EnglishEspañol
Alabama flag

Alabama

Alabama Medical Recording Laws: Patient Rights and HIPAA Rules

Independently fact-checked against primary sources (last audited August 15, 2026). · Reviewed by the RecordingLaw editorial team. · Law checked current as of August 9, 2026. · 7 primary sources cited on this page. How we verify our legal content

Alabama Medical Recording Laws: Patient Rights and HIPAA Rules

Updates

Corrected the description of HIPAA and provider recording: a provider recording for its own treatment, payment, or health care operations does not need a separate HIPAA authorization; authorization rules apply to uses outside that exception.

Corrected a mischaracterized case citation about civil remedies for illegal recording, clarified that HIPAA does not require separate patient authorization for a provider's own treatment/clinical-documentation uses, and added the eavesdropping-penalties section that the page's own changelog said had been added but was missing from the article.

Independently fact-checked against the cited primary sources

Governing law re-checked for recent changes

Governing law re-checked for recent changes

Propagated hub refresh to medical spoke. Replaced Justia commercial-codifier links with alison.legislature.state.al.us. Added full four-tier penalty ladder including 13A-11-32.1 (Class C felony, aggravated surveillance for sexual gratification) and 13A-11-33 (Class C felony, installing eavesdropping device). Added civil cause of action note: Title 13A Chapter 11 Article 2 has no standalone statutory civil remedy; patients may have a federal civil claim under ECPA's civil remedy provision, 18 U.S.C. 2520, and Alabama common-law invasion of privacy may apply depending on the facts. Confirmed HIPAA does not prohibit patient recording of own appointment; provider disclosure requirements remain under HIPAA Privacy Rule at 45 C.F.R. Part 164.

Reviewed and approved by an editor

Sources and References

  1. Alabama Code of Alabama(alison.legislature.state.al.us).gov
  2. Ala. Code 13A-11-30 - Definitions(law.justia.com)
  3. HIPAA - HHS(hhs.gov).gov
  4. HHS Office for Civil Rights(hhs.gov).gov
  5. National Institutes of Health(nih.gov).gov
  6. Ala. Code 13A-11-30 - Definitions (Offenses Against Privacy)(alison.legislature.state.al.us).gov
  7. Ala. Code 13A-11-31 - Criminal Eavesdropping(alison.legislature.state.al.us).gov
  8. Federal Wiretap Act - 18 U.S.C. 2511(law.cornell.edu)
  9. 45 C.F.R. 164.508, Uses and disclosures for which an authorization is required (eCFR)(ecfr.gov).gov
Share: