Is It Legal to Record Therapy Sessions? A Consent Guide (2026)
Written by Kshitij Domadia, Founder, MyKaya
Published July 20, 2026
The question almost always comes before someone starts using an AI tool for therapy. "Is this even allowed?" It is the right question to ask, and the honest answer is: it depends on where you practice, whether your client has consented, and how the recording is stored and used. This guide covers what the law and professional ethics actually say — across the US, UK, and India — so you can make an informed decision rather than guessing.
This is an educational guide, not legal advice. Recording laws and professional standards vary by jurisdiction and can change. If you are in doubt about what is required in your specific situation, consult your licensing board, professional association, or a qualified attorney.
The legal picture by jurisdiction
United States
Recording consent laws in the US are determined at the state level, not federally. The country is divided into two types of jurisdictions:
One-party consent states (~37 states): Only one person in the conversation needs to consent to the recording. In a therapy context, this technically means the therapist can record without the client's explicit agreement — but doing so would be an ethical breach, regardless of legality.
Two-party (all-party) consent states (~13 states): Everyone in the conversation must consent. These include California, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, Nevada, New Hampshire, Oregon, Pennsylvania, and Washington. Recording without all-party consent in these states can result in criminal liability.
Federal law (the Wiretap Act) requires at least one-party consent. State law can be stricter — and state law governs.
HIPAA adds a separate layer. If the recording constitutes Protected Health Information (PHI), it must be stored, transmitted, and handled according to HIPAA's Security Rule. That means the recording platform must sign a Business Associate Agreement (BAA) with your practice, and you must take responsibility for its security.
United Kingdom
The UK does not have a specific law prohibiting a person from recording a conversation they are part of, for personal use. Under GDPR and the Data Protection Act 2018, personal recordings made for private reference (not shared or published) generally do not trigger data protection obligations.
However, the British Medical Association (BMA), General Medical Council (GMC), and most therapy professional bodies (BACP, UKCP, BPS) strongly advise that clients ask their therapist's permission before recording — and that covert recording can seriously damage the therapeutic relationship.
If you as a therapist are recording sessions, you will typically need to inform clients under GDPR's transparency principle. If the recordings are used to generate clinical notes, the platform processing those recordings must comply with GDPR's standards for sensitive health data processing.
India
India's legal framework on recording is still evolving. Under the Indian Evidence Act, a recording of a conversation that one party participates in may be admissible, but courts assess these case by case.
The Mental Healthcare Act 2017 places a significant emphasis on informed consent for all aspects of mental healthcare. A recording made without the client's knowledge could be considered a violation of the therapeutic contract, even if it may not be clearly illegal.
India's Digital Personal Data Protection Act (DPDP) 2023 requires informed consent before collecting and processing personal data — including audio recordings. Health data is classified as sensitive and requires explicit, specific consent.
In practice, the Indian mental health professional community treats informed client consent as both a legal and ethical requirement for any form of session recording.
The ethical picture (which applies everywhere)
Legal consent and ethical consent are not the same thing. Even in a one-party consent state where you could technically record without telling a client, doing so would violate the professional ethics codes of virtually every mental health licensing body, including:
- The APA Ethics Code (Standard 4.01: Maintaining Confidentiality; Standard 4.03: Recording)
- The NASW Code of Ethics (Section 1.07: Privacy and Confidentiality)
- The BACP Ethical Framework for the Counselling Professions
- The RCI (India) code of professional conduct
The core principle across all of them: you need explicit, informed consent before recording a client, and the client needs to understand how the recording will be used and stored.
A sample consent script
This is an example of how you might introduce recording consent as part of your intake process. Adapt it to your practice and have your version reviewed by your licensing board or professional association.
"As part of our work together, I use an AI tool to help me document our sessions more accurately. The tool records audio from my device — not your phone or your video call — and produces a draft session note that I review and edit before it becomes part of your clinical record. The audio is encrypted and stored securely; it is not accessible to any third party.
You have the right to opt out of this at any time. If you prefer I take handwritten notes instead, I am happy to do that. Do you have any questions before we begin, and do you consent to proceeding this way?"
A written version of this should be part of your informed consent documentation and signed before the first recorded session.
What this means for AI documentation tools
AI tools that process session audio are directly affected by these rules. Before using any AI scribe for therapy:
- Confirm that the vendor will sign a BAA (US: required under HIPAA; UK/India: confirm GDPR/DPDP data processing agreements)
- Confirm that data is encrypted in transit and at rest — this is a non-negotiable data protection standard
- Update your intake consent forms to disclose that you use an AI documentation tool
- Explain the tool to clients in plain language — what it records, who sees the data, and how to opt out
MyKaya is built on this foundation. Session audio is encrypted and isolated per practice. All of this is covered by the service's data processing agreement.
The short version
Recording therapy sessions is legal in most jurisdictions when all parties have given informed consent. Ethical practice requires informed consent regardless of what the law says. The practical standard: tell your client, explain how the recording is used, get written consent, and use a tool that meets your jurisdiction's data security requirements.