AI Note-Takers in Therapy and Client Privacy Quiz

Answers and explanations appear as you take the quiz.

1. A popular consumer video tool's built-in AI note-taker has no business associate agreement available. What does the guide imply for a HIPAA-covered therapist?
   • It is fine as long as the therapist deletes the notes weekly
   • A vendor handling protected health information needs a signed BAA, so this tool is a problem
   • BAAs are only needed for billing software
   • Clients can waive the BAA requirement verbally
2. Which of these is explicitly excluded from HIPAA's definition of psychotherapy notes?
   • The clinician's analysis of session content kept separately
   • The client's diagnosis and treatment plan
   • Private notes on the clinician's impressions
   • Notes documenting the conversation, kept apart from the chart
3. What special rule applies to disclosing psychotherapy notes under HIPAA?
   • They can be shared freely with insurers
   • Most disclosures require the client's specific authorization
   • They must be published after seven years
   • They must be stored only on paper
4. Why does the guide suggest getting every participant's consent before recording, even in a one-party-consent state?
   • Federal law requires it in every state
   • It is the safe default, and ethics codes such as the APA's require permission before recording
   • Recording software will not work otherwise
   • One-party consent applies only to phone calls
5. Why are many practices choosing to delete raw recordings and transcripts soon after the note is signed?
   • Recordings are illegal to keep
   • Guidance does not clearly say how they are classified, and keeping them increases exposure
   • Insurers demand deletion
   • Transcripts cannot be encrypted
6. A vendor says 'we're HIPAA compliant.' Why doesn't that settle the question?
   • Only government agencies can be HIPAA compliant
   • Compliance depends on the signed agreement, the configuration and the practice's own policies
   • HIPAA does not apply to audio
   • The phrase is a registered trademark
7. Why does the guide advise skepticism toward 'de-identified' therapy transcripts?
   • De-identification is banned under HIPAA
   • A narrative about someone's life can identify them even with names removed
   • Transcripts are always encrypted
   • De-identification makes transcripts unreadable
8. Which federal rules does the guide mention as possibly adding stricter requirements for substance use treatment records?
   • 42 CFR Part 2
   • The Fair Credit Reporting Act
   • FERPA
   • The Sarbanes-Oxley Act