What are the key updates in the 2026 ACS colorectal cancer screening guideline?

 COLORECTAL CANCER SCREENING UPDATE | CLINICAL PRACTICE SERIES

June 2026 | NP Chronicles Clinical Education

The ACS Just Updated Its Colorectal Cancer Screening Guideline. Here’s What NPs Need to Know.

By Valerie Watters-Burke, DNSc, MSN, MBA, FNP-BC, GNP-BC, PPCNP-BC

On stool-based molecular testing, blood-based screening, and why “the best test” is still the one the patient actually completes

CLINICAL AND PROFESSIONAL BOTTOM LINE

The 2026 American Cancer Society colorectal cancer screening guideline does not change the core age recommendations: average-risk adults should still begin screening at age 45, continue through age 75 if life expectancy is greater than 10 years, individualize screening decisions from ages 76 to 85, and generally stop screening after age 85.

What is new is the screening menu.

The ACS now recognizes newly approved molecular stool-based tests — including the multitarget stool RNA test and next-generation multitarget stool DNA test — as preferred stool-based screening options when used every 3 years. These join annual high-sensitivity FIT and high-sensitivity guaiac-based fecal occult blood testing as preferred noninvasive stool-based options.

Blood-based colorectal cancer screening also enters the conversation, but with important limits. The ACS does not consider blood-based cell-free DNA testing a preferred screening option at this time. It should be reserved for patients who decline or do not complete preferred stool-based testing or direct visual exams, and only after a clear conversation about its limitations — especially lower sensitivity for advanced precancerous lesions and early-stage cancers.

For NPs, the message is practical: offer options, explain trade-offs honestly, and make sure every positive noncolonoscopy test is followed by timely colonoscopy, preferably within 6 months. A stool test, blood test, or CT colonography is not “complete screening” if a positive result never gets diagnostic follow-up.

The Screening Conversation Is Changing

For years, colorectal cancer screening conversations have often sounded familiar:

“Are you ready for your colonoscopy?”

The patient hesitates.

Then the visit moves into the usual barriers: bowel prep, time off work, transportation, fear of sedation, insurance questions, embarrassment, prior bad experiences, or the simple reality that many patients do not want an invasive test unless they absolutely have to.

That conversation still matters. Colonoscopy remains a powerful screening and prevention tool because it can detect cancer and remove precancerous lesions in the same procedure. But the 2026 ACS update reflects what NPs already know from daily practice: patients do not all accept the same screening pathway.

Some patients will do a colonoscopy.

Some will complete a stool test at home.

Some will only agree to screening if it can be done with a blood draw.

And some will agree in the exam room but never complete the test unless the system follows up.

The ACS update is not just about adding new tests. It is about using the expanding screening landscape in a way that increases real completion — without quietly substituting less effective options for patients who would have completed a preferred test.

What Actually Changed in the 2026 ACS Guideline?

The biggest update is the addition of newer molecular-based stool tests and conditional guidance on blood-based testing.

The ACS now includes the multitarget stool RNA test, known as mt-sRNA, as a preferred stool-based option every 3 years. The guideline also addresses next-generation multitarget stool DNA testing, or ng-mt-sDNA, as an updated version of the already recommended stool DNA approach.

These tests are part of a broader shift toward molecular screening strategies that look for markers associated with colorectal cancer and advanced precancerous lesions. The goal is to improve detection while giving patients more acceptable noninvasive choices.

At the same time, the ACS is cautious about blood-based screening. Blood-based cell-free DNA testing may improve participation among people who otherwise remain unscreened, but it is not considered equivalent to preferred stool-based or visual screening options. The reason is important: blood-based tests have lower sensitivity for advanced precancerous lesions and stage I colorectal cancer compared with stool-based tests and direct visual exams.

That distinction matters clinically. Colorectal cancer screening is not only about finding cancer after it has developed. It is also about preventing cancer by identifying and removing advanced precancerous lesions before they become malignant.

Preferred Screening Options in 2026

For average-risk adults, the ACS continues to recommend regular screening with either a high-sensitivity stool-based test or a structural, direct visual examination.

Screening option	Recommended interval	Practical NP takeaway
High-sensitivity FIT	Every year	Strong option for programmatic screening, but only works if repeated annually and followed by colonoscopy when positive.
High-sensitivity gFOBT	Every year	Acceptable stool-based option, but dietary and medication restrictions can affect completion.
Multitarget stool DNA, original or next-generation	Every 3 years	Higher sensitivity for cancer and advanced precancerous lesions than FIT, but lower specificity, meaning more follow-up colonoscopies.
Multitarget stool RNA	Every 3 years	Newly added preferred stool-based option with high cancer sensitivity and moderate advanced lesion sensitivity, but lower specificity than some alternatives.
Colonoscopy	Every 10 years	Direct visualization and polyp removal; requires bowel prep, time, transportation, and procedural access.
CT colonography	Every 5 years	Visual exam option; positive findings still require colonoscopy.
Flexible sigmoidoscopy	Every 5 years	Less commonly used and does not evaluate the full colon.

The key clinical point: more options can increase screening participation, but only if patients understand what each option can and cannot do.

The New Stool RNA Test: What NPs Should Know

The multitarget stool RNA test is one of the most important additions in the 2026 update.

Unlike a traditional stool blood test alone, mt-sRNA combines multiple RNA biomarkers with a FIT component and patient-reported smoking status to generate a screening result. In the evidence reviewed by the ACS, mt-sRNA demonstrated high sensitivity for colorectal cancer and moderate sensitivity for advanced precancerous lesions.

That sounds promising — and it is — but it comes with a trade-off.

Compared with FIT, mt-sRNA may detect more cancers and advanced lesions in a single round of testing, but it has lower specificity. Lower specificity means more false positives, which means more patients will be referred for colonoscopy after a positive test even though cancer or advanced precancerous lesions may not ultimately be found.

That does not make the test “bad.” It means the NP needs to frame it accurately.

A patient choosing mt-sRNA should understand:

·       It is done at home.

·       It is recommended every 3 years.

·       A positive result must be followed by colonoscopy.

·       It may lead to more follow-up colonoscopies than FIT because of lower specificity.

·       Long-term real-world adherence and repeated-round performance will need continued monitoring.

This is where NPs are essential. The test itself does not create a screening program. Patient education, tracking, follow-up, and colonoscopy completion do.

Blood-Based Screening: Useful, But Not Preferred

Blood-based colorectal cancer screening is likely to generate patient interest. Many patients who have avoided stool testing or colonoscopy may be willing to say yes to a blood draw.

That is the opportunity.

But the ACS is clear that blood-based testing should not be presented as simply equivalent to preferred screening options.

Blood-based cell-free DNA tests have lower sensitivity for advanced precancerous lesions and stage I colorectal cancer. That matters because a screening test that misses more early disease and more precancerous lesions has less potential to reduce colorectal cancer incidence and mortality.

In plain language: a blood test may be better than no screening, but it is not better than completing a preferred screening option.

The ACS recommends blood-based screening only for individuals who decline or do not complete preferred colorectal cancer screening tests. It should not be ordered casually, automatically, or without prior discussion.

A useful NP framing might be:

“If you are willing to complete a stool-based test or colonoscopy, those are preferred options because they are better at detecting precancerous changes and early cancer. If you are not willing or able to complete those, a blood-based test may still be better than remaining unscreened — but we need to talk through what it can miss and what happens if it is positive.”

That conversation preserves patient autonomy without overstating the test.

The Age Recommendations Did Not Change

Despite the addition of new testing options, the age framework remains the same.

The ACS continues to recommend that average-risk adults begin colorectal cancer screening at age 45. Screening should continue through age 75 for adults in good health with a life expectancy greater than 10 years.

From ages 76 through 85, screening decisions should be individualized. That means NPs should consider the patient’s overall health, life expectancy, prior screening history, personal preferences, and whether the patient would be able and willing to complete follow-up colonoscopy or treatment if something is found.

After age 85, colorectal cancer screening is generally discouraged.

This age framework is especially important because colorectal cancer rates have been rising among younger adults. The 45-year starting point is not an administrative detail. It is a clinical response to a real epidemiologic shift.

A Positive Noncolonoscopy Test Is Not the End of Screening

This may be the most important operational point in the entire guideline.

Every positive noncolonoscopy screening test requires timely follow-up colonoscopy to complete the screening process. That includes FIT, gFOBT, mt-sDNA, mt-sRNA, CT colonography, flexible sigmoidoscopy findings requiring full evaluation, and blood-based tests.

A positive stool or blood test without colonoscopy is an unfinished screening episode.

The ACS emphasizes follow-up preferably within 6 months. Delays matter because the purpose of screening is not simply to generate a lab result. The purpose is to identify disease early enough to prevent cancer or reduce mortality.

For practices, this means screening cannot be treated as a “hand the patient a kit and hope” process.

A reliable colorectal cancer screening workflow should include:

1.      Identifying eligible patients beginning at age 45.

2.      Offering preferred screening options with clear counseling.

3.      Documenting the patient’s chosen screening method.

4.      Tracking whether the test was completed.

5.      Contacting patients who do not return stool kits or complete ordered tests.

6.      Flagging every positive result.

7.      Coordinating timely colonoscopy.

8.      Confirming colonoscopy completion and pathology follow-up.

9.      Returning the patient to the appropriate screening or surveillance interval.

Without that infrastructure, even the best test underperforms.

What NPs Should Say in Practice

Patients do not need a lecture on molecular assays. They need a clear recommendation and a practical choice.

For an average-risk 46-year-old who has never been screened:

“You are now in the age range where colorectal cancer screening is recommended. We have several options, including stool-based tests you can do at home and colonoscopy. The most important thing is choosing a high-quality option you will actually complete.”

For a patient avoiding colonoscopy:

“Colonoscopy is one option, but it is not the only option. If you are not ready for that, we can talk about stool-based screening. Some are done every year, and some molecular stool tests are done every 3 years. If any of them are positive, the next step is colonoscopy.”

For a patient asking for the blood test:

“There is a blood-based screening test, but it is not the preferred option because it is less sensitive for precancerous lesions and early cancers. If you are willing to do a stool test or colonoscopy, those are better choices. If you are not willing to do those, then we can discuss the blood test as an alternative to remaining unscreened.”

For a patient with a positive stool or blood test:

“This result does not mean you have cancer, but it does mean we need to complete the screening process with a colonoscopy. The follow-up colonoscopy is the step that tells us what is actually going on.”

The Real Clinical Challenge Is Completion

The 2026 ACS update gives NPs more tools. But more tools do not automatically produce better outcomes.

A patient can be offered the perfect screening option and still never complete it.

A stool kit can sit on the kitchen counter.

A colonoscopy referral can get lost between scheduling calls, insurance questions, and transportation barriers.

A positive test can be documented in the chart without anyone owning the next step.

That is where nursing practice matters.

NPs are often the clinicians who identify the overdue patient, explain the why, troubleshoot the barrier, and reinforce follow-through. The guideline update should push practices to think beyond “screening ordered” and toward “screening completed.”

Final Clinical Bottom Line

The 2026 ACS colorectal cancer screening guideline expands preferred stool-based screening options to include newer molecular tests such as multitarget stool RNA and next-generation multitarget stool DNA testing at 3-year intervals. It also introduces cautious, conditional guidance for blood-based screening, limiting its use to patients who decline or fail to complete preferred stool-based or visual screening options.

The core recommendations remain unchanged: start average-risk screening at age 45, continue through age 75 when life expectancy supports it, individualize from 76 to 85, and discourage screening after 85.

For NPs, the practical message is straightforward: offer patients real choices, explain the trade-offs clearly, do not oversell blood-based screening, and build reliable systems to ensure positive noncolonoscopy tests are followed by colonoscopy.

Because the best colorectal cancer screening test is not the newest test, the easiest test, or the one ordered most often.

It is the one the patient completes — and the one the practice follows all the way through.

 

References

1. Wolf AMD, Hoffman RM, Walter LC, Zeigler-Johnson C, Church TR, Guerra CE, Elkin EB, Etzioni R, Herzig A, Oeffinger KC, Perkins RB, Raoof S, Shih Y-CT, Skates SJ, Kratzer TB, Manassaram-Baptiste D, Smith RA. Colorectal cancer screening: An update to the American Cancer Society guideline, 2026. CA: A Cancer Journal for Clinicians. 2026. doi:10.3322/caac.70083.
2. American Cancer Society. Colorectal Cancer Screening Guidelines. American Cancer Society. Accessed June 2026.
3. U.S. Food and Drug Administration. FDA approves new colorectal cancer screening tests, including molecular stool-based and blood-based screening options. U.S. Food and Drug Administration. Accessed June 2026.
4. Centers for Medicare & Medicaid Services. Medicare coverage information for colorectal cancer screening tests. Centers for Medicare & Medicaid Services. Accessed June 2026.

 

© 2026 NP Chronicles | Clinical Education for NP Students and New Graduates | npchronicles.com

This post is intended for educational purposes. Always consult the full prescribing information and current clinical guidelines for patient care decisions.

 

PATIENT RIGHTS & PRACTICE POLICY  |  PROFESSIONAL PRACTICE SERIES

June 2026  |  NP Chronicles Clinical Education

 

Your Patient Is Recording This Appointment. Now What? A Legal and Clinical Guide for NPs

By Valerie Watters-Burke, DNSc, MSN, MBA, FNP-BC, GNP-BC, PPCNP-BC

On patient rights, provider obligations, and what HIPAA actually says about recording — and what it doesn't

 

CLINICAL AND PROFESSIONAL BOTTOM LINE

In most of the United States — including states like Tennessee, North Carolina, South Carolina, Texas, Florida, New York, and approximately 39 others — patients may lawfully record their own medical appointment without telling you. The law in these one-party consent states allows anyone who is a participant in a conversation to record it. Your patient is not a bystander to their own care visit. They are a party to it. HIPAA does not prohibit this. Office policy does not legally prohibit this. And telling a patient they cannot record is both legally inaccurate and clinically counterproductive in these jurisdictions. NPs need to understand what the law actually says — because patients are increasingly learning it too.

 

The Scenario Is Already Happening in Your Practice

A patient pulls out their phone at the start of a visit and says, 'I'm going to record this so I can share it with my husband.' Or they say nothing at all, and you notice their phone propped against the tissue box. A staff member intercepts it: 'I'm sorry, we don't allow recording.' Or you say it yourself. Or the patient is told that HIPAA prohibits it, that the open layout of the office makes it impossible, or that they need the practice's permission first.

Each of those responses is understandable. They reflect genuine concerns about privacy, liability, and clinical comfort. But in most states, they are legally incorrect — and in every state, they reflect a misunderstanding of the balance between patient rights and institutional policy that NPs, as patient advocates and frontline clinicians, need to get right.

This post covers what the law actually says, what HIPAA actually covers, what your obligations are as an NP, how to respond calmly and accurately, and — crucially — what recording means for the patients who need it most.

The Legal Framework: What One-Party Consent Actually Means

The Basic Rule

Federal law and approximately 39 states follow a one-party consent rule for recording conversations. One-party consent means that a person who is a participant in a conversation may record it without obtaining permission from every other person in that conversation. The recording is lawful because the person making it is not an outsider or an eavesdropper — they are a direct party to the exchange.

Applied to medical visits: the patient is not a third party observing someone else's conversation. They are the subject of the visit, the recipient of the diagnosis, the person whose consent is being sought, and the individual who must follow the treatment plan after they leave. In one-party consent states, the patient's participation is sufficient to make their recording of that conversation lawful — with or without the provider's knowledge or agreement.

A smaller group of states — approximately 11 — require all parties to consent before a private conversation is recorded. In these all-party consent states, a patient who records without disclosing it may be violating state law, and practices in those states have a legitimate legal basis for informing patients of that requirement. But even in those states, the appropriate response is accurate legal information — not a blanket assertion that patients have no right to record at all.

State-by-State Framework

 

Consent Rule	States (Examples)	Clinical Implication for NPs
One-Party Consent (~39 states + federal baseline)	Tennessee, Texas, Florida, New York, South Carolina, North Carolina, Georgia, Virginia, Ohio, Colorado, and most others	Patient may record their own appointment without disclosing it. Office policy cannot prohibit what state law permits. NPs should not tell patients recording is 'illegal' or 'not allowed' in these states.
All-Party / Two-Party Consent (~11 states)	California, Illinois, Michigan, Pennsylvania, Maryland, Washington, Oregon, Nevada, Montana, New Hampshire, Florida (in-person, some nuance)	All parties must consent before recording. In these states, undisclosed recording by a patient may violate state law. NPs in these states may appropriately inform patients of the all-party consent requirement — but still should not misstate it as a blanket prohibition.
Telehealth / Multi-State Visits (Complex — jurisdiction depends on location of all parties)	Varies — participants may be in different states with different consent laws	The stricter state's law may govern. Both patient and provider should be aware of the law in their respective states. Practices should develop specific telehealth recording policies that reflect jurisdictional complexity.

 

NOTE: Recording law is state-specific and can be nuanced. This table provides general guidance; individual states may have additional provisions or case-law interpretations. NPs should consult their practice's legal counsel for state-specific guidance and ensure their practice policies accurately reflect their jurisdiction's law.

 

The Telehealth Complication

Telehealth adds meaningful complexity. When a patient is in North Carolina (one-party consent) and their NP is in California (all-party consent), both state laws may be relevant. Courts have not uniformly resolved how to handle this jurisdictional overlap. The general guidance is to follow the stricter state's law — meaning all-party consent — when in doubt. Telehealth-specific recording policies should reflect this complexity rather than applying a one-size-fits-all rule developed for in-person visits.

HIPAA: What It Actually Covers — And What It Doesn't

HIPAA is the most commonly misused legal framework when patients ask about recording. The assertion typically sounds like: 'HIPAA doesn't allow recording' or 'I can't let you record because of HIPAA.' This is a fundamental misapplication of the statute.

What HIPAA Actually Regulates

HIPAA — the Health Insurance Portability and Accountability Act — regulates covered entities and their business associates. Covered entities include health care providers who transmit health information in electronic form, health plans, and health care clearinghouses. HIPAA's Privacy Rule governs how covered entities may use and disclose patients' protected health information (PHI).

The patient is not a covered entity. A patient who records their own appointment for personal use — to remember their diagnosis, recall medication instructions, share with a caregiver, seek a second opinion — is not functioning as a covered entity subject to HIPAA regulation. They are exercising a fundamental patient right: the ability to accurately recall and document their own care.

The Privacy Rule is designed to protect patients from unauthorized disclosure of their information by the institutions that hold it. It is a protection for patients, not a shield for providers against patient documentation. When HIPAA is invoked to deny a patient's recording of their own care conversation, the law is being applied backward — turned from a patient protection into an institutional veto over patient recall.

Where HIPAA Does Apply to Recording

There are circumstances where HIPAA-related concerns about recording are legitimate:

•       When a patient intentionally records other patients — capturing their names, diagnoses, or identifying information — and that recording is later disclosed, the practice may have an obligation to mitigate the privacy breach. But the appropriate response is to address the disclosure of other patients' information, not to assert that the recording itself was illegal under HIPAA.

•       When a practice adopts AI scribes, ambient listening tools, or automated documentation systems that capture audio of patient encounters, HIPAA and associated vendor agreements may impose specific requirements. Those institutional uses of recording technology require patient transparency — a standard that practices cannot simultaneously hold for patients without holding for themselves.

•       When staff-only conversations that include PHI are inadvertently captured in a patient's recording, the practice should address this through privacy safeguards, not by asserting the patient had no right to record their own care conversation.

 

The core distinction: HIPAA regulates what institutions do with health information. It does not regulate what patients do with the record of their own care conversation. A patient's recording of their own appointment for personal use is not a HIPAA violation. Citing HIPAA to deny patient recording is a misuse of the statute.

 

Why Patients Record — And Why It Matters for Patient-Centered Care

Before addressing how NPs should respond when a patient records, it is worth sitting with why patients record in the first place. Understanding the motivation reframes the clinical response.

The Information Problem in Medical Visits

Medical visits are information-dense, emotionally charged, and often rushed. A patient may be processing a new diagnosis, a medication change, a recommendation for surgery, an abnormal lab result, or a complex treatment decision — while sitting in an exam room they did not choose, under time pressure they cannot control, wearing a paper gown. Then they are expected to leave and accurately remember everything that was said.

A JAMA Network Open study of patients who read their own ambulatory visit notes found that 21.1% reported finding a perceived mistake in the record — and 42.3% of those patients considered the mistake serious. If more than one in five patients believes their visit note contains an error, the official medical record is not a complete substitute for the patient's own accurate recall.

Recording is not distrust. It is a rational response to a genuine information access problem. Think about the patients who need it most:

•       Older adults managing multiple conditions with complex, changing medication regimens

•       Patients with cognitive impairment, memory challenges, or processing differences who cannot safely rely on recall alone

•       Patients receiving frightening or life-changing diagnoses — cancer, ALS, infertility, serious cardiac findings — who are processing fear and grief simultaneously with clinical information

•       Patients with limited health literacy who need to hear instructions again, more slowly, after the visit ends

•       Patients managing chronic or rare conditions who coordinate across multiple specialists and need to accurately convey what each clinician said

•       Patients who do not speak English as their primary language and need to review instructions with a family member who does

•       Patients with disabilities — hearing impairment, vision impairment, communication challenges — who process information differently

•       Patients whose spouse, adult child, caregiver, or advocate could not attend and needs an accurate account of what was discussed

 

For these patients, a recording is not a convenience feature. It may be the difference between understanding and following the care plan correctly, and leaving with a vague impression that leads to a missed medication, a skipped follow-up, or a misunderstood warning sign.

The Informed Consent Dimension

Informed consent is a conversation, not a checkbox. A patient who signs a consent form and leaves has consented — but may not accurately remember what risks were discussed, what alternatives were offered, or what the clinician's reasoning was for recommending one approach over another. A recording can preserve the difference between a note that says 'risks, benefits, and alternatives were reviewed' and the actual words used to explain those risks.

Recording strengthens informed consent, not undermines it. It allows patients to revisit the explanation, share it with a family member or advocate, ask better follow-up questions, and make decisions based on what was actually said rather than what they can reconstruct under stress. A patient who listened carefully to a procedure recommendation, went home, listened again, and came back with specific questions is more engaged in their care — not less.

The AI Scribe Problem: Transparency Cannot Run in Only One Direction

This conversation has taken on new dimensions with the rapid adoption of AI scribes, ambient listening tools, and automated documentation systems in clinical practice. These tools can listen to patient-clinician conversations and use the audio to generate clinical notes, after-visit summaries, and documentation that enters the medical record.

When a practice adopts these tools, patients should be informed. They should know when their conversations are being captured by an AI system, whether audio is stored or only transcribed, whether third-party vendors process the data, and how resulting documentation can be reviewed or corrected. That transparency is fundamental to patient trust and consistent with both ethical practice and emerging regulatory guidance.

The asymmetry that has developed in some settings is difficult to defend: a practice may use AI tools to capture and document patient-clinician conversations for institutional purposes — while simultaneously telling a patient that they may not record their own appointment for personal recall. The practice controls the technology, the vendor relationship, the data flow, and the official record. The patient controls nothing.

⚠ For NPs in AI-scribe-using practices: If your practice uses ambient listening or AI documentation tools, you should be able to clearly answer these questions for any patient who asks: Is this conversation being recorded? By what technology? Does any third-party vendor process it? How does the resulting note get reviewed and corrected? If you cannot answer these questions, your practice needs a patient-facing disclosure process before the next visit begins.

Transparency in documentation cannot be a one-way street. Practices that use recording technology for institutional purposes while denying patients their own lawful recording are applying a double standard that is hard to justify clinically or ethically.

 

How NPs Should Respond: Accurate, Calm, and Patient-Centered

When a patient records — announced or discovered — the response should be accurate, calm, and patient-centered. It should not escalate, moralize, or misstate the law. Here is a practical framework.

Step 1: Know Your State's Law

Before you can respond accurately, you need to know what law governs in your jurisdiction. In one-party consent states, patients may record their own care conversations without disclosing it. In all-party consent states, they may not do so lawfully without everyone's agreement. Your practice should have a written policy that accurately reflects your state's law — not a policy that reflexively prohibits all patient recording regardless of the legal landscape.

If you practice in a one-party consent state and a staff member tells a patient they 'cannot record,' that staff member has misstated the law. That misinformation should be corrected — not as criticism, but as a practice standards issue that needs training and a clear, accurate policy.

Step 2: Address Privacy Without Denying Patient Rights

The most legitimate concern in clinical settings — particularly open bays, shared exam areas, or waiting rooms — is other patients' privacy. That concern is real and worth addressing. But it should be addressed as a privacy concern, not converted into a legal prohibition that state law does not create.

If another patient's information might be captured in the recording, the appropriate response is a safeguard, not a legal misstatement:

•       Move to a private room or enclosed space

•       Lower your voice for particularly sensitive portions

•       Briefly pause and reposition before discussing another patient's situation (which raises the question of why another patient's information would enter this conversation at all)

•       Address the specific privacy concern directly rather than asserting a blanket prohibition

 

What is not appropriate: telling the patient they have no right to record, that HIPAA prohibits it, that office policy makes it illegal, or that the open layout eliminates any option. Those responses misstate the law, fail the patient, and leave the practice exposed to the claim that it prevented a patient from exercising a lawful right.

Step 3: Respond Without Escalating

When a patient announces a recording or when one is discovered, the response that serves everyone best is calm and non-confrontational. The goal is to preserve the therapeutic relationship, address any legitimate privacy concerns through safeguards, and not turn a lawful patient action into an adversarial encounter.

 

What Staff / NPs Should STOP Saying	Why It's Inaccurate / Harmful
"You're not allowed to record in here."	In one-party consent states, this is legally inaccurate for a patient recording their own appointment. It misstates the law and may cause the patient to give up a lawful right.
"HIPAA doesn't allow recording."	HIPAA regulates covered entities — not patients. A patient recording their own care for personal use does not become a HIPAA-covered entity. This statement misapplies federal law to deny a patient's right.
"Our office policy prohibits recording."	Office policy cannot override state law. In one-party consent states, a patient's right to record their own care conversation is established by law, not granted by office preference. Policy can regulate privacy safeguards — not the patient's legal right.
"This is an open bay so you can't record."	Shared clinical spaces require privacy safeguards, not blanket recording prohibitions. The practice should address other patients' privacy by moving to a private space or lowering voices — not by denying the patient any record of their own care.
"You need my permission to record me."	In one-party consent states, the patient's participation in the conversation is sufficient under recording law. The provider's permission is not required for the patient to record a conversation in which they are a direct participant.
What to Say Instead	Why It's Better
"I want to make sure our conversation stays focused on your care. Are there privacy concerns about other patients I can help address?"	Acknowledges the patient's intent as legitimate, opens a dialogue about privacy rather than misrepresenting the law, and positions the practice appropriately.
"Let me move us to a private room so this conversation is just between us."	Addresses the genuine privacy concern (other patients) with a safeguard rather than a legal misstatement. Respects the patient's need for an accurate record of their own care.
"I appreciate you letting me know. I want to make sure you leave with everything you need to follow your care plan."	De-escalates, respects patient autonomy, and frames the recording in its proper context — accuracy, recall, and adherence. Does not treat the patient as having done something wrong.

 

What to Tell Your Patients Who Ask About Recording

Some patients ask before they record. This is worth encouraging — not because they are legally required to ask in one-party consent states, but because transparency generally supports trust and reduces the chance that the recording becomes a source of clinical friction.

If a patient asks whether they may record, the accurate answer in a one-party consent state is:

"In our state, you are able to record conversations you are part of, including your own appointments. I want to make sure you have everything you need to follow your care plan accurately. If you have questions as you review the recording later, please don't hesitate to reach out."

 

This response is accurate, patient-centered, de-escalating, and positions the recording in its appropriate context: as a tool for memory, adherence, and follow-up — not as an act of surveillance or distrust.

If a patient asks whether they are required to tell you they are recording, the accurate answer in a one-party consent state is that they are not legally required to disclose it — but that you appreciate knowing, and that openness about the recording generally makes the conversation more productive.

What not to say: 'You need my permission first.' In one-party consent states, this is legally inaccurate. The patient's participation is sufficient under recording law. Framing disclosure as permission-seeking misstates the patient's legal position and may cause them to give up a lawful right they were entitled to exercise.

What Your Practice Policy Should Actually Say

If your practice has a recording policy — or if you are reviewing one — it should meet several standards. A policy that does not meet these standards may expose the practice to legal risk, damage patient trust, and result in staff incorrectly telling patients they cannot exercise lawful rights.

A Sound Recording Policy Should:

1.    Accurately reflect your state's consent law — one-party or all-party — and not prohibit what state law permits.

2.    Distinguish patient recording of their own care conversation from recording of other patients, waiting room conversations, staff-only discussions, or conversations in which the patient is not a participant.

3.    Address privacy concerns through safeguards (private rooms, voice modulation, brief pauses) rather than through blanket legal misstatements.

4.    Train all staff — front desk, MAs, nurses, hygienists, and clinicians — to respond accurately and calmly when a patient records or asks about recording.

5.    Include specific provisions for telehealth visits that reflect the jurisdictional complexity of multi-state participation.

6.    If the practice uses AI scribes or ambient listening tools, include a patient disclosure process that is implemented at or before the start of the visit — because transparency cannot apply only to patients.

7.    Not use 'HIPAA,' 'open bay,' or 'office policy' as interchangeable shorthand for 'you are not allowed' when state law permits the recording.

 

Suggested patient-facing language for one-party consent states: 'In [state], you may record conversations in which you are a participant, including your appointment. We ask that you avoid intentionally capturing other patients or staff conversations unrelated to your care. If you have any concerns about your care conversation or your medical record, please speak with your care team or our patient relations office.'

 

This Is an NP Issue — Not Just a Legal One

Nurse practitioners occupy a distinctive position in this conversation. NPs emerged as a profession grounded in patient-centered, holistic, relationship-based care. The NP model has always emphasized time with patients, explanation, education, and follow-through. Those values are directly implicated when a patient tries to record their appointment to accurately remember what their NP told them — and is told they cannot.

An NP who tells a patient in a one-party consent state that recording is illegal, or who escalates when a phone appears on the desk, is not protecting the practice. They are contradicting the patient advocacy role that defines NP practice and potentially exposing themselves and their practice to the accusation of blocking a patient's lawful documentation of their own care.

More broadly: NPs should be the clinicians who understand why a patient with a new diabetes diagnosis wants to record medication instructions. Who understand why a 78-year-old patient recovering from a procedure cannot reliably retain complex follow-up instructions without a recording to review later. Who understand why a patient whose English is limited needs to bring the conversation home to a family member who can help interpret it. Who understand why a patient facing a cancer treatment decision wants an accurate record of what was said about risks and alternatives before they consent.

That understanding — that recording is a patient safety and accuracy tool, not a threat — is consistent with everything the NP model stands for.

The Patients Who Need This Most

If you are still uncertain whether patient recording deserves clinical support, consider the specific populations for whom an accurate record of a clinical encounter is not a preference but a need:

•       Older adults with early cognitive changes who leave appointments genuinely unable to recall whether a medication was started, stopped, or adjusted — and who will not remember to call and ask

•       Patients just diagnosed with a serious illness who are processing shock simultaneously with clinical information that requires immediate decision-making

•       Patients with chronic complex conditions — lupus, multiple sclerosis, heart failure, advanced COPD — who coordinate between four to eight specialists and need to accurately convey what each said to the others

•       Patients in pain or procedural sedation recovery who cannot form durable memories of post-procedure instructions

•       Caregivers managing an older parent's appointments who need to explain to a sibling, physician, or home health nurse what was decided and why

•       Patients who have previously experienced medical errors and are appropriately using documentation as an accountability and safety tool

•       Patients seeking a second opinion who need the receiving clinician to know what was actually discussed, not what a templated note captures

 

For these patients, denying a recording is not a neutral act. It removes a safety tool, increases the risk of recall error, and positions the institution as an obstacle to patient self-advocacy. That is not care. It is a structural barrier to it.

For NP Students: Professional Practice and Patient Rights

This topic connects to several concepts that appear in NP education and professional practice frameworks:

8.    Informed consent as process, not paperwork: Boards test whether you understand that consent is a conversation requiring comprehension, voluntariness, and the patient's actual understanding of risks, benefits, and alternatives. A patient's recording of a consent discussion supports — not undermines — authentic informed consent.

9.    Patient advocacy as core NP competency: The AANP Standards of Practice and the NONPF competencies both identify patient advocacy as central to NP professional identity. Facilitating a patient's ability to accurately recall and act on their care instructions is advocacy in its most practical form.

10. HIPAA scope and application: Board exams test HIPAA knowledge, including who it regulates, what it protects, and what it does not cover. Know that HIPAA regulates covered entities — not patients — and that a patient recording their own care for personal use is not a HIPAA violation.

11. Health literacy and patient education: NPs are expected to assess health literacy and adapt education accordingly. A patient who cannot reliably retain complex instructions through a single verbal explanation is not non-compliant. They need tools. Recording is one of them.

12. Documentation accuracy and the medical record: Know that the medical record is a provider-controlled document that may be incomplete, templated, or delayed. Patient-held documentation — recordings, personal notes, photographs of instructions — supplements rather than replaces the official record.

 

The Bottom Line: Recording Is an Act of Engagement, Not Distrust

A patient who records their appointment is paying attention. They want to get it right. They want to remember what you said, follow through on what you recommended, share the information with someone who matters to them, and make decisions based on what actually happened in the room. That is exactly what patient-centered care aims to produce.

In one-party consent states — which is where most NPs in the United States practice — that recording is lawful. It does not require the provider's permission. It is not prohibited by HIPAA. It cannot be overridden by office policy. It may require privacy safeguards that protect other patients, and those safeguards should be implemented thoughtfully and respectfully.

The appropriate NP response to a patient who is recording is the same as the appropriate response to a patient who brought a family member, took detailed notes, or downloaded their portal records before the visit: acknowledgment, respect, and redirection of any privacy concerns toward actual privacy solutions.

Your patient is not doing something to you. They are doing something for themselves — and for everyone who depends on them to come home and accurately explain what the NP said.

In one-party consent states, patients may record their own care conversations. HIPAA does not prohibit it. Office policy cannot make lawful recording illegal. The patient is a party to the conversation — not a guest in it, not a visitor to it, and not a subject of it. They are a participant. That is what makes the recording lawful. And that is what should make NPs — as patient advocates — defend it.

 

 

Resources and Further Reading

•       Reporters Committee for Freedom of the Press: State-by-state recording law guide — rcfp.org/reporters-recording-guide

•       U.S. Department of Health and Human Services: HIPAA for individuals — hhs.gov/hipaa/for-individuals

•       JAMA Network Open: Patient perceptions of errors in ambulatory visit notes — jamanetworkopen.2021

•       American Association of Nurse Practitioners (AANP): Standards of Practice for Nurse Practitioners

•       National Organization of Nurse Practitioner Faculties (NONPF): Nurse Practitioner Core Competencies

•       OpenNotes initiative: Research on patient access to their own medical records — opennotes.org

 

© 2026 NP Chronicles | Clinical Education for NP Students and New Graduates | npchronicles.com

This post is intended for educational purposes and general professional guidance. It does not constitute legal advice. NPs should consult their practice's legal counsel for jurisdiction-specific recording law guidance and policy review.