Statutory Compliance Architecture for Illinois BIPA
Ambient documentation in Illinois outpatient settings is governed by both the Biometric Information Privacy Act (740 ILCS 14) and HIPAA. Under 740 ILCS 14/10, BIPA defines a voiceprint as a biometric identifier. Section 15(b) prohibits collecting or capturing that identifier without written notice, a stated purpose and term, and a signed written release. Public Act 103-0769 (2024) now allows an electronic signature to satisfy the release requirement. It also limits recovery to one violation per person for repeated collection by the same method.
The health care exclusion in Section 10 covers information captured from a patient in a health care setting. It also covers information collected under HIPAA for treatment, payment, or operations. The Illinois Supreme Court read that exclusion broadly in Mosby v. Ingalls Memorial Hospital (2023). Conservative counsel still treats transient encounter audio as biometric material during processing. The reason is practical: exclusion arguments are litigated after a complaint is filed, not before.
Consent Gate and Timestamp Protocol
Merry AI enforces a hard consent gate in the Chrome extension. The extension does not request microphone permission until the clinician confirms a written consent checkbox bound to the active patient tab. If the checkbox is unchecked, the capture API is never called. The extension fails closed and does not buffer audio provisionally.
Each signed release generates a timestamp written into the encounter note itself. An example reads: Ambient documentation consent obtained in writing at 09:14 CT; patient informed that audio is processed in memory and destroyed at note completion. That line becomes part of the legal medical record and can be audited through the EHR's native access logs.
Zero-Day Retention Under 740 ILCS 14/15(a)
Section 15(a) requires a publicly available retention schedule and destruction guidelines. Destruction must occur when the initial purpose is satisfied or within three years of the last interaction, whichever comes first. Merry AI publishes a zero-day schedule. Audio exists only in volatile RAM and is never written to disk as WAV or WebM. The buffer is overwritten at note completion. No voiceprint template is derived, stored, or reused for model training.
DOM Injection and Tab Isolation
The only durable artifact is structured text, which the extension injects into the verified note editor through DOM selectors. Output is bound to the MRN and encounter identifier shown in the focused tab. After single-page route changes, the extension re-discovers the editor using MutationObserver. It refuses to write into cross-origin iframes. When the charting context is ambiguous, the text is copied to the clipboard for manual review instead.
The comparison below contrasts liability exposure across three documentation models.
| Compliance Dimension | Manual Charting | Standard Generic AI Scribes | Merry AI Compliance Architecture |
|---|---|---|---|
| Voiceprint capture (14/10) | None | Recorded audio may be retained for QA or training | RAM-only; no template derived |
| Written release (14/15(b)) | Not triggered | Often embedded in app terms | Checkbox-gated before microphone activation |
| Retention schedule (14/15(a)) | Not applicable | Vendor-defined, variable duration | Published zero-day destruction |
| Consent evidence | Paper form | Vendor-side log | Timestamp in encounter note |
| Wrong-chart risk | Low | Clipboard and sidecar paste errors | Tab-bound MRN verification; fails closed |
| G2211 and modifier 25/59 support | Clinician dependent | Narrative-heavy output | Specialty-structured fields |
Specialty Documentation Integrity in Multi-Specialty Outpatient
Statutory compliance does not excuse thin documentation. In behavioral health, notes capture DSM-5-TR criterion counts, duration thresholds, a labeled mental status exam, and a suicide risk assessment. Cardiology entries record NYHA class with functional descriptors and LVEF by imaging modality. Orthopedic notes preserve dictated range-of-motion degrees and KOOS or DASH scores verbatim. Pediatric visits follow Bright Futures periodicity, including ASQ and M-CHAT screening.
Primary care and internal medicine notes use a problem-oriented structure. Each chronic condition, such as diabetes, hypertension, CKD, or COPD, has its own assessment, stability status, and plan revision. Longitudinal continuity documented across serial visits is the clinical basis for a defensible G2211 claim. It is also the element that generic narrative output most often omits.
Coding Precision for G2211 and Modifiers 25 and 59
CMS permits HCPCS G2211 with office/outpatient E/M codes 99202-99205 and 99211-99215. It also permits G2211 with home or residence codes 99341, 99342, 99344, 99345, and 99347-99350. The visit must reflect a longitudinal care relationship or ongoing care for a single serious or complex condition. Transmittal 12424 (CR 13272) implemented edits that deny G2211 when the base E/M carries modifier 25. Since calendar year 2025, CMS makes an exception when the same claim includes an annual wellness visit, vaccine administration, or a qualifying Part B preventive service.
Modifier 25 belongs only on the E/M line. It must reflect a significant, separately identifiable service beyond the pre-procedural evaluation. Modifier 59, along with its XE, XS, XP, and XU subsets, applies only to procedure lines. It requires documentation of a distinct site, session, or lesion. Merry AI structures dictation to keep E/M reasoning separate from the procedural narrative. It also captures laterality, such as a left subacromial injection versus a right knee aspiration.
Audit Readiness and Implementation Sequence
Before deployment, compliance officers should confirm four artifacts. The first is the published zero-day schedule. The second is Illinois-specific written notice language. The third is a business associate agreement that prohibits audio retention and reuse for training. The fourth is a sample note showing the consent timestamp. Section 15(e) also requires a reasonable standard of care for biometric data in transit. The RAM-only pipeline meets that requirement through encrypted, non-persistent streaming.
Liquidated damages under Section 20 are $1,000 per negligent violation and $5,000 per intentional or reckless violation. For that reason, documenting the consent gate is itself a risk control. Peer-reviewed evaluations of ambient documentation accuracy are indexed at https://www.ncbi.nlm.nih.gov/pmc/ and should inform local validation. To review your current workflow against these controls, Schedule a 15-Minute Workflow Audit.
