Can I use AI for therapy notes without recording the session?

Yes. Many AI note tools transcribe the session itself, but that is not the only approach. An alternative is to speak a short summary after the client has left, in your own words, and have that turned into a structured note. The session is not recorded, so there is no session recording to consent to, store or delete.

Do I need client consent to use an AI notes tool?

If the tool records or transcribes the session, you are processing the client’s voice and words, and you will normally need to explain that and get their explicit agreement. If the tool only processes a summary you dictate afterwards, the session is not captured, which materially narrows what you are processing. You still need to be transparent in your privacy notice about the software you use and who processes the summary.

Is recording therapy sessions a GDPR problem?

It is not prohibited, but it raises the stakes. A recording is special category health data in its most identifiable form, a voice. You need a lawful basis and an Article 9 condition, a retention period, a way to handle access and other rights requests, and clarity on where the audio is processed. Not recording removes that category of risk rather than managing it.

AI therapy notes without recording the session

A lot of therapists have looked at AI note tools, liked the idea of getting an hour of admin back, and stopped at the same place: it wants to record the session.

That hesitation is not technophobia. It is a reasonable professional judgement about what a recording device does to a room, and about what you then become responsible for.

What recording actually changes in the room

The therapeutic relationship depends on the client believing the room is contained. A client who knows they are being recorded may still speak freely. Many will. But some will not, and you will rarely be able to tell which. The disclosure that does not happen is invisible to you.

There is also the moment of asking. Explaining a recording tool at the start of a first session spends something, and it puts a piece of software into a relationship that has not been established yet.

What recording changes in your obligations

A session recording is special category health data in one of its most identifiable forms. Once you hold one, several things follow.

You need a lawful basis and a separate Article 9 condition for health data.
You need a retention period for the audio, distinct from the note.
A subject access request may cover the recording, not just your written note. So might an erasure request.
If the client mentions a third party, a partner, a child, a colleague, you now hold that person's data in audio you did not decide to collect.
You need to know where the audio is processed and who can access it.

None of this is unmanageable. Plenty of practitioners manage it properly. The point is that it is a category of risk you are choosing to take on, and it is worth asking whether the benefit requires it.

The alternative: summarise after the client has left

There is a different way to get the same time back. Instead of capturing the session, you speak a short summary once the client has gone, in your own words, the way you would if you were telling a supervisor what happened. That summary becomes a structured note in whatever format you work in.

The difference is not cosmetic. The session itself is not captured. There is no audio of the session, so there is no session recording to consent to, retain or delete. You still need to tell clients, in your privacy notice, that AI helps write their notes. Your clinical judgement is doing the summarising, which is arguably where it should sit anyway.

It also means the note reflects what you thought was significant, rather than a transcript weighted by whatever was said at greatest length.

What you give up

Being straight about the trade: a summary is your recollection, not a verbatim record. If you specifically want exact quotes captured, or you are working in a context where a verbatim account matters, transcription does something a summary cannot.

For most private practice work, that is not what the note is for. A progress note is a clinical record of your assessment and plan, not a transcript. But it is worth deciding deliberately rather than by default.

Questions worth asking any AI notes tool

Is session audio recorded, and if so, where is it stored and for how long?
Where is the data processed, and does it leave the UK?
Is your data used to train models?
Can you export everything and leave?
Is there an audit trail showing what was AI-generated and what you edited?

Ask these of any tool, including ours. A vendor that cannot answer them plainly is telling you something.

Where NoteSono sits

NoteSono was built around the summary approach specifically. You speak for a minute or two after the client has left and get a structured note back to review. NoteSono does not record your sessions. Notes are stored in the EU, some AI processing uses providers outside the UK and EU under data processing terms that exclude training on your data, and there is an audit trail on every note.

If you want the detail on the compliance side, we've written separately about AI therapy notes and UK GDPR and how long to keep therapy notes.

This article is general information about data protection and professional practice, not legal advice. Your professional body and your own privacy notice come first.