There’s an argument rarely surfaced in the debate over ambient AI in mental health. Beyond the clinical question of the therapeutic alliance, beyond the ethical question of consent, there’s a very concrete legal question: what becomes of an audio recording when a judicial proceeding demands it?

The answer isn’t theoretical. It determines the real level of risk a psychiatrist or psychotherapist takes on by adopting a recording tool — even “zero-retention,” even encrypted, even well-intentioned.

What, legally, a consultation audio recording is

As soon as a session is recorded, even for a few seconds, even to be transcribed immediately, an audio file exists. That recording:

Constitutes sensitive personal data under GDPR (Art. 9) and the Swiss FADP (Art. 5 let. c)
Is covered by medical confidentiality, exactly like the written record
May, under certain conditions, be considered evidence in civil, criminal or disciplinary proceedings

The clinician using a recording tool becomes data controller for that recording. The provider (software publisher) is a processor. But the primary legal responsibility for the existence of the recording remains with the clinician, who decided to record.

Scenario 1: the patient requests access to their recording

GDPR (Art. 15) and FADP (Art. 25) grant patients a right of access to all personal data concerning them held by the controller — therefore by the clinician. This right includes the audio recording if it still exists, and the transcript if it still exists.

In practice:

As long as the recording exists, the patient can request a copy
The clinician cannot refuse on grounds of their own comfort or a therapeutic confidentiality clause
They can refuse in specific cases (risk to the patient’s mental health under GDPR Art. 23 / FADP Art. 26), but this exception is narrowly construed and must be justified

The patient who recovers the recording can do what they want with it. Publish it online. Share it with their lawyer. Use it in proceedings against the clinician themselves.

The only way to be sure a recording won’t be requested and transmitted this way is not to have it.

Scenario 2: judicial subpoena

In criminal procedure (Swiss CPP Art. 171, French CPP Art. 56-3), an investigating judge can lift medical confidentiality and subpoena documents — including recordings of consultations — in the course of a serious criminal investigation.

Real situations where this happens:

A complaint of sexual assault or violence the patient mentioned in session
Proceedings against the patient where their mental state at the time of the facts is central
Divorce proceedings with child custody, where one party seeks to establish the other’s dangerousness or instability
A forensic psychiatric expertise requesting prior records
A disciplinary investigation after a patient’s suicide

In all these cases, what exists can be subpoenaed. A raw recording contains infinitely more information than a structured clinical note — tone of voice, silences, tears, contradictions, material the clinician did not retain because it wasn’t clinically relevant but which may become relevant before a judge.

The clinical note, by contrast, is protected by the filter of clinical judgment: the clinician wrote only what they judged worth documenting. They can defend their choices. They cannot defend everything the patient said in forty minutes if they didn’t control it.

Scenario 3: disciplinary or civil complaint against the clinician

A dissatisfied patient can initiate disciplinary proceedings (medical board, ethics commission) or civil proceedings against their clinician. In this context:

The recording can become part of the file, either because the patient produces it after having accessed it, or because the clinician is required to produce it if they hold it
Every sentence, every silence, every intonation of the clinician becomes examinable
Elements that were clinically justified in the context of the session (a confrontation, a limit set, a deliberately provocative formulation) can be extracted from their context

An experienced psychiatrist knows a consultation regularly contains moments that, taken out of their frame, can be misunderstood. The clinical note protects the clinician because it professionally reformulates what happened. The recording, on the contrary, delivers the raw material — including what is clumsy, ambiguous, or open to unfavorable interpretation.

Scenario 4: provider compromise

Even software promised “zero-retention” exposes the clinician to risk during the window when data transits. If the provider:

Is hit by a cyberattack
Has a malicious employee
Keeps inference logs “for quality purposes” without the clinician knowing
Trains models on processed data without saying so in the DPA
Is acquired by an entity whose practices change

Then data that should have vanished exists somewhere. The clinician, as data controller, is legally accountable for what happens to that data — even if they committed no personal fault. FADP (Art. 24) and GDPR (Art. 82) provide for this liability.

The mere existence of a recording creates residual risk the clinician has no means to master.

Scenario 5: divorce, custody, succession

A particularly frequent and under-discussed case: the patient is involved in a family conflict. Contentious divorce, child custody, succession, guardianship. The opposing parties’ lawyers systematically try to document the other party’s mental state.

They start by asking the patient, through their GDPR right of access, for documents concerning them held by their providers. The patient, sometimes without gauging the consequences, forwards everything they receive to their lawyer — including session recordings if they exist.

Once in the divorce file, those recordings become argument: “listen to what my client’s spouse said in session.” What the clinician thought stayed in therapeutic space becomes a piece of legal proceedings.

The critical difference with the note

A clinical note written by a clinician — even subpoenaed, even transmitted in proceedings — is a judged professional document. It contains what the clinician decided to include. It is defensible. It is interpretable in its context. It says something, but not everything.

A raw recording says everything. It protects neither patient nor clinician. It delivers forty minutes of vulnerable speech to a reader who wasn’t there, who lacks the frame, and who can extract whatever serves their case.

The shift from written document to recorded document changes the legal nature of the medical act. This isn’t a productivity improvement. It’s a transfer of risk from the clinician to themselves.

Practical obligations in the EU and Switzerland

A few points applying to any clinician using a tool that records the session:

Written informed consent. Verbal consent is insufficient for a recording. A written document is required, specifying the purpose, retention duration (ideally none), the processor used, the patient’s rights, and that it can be withdrawn at any time.

DPA with the provider. The processing agreement under GDPR Art. 28 / FADP Art. 9 must be signed with any publisher processing clinical data. This DPA must be readable: it specifies what is processed, where, by whom, and with what guarantees.

Mention in the record. The clinical record must note, for each recorded consultation, the consent obtained and the tool used.

Minimum retention duration. Even zero-retention is not instantaneous: there are a few seconds of transit. These seconds must be documented in the privacy policy the patient signed.

Breach notification. Any compromise must be notified to the competent authority (FDPIC in Switzerland, national DPA in the EU) within 72 hours and to the patient if they are concerned.

The administrative burden and cumulative risk make not recording remain, for most private-practice clinicians, the wisest choice.

The alternative without recording

The scenario of post-session dictation processed in memory and never persisted changes the legal picture entirely:

Nothing to subpoena. No audio, no transcript. Only the note — a judged professional act — exists.
Trivial right of access. The clinician can confirm the processor holds nothing.
Simplified consent. It covers brief processing of the clinician’s speech (not the patient’s) to structure a note.
No adverse exhibit. What could harm the clinician or patient in proceedings simply does not exist.

For a psychiatrist or psychotherapist, this is the most legally robust configuration while still benefiting from the productivity gain a structuring AI enables.

Conclusion

Recording a psychiatric consultation creates a legal object. This object survives the session, the clinician’s intentions, and sometimes the therapeutic relationship itself. It can be requested by the patient, subpoenaed by a judge, extracted by a lawyer, leaked by a provider.

Technical security (encryption, short retention, certifications) is useful but does not remove the fundamental risk: what exists can be used. The only real protection, for clinician and patient alike, is that the recording does not exist.

A clinical note written after the session fulfills the documentary function. A recording of the session adds a risk surface that benefits no one.