The patient's privacy is central, but it is not the only privacy interest in a recorded consultation. Relatives, carers, interpreters and people mentioned in the history may also be identifiable. The service needs to consider what is captured, whose information it is, why it is needed and how it appears in the resulting record.
This article is dated 10 October 2026 and focuses on NHS care in England, with UK data-protection principles. NHS ambient-scribing information-governance guidance addresses transparency, appropriate processing and data minimisation. A patient's participation does not automatically resolve every question about third-party information captured during the encounter.
One recording can contain several people's information
Consider a fictional consultation with an adult patient, a relative and an interpreter. The relative describes their own health while explaining why support at home has become difficult. The patient then mentions a sensitive allegation about someone who is not present.
The conversation contains information relevant to care, but not every statement belongs in the same form in the patient's permanent record. A summary that copies everything can expose unnecessary detail. A summary that omits all third-party information can remove context important to support or safeguarding.
The task is therefore not simply to obtain a recording and produce fluent prose. It is to preserve relevant meaning while assessing necessity, attribution, access and the appropriate place for sensitive information. These decisions need a clinical and information-governance process, not just a transcription setting.
Explain the recording to the room
A proposed practical introduction should make clear that the tool is being used, what it does and how concerns can be raised. The explanation should be understandable to the people present, including anyone joining after recording starts.
For example: "We use an approved tool to help draft the consultation note, which I check. Please tell me if there is something you do not want recorded in this way, or if you would prefer us to stop using it." The exact wording must match the actual service and local policy; it must not promise security, deletion or review arrangements that are not in place.
The NHS guidance for professionals, checked on 10 October 2026, is the relevant starting point for the authorised workflow. This article does not assert that every person mentioned must provide explicit consent for every necessary clinical record entry. Transparency, confidentiality and data-protection requirements should be assessed for the actual circumstances.
Pause deliberately, and know what pause means
A pause-and-resume function is useful only if staff understand its operation. Does pausing stop audio capture immediately? Is previously captured material retained? Does the interface make the current state clear? What happens when another participant begins speaking while the clinician is changing the setting?
Those are questions to verify with the product and local implementation, not capabilities assumed for every scribe. A team should rehearse the function using fictional material before relying on it during sensitive conversations.
Pausing automated capture does not mean clinically necessary information should disappear from the record. The clinician may still need to document an appropriate account through the usual process. The distinction is between declining a particular recording method and preventing necessary professional documentation altogether.
Preserve who said what
In the fictional consultation, the relative's own symptoms should not become the patient's medical history. An interpreter's clarification should not be mistaken for a new patient statement. A clinician's question about a possibility should not appear as an allegation made by the patient.
A proposed review should pay particular attention to attribution when the content could affect assessment, safeguarding, communication or future access to records. The note should distinguish patient-reported information, third-party accounts, observed findings and clinical interpretation.
This is a review framework, not a reported error rate for any product. A technically accurate transcript can still be transformed into an inaccurate summary if speaker roles or the status of statements are lost. Reviewing only spelling and grammar would miss that change in meaning.
Third-party information complicates later access
A consultation record may later be requested or shared through an authorised process. The fact that information sits in the patient's record does not remove the need to consider the rights and interests of others identified within it.
The ICO's health-information access guidance, updated in December 2025 and checked on 10 October 2026, explains that third-party information requires consideration when responding to access requests. It also addresses specific health-information restrictions. These are contextual rules, not a reason to withhold every difficult entry or to promise that a recorded statement will never be disclosed.
For the fictional allegation, clinicians should follow the relevant safeguarding and record-access processes. Do not reassure a participant that "the AI keeps it private" when the information may become part of a record governed by different access and disclosure arrangements.
Minimise the capture without losing the care
A useful proposed workflow has three stages: assess whether recording is appropriate, review what the generated output includes and check what is retained beyond the approved record. Each stage asks a different question.
Before capture, consider who is present and whether the setting permits a clear explanation. During the encounter, respond to changes in sensitivity or participants. During review, remove unnecessary third-party detail while preserving clinically important information and its correct attribution.
The ICO's data-minimisation guidance supports collecting and retaining information necessary for the purpose. It does not instruct clinicians to omit essential safeguarding or care information. Where the balance is difficult, seek appropriate senior or information-governance advice rather than leaving the decision to the model's compression of the conversation.
Test the workflow with realistic, fictional encounters
A proposed local test set should include overlapping speech, a relative answering on the patient's behalf, an interpreter correcting a translation, a participant arriving late and a conversation that becomes sensitive after recording begins.
Measure more than transcription accuracy. Can the clinician tell when capture is active? Does attribution survive summarisation? Can unnecessary material be removed before record entry? What happens to the raw recording and earlier draft after editing? These tests have not been run for this article and are proposed as local evaluation tasks, not published results.
Professional learning can explore the same issues using wholly fictional scenarios. iatroX should not be used as a destination for a real multi-person consultation merely because the exercise is educational. The privacy assessment follows the information and purpose, not the label attached to the activity.
A respectful workflow recognises that a consultation is a conversation between people, not a single stream of patient-owned text. Good documentation preserves the relevant account without assuming that everything audible should become permanent, widely accessible history.
Frequently asked questions
Does an AI scribe process information only about the patient?
Not necessarily; conversations may identify relatives, carers, interpreters and absent third parties. The service should assess those information flows as well as the patient's own account.
Does pausing recording mean sensitive information should not be documented?
No. Necessary clinical or safeguarding information may still require appropriate documentation through the usual process, even when automated recording is not used.
Can the patient automatically receive every recorded statement about another person?
Not automatically. Relevant access, confidentiality and third-party-information rules need to be applied to the circumstances.
Explore a fictional consultation through structured clinical reasoning →