Recording consent laws: one-party, two-party, and clinical reality
A therapist in Pennsylvania records sessions to draft her progress notes. A colleague two states over does the same and is told, flatly, that she could be breaking the law. Both are competent clinicians acting in good faith. The difference between them is not ethics or intent — it is which side of a state line they practice on. Recording consent laws for therapy are not one rule but many, and understanding them starts with separating two questions that get tangled constantly: what the law requires, and what your clinical and ethical obligations require. They overlap, but they are not the same thing, and treating them as one is where clinicians get into trouble.
The short version: legal consent rules vary by jurisdiction and can hinge on a single party versus everyone in the room. Clinical consent is something you obtain regardless, in every session, as a matter of practice and trust. This post explains the legal concepts in plain terms, then explains why the legal floor is never your ceiling.
How recording consent laws for therapy actually divide
In the United States, recording laws generally fall into two camps. Under a one-party consent standard, a recording is lawful as long as one person who is part of the conversation agrees to it — and that person can be you. Under an all-party consent standard (often called two-party consent, though the rule covers everyone present, not just two people), every participant in the conversation must agree before recording is lawful.
The practical implication for a one-on-one session is narrow: in a one-party state, your own consent technically covers the recording. In an all-party state, your client must also consent, or you may be exposed to legal liability — potentially criminal, not just civil, depending on the jurisdiction. The gap widens fast in couples, family, or group work, where “all parties” can mean three, five, or ten people, any one of whom can withhold consent.
A few wrinkles make this messier than a clean two-column chart:
- Telehealth crosses lines. If you and your client sit in different states, it is not always obvious whose law governs. The stricter standard is the safer assumption.
- Definitions of “consent” differ. Some states accept implied consent when a party knowingly continues a recorded conversation; others demand something more explicit.
- Laws change. Statutes get amended and reinterpreted. What was true when you trained may not be true now.
Because of all this, the only responsible move is to confirm the current rule for your specific jurisdiction — and for any state your telehealth clients sit in — with your licensing board, your malpractice carrier, or an attorney. Rules vary, this post is editorial rather than legal advice, and the details genuinely matter.
Legal consent and clinical consent are different questions
Here is the part that matters most, and the part generic “know your state’s law” advice skips: even in a one-party state where your consent alone makes a recording lawful, you should still obtain your client’s consent. Always.
The legal question is “am I allowed to record this?” The clinical and ethical question is “should I be recording a vulnerable person’s most private disclosures without telling them, even if a statute lets me?” The answer to the second question does not change with your zip code.
Professional ethics codes across the major associations tend to point the same direction: informed consent, transparency, and the client’s right to understand how their information is handled are treated as foundational, not optional — though specific obligations vary by code and jurisdiction, and none of this is legal advice. Recording a session quietly because the law technically permits it would satisfy a statute while failing the relationship. And the therapeutic relationship is the work.
Treat the law as the floor, not the ceiling. The law tells you what is permitted. Your ethics tell you what you should do.
There is also a trust dividend. Clients who understand why you record — and who are asked rather than informed after the fact — tend to relax into it. The conversation itself can be brief and clinical. If you want a script and a framing that does not derail the session, we wrote a separate guide on how to talk to clients about recording. Documenting that consent in writing protects both of you; a set of AI consent form templates gives you a starting point you can adapt to your setting and review with your attorney.
Where the recording lives changes the stakes
Consent is about permission. But there is a second question that sits right next to it: once you have permission, where does the audio go?
A recording that is transcribed by a cloud service travels — to a vendor’s servers, sometimes to subprocessors, sometimes across borders. That introduces a chain of custody you do not control and cannot fully see, and it is part of what your consent conversation is implicitly promising about. On-device processing reframes the question. If the audio is transcribed and turned into a draft note entirely on your own Mac, never touching a server, the “where does it go” answer is simply: it does not. This is the premise behind CouchNotes, which records or accepts dictation, transcribes locally, and produces a SOAP, DAP, or BIRP draft you then review, edit, and sign — with audio that auto-deletes per your setting and no cloud, account, or telemetry involved. The draft is a starting point; you remain the clinician of record and the author of the final note.
That on-device posture does not exempt you from consent law — you still need permission to record, full stop. Privacy and security obligations are a baseline you build on, not a marketing badge, and the specifics vary by setting and regulator. What local processing does is shrink the surface area of what can go wrong after consent is given.
A short checklist before you hit record
| Question | Who answers it |
|---|---|
| Is one-party or all-party consent required where I practice? | Your board, attorney, or carrier |
| Does a telehealth client’s state change the standard? | Confirm per client |
| Did the client consent, in writing, regardless of the legal floor? | You, every time |
| Where is the audio processed and stored? | You, before choosing a tool |
The clinicians who handle recording well are rarely the ones who memorized their state statute. They are the ones who internalized that consent is a relationship, not a checkbox — and who built a simple, repeatable practice around asking, documenting, and minimizing where the data lives. The law sets the minimum. Your judgment, and your client’s trust, set the rest.