EnglishEspañol
Arkansas flag

Arkansas

Arkansas Medical Recording Laws: Patient Rights, HIPAA, and One-Party Consent (2026)

Independently fact-checked against primary sources (last audited August 15, 2026). · Reviewed by the RecordingLaw editorial team. · Law checked current as of August 15, 2026. · 6 primary sources cited on this page. How we verify our legal content

Arkansas Medical Recording Laws: Patient Rights, HIPAA, and One-Party Consent (2026)

Frequently Asked Questions

Can I record my doctor in Arkansas without telling them?

Yes. Arkansas is a one-party consent state under Ark. Code 5-60-120. As the patient, you are a party to the conversation and can record without informing your healthcare provider.

Does HIPAA prevent patients from recording medical visits in Arkansas?

No. HIPAA restricts how healthcare providers handle protected health information. It does not apply to patients recording their own medical visits. Providers who claim HIPAA prohibits patient recording are incorrect.

Can an Arkansas hospital ban recording?

A hospital can have an internal policy restricting recording in certain areas. Violating the policy is not a crime, but the facility could discharge you as a patient or restrict future visits. The policy does not override your legal right under state law.

Can I record a telehealth visit in Arkansas?

Yes. Telehealth visits are subject to the same one-party consent rules as in-person visits. You can record a telehealth session without informing the provider.

Can medical recordings be used as evidence in Arkansas courts?

Yes. Recordings lawfully made under one-party consent are admissible in Arkansas courts. They can support malpractice claims, insurance disputes, and other legal proceedings. Keep the original recording unaltered and maintain proper chain of custody.

Updates

Updated the HIPAA civil-penalty table for providers to the current inflation-adjusted amounts (previous figures were stale 2009 base numbers, understated by roughly 30-50% at every tier and by about $690,000 on the annual cap), and fixed a broken Arkansas statute citation link.

Independently fact-checked against the cited primary sources; governing law re-checked for recent changes

Removed an invented 'illegal disclosure of intercepted communication' offense from the penalty table; Ark. Code 5-60-120 criminalizes only interception and recording/possession, not a separate disclosure offense.

Governing law re-checked for recent changes

Corrected the HIPAA claim that provider recording of patient visits always requires written 45 CFR 164.508 authorization; 45 CFR 164.506 permits a covered entity to use PHI for its own treatment, training, and quality-assurance (health care operations) purposes without a separate authorization.

Governing law re-checked for recent changes

Spoke propagation: Swapped all Justia Arkansas statute links to primary arkleg.state.ar.us sources. No substantive law changes needed; HIPAA overlay and one-party consent framework unchanged.

Reviewed and approved by an editor

Sources and References

  1. Arkansas Code 5-60-120 - Interception and Recording(law.justia.com)
  2. HIPAA Privacy Rule - 45 CFR Part 164(ecfr.gov).gov
  3. HIPAA Authorization - 45 CFR Section 164.508(ecfr.gov).gov
  4. Arkansas Department of Health(healthy.arkansas.gov).gov
  5. HHS Office for Civil Rights(hhs.gov).gov
  6. Federal Policy for Protection of Human Subjects - 45 CFR Part 46(ecfr.gov).gov
  7. HIPAA Treatment/Payment/Health Care Operations Exception - 45 CFR Section 164.506(ecfr.gov).gov
Share: