Before Your Community Turns On Ambient AI, Read Your State's Recording Law
Picture a daughter visiting her mother in memory care on a Tuesday afternoon. An aide kneels beside the chair and talks quietly while her phone rests on the arm. The daughter assumes it is a phone.
It may be an ambient AI documentation tool. PointClickCare announced Vox Advantage on August 12 and said it would be commercially available in October. Staff capture care conversations through a phone app, and the tool drafts documentation into the resident's record. The company says care teams sign off on every note, and that the product "builds consent into every session." Its release does not say how consent is obtained or recorded.
That is the question the courts are already asking about the same kind of technology, in hospitals. A patient alleges in a proposed class action that Sharp HealthCare used an ambient AI tool to record his visit in San Diego without his consent. Months later, patients filed a proposed federal class action against Sutter Health and MemorialCare over the same tool, alleging violations of California's medical privacy act, its Invasion of Privacy Act, and the federal Wiretap Act. These are allegations. No court has ruled, and neither case names a senior living operator. I treat them as a warning, not a precedent.
HIPAA will not answer the question for you. It permits uses of information for treatment and operations. Whether you may record a conversation, and who has to be told or agree first, is decided by your state. Oregon, for one, requires that all participants in an in-person conversation be specifically informed it is being recorded. Your state may read differently, so have counsel read it.
In senior living, the resident's room is their home, and some residents cannot consent for themselves. Who may say yes on their behalf is a second question your counsel has to answer for your state.
Before any community turns on an ambient tool, do three things this month. Pull your state's recording statute, not the vendor's privacy page. Ask the vendor, in writing, who controls the consent record, who can access the raw audio, and whether that audio can be pulled into a lawsuit later. And write down who in your building has to say yes first, and where the answer is recorded.
If the vendor's answer is "built in," ask to see where.
Read the full research behind this story, plus this week's insurance coverage and governance flagships, in the LITT Briefing on Substack.