An April 2026 lawsuit filed in the U.S. District Court for the Northern District of California alleges two healthcare organizations used ambient AI-based tools to record and transmit audio conversations without prior consent.
The class-action complaint, filed as Washington et al v. Sutter Health, claims three plaintiffs’ highly-sensitive medical information was wrongfully captured and shared through Abridge AI’s platform.
The lawsuit alleges that Sutter and Memorial Health used their AI tool in a way that violates the California laws intended to protect patient privacy and confidentiality. Specifically, it states plaintiffs “did not receive clear notice that their medical conversations would be recorded by an artificial intelligence platform, transmitted outside the clinical setting, or processed through third-party systems.”
Notably, Abridge AI “signs business associate agreements with its HIPAA-covered entity clients” so the issue isn’t with HIPAA, but with state consumer privacy laws and the federal Wiretap Act, according to the HIPAA Journal.
What to Consider as Clinical AI Use Grows
While the lawsuit isn’t the first of its kind pertaining to ambient AI use in clinical settings, there are many reasons it should sound an alarm to healthcare providers.
More than one in five (22%) healthcare organizations have implemented domain-specific AI tools, according to a 2025 report, with adoption led by health systems (27%) followed by outpatient providers (18%). AI spending in healthcare has nearly tripled year-over-year, reaching $1.4 billion in 2025, with ambient clinical documentation dominating the market ($600M).
An October 2025 quality improvement study of 263 physicians and advanced practice practitioners across six healthcare systems found that after 30 days with an ambient AI scribe, burnout among those working in ambulatory clinics decreased significantly from 51.9% to 38.8%.
However, the rapid growth of ambient AI has meant many providers need to catch-up in their understanding of HIPAA as well as their state’s regulations, and how to apply those to clinical settings.
As of 2026, 11 U.S. states require the consent of everybody involved in a conversation or phone call before the conversation can be recorded. While the AI legal landscape is rapidly evolving, it will be interesting to see if courts see any distinction between the practical application of these new AI tools compared to traditional recording and wiretap devices.
As the American Bar Association notes, there are other legal considerations, too, such as malpractice and regulatory risks linked to AI-generated documentation errors and evolving federal and state laws that may impose transparency, cybersecurity risk analysis, and review requirements for AI use in clinical records.
Next Steps for Healthcare Providers
Moving forward, healthcare organizations need to ensure all providers are trained on the importance of receiving consent prior to recording any encounter. The right AI care partner makes this easier by educating healthcare organizations on regulations pertaining to the use of clinical AI, and providing the right support tools.
A bonus: Prior consent is more likely to enhance patient experience, too.
A 2024 study of 121 ambient documentation pilot users (18 clinicians and 103 patients) found that patient trust, detail in the consent discussion, and intended tool use were associated with patient comfort and intent to consent.
Researchers recommend a “flexible, multimodal approach” to consent, which includes patient education, reviewing risks and benefits, digital resources, nonclinical staff involvement, and clear opt-out options.
Researchers suggested these practices “may improve consent processes and support broader acceptance of ambient documentation tools” as they continue to evolve and gain wider acceptance.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
