Colorado Medical Recording Laws: Patient Rights, HIPAA, and Provider Rules

Colorado is a one-party consent state, so a patient may record their own medical appointment under C.R.S. 18-9-303 and C.R.S. 18-9-304 without notifying the provider. HIPAA restricts how providers handle recordings but places no obligation on patients.

Quick Answer

Colorado patients can legally record their own medical appointments without telling the healthcare provider. Under C.R.S. 18-9-303 and C.R.S. 18-9-304, Colorado's one-party consent law allows any participant in a conversation to record it. Since the patient is a participant in the medical consultation, their consent is sufficient. However, healthcare facilities may have internal policies that restrict recording on their premises.

Patient Recording Rights

The Legal Basis

Colorado's one-party consent framework gives patients the legal right to record their medical appointments. The relevant statutes are:

• C.R.S. 18-9-303 (Wiretapping): Covers telehealth calls, phone consultations, and electronic communications with healthcare providers
• C.R.S. 18-9-304 (Eavesdropping): Covers in-person medical appointments and consultations

As a participant in the medical conversation, your consent satisfies the statutory requirement. You do not need to inform your doctor, nurse, or other healthcare professional that you are recording.

Why Patients Record Medical Appointments

Patients have many legitimate reasons for recording healthcare visits:

• Complex medical information: Remembering diagnosis details, medication instructions, and treatment plans
• Informed consent documentation: Preserving exactly what the provider said about risks, benefits, and alternatives
• Sharing with family caregivers: Allowing family members who could not attend to hear the provider's recommendations
• Second opinion preparation: Sharing recorded information with another provider
• Disability accommodation: Patients with hearing impairments, cognitive conditions, or language barriers may need recordings for later review
• Malpractice concerns: Documenting what was communicated during treatment decisions
• Medication management: Accurately recalling dosage instructions and drug interaction warnings

Research Supporting Patient Recording

The medical community has increasingly recognized the benefits of patient recording. Studies published in medical journals have found that patients forget 40% to 80% of medical information provided during office visits. Many healthcare organizations now encourage patients to record visits as a tool for better health outcomes and treatment adherence.

HIPAA and Patient Recording

What HIPAA Actually Covers

The Health Insurance Portability and Accountability Act (HIPAA) is a federal law that governs how healthcare providers, health plans, and healthcare clearinghouses handle protected health information (PHI). HIPAA places obligations on "covered entities" and their "business associates."

Critical point: HIPAA does not apply to patients. Patients are not covered entities. HIPAA does not prohibit you from recording your own medical appointment, sharing the recording with family members, or posting about your own medical experience.

Common HIPAA Misconceptions

Healthcare providers sometimes incorrectly cite HIPAA when asking patients not to record. Here are the facts:

• "HIPAA prohibits recording": False. HIPAA restricts providers' disclosure of your health information. It does not restrict your own recording.
• "You need our permission to record under HIPAA": False. HIPAA does not give providers authority over patients' recording decisions.
• "We can't let you record because of other patients' privacy": Partially valid. If your recording captures other patients' information (in a shared waiting room, for example), that raises privacy concerns, but HIPAA itself is not the reason.

When HIPAA Is Relevant to Recording

HIPAA becomes relevant when:

• The provider records you: A healthcare provider who records a patient visit creates a record containing PHI, which must be handled according to HIPAA's privacy and security rules
• Other patients' information is captured: If your recording incidentally captures other patients' conversations or information, sharing that recording could implicate their privacy rights
• Research recordings: Healthcare providers who record patients for research purposes must comply with both HIPAA and institutional review board (IRB) requirements

Healthcare Facility Policies

The Private Property Factor

While Colorado law permits patient recording, healthcare facilities are private property. As property owners, hospitals, clinics, and medical offices can establish rules about recording on their premises. This mirrors the broader principle that private property owners can restrict activities on their property.

If a facility has a no-recording policy:

• The policy does not change the legality of the recording under Colorado criminal law (the recording still does not violate C.R.S. 18-9-303 or 18-9-304)
• The facility can ask you to stop recording
• If you refuse, the facility can ask you to leave
• Refusing to leave could constitute trespass
• In non-emergency situations, the facility could decline to provide services

Balancing Patient Rights and Facility Policies

If you want to record a medical appointment but the facility prohibits it:

• Ask if an exception can be made for your personal use
• Explain that you need the recording to remember medical instructions
• Offer to record audio only (less intrusive than video)
• Ask the provider to write down key information as an alternative
• Consider switching to a provider who permits recording

Emergency Situations

In emergency rooms and urgent care settings, facility recording policies may be more strictly enforced due to the presence of multiple patients in close proximity. However, Colorado law still permits you to record your own conversations with healthcare providers, even in these settings.

Telehealth Recording

One-Party Consent Applies to Telehealth

Telehealth visits conducted by phone or video call fall under C.R.S. 18-9-303, which covers telephone and electronic communications. As a participant in the telehealth call, you can record it without notifying the provider.

This applies to:

• Phone consultations
• Video visits through platforms like Teladoc, Doxy.me, or provider portals
• Zoom or Teams calls with healthcare providers
• Chat-based telehealth interactions

Platform Recording Features

Many telehealth platforms have built-in recording features. When a provider uses the platform's recording function, all participants are typically notified. However, you can also use separate recording software or an external device to record the session under one-party consent.

Interstate Telehealth Considerations

If your telehealth provider is located in a two-party consent state, the stricter state's law may apply. When receiving telehealth services from out-of-state providers, consider informing the provider that you are recording to avoid potential legal complications. Our recording consent checker flags whether the provider's state requires that step.

Healthcare Provider Recording of Patients

When Providers Need Consent

Whether a healthcare provider needs a patient's consent to record depends on the purpose:

• Medical records documentation: Standard clinical documentation does not typically involve audio or video recording and is governed by HIPAA
• Training and education: HIPAA lists supervised training programs for health care students, trainees, and practitioners as health care operations (45 CFR 164.501), which a covered provider may carry out without the patient's authorization (45 CFR 164.506). Facility policies or professional ethics rules may still call for consent
• Research purposes: Recording for research generally requires the patient's HIPAA authorization or an approved IRB or privacy board waiver (45 CFR 164.512(i)), and often IRB review
• Marketing and testimonials: Using patient recordings for promotional purposes requires explicit written consent
• Surgical recordings: Recording surgical procedures may require patient consent depending on the purpose

Provider Surveillance in Healthcare Facilities

Healthcare facilities can use security cameras in common areas (lobbies, hallways, parking lots) without patient consent for the video component. Cameras in:

• Patient rooms require careful consideration of privacy expectations
• Examination rooms should generally not be present or should be clearly disclosed
• Recording someone's intimate parts in a bathroom without consent is criminal invasion of privacy under C.R.S. 18-7-801
• Operating rooms may record for quality assurance with proper consent protocols

Mental Health and Therapy Recording

Recording Therapy Sessions

Patients can record their own individual therapy sessions in Colorado under one-party consent (group sessions raise the confidentiality rule described below). However, the therapeutic relationship introduces unique considerations:

• Recording may affect the therapeutic dynamic
• Therapists may feel less candid if they know they are being recorded
• Some therapists include no-recording clauses in their treatment agreements
• The recording captures sensitive mental health information that should be stored securely

Therapist Obligations

Colorado mental health professionals have specific confidentiality obligations under C.R.S. 12-245-220 (the Mental Health Practice Act). These obligations mainly govern the therapist, but C.R.S. 12-245-220 also bars anyone who takes part in supervised therapy, including group therapy, from disclosing what they learned about other participants without those participants' consent. Recording your own individual session is generally lawful; recording or sharing a group session can expose other members' confidential information, so get the group's consent first.

Recordings in Medical Malpractice Cases

Admissibility

Recordings of medical appointments made under one-party consent are generally admissible in Colorado medical malpractice cases. These recordings can be crucial for:

• Proving what the provider communicated about risks and alternatives
• Demonstrating informed consent (or lack thereof)
• Contradicting after-the-fact documentation by the provider
• Establishing the timeline of symptom disclosure

Statute of Limitations Considerations

Colorado's medical malpractice statute of limitations under C.R.S. 13-80-102.5 generally requires suit within two years after the claim accrues (when the patient knew or should have known of the injury and its cause) and no later than three years after the act or omission. The three-year cutoff does not apply in some cases, including when the provider knowingly concealed the act, when a foreign object was left in the body, when neither the injury nor its cause could reasonably have been discovered, and for young children and people under a legal disability, so talk to a lawyer promptly about your deadline. Recordings with timestamps help establish when events occurred.

Children and Minors

Recording Pediatric Appointments

Parents can record their children's medical appointments as participants in the conversation. This is particularly valuable for:

• Complex treatment plans for children with chronic conditions
• Multi-specialist coordination where information needs to be shared across providers
• Special education documentation where medical findings affect school services
• Divorce or custody situations where both parents need medical information

Adolescent Privacy

Colorado law grants certain healthcare privacy rights to minors in specific situations (such as reproductive health). Parents should be aware that recording in these contexts may raise additional privacy considerations for the minor.

More Colorado Recording Laws

Audio Recording | Video Recording | Voyeurism & Hidden Cameras | Workplace Recording | Recording Police | Phone Call Recording | Security Cameras | Recording in Public | Landlord-Tenant | Dashcam Laws | Schools | Medical Recording

Back to Colorado Recording Laws

More Colorado Recording Topics

• Colorado Biometric Privacy Laws
• Surveillance Camera Laws

More Colorado Laws

• Colorado AI Meeting Recording Laws
• Colorado Dashcam Laws
• Colorado Data Privacy Laws
• Colorado Deepfake Laws
• Colorado Employee Monitoring Laws
• Colorado GPS Tracking Laws
• Colorado Police Bodycam Laws
• Colorado Smart Glasses Recording Laws

Frequently Asked Questions

Can I record my doctor's appointment in Colorado?

Yes. Colorado's one-party consent law allows you to record any conversation you participate in. As a patient present at your own medical appointment, your consent is sufficient. You do not need to inform the healthcare provider. However, the facility may have a policy against recording on its premises.

Does HIPAA prevent me from recording my medical appointment?

No. HIPAA applies to healthcare providers and how they handle your information. It does not apply to patients. HIPAA does not prohibit you from recording your own medical visits, and a provider who claims otherwise is incorrect about the law.

Can I record a telehealth visit in Colorado?

Yes. Telehealth calls fall under C.R.S. 18-9-303, which governs electronic communications. As a participant in the telehealth visit, you can record it under one-party consent. If your provider is in a two-party consent state, consider informing them to avoid potential complications.

Can a hospital tell me I cannot record in Colorado?

A hospital can establish a no-recording policy as a private property rule. While your recording is not a crime under Colorado law, the hospital can ask you to stop or ask you to leave. In non-emergency settings, they could decline services if you refuse to comply.

Can I use a recording of my doctor as evidence in a malpractice case?

Yes. Recordings made under one-party consent are generally admissible in Colorado courts, including medical malpractice cases. The recording must be authentic and unaltered. These recordings can prove what the provider communicated about risks, treatment options, and informed consent.