How to Talk to Clients About AI in Your Therapy Notes: A Consent Guide for 2026

A practical guide for therapists on having the AI-in-documentation conversation with clients. Covers ethical obligations, state laws (Illinois, Texas, New York), recording consent requirements, sample consent language for generation-based and ambient recording tools, and what actually helps therapists move forward.

Many therapists know they want to try AI documentation tools. They have heard the time-savings claims. They have watched colleagues describe getting notes done before the client reaches the parking lot. And then they stall.

Not because of price. Not because of HIPAA concerns. They stall because they do not know how to start the consent conversation with clients.

"How do I bring this up?" is one of the most common questions therapists ask before adopting AI notes. It sounds simple but it carries real weight: you are asking a client who trusts you to process the most difficult experiences of their lives to also trust that a technology tool will be part of how you document those conversations.

This guide covers what the consent conversation actually involves, what state laws now require, how the type of tool you use shapes the conversation, and concrete sample language you can adapt for your practice.

Therapists understand informed consent as an ethical obligation. But for AI in documentation, consent has a second dimension that is still catching many practitioners off guard: it is also, in a growing number of states, a legal requirement with real penalties.

Informed consent in the context of AI documentation means that clients understand what tool is being used, what it does with session information, and that they have the opportunity to ask questions or decline. The ethical basis is straightforward: clients have the right to know how their protected health information is handled.

The legal dimension is newer and more specific. Since August 2025, at least three states have enacted or proposed laws that govern how therapists must disclose AI use in documentation. Others are following. Whether you practice in one of those states or not, the legal trend tells you something useful: regulators are converging on the idea that clients need more than passive notification buried in a privacy notice. They need an active disclosure.

What State Laws Now Require

Illinois: Public Act 104-0054 (Enacted August 2025)

Illinois became the first state to specifically regulate AI use in psychotherapy with the Wellness and Oversight for Psychological Resources Act (WOPRA).

The law permits AI documentation tools. What it mandates is explicit written client consent before any AI records or transcribes a therapy session for documentation purposes.

The critical word is "recording or transcribing." If your AI tool captures audio during the session and converts it to text (ambient recording), you need signed written consent in Illinois that specifically covers AI transcription. Your existing HIPAA privacy notice does not satisfy this requirement. It covers data handling, not the act of recording.

Penalties reach $10,000 per violation.

A concrete example: Dr. Marcela, an LCSW in Chicago, started using an ambient AI scribe before this law passed. She has a HIPAA-compliant privacy policy but no AI-specific consent language. Under WOPRA, every session she records without explicit written consent is a separate potential violation. She needs to update her intake forms before her next appointment.

Texas: Two Laws, Two Separate Obligations

Texas enacted two AI laws that together create a compound disclosure and review requirement for therapists:

Texas SB 1188 (effective September 1, 2025) requires healthcare practitioners who use AI for documentation to review all AI-generated records in a manner consistent with medical records standards. In practice: you must be able to demonstrate that you reviewed and approved every AI-generated note before it entered the clinical record. The law also includes strict data localization requirements (US-based cloud hosting for any clinical data). Penalties range from $5,000 to $250,000 per violation depending on intent and whether PHI was used improperly.

Texas TRAIGA / HB 149 (the Texas Responsible AI Governance Act, effective January 1, 2026) requires clear and conspicuous disclosure to patients when AI is used in their care. This is separate from SB 1188 and applies to any AI use in clinical contexts, not only documentation.

Texas therapists now carry a two-layer obligation: disclose AI use and document that they reviewed AI output. The good news is that if your workflow already involves reviewing notes before signing them, you are halfway there.

New York: S.8484 (Proposed)

The Oversight of Technology in Mental Health Care Act, introduced by Senator Kristen Gonzalez, mirrors Illinois' framework. It would prohibit autonomous AI therapeutic decision-making and require patient notification of AI purpose plus explicit informed consent before AI assists with session recording or transcription.

As of April 2026, S.8484 has not passed. But New York is a major therapy market, and the bill's structure tells you where regulation is heading nationally.

Before state AI laws entered the picture, there was already a layer of law governing session recording: wiretapping and recording consent statutes.

One-party consent states (31 states): The therapist's own consent to record is legally sufficient. The client does not need to separately consent.

All-party consent states (11 states plus DC): Every person present must consent before a session can be recorded. These states include California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, New Hampshire, Oregon, Pennsylvania, and Washington.

If you practice in California, Florida, or Pennsylvania and use an ambient recording AI scribe without explicit client consent, you may be violating wiretapping law entirely separately from any AI-specific statute.

For telehealth practices with multi-state clients: the more restrictive state's law controls. If a California client calls in to your Texas practice, you are operating under California's all-party consent requirement for that session.

The Most Important Distinction: What Kind of Tool Are You Using?

The complexity of the consent conversation depends almost entirely on whether your tool records sessions or not.

Ambient Recording Tools

Ambient AI scribes (tools that listen to the session in real time and generate notes automatically) involve session recording. The AI captures audio, transcribes it, and generates a structured note. From a consent standpoint, you are telling clients: "An AI system will listen to and transcribe our session, then use that transcript to produce my clinical notes."

This is a meaningful disclosure. Some clients will have no concerns. Others, particularly those dealing with trauma, legal matters, addiction, or occupational scrutiny, may have serious reservations. The consent conversation is not a formality; it requires genuine engagement.

Ambient tools also carry the highest regulatory friction. In Illinois, written consent is required. In all-party consent states, recording consent is required regardless of the tool. In Texas, mandatory review documentation is required on top of disclosure.

Generation-Based Tools

Generation-based tools work differently: the therapist writes a brief session summary after the session, and the AI structures it into a clinical note format. No audio is recorded. No session transcript is created.

The consent conversation for these tools is materially simpler. You are telling clients: "After our sessions, I use an AI writing tool to help me format my clinical notes. I write a summary of what we discussed, and the software helps me organize it into the standard documentation format. No recording of our sessions is involved."

This is closer to telling a client that you use spell-check or a template, except it merits more transparency because AI is involved in the structuring.

Generation-based tools are structurally exempt from recording-based consent requirements. Illinois WOPRA's explicit written consent requirement applies to AI "recording or transcribing" sessions. If your tool does not record or transcribe, that specific requirement does not apply to your workflow.

This is not a loophole. It is a design difference. And it is one reason why, as one practitioner-facing resource noted in 2026, "most private practice therapists prefer generation-based tools for exactly that reason: avoiding the need for session recording and the client consent issues that come with it."

Research on AI adoption in therapy practices (Blueprint AI, 2026; Ensora Health, 2026) points to three specific things that shift how therapists feel about the consent conversation:

Learning that a trusted peer has reviewed the process. Hearing another clinician say "I had this conversation with my clients and it went fine" is more reassuring than any vendor checklist. If you have a peer consultation group, bring it up. Normalize that you are navigating this actively.

Discovering that no recording is involved. Many therapists assume AI documentation tools work like Zoom recordings. When they realize that generation-based tools only process a text summary they write themselves (not a recording of the session), the anxiety about the consent conversation drops substantially. The question shifts from "How do I tell clients I'm recording them?" to "How do I mention I use AI writing software?"

Seeing that note output stays under clinician control. Clients sometimes ask whether the AI is "making decisions" about their treatment. The clear answer for documentation tools is no: the AI produces a draft that the therapist reviews and approves before it enters the record. Clinical judgment is not delegated to the system.

These are starting points, not finished legal documents. Have your ethics supervisor, malpractice insurer, or licensing board review any consent language before you use it in practice.

Scenario 1: Generation-Based AI Notes (No Recording)

This is the simplest scenario because no session recording is involved.

Suggested intake form language:

"I use AI-assisted software to help format my clinical notes. After each session, I write a brief summary of our work together, and the software helps me organize that summary into the standard documentation format required for clinical records. No audio recording or transcription of our sessions is involved. My clinical judgment, your complete record, and all decisions about your care remain entirely under my review and control. If you have questions about how this software handles information, please ask."

Suggested verbal introduction for new clients:

"I want to mention that I use a documentation tool that helps me format my session notes after we meet. I write a summary of what we covered, and it helps me structure that into the clinical note format. Nothing is recorded. I review everything before it goes in your chart. Do you have any questions about that?"

Scenario 2: Ambient Recording AI Scribe (Recording Involved)

This scenario requires more substantive disclosure, and in Illinois, explicit written consent.

Suggested written consent language:

"I use an AI-assisted transcription and documentation tool during therapy sessions. This tool records audio of our sessions and uses that recording to generate clinical notes. The recording is processed by [tool name], a HIPAA-compliant service that uses the audio solely for note generation purposes and [describe retention policy, e.g., deletes recordings after note generation]. I review and approve all AI-generated notes before they become part of your clinical record. My clinical judgment remains solely my own. You have the right to decline the use of this tool without affecting your access to or quality of care. By signing below, you consent to the recording and transcription of our sessions for clinical note purposes."

Key elements to include: the tool's name, what it records, how data is retained or deleted, who reviews the output, that declining has no effect on care, and a signature line.

For clients who decline: have a workflow ready. You will document sessions without the tool for that client. This is not a burden; it is respecting a legitimate choice.

Telehealth adds layers because client location determines which state's laws apply.

"I provide therapy through telehealth. If you are located in [state] during our sessions, please note that I [describe your AI documentation practice]. Under [applicable state law, if any], I am required to obtain your explicit consent before [recording/transcription takes place / using AI in my documentation process]. Your location at the time of each session may affect the legal requirements that apply. If you move or regularly connect from a different state, please let me know so I can confirm we remain in compliance."

For practices with clients across multiple states: consider adopting an all-party consent standard across the board, regardless of individual client location. This simplifies your workflow and ensures you are compliant with the strictest applicable standard.

The most sustainable approach is to address AI documentation in the same intake workflow where you cover other consent and privacy topics: at the start of the therapeutic relationship, in writing, with time for questions.

Active consent means the client affirmatively agrees, not merely fails to object. A line buried at the bottom of a multi-page privacy notice is not active consent. A brief verbal mention followed by a signed acknowledgment is closer to the standard regulators and ethics bodies are moving toward.

Practical workflow for adding AI consent:

Add one paragraph to your informed consent document that describes your AI documentation practice (using the language templates above as a starting point).
Verbally mention it when reviewing intake paperwork with new clients. Keep it brief and matter-of-fact: "I use an AI tool to help format my notes. Nothing is recorded. I review everything. Any questions?"
For existing clients transitioning to AI-assisted documentation, send a brief update letter or email before the first session where the tool will be used.
Document that consent was obtained in the client record.

Training note: If you work in a group practice with staff, plan for 1 to 2 hours of training specifically on the consent workflow before rolling out AI documentation tools. Staff need to be able to answer the three most common client questions: Does this record our sessions? Who can see this? Can I opt out?

Most therapists report reaching a comfortable, routine workflow by the second month. The first four weeks are adjustment, not a sign that the process is broken.

How to Handle Client Objections

Some clients will have concerns. Here is how to address the most common ones honestly:

"Does this mean our sessions are being recorded?" For generation-based tools: "No. I write a summary after we meet and the software helps me format it. Nothing from our actual session is captured by the tool." For ambient tools: "Yes, the tool does record for the purpose of note generation. The recording is [processed/deleted after] [describe retention]. You have the right to decline."

"Who else can see what the AI generates?" For any tool: "The note goes through my review before it becomes part of your record. [For HIPAA-covered tools: The service operates under a Business Associate Agreement with me, which governs their data handling obligations.]" If your tool does not have HIPAA coverage, disclose that honestly.

"Can I opt out?" Yes. Always yes. Declining AI-assisted documentation should have no effect on access to or quality of care. Have a manual workflow ready for clients who opt out.

"What happens to the notes the AI creates?" Walk through what you know: where notes are stored, how long they are retained, and who has access. If you do not know the answer to any of these questions about your tool, find out before you have this conversation.

A Note on NotuDocs

If you use a generation-based documentation tool where you write the summary and AI structures it, the consent conversation is straightforward. NotuDocs works this way: you type your session summary after the appointment, and the tool formats it into your chosen note structure. No audio recording, no session transcript. That design choice does not eliminate your consent obligations, but it significantly simplifies the consent conversation because there is no recording to disclose.

NotuDocs is not HIPAA compliant and does not sign Business Associate Agreements. If your practice requires a BAA, verify that requirement with your malpractice insurer before choosing any documentation tool.

Before You Start Using Any AI Documentation Tool

Identify whether your tool involves session recording or not
Review your state's recording consent laws (one-party vs all-party consent)
Review whether your state has enacted AI-specific disclosure requirements (Illinois, Texas, and others)
Review your professional licensing board's current guidance on AI in documentation
Consult your malpractice insurer about whether AI documentation affects your coverage
Draft or update your AI consent language with input from an ethics supervisor or attorney

For New Clients

Include AI documentation disclosure in written intake consent forms
Verbally review AI use during intake paperwork review
Invite questions and document that consent was obtained
Have an opt-out workflow ready before you need it

For Existing Clients

Send a written update before the first session where AI documentation will be used
Allow time for questions in the next session
Document updated consent in the client record

For Telehealth Practices

Identify client location at the start of each session
Determine whether a more restrictive state's law applies
Consider adopting all-party consent standards practice-wide for simplicity
Update telehealth consent forms to address AI documentation specifically

Ongoing

Use active consent at onboarding, not passive acceptance buried in privacy notices
Plan 1-2 hours of staff training on consent workflow before group practice rollout
Revisit consent language annually as state laws evolve
Document client opt-outs in the clinical record