Oregon Medical Recording Laws: Patient Rights, HIPAA, and Consent

Oregon uses a split consent framework for medical recordings. For in-person appointments and video telehealth visits, ORS 165.540(1)(c) requires that your provider be specifically informed before you record audio. Phone calls follow one-party consent under ORS 165.540(1)(a), so no notification is needed. HIPAA does not prohibit patients from recording their own visits but governs how providers handle that information.

Recording in medical settings in Oregon involves the intersection of state recording law, federal HIPAA regulations, and healthcare facility policies. Oregon's split consent framework under ORS 165.540 applies to doctor-patient interactions, and HIPAA adds federal protections for patient health information.

This guide covers how Oregon's recording laws apply in healthcare settings in 2026, including patient recording rights, provider obligations, telehealth recording, and medical facility surveillance.

Oregon's Split Consent Framework in Medical Settings

Phone Calls With Healthcare Providers

Under ORS 165.540(1)(a), Oregon follows one-party consent for phone calls. Patients can record phone calls with:

• Doctors, nurses, and specialists
• Pharmacists
• Insurance company representatives
• Hospital billing departments
• Mental health counselors (by phone)
• Any healthcare provider during a telephone consultation

You do not need to tell the provider you are recording the call. Your participation in the call satisfies the one-party consent requirement.

In-Person Medical Appointments

For face-to-face appointments, ORS 165.540(1)(c) requires that every participant be specifically informed before audio recording. This means:

• You must tell your doctor before recording an in-person appointment
• The notification must be specific and clear, not implied
• This applies to office visits, hospital consultations, therapy sessions, and any other face-to-face medical encounter
• If the provider objects, they may refuse to continue the appointment while being recorded

Telehealth Appointments

Telehealth has become a standard part of Oregon healthcare. Recording rules for telehealth depend on the platform:

• Phone-based telehealth: One-party consent under ORS 165.540(1)(a). You can record without telling the provider.
• Video conferencing telehealth (Zoom, Teams, platform-native recording): Treated as a conversation under ORS 165.540(1)(c), so all-party notification is required before recording. Secretly recording a video telehealth visit risks a Class A misdemeanor. ORS 165.540(3) exempts subscribers and their family members who record in their own homes, and an Oregon appeals court has applied it to in-person conversations (State v. Rainey, 2018), but the statute does not define "subscriber," so whether the exception covers a patient recording a video visit from home is unsettled, and telling the provider first is the safe course. The narrow ORS 165.540(6)(b) exception applies only when a participant records with intent to capture alleged unlawful activity and is working with law enforcement, an attorney, or an enforcement or regulatory entity, or reasonably believes the recording may be used as evidence in a judicial or administrative proceeding.
• In-person hybrid appointments where you are physically present with the provider: All-party notification required.

Patient Recording Rights

Why Patients Record Medical Visits

Patients record healthcare encounters for many legitimate reasons:

• Memory and comprehension: Studies published in medical journals show patients forget 40-80% of medical information immediately after appointments. Recordings help patients review instructions at home.
• Complex diagnoses: Understanding treatment options for serious conditions often requires reviewing information multiple times.
• Medication instructions: Accurate recording of dosage, timing, and interaction warnings.
• Second opinions: Sharing recorded information with another provider for a second opinion.
• Caregiver communication: Helping family members understand a loved one's medical situation.
• Documentation of concerns: Creating a record when a patient believes they are receiving inadequate care.

Can You Record Your Doctor in Oregon?

By phone: Yes, under one-party consent. No notification required.

By video telehealth: Yes, but you generally must inform the provider first. ORS 165.535(1) defines a "conversation" to include a communication through a video conferencing program, so ORS 165.540(1)(c) applies.

In person: Yes, but you must notify the provider before recording under ORS 165.540(1)(c). Before your appointment, you can say: "I would like to record this visit so I can review the information later."

What If Your Doctor Refuses to Be Recorded?

Providers are not legally required to consent to being recorded. If a doctor objects to recording during an in-person visit:

• You have satisfied the notification requirement by informing them
• The provider may refuse to continue the appointment while recording is active
• The provider cannot confiscate your recording device
• Consider requesting written summaries as an alternative
• Switching to phone-based follow-up consultations allows recording under one-party consent

Healthcare Provider Recording Obligations

Provider Recording of Patient Encounters

Healthcare providers who record patient encounters must comply with both Oregon recording law and HIPAA:

Oregon law requirements:

• Phone calls with patients: One-party consent (provider can record without notification)
• In-person encounters: All-party notification required (provider must inform the patient)
• Video conferencing: All-party notification required, treated the same as an in-person encounter under ORS 165.540(1)(c)

HIPAA requirements:

• Recordings containing protected health information (PHI) are subject to HIPAA privacy rules
• Recordings must be stored securely in compliance with the HIPAA Security Rule
• Access to recordings must be limited to authorized personnel
• Patients have the right to access recordings that form part of their medical record under the HIPAA Privacy Rule

Medical Dictation and Notes

Healthcare providers routinely use audio recording for medical dictation and note-taking. When a provider dictates notes after a patient has left, no consent issue arises because there is no active conversation being recorded. AI-powered medical scribes that record during appointments must comply with the all-party notification rule for in-person and video encounters.

HIPAA and Recording

What HIPAA Does and Does Not Restrict

A common misconception is that HIPAA prohibits patients from recording their own medical encounters. This is incorrect.

HIPAA does not:

• Prohibit patients from recording their own appointments
• Apply to patients' personal recordings on their own devices
• Prevent patients from sharing their own recordings
• Give healthcare providers the right to confiscate patient recording devices

HIPAA does:

• Require providers to protect PHI, including recorded PHI
• Restrict providers from recording and sharing patient information without authorization
• Require secure storage of any recordings that become part of the medical record
• Give patients the right to access their own health information, including recordings

Provider-Made Recordings and HIPAA Compliance

When healthcare providers create recordings that contain PHI:

• The recording becomes part of the patient's designated record set
• The provider must protect it under the HIPAA Security Rule
• The patient has a right to access the recording under the Privacy Rule
• Sharing the recording with third parties requires patient authorization or a HIPAA-permitted exception
• Breaches involving recorded PHI must be reported under the HIPAA Breach Notification Rule

Medical Facility Surveillance

Hospital Security Cameras

Oregon hospitals and medical facilities can use surveillance cameras for safety and security. The lists below reflect common privacy practice rather than a statutory list. The Oregon criminal line for cameras is ORS 163.700 and 163.701: knowingly making a visual recording of a person's intimate area or nudity without consent where the person has a reasonable expectation of privacy. The statute defines places where a person has a reasonable expectation of personal privacy to include bathrooms, dressing rooms and any enclosed area where a person undresses that is not open to public view.

Typical camera areas:

• Lobbies, waiting rooms, and reception areas
• Hallways and corridors
• Parking lots and garages
• Emergency department triage areas (common areas only)
• Building entrances and exits

Areas where cameras are generally avoided:

• Patient rooms (without explicit consent)
• Examination rooms
• Bathrooms and restrooms
• Changing areas
• Psychiatric unit private areas

Audio on Medical Facility Cameras

Audio recording on security cameras in medical facilities raises both ORS 165.540 and HIPAA concerns:

• The all-party notification requirement applies to audio in common areas
• Audio that captures patient conversations could include PHI
• Facilities should disable audio on security cameras or implement strict notification procedures
• HIPAA compliance requires that any audio containing PHI be protected

Patient Monitoring

Certain medical monitoring involves recording:

• ICU video monitoring of critically ill patients is generally conducted under the facility's treatment authority
• Psychiatric holds may involve monitoring for patient safety
• Sleep studies record video and biometric data as part of the diagnostic process
• Patient consent for monitoring is typically obtained through facility admission paperwork

Mental Health Recording Considerations

Therapy and Counseling Sessions

Mental health treatment involves heightened privacy expectations:

• Phone therapy sessions can be recorded under one-party consent
• In-person and video therapy sessions require all-party notification
• Therapists may have strong professional reasons to object to recording, including concerns about the therapeutic relationship
• Oregon mental health records receive additional protections under ORS 179.505 and 42 CFR Part 2 (for substance use disorder records)

Substance Use Disorder Treatment

Federal regulations under 42 CFR Part 2 provide additional privacy protections for substance use disorder treatment records. Recordings made during substance use treatment that identify patients are subject to these heightened restrictions regardless of Oregon state recording law.

Penalties for Medical Recording Violations

Oregon Criminal Penalties

Violating ORS 165.540 in a medical setting:

Civil Liability

Under ORS 133.739, a person whose communication was intercepted, disclosed or used in violation of ORS 133.724 or 133.737 (Oregon's interception-order statutes) may recover:

• Actual damages (minimum $100/day or $1,000)
• Punitive damages
• Attorney fees

That civil action does not apply to a private person's recording in violation of ORS 165.540. A patient or provider recorded that way would rely on a common-law invasion of privacy claim, which ORS 133.739(3) preserves.

Privacy Violations

Visual recordings that meet the elements of ORS 163.700 or 163.701:

HIPAA Penalties

Healthcare providers who violate HIPAA through improper recording face:

• Civil penalties that scale by culpability tier (current inflation-adjusted HHS figures: from $145 minimum for lack-of-knowledge violations, with per-violation maximums of $73,011 for the lower three tiers and up to $2,190,294 for uncorrected willful neglect), subject to a $2,190,294 annual cap per identical requirement
• Criminal penalties under 42 U.S.C. 1320d-6 of up to $50,000 and 1 year in prison for knowingly obtaining or disclosing health information in violation of HIPAA, up to $100,000 and 5 years if done under false pretenses, and up to $250,000 and 10 years if done to sell or use the information for commercial advantage, personal gain, or malicious harm
• State attorney general enforcement actions

Oregon Recording Laws by Topic

Phone Call Recording | Audio Recording | Video Recording | Workplace Recording | Recording Police | Security Cameras | Recording in Public | Landlord-Tenant | Dashcam Laws | Schools | Medical Recording | Voyeurism & Hidden Cameras

Back to Oregon Recording Laws

More Oregon Recording Topics

• Oregon Biometric Privacy Laws
• Surveillance Camera Laws

More Oregon Laws

• Oregon AI Meeting Recording Laws
• Oregon Dashcam Laws
• Oregon Data Privacy Laws
• Oregon Deepfake Laws
• Oregon Employee Monitoring Laws
• Oregon GPS Tracking Laws
• Oregon Police Bodycam Laws
• Oregon Smart Glasses Recording Laws

Frequently Asked Questions

Can I record my doctor's appointment in Oregon?

For phone appointments, yes, under one-party consent. For in-person and video telehealth appointments, you generally must notify your doctor before recording under ORS 165.540(1)(c). HIPAA does not prohibit patients from recording their own medical encounters.

Does HIPAA prevent me from recording my doctor?

No. HIPAA restricts healthcare providers from improperly disclosing patient health information. It does not apply to patients recording their own appointments. You can record your own medical visits, but Oregon law generally requires notification for in-person and video-call recordings.

Can I record a telehealth appointment in Oregon?

Phone-based telehealth follows one-party consent, so you do not need to notify the provider for a phone call. Video conferencing telehealth (Zoom, Teams, etc.) is treated as a conversation under ORS 165.540(1)(c), so you must notify the provider before recording. An exception for recording in your own home (ORS 165.540(3)) exists, but the statute does not define who counts as a subscriber, so whether it covers a video visit from home is unsettled, and telling the provider first is the safe course. The narrow ORS 165.540(6)(b) exception does not cover an ordinary telehealth visit; it applies only to a participant recording with intent to capture alleged unlawful activity who is working with law enforcement, an attorney, or an enforcement or regulatory entity, or who reasonably believes the recording may be used as evidence in a judicial or administrative proceeding.

Can hospitals have security cameras in patient rooms in Oregon?

Generally no. Security cameras in patient rooms without explicit patient consent raise serious privacy concerns under HIPAA and, where a camera could capture a patient's nudity or intimate area without consent, under Oregon's invasion-of-privacy statutes (ORS 163.700 and 163.701). Cameras are permitted in common areas like lobbies, hallways, and parking lots. Specific monitoring (ICU, psychiatric holds) requires appropriate consent.

Can my therapist refuse to let me record our session in Oregon?

Your therapist cannot stop you from exercising your legal right to record after providing notification. However, they can refuse to continue the session if you insist on recording. For phone-based therapy, one-party consent applies and no notification is needed.