{
  "id": 20114791,
  "title": "Is Your AI Medical Scribe Really HIPAA Compliant?",
  "url": "https://urgent.news/2026/11/15/is-your-ai-medical-scribe-really-hipaa-compliant",
  "topic": "ai",
  "section": "AI",
  "published": "2026-11-15T04:57:43.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/nirmitee/is-your-ai-medical-scribe-really-hipaa-compliant-2bpg"
  },
  "original_language": "en",
  "account": "When purchasing an AI medical scribe, buyers often ask if the product is HIPAA compliant. However, there is no official certification for software and the HHS does not certify vendors. A HIPAA compliant AI scribe requires a signed Business Associate Agreement (BAA) for the specific plan and enforcement of consent, access limits, audit logs, and deletion of recordings in the code. To ensure compliance, one should ask vendors a series of ten questions covering BAA, subcontractors, data usage for model training, retention periods, consent capture, data access, audit log visibility, draft status, data deletion upon termination, and the business case. Importantly, relying solely on a BAA is not enough, as AI scribes can still produce incorrect notes or violate patient privacy in other ways. The cost of non-compliance is usually not a fine but rather damage to clinician trust and stalling of the sales cycle.",
  "summary": "Originally published on Nirmitee.io: HIPAA Compliant AI Medical Scribe: How to Check One, and How to Build One \"Is it HIPAA compliant?\" is the first question most buyers ask about an AI medical scribe. It is a real requirement. It is not the one that sinks these projects. There is no official HIPAA certification for software, and HHS does not certify vendors. So \"we are HIPAA compliant\" is not an…",
  "key_points": [
    "HIPAA compliance lacks official software certification",
    "BAA required for specific plan with consent and access limits",
    "Ten questions cover BAA, data usage, retention, and deletion"
  ],
  "editors_take": "The absence of official software certification forces healthcare buyers to shift from trusting vendor claims to conducting rigorous technical audits of data handling and legal agreements.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}