Maryland Medical Recording Laws: Patient Rights, HIPAA, and Consent (2026)

Recording in medical settings in Maryland involves two overlapping legal frameworks: the state's strict all-party consent wiretapping law and the federal Health Insurance Portability and Accountability Act (HIPAA). Both patients and healthcare providers must understand these rules before recording any medical conversation.

This guide covers patient recording rights, provider obligations, telehealth recording, and the interaction between Maryland's wiretapping statute and federal health privacy law.

Can Patients Record Doctor Visits in Maryland?

Only with All-Party Consent

A patient can record a medical appointment in Maryland, but only if every person in the room consents before recording begins. Under ss 10-402, recording a private conversation without the consent of all participants is a felony.

A typical medical appointment involves a private conversation between the patient and the physician. The patient must ask the doctor for permission before recording. If a nurse, medical assistant, specialist, or interpreter is also present, each person must consent.

Why Patients Want to Record

Patients often want to record medical appointments for legitimate reasons:

• Understanding complex information: Recording allows patients to replay instructions about medications, treatment plans, and post-surgical care
• Sharing with family: A patient may want to share the recording with a spouse, caregiver, or family member who could not attend
• Language barriers: Patients with limited English proficiency may want to replay the conversation with a translator
• Memory issues: Elderly patients or those with cognitive impairments benefit from having a recording to review
• Second opinions: A recorded explanation of a diagnosis can help another doctor provide an informed second opinion
• Accountability: Patients who feel their concerns are dismissed may want documentation

How to Ask Permission

Most healthcare providers will agree to being recorded when patients explain their reasons. To ask effectively:

1. Tell the doctor at the start of the appointment that you would like to record
2. Explain why (to remember instructions, share with family, etc.)
3. Ask for explicit verbal consent
4. If the doctor agrees, begin recording and capture the consent on the recording
5. If the doctor declines, respect the decision and take written notes instead

What If the Doctor Says No?

A physician is not legally required to allow recording. If your doctor declines:

• Take detailed written notes during the appointment
• Ask the doctor to provide written summaries of diagnoses and treatment plans
• Request printed copies of after-visit summaries from the patient portal
• Bring a family member or friend to the appointment to help remember key information
• Ask the doctor to speak slowly and repeat important instructions

Can Healthcare Providers Record Patients?

Provider Recording Obligations

Healthcare providers who want to record patient interactions must comply with both the wiretapping statute and HIPAA.

Wiretapping statute compliance:

• Obtain explicit consent from the patient before recording
• Inform the patient of the purpose of the recording
• If other people are present (family members, interpreters, students), obtain their consent as well

HIPAA compliance:

• Recordings that contain protected health information (PHI) must be stored and handled according to HIPAA standards
• Patients must be informed about how the recording will be used and disclosed
• The recording becomes part of the medical record and is subject to patient access rights
• Proper safeguards must protect the recording from unauthorized access

Medical Training and Education

Teaching hospitals and medical schools frequently record patient interactions for educational purposes. These recordings require:

• Written patient consent through a specific authorization form
• Explanation of how the recording will be used (teaching, research, quality improvement)
• The right to decline without affecting the quality of care
• HIPAA-compliant storage and access controls
• De-identification when possible for educational use

Telemedicine Recording

Telehealth visits conducted through video conferencing platforms raise recording issues that combine the wiretapping statute, HIPAA, and technology:

• The provider must inform the patient if the telehealth visit will be recorded
• The patient must consent before recording begins
• The recording platform must meet HIPAA security requirements
• Both the provider's state law and the patient's state law may apply if they are in different states
• Platform recording notifications (Zoom, Doxy.me) help but may not fully satisfy Maryland's strict consent standard

HIPAA and Maryland Recording Law: How They Interact

Two Separate Legal Requirements

HIPAA and Maryland's wiretapping statute serve different purposes but both apply to medical recordings.

HIPAA protects the privacy of individually identifiable health information. It governs how healthcare providers, health plans, and their business associates handle patient data.

Maryland's wiretapping statute protects the privacy of oral communications. It governs who can record conversations and under what conditions.

A healthcare provider who records a patient interaction must satisfy both laws. Consent under one law does not automatically satisfy the other.

HIPAA Authorization vs. Wiretapping Consent

Requirement	HIPAA	Maryland Wiretapping Law
What it protects	Patient health information	Oral communications
Who it applies to	Covered entities and business associates	Everyone
Type of consent	Written authorization for uses beyond treatment, payment, operations	Explicit consent from all parties
Penalty for violation	Civil fines ($100 to $50,000+ per violation); criminal penalties for knowing violations	Felony: up to 5 years prison, $10,000 fine
Enforcement	HHS Office for Civil Rights	Maryland state prosecutors; private civil action

When Both Laws Apply

Both HIPAA and the wiretapping statute apply when:

• A doctor records a patient appointment
• A hospital uses audio-enabled security cameras
• A telehealth platform records a virtual visit
• A nurse records patient vitals or assessments by voice
• A mental health provider records therapy sessions

When Only the Wiretapping Statute Applies

The wiretapping statute (but not HIPAA) applies when:

• A patient records their own doctor visit (the patient is not a HIPAA-covered entity)
• A family member records a conversation with a doctor
• A non-healthcare worker records a conversation in a medical facility

Security Cameras in Medical Facilities

Where Cameras Are Permitted

Medical facilities can use security cameras in areas where patients and visitors do not have a reasonable expectation of privacy:

• Building entrances and lobbies
• Parking lots and garages
• Hallways and corridors
• Waiting rooms (with notice)
• Pharmacy counters (with notice)
• Emergency department triage areas (with notice)

Where Cameras Are Prohibited

Cameras must not be placed in locations where patients have a reasonable expectation of privacy:

• Examination rooms where patients undress or receive treatment
• Patient rooms in hospitals and inpatient facilities
• Restrooms and bathrooms
• Mental health treatment rooms where confidential therapy occurs
• Changing areas in physical therapy or rehabilitation facilities
• Lactation rooms

Placing cameras in these areas violates Criminal Law ss 3-903 (camera surveillance in private places) and may also violate HIPAA.

Audio on Medical Security Cameras

Audio-enabled security cameras in medical facilities present the same wiretapping concerns as in other settings, compounded by HIPAA. Audio captured in a hospital waiting room records not only conversations but potentially protected health information.

Medical facilities should:

• Disable audio recording on all security cameras
• If audio is necessary for specific security purposes, obtain consent from all affected parties
• Consult with HIPAA compliance officers and legal counsel
• Post signage indicating video surveillance is in progress

Mental Health and Therapy Recording

Special Considerations for Mental Health

Mental health treatment records receive heightened protection under both HIPAA and Maryland law. Psychotherapy notes are a special category under HIPAA that receive greater protection than other medical records.

Recording therapy sessions:

• Therapists cannot record sessions without patient consent
• Patients cannot secretly record therapy sessions (wiretapping law applies)
• If both parties consent, the recording must be stored with even greater security than standard medical records
• Psychotherapy notes created during recording are not subject to the same patient access rights as other medical records under HIPAA

Psychiatric Facility Recording

Psychiatric hospitals and inpatient mental health facilities face unique recording challenges:

• Patients may have limited capacity to consent depending on their condition
• Security cameras in common areas must balance patient safety with privacy
• Cameras are never permitted in patient bedrooms, therapy rooms, or restrooms
• Staff interactions with patients in private settings cannot be recorded without consent
• Family therapy sessions require consent from all participants

Recording Medical Emergencies

Emergency Situations

In genuine medical emergencies, the priority is patient care, not recording consent. However, Maryland law does not include a specific medical emergency exception to the wiretapping statute.

Practical considerations:

• Emergency medical personnel should focus on providing care rather than obtaining recording consent
• 911 calls are already exempt from the consent requirement
• Hospital emergency department surveillance cameras (in public areas) are generally permissible with notice
• Bystander recordings of public medical emergencies may be protected under the reduced-privacy-expectation principle (the person receiving emergency care in a public place may have a reduced expectation of privacy)

Emergency Room Security Cameras

Emergency departments face the challenge of balancing security needs with patient privacy:

• Cameras in triage and waiting areas are generally permissible with notice
• Cameras in treatment bays and examination areas raise privacy concerns
• Audio recording should be disabled on all ER cameras
• Staff body cameras are not standard in medical settings and would require compliance with ss 10-402(c)(16) standards if used

Patient Access to Medical Recordings

Right to Access Records

Under HIPAA, patients have the right to access their medical records, which may include recordings made during their care. If a healthcare provider records a patient interaction, the patient generally has the right to request a copy of that recording.

Provider Obligations

When a patient requests access to a recording:

• The provider must respond within 30 days (with one 30-day extension if needed)
• The provider can charge a reasonable cost-based fee for copies
• The provider cannot deny access based on the content of the recording (with limited exceptions)
• Psychotherapy notes are exempt from the general right of access

Penalties for Violations

Offense	Legal Basis	Classification	Maximum Penalty
Secret recording of medical conversation	ss 10-402	Felony	5 years prison, $10,000 fine
Hidden camera in examination room	ss 3-903	Misdemeanor	Varies
HIPAA privacy violation (knowing)	42 U.S.C. ss 1320d-6	Federal crime	Up to 10 years prison, $250,000 fine
HIPAA civil penalty	45 C.F.R. Part 160	Civil	$100 to $50,000+ per violation
Civil wiretapping liability	ss 10-410	Civil	$100/day or $1,000 min + punitive + attorney fees

Practical Guidelines

For Patients

1. Ask your doctor for permission before recording any medical appointment
2. Explain your reasons clearly (remembering instructions, sharing with family)
3. If the doctor agrees, capture the consent at the start of the recording
4. If the doctor declines, take written notes or bring a companion
5. Use the patient portal for written summaries of visits and treatment plans

For Healthcare Providers

1. Develop a clear policy on patient recording of appointments
2. Train staff on how to respond to recording requests
3. If you record patient interactions, obtain written consent and comply with HIPAA
4. Disable audio on all security cameras in clinical areas
5. Store all recordings according to HIPAA security standards
6. Review telehealth platform settings for recording compliance

For Medical Facilities

1. Audit security camera placement to ensure no cameras are in private areas
2. Disable audio on all security cameras
3. Post signage indicating video surveillance in common areas
4. Include recording policies in patient consent documents
5. Train all staff on the interaction between state wiretapping law and HIPAA

More Maryland Recording Laws

Audio Recording | Video Recording | Voyeurism & Hidden Cameras | Workplace Recording | Recording Police | Phone Call Recording | Security Cameras | Recording in Public | Landlord-Tenant | Dashcam Laws | Schools | Medical Recording

Back to Maryland Recording Laws