Skip to content

CMS & Regulatory Compliance

Connecticut CGS § 52-570d

Connecticut CGS § 52-570d Telehealth Consent Rules

Gate ambient capture behind verbal all-party consent and attest it in the note header. Book your audit at https://cal.com/merryai/demo.

Key Takeaways
  • Connecticut CGS § 52-570d(a) prohibits recording an oral private telephonic communication unless all parties consent or a statutory notification path is met, and § 52-570d(c) creates a private civil action for violations
  • Verbal consent from every telehealth participant, including family, caregivers, and interpreters, must be captured before ambient listening opens
  • A consent attestation is injected into the note header field before transcription starts, so it appears in the signed encounter record
  • Audio is processed in RAM only and shredded at note finalization, which leaves no retained recordings to discover or breach
  • Validation via [Access Clinical Prompts at templates.scribing.io](https://templates.scribing.io)

Executive Key Takeaways

  • Connecticut CGS § 52-570d(a) prohibits recording an oral private telephonic communication unless all parties consent or a statutory notification path is met, and § 52-570d(c) creates a private civil action for violations
  • Verbal consent from every telehealth participant, including family, caregivers, and interpreters, must be captured before ambient listening opens
  • A consent attestation is injected into the note header field before transcription starts, so it appears in the signed encounter record
  • Audio is processed in RAM only and shredded at note finalization, which leaves no retained recordings to discover or breach
  • Validation via [Access Clinical Prompts at templates.scribing.io](https://templates.scribing.io)
Regulatory Verification Framework
2026 Audit Ready
CGS § 52-570d(a)(1)–(2)Verified Compliant

Written all-party consent obtained before recording, or verbal all-party consent recorded at the start of the recording

Written all-party consent obtained before recording, or verbal all-party consent recorded at the start of the recording

CGS § 52-570d(a)(3)–(4)Verified Compliant

Recorded verbal notification at the outset, or an automatic tone warning repeated at approximately fifteen-second intervals

Recorded verbal notification at the outset, or an automatic tone warning repeated at approximately fifteen-second intervals

CGS § 52-570d(c)Verified Compliant

Private civil action in Superior Court for damages, costs, and a reasonable attorney's fee

Private civil action in Superior Court for damages, costs, and a reasonable attorney's fee

CGS § 19a-906Verified Compliant

Telehealth notice, consent, and revocation documented in the patient's health record at the first telehealth interaction

Telehealth notice, consent, and revocation documented in the patient's health record at the first telehealth interaction

Statutory Compliance Architecture for Connecticut CGS § 52-570d

Documenting telehealth encounters under Connecticut CGS § 52-570d begins with a narrow rule that leaves little room for error. No person may use any instrument, device, or equipment to record an oral private telephonic communication unless a statutory path is satisfied. Subsection (a) permits recording in four situations. The first is written all-party consent obtained beforehand. The second is verbal all-party consent recorded at the start. The third is a recorded verbal notification at the outset. The fourth is an automatic tone warning repeated at approximately fifteen-second intervals.

The statute's civil remedy creates the operational risk. Under subsection (c), any aggrieved person may sue in Superior Court for damages, costs, and a reasonable attorney's fee. Connecticut's criminal eavesdropping provisions follow a different consent model. Practices that rely on generic one-party guidance therefore often misjudge their exposure. For ambient documentation, the civil all-party standard is the rule that governs.

Telephonic Scope and the Telehealth Overlay

Telehealth primary care in Connecticut carries a second, independent obligation. At the first telehealth interaction, CGS § 19a-906 requires the provider to inform the patient of treatment methods and limitations and to obtain consent to telehealth services. The provider must document both notice and consent in the health record, along with any later revocation. Recording consent and telehealth consent are separate legal events, and a defensible chart reflects both.

Audio-only visits fall squarely within the telephonic language of § 52-570d. It is less settled whether video platforms count as telephonic communication. Merry therefore applies the same consent gate to every telehealth modality, so clinicians never have to make a modality judgment mid-visit. Uniform behavior is easier to audit than conditional behavior.

Merry treats consent as a state transition rather than a checkbox. Before consent, the microphone pathway is closed: no audio streaming, no speech recognition, and no buffering. Listening opens only after the clinician reads a standardized consent script and each participant verbally affirms. Even a few seconds of capture before that affirmation can be a technical violation, so the gate is enforced in software, not in policy.

Audio is processed in RAM only and shredded at note finalization. There are no persistent audio files, no browser storage, and no vendor-side retention that could be subpoenaed, breached, or reused for model training. Merry keeps process metadata in audit logs, consistent with HIPAA audit-control expectations under 45 CFR § 164.312(b). That metadata covers the consent timestamp, the encounter identifier, and the EHR fields written.

Multi-Party Encounters: Family, Interpreters, and Caregivers

Every voice on the line is a party under § 52-570d. Primary care telehealth routinely includes adult children managing a parent's medications, spouses, home health aides, and medical interpreters. Merry's script prompts the clinician to identify each participant by role and to obtain a separate verbal affirmation from each person before capture begins. If someone joins mid-visit, listening pauses until that person consents.

Consent to telehealth services under § 19a-906 must come from the patient or an appropriate legal representative. Recording consent, by contrast, must come from all parties. Merry records these separately, so a caregiver's agreement to recording is never mistaken for authority to consent to treatment.

Note Header Attestation and EHR Injection

Before transcription starts, Merry writes a consent attestation into the note header field. The standardized text reads: 'On [date/time], all parties present ([roles]) verbally consented to ambient documentation of this telehealth encounter, consistent with CGS § 52-570d; telehealth notice and consent documented per CGS § 19a-906.' Idempotent checks prevent duplicate insertion when the clinician reopens the note.

Placement in the header matters because litigation review starts with the signed encounter note, not auxiliary logs. An attestation stored only in a vendor dashboard or a communications widget may be missing from the PDF, CCD, or visit summary produced in discovery.

Iframes, Tabs, and the Signed Record

Web-based EHRs frequently isolate the charting surface inside nested iframes and spread telehealth workflows across multiple tabs. Merry resolves selectors within each frame and identifies the active encounter note through focus and navigation events. It then writes into the canonical note body. If the EHR provides a discrete telehealth consent field, Merry populates that field and repeats a short narrative at the top of the progress note, so both locations match.

Comparative Liability and Billing Integrity

The table below contrasts three documentation approaches against the obligations of § 52-570d and § 19a-906.

Compliance DimensionManual ChartingStandard Generic AI ScribesMerry AI Compliance Architecture
All-party consent timingDepends on clinician memory; often undocumentedMay begin capture at session startHard gate; capture opens only after every party affirms
Multi-party coverageInconsistentOften a clinician toggle onlyAffirmation captured per participant by role; pauses when someone new joins
Consent evidence in chartFree text, if enteredSession flag outside the noteAttestation injected into note header before transcription
Audio retentionNoneRetention for QA or training varies by vendorRAM-only; shredded at note finalization
§ 19a-906 telehealth consentManual entryFrequently unaddressedSeparate structured attestation with revocation tracking

Consent integrity also protects revenue. A note that cannot withstand a recording challenge invites scrutiny of everything else documented in it. Merry's notes capture longitudinal continuity and complexity drivers in the Assessment and Plan. This supports HCPCS G2211 when the primary care practitioner serves as the continuing focal point for care, as described in CMS Transmittal 12461. Verify how Modifier 25 interacts with G2211 against the current Physician Fee Schedule.

Clinical evidence and workflow review should accompany any deployment. Peer-reviewed literature on ambient documentation accuracy is indexed at https://www.ncbi.nlm.nih.gov/pmc/. To review consent scripts, header injection, and EHR frame mapping using your own templates, Schedule a 15-Minute Workflow Audit.

Regulatory & Compliance FAQ

Does CGS § 52-570d apply to audio-only telehealth visits in Connecticut primary care?

Yes. An audio-only visit is an oral private telephonic communication, so recording it requires one of the subsection (a) paths. These are prior written all-party consent, verbal all-party consent recorded at the start, a recorded verbal notification, or an automatic tone warning at roughly fifteen-second intervals. Merry applies the verbal all-party consent path to every telehealth modality, including video, so clinicians never decide on modality mid-encounter.

Do family members, caregivers, and interpreters on a telehealth call need to consent under § 52-570d?

Yes. Section 52-570d requires consent from all parties to the communication, not only the patient and clinician. An adult child, spouse, home health aide, or medical interpreter on the line is a party. Merry's script prompts the clinician to identify each participant by role and capture a separate verbal affirmation before listening opens. If someone joins later, Merry pauses listening until that person consents.

What civil liability does a practice face for recording a telephonic encounter without all-party consent?

Subsection (c) of CGS § 52-570d lets any aggrieved person file a civil action in Connecticut Superior Court for damages, costs, and a reasonable attorney's fee. Each participant who did not consent may be an aggrieved person, so multi-party calls compound exposure. Retained audio adds discoverable evidence. Merry processes audio only in RAM, shreds it at note finalization, and keeps metadata-only logs demonstrating the consent sequence.

How does the note header attestation address both § 52-570d and § 19a-906?

The attestation is written into the note header field before transcription begins. It records the timestamp, participant roles, and verbal all-party consent to ambient documentation under § 52-570d. A separate line documents the telehealth notice and consent required by CGS § 19a-906, including any revocation. Because it lives in the signed encounter note rather than a vendor dashboard, it appears in PDFs, CCDs, and visit summaries.

Where can clinics verify compliant templates?

Clinics can review consent scripts, note header attestation language, and specialty documentation templates at [https://templates.scribing.io](https://templates.scribing.io). Before deployment, compliance officers should compare each template against current Connecticut statutory text, their EHR's canonical note fields, and payer documentation policies. Revalidate templates whenever the EHR vendor changes iframe structures or note layouts. A correctly worded attestation offers limited protection if it lands outside the signed record.

Explore More Knowledge

Related Clinical Rules & Compliance Guides

View all clinical rules & compliance
Illinois BIPA Ambient Scribing: Multi-Specialty Rules
CMS & Regulatory Compliance

Illinois BIPA Ambient Scribing: Multi-Specialty Rules

Gate ambient audio behind written 740 ILCS 14/15(b) consent and timestamp it in every note. Book your audit at https://cal.com/merryai/demo.

Dr. Sarah Chen, MD•7 min read
Read guide
Ohio Medical Board AI Note Rules: Internal Medicine
CMS & Regulatory Compliance

Ohio Medical Board AI Note Rules: Internal Medicine

Physician review, edit, and attestation before signature under ORC 4731.22. Book your audit at https://cal.com/merryai/demo.

Dr. Sarah Chen, MD•7 min read
Read guide
California AB 3030 Compliance for Primary Care
CMS & Regulatory Compliance

California AB 3030 Compliance for Primary Care

Append AB 3030 AI notices and clinician contact steps, then timestamp review. Book your audit at https://cal.com/merryai/demo.

Dr. Sarah Chen, MD•7 min read
Read guide