Oregon Medical Recording Laws: Patient Rights, HIPAA, and Consent

Recording in medical settings in Oregon involves the intersection of state recording law, federal HIPAA regulations, and healthcare facility policies. Oregon's split consent framework under ORS 165.540 applies to doctor-patient interactions, and HIPAA adds federal protections for patient health information.

This guide covers how Oregon's recording laws apply in healthcare settings in 2026, including patient recording rights, provider obligations, telehealth recording, and medical facility surveillance.

Oregon's Split Consent Framework in Medical Settings

Phone Calls With Healthcare Providers

Under ORS 165.540(1)(a), Oregon follows one-party consent for phone calls. Patients can record phone calls with:

• Doctors, nurses, and specialists
• Pharmacists
• Insurance company representatives
• Hospital billing departments
• Mental health counselors (by phone)
• Any healthcare provider during a telephone consultation

You do not need to tell the provider you are recording the call. Your participation in the call satisfies the one-party consent requirement.

In-Person Medical Appointments

For face-to-face appointments, ORS 165.540(1)(c) requires that every participant be specifically informed before audio recording. This means:

• You must tell your doctor before recording an in-person appointment
• The notification must be specific and clear, not implied
• This applies to office visits, hospital consultations, therapy sessions, and any other face-to-face medical encounter
• If the provider objects, they may refuse to continue the appointment while being recorded

Telehealth Appointments

Telehealth has become a standard part of Oregon healthcare. Recording rules for telehealth depend on the platform:

• Phone-based telehealth: One-party consent under ORS 165.540(1)(a). You can record without telling the provider.
• Video conferencing telehealth (Zoom, Teams, platform-native recording): Exempt from the in-person notification rule under ORS 165.540(6)(b). One-party consent applies.
• In-person hybrid appointments where you are physically present with the provider: All-party notification required.

Patient Recording Rights

Why Patients Record Medical Visits

Patients record healthcare encounters for many legitimate reasons:

• Memory and comprehension: Studies published in medical journals show patients forget 40-80% of medical information immediately after appointments. Recordings help patients review instructions at home.
• Complex diagnoses: Understanding treatment options for serious conditions often requires reviewing information multiple times.
• Medication instructions: Accurate recording of dosage, timing, and interaction warnings.
• Second opinions: Sharing recorded information with another provider for a second opinion.
• Caregiver communication: Helping family members understand a loved one's medical situation.
• Documentation of concerns: Creating a record when a patient believes they are receiving inadequate care.

Can You Record Your Doctor in Oregon?

By phone or telehealth: Yes, under one-party consent. No notification required.

In person: Yes, but you must notify the provider before recording under ORS 165.540(1)(c). Before your appointment, you can say: "I would like to record this visit so I can review the information later."

What If Your Doctor Refuses to Be Recorded?

Providers are not legally required to consent to being recorded. If a doctor objects to recording during an in-person visit:

• You have satisfied the notification requirement by informing them
• The provider may refuse to continue the appointment while recording is active
• The provider cannot confiscate your recording device
• Consider requesting written summaries as an alternative
• Switching to phone-based follow-up consultations allows recording under one-party consent

Healthcare Provider Recording Obligations

Provider Recording of Patient Encounters

Healthcare providers who record patient encounters must comply with both Oregon recording law and HIPAA:

Oregon law requirements:

• Phone calls with patients: One-party consent (provider can record without notification)
• In-person encounters: All-party notification required (provider must inform the patient)
• Video conferencing: One-party consent through the platform

HIPAA requirements:

• Recordings containing protected health information (PHI) are subject to HIPAA privacy rules
• Recordings must be stored securely in compliance with the HIPAA Security Rule
• Access to recordings must be limited to authorized personnel
• Patients have the right to access recordings that form part of their medical record under the HIPAA Privacy Rule

Medical Dictation and Notes

Healthcare providers routinely use audio recording for medical dictation and note-taking. When a provider dictates notes after a patient has left, no consent issue arises because there is no active conversation being recorded. AI-powered medical scribes that record during appointments must comply with the all-party notification rule for in-person encounters.

HIPAA and Recording

What HIPAA Does and Does Not Restrict

A common misconception is that HIPAA prohibits patients from recording their own medical encounters. This is incorrect.

HIPAA does not:

• Prohibit patients from recording their own appointments
• Apply to patients' personal recordings on their own devices
• Prevent patients from sharing their own recordings
• Give healthcare providers the right to confiscate patient recording devices

HIPAA does:

• Require providers to protect PHI, including recorded PHI
• Restrict providers from recording and sharing patient information without authorization
• Require secure storage of any recordings that become part of the medical record
• Give patients the right to access their own health information, including recordings

Provider-Made Recordings and HIPAA Compliance

When healthcare providers create recordings that contain PHI:

• The recording becomes part of the patient's designated record set
• The provider must protect it under the HIPAA Security Rule
• The patient has a right to access the recording under the Privacy Rule
• Sharing the recording with third parties requires patient authorization or a HIPAA-permitted exception
• Breaches involving recorded PHI must be reported under the HIPAA Breach Notification Rule

Medical Facility Surveillance

Hospital Security Cameras

Oregon hospitals and medical facilities can use surveillance cameras for safety and security:

Permitted areas:

• Lobbies, waiting rooms, and reception areas
• Hallways and corridors
• Parking lots and garages
• Emergency department triage areas (common areas only)
• Building entrances and exits

Prohibited areas:

• Patient rooms (without explicit consent)
• Examination rooms
• Bathrooms and restrooms
• Changing areas
• Psychiatric unit private areas

Audio on Medical Facility Cameras

Audio recording on security cameras in medical facilities raises both ORS 165.540 and HIPAA concerns:

• The all-party notification requirement applies to audio in common areas
• Audio that captures patient conversations could include PHI
• Facilities should disable audio on security cameras or implement strict notification procedures
• HIPAA compliance requires that any audio containing PHI be protected

Patient Monitoring

Certain medical monitoring involves recording:

• ICU video monitoring of critically ill patients is generally conducted under the facility's treatment authority
• Psychiatric holds may involve monitoring for patient safety
• Sleep studies record video and biometric data as part of the diagnostic process
• Patient consent for monitoring is typically obtained through facility admission paperwork

Mental Health Recording Considerations

Therapy and Counseling Sessions

Mental health treatment involves heightened privacy expectations:

• Phone therapy sessions can be recorded under one-party consent
• In-person therapy sessions require all-party notification
• Therapists may have strong professional reasons to object to recording, including concerns about the therapeutic relationship
• Oregon mental health records receive additional protections under ORS 179.505 and 42 CFR Part 2 (for substance use disorder records)

Substance Use Disorder Treatment

Federal regulations under 42 CFR Part 2 provide additional privacy protections for substance use disorder treatment records. Recordings made during substance use treatment that identify patients are subject to these heightened restrictions regardless of Oregon state recording law.

Penalties for Medical Recording Violations

Oregon Criminal Penalties

Violating ORS 165.540 in a medical setting:

Penalty	Maximum
Jail time	Up to 364 days
Fine	Up to $6,250

Civil Liability

Under ORS 133.739:

• Actual damages (minimum $100/day or $1,000)
• Punitive damages
• Attorney fees

Privacy Violations

Cameras in prohibited medical areas:

Offense	Maximum Penalty
ORS 163.700 (Second Degree)	364 days jail, $6,250 fine
ORS 163.701 (First Degree)	5 years prison, $125,000 fine

HIPAA Penalties

Healthcare providers who violate HIPAA through improper recording face:

• Civil penalties up to $50,000 per violation
• Criminal penalties up to $250,000 and 10 years in prison for knowing violations
• State attorney general enforcement actions

Oregon Recording Laws by Topic

Phone Call Recording | Audio Recording | Video Recording | Workplace Recording | Recording Police | Security Cameras | Recording in Public | Landlord-Tenant | Dashcam Laws | Schools | Medical Recording | Voyeurism & Hidden Cameras

Back to Oregon Recording Laws