AI used on recorded or transcribed therapy sessions without written notice and consent

Check a signed, unrevoked, purpose-specific AI-use consent for the client before any session audio or transcript is sent to an AI transcription, note, or summary model.

A consent gate in the note-assistant pipeline placed before the first AI step (a model transcription call counts) and again before the note or summary call: it loads the client's consent record for this tool's purpose (for example ai_scribe), requires signed_at and no revoked_at, and refuses otherwise. The record references the version of the written notice the client or their representative received, naming the tool's purpose. Consent is collected as a separate explicit act on its own form, never inferred from terms-of-use acceptance, and a revocation endpoint sets revoked_at and cancels queued AI jobs for that client.

Where it goes: 1 application source code, 2 data models, 14 user-facing text.

What reviewers look for: a consent check on every path from session audio or transcript to transcriptions.create, chat.completions.create, messages.create, or similar; a consent table with client, purpose, notice version, signed_at, and revoked_at; a standalone consent form (no 'by using this service you agree ... AI' copy); a revocation path that stops processing.

def draft_note(session):
    with open(session.audio_path, 'rb') as f:
        transcript = client.audio.transcriptions.create(model='whisper-1', file=f).text
    resp = client.chat.completions.create(model=MODEL, messages=[
        {'role': 'system', 'content': NOTE_PROMPT}, {'role': 'user', 'content': transcript}])
    return resp.choices[0].message.content

def draft_note(session):
    consent = db.consents.get(client_id=session.client_id, purpose='ai_scribe')
    if consent is None or consent.signed_at is None or consent.revoked_at:
        raise ConsentRequired('written AI-use consent for note drafting is missing or revoked')
    with open(session.audio_path, 'rb') as f:
        transcript = client.audio.transcriptions.create(model='whisper-1', file=f).text
    resp = client.chat.completions.create(model=MODEL, messages=[
        {'role': 'system', 'content': NOTE_PROMPT}, {'role': 'user', 'content': transcript}])
    return resp.choices[0].message.content

Engineering guidance, not legal advice. Each provision below may add its own details (a cadence, a deadline, a required notice element): open it for those.