people.
A care conversation in assisted living routinely includes the resident, an adult child, a medication aide, and a registered nurse.
In an all-party state, like Maryland, consent means all parties must consent to audio recording. Every single time – including an adult daughter who drove in from out of state to visit her mother at the senior living community and joined the session halfway through.
2) The room is a home.
A resident’s apartment is their residence, not a treatment room they visit. The privacy expectation shifts because the setting shifts.
Maryland’s statute, to take one example, reaches “oral communication” defined as words spoken in private conversation.
Whether a semi-private room with a curtain and staff entering unannounced qualifies as private conversation is a question of fact, and it is exactly the kind of question a plaintiff’s lawyer enjoys.
3) Dementia is not incapacity; clinicians assess capacity decision by decision.
Many residents with a dementia diagnosis can consent to a recording.
But some cannot.
Where capacity is absent, states supply surrogate decision-makers: an advance directive agent, a guardian, or a health care surrogate. Maryland runs that through the Health Care Decisions Act.
But that Act empowers a surrogate to make health care decisions, and Maryland’s eavesdropping statute sits in an entirely different body of law. Whether a surrogate can waive a criminal privacy protection on a resident’s behalf is a question I cannot find anyone answering. Do not assume the answer is yes.
So the answer is not that you cannot record.
Which current role in senior living is responsible for AI compliance?
Legal? I surely hope so.
Or somebody trained on AI compliance? Maybe so – and I believe that’s what’s coming.
4) And somebody in a senior living community has to document patient consent; a sign on the wall probably doesn’t cut it.
Maryland’s own health care bar published guidance on ambient scribes in September 2025, telling providers to obtain affirmative, documented consent and warning them that posted notice is likely to fall short.
I Searched 85 Senior Living Organizations for Someone Accountable for AI. I Found No One.
Ambient AI is arriving in senior care/senior living on a vendor’s release schedule. The legal floor underneath it is a patchwork of criminal statutes. Someone inside these organizations should own that question.
So I went looking for that person and reviewed public job postings across 85 senior living and long-term care organizations – operators, nonprofits, faith-based systems, skilled nursing, PACE, REITs, and the technology vendors that sell into all of them.
I found no U.S. senior living housing operator advertising a role with artificial intelligence in the title.
Of the 84 organizations I could score, 67 showed no AI roles of any kind. That is 80%. Where live AI roles do exist in this sector, roughly two-thirds sit at technology vendors and suppliers, not at the operators running the buildings. I found no Chief AI Officer anywhere in the scanned population.
Brookdale, the largest operator in the country, carried 1,946 open requisitions across 512 unique titles while I looked. Not a single title contained the words “artificial intelligence”.
I want to draw that line precisely: Brookdale posts data analysts and IT security engineers. This is a claim about titles, not about whether anyone there works on data.
On AI governance
I have NOT found a standalone AI governance role live in senior living. I found exactly one named governance seat, a Manager of AI Strategy and Governance at a multi-facility skilled nursing operator running an AI steering committee with compliance, legal, risk, and privacy at the table.
One – in healthcare proper, a standalone AI role exists. But in senior care? I haven’t found the role.
The industry’s own benchmark points the same direction: the second annual CTO Hotline report from Ziegler Link and LeadingAge CAST, published August 6, 2026, surveyed more than 100 senior living technology professionals.
Not one reported extensive AI capability. Second year running.
My Search Method
This is my own scan of public job postings, informal, with no formal sample frame. I audited it afterward; my audit changed a couple of things.
- My first pass reported 74% of organizations showing zero AI roles; the corrected figure is 80%.
- My first pass put vendor concentration at 66%; the corrected figure is 67%, and the original number turned out right for the wrong reasons.
- I also found that a posting count I had carried silently included an entire enterprise hospital board with nothing to do with senior living. I cut it rather than publish it.
- Every correction except that one strengthened its finding.
Recording Arrives in October 2026. Are Senior Living Operators Staffing This AI Role for Compliance Purposes?
Three facts, side by side:
- Ambient AI scribes are already producing litigation in healthcare, including an allegation that the software documented consent the patient says nobody obtained.
- The same category of product reaches senior care in October 2026, capturing audio through a staff member’s phone, in rooms that are legally homes, with more people present than a clinic visit, in a sector where a meaningful share of residents need a surrogate to consent for them.
- The sector has hired nobody whose job is to have an answer.
These predictions describe where accountability currently sits: nowhere in particular.
Five Questions Every Senior Living Operator Should Answer Before Switching On Ambient AI
If you operate a community, or you sit on a board that governs one, you can answer these this week.
- In which states do we operate, and which of those require all-party consent? This takes twenty minutes; most operators have never asked this question.
- Who counts as “all parties” in a care conversation in our buildings? Write down every person routinely in the room. Then ask how each one consents.
- What is our process when a resident cannot consent, and who signs on their behalf? Do not assume your treatment-consent chain covers recording. Ask counsel whether it does.
- How do we document consent, and would that documentation withstand scrutiny by a plaintiff’s lawyer? A sign on the wall probably will not. Maryland’s health care bar said so a year ago.
- Who, by name and title, owns the answer? Not the vendor. Not the EHR. Somebody who works for you.
Name the Person Accountable for AI Recording in Your Senior Living Communities
Every operator I know can name the person accountable for fire safety.
I bet you these same operators can name the person accountable for infection control, for medication administration, for dietary. Those roles exist because somebody once decided the risk warranted attaching a name to it.
Ambient AI is about to start writing the clinical record – and it will do this in a resident’s home, in a conversation with their family in the room, in states where getting it wrong is a crime rather than a citation.
Who is that person?
It’s not the committee; it’s not the vendor’s compliance page.
Who is this physical person?
If you cannot answer that with a single name, what exactly will you say when someone asks?
Hi, I’m Ryan Miner. I write about artificial intelligence in senior living, senior living financing, how businesses actually make money, aging services, healthcare operations, and public accountability. I hold an MBA, spent roughly a decade in healthcare and senior services before founding Sentinel Silver, LLC, and I have been the editor and founder of a Maryland news and politics media outlet for over 11 years. Please feel free to reach out to me at [email protected].
The federal side of this question, including which HIPAA rules govern an AI vendor and why the courts left 45 CFR 92.210 standing, I set out separately in what HIPAA and Section 1557 require of a clinician using AI.
