AI Transcription Tools in Australian Clinics Trigger Privacy Warning

Australian health authorities have issued formal guidance warning that the rapid uptake of artificial intelligence scribing tools in medical practices raises serious privacy risks for patients, with regulators pointing to gaps in how recorded consultations are stored, shared and potentially used by third-party technology vendors. The warning, circulated this week, comes as AI scribe adoption across Australian general practice has accelerated sharply through 2025 and into 2026.

The timing matters. Millions of Australians now sit across from a GP whose desktop or tablet is quietly transcribing every word through an AI platform. The tools, which listen to consultations, generate clinical notes and feed data into practice management software, have been embraced largely because they cut documentation time. But regulators are now pressing the question that many patients have never thought to ask: where does that recording actually go?

What the warnings say

The Office of the Australian Information Commissioner has flagged that health information collected by AI scribes falls under the Privacy Act 1988, meaning any third-party vendor processing that data is required to handle it under Australian Privacy Principles. The concern is not hypothetical. Some of the dominant AI scribing platforms operating in Australian clinics are headquartered overseas, meaning patient consultation data could be processed on servers outside Australian jurisdiction. The OAIC has previously noted that offshore data processing creates enforcement complications when breaches occur.

The Australian Medical Association has encouraged members to scrutinise vendor contracts before deploying AI scribing tools, with particular attention to data retention policies and whether de-identified patient data is used to train or refine the underlying AI models. Patients, the AMA has indicated through public communications, should be actively informed that a recording tool is in use before a consultation begins, a step that is not uniformly happening across practices.

Privacy advocates and health informaticians have separately raised the point that consent, as currently practised in many clinics, amounts to a brief verbal mention at best. A patient presenting anxious and unwell to a Carlton or Fitzroy GP at 8am is not in the strongest position to meaningfully interrogate what happens to a transcript of their mental health discussion.

The Melbourne picture

In Melbourne, the issue is particularly live given the density of community health centres and migrant health services operating across the inner north and west. Cohealth, which runs clinics across Kensington, Flemington and Footscray among other sites, serves communities where English is a second language and where trust in institutions, particularly around data, is carefully calibrated. Staff at community health services have noted, in sector discussions, that explaining AI transcription tools to patients from communities with histories of state surveillance requires a different, more careful conversation than a standard consent tick-box allows.

The Royal Melbourne Hospital on Grattan Street, Parkville, and Melbourne Health more broadly sit under the Victorian Health Records Act 2001 as well as Commonwealth privacy obligations, giving the state government a parallel lever to enforce standards. The Victorian Department of Health has not, as of Saturday, issued its own guidance to supplement the OAIC warning, though sector observers expect something to follow.

Nationally, the scale of adoption makes the stakes clear. Industry figures from 2025 suggested that AI scribing tools were in use in thousands of Australian general practices, with some estimates placing uptake at more than 30 per cent of GP clinics by the end of that year. The cost of subscription-based AI scribing services typically ranges between $100 and $300 per practitioner per month, affordable enough that solo GPs and small practices have adopted them without the procurement scrutiny that a large hospital system might apply.

For patients, the practical upshot of this week's warning is straightforward: ask your doctor whether an AI scribing tool is running during your appointment, and ask whether you can opt out without affecting your care. Under the Privacy Act, patients have rights to access health information held about them, including, in principle, transcripts generated during consultations. Whether AI scribing vendors make that access easy in practice is a separate and, as yet, largely untested question. Regulators have signalled they are watching.