Telehealth AI Compliance in California (2026)
Telehealth platforms are among the highest-risk AI deployments under California law. Virtual triage bots, AI-generated visit summaries, and automated patient messaging all fall squarely under AB 489 and AB 3030.
Why Telehealth Faces the Strictest Scrutiny
Telehealth AI operates at the highest-risk intersection of patient vulnerability and AI autonomy. When a patient connects to a telehealth platform from home, often for urgent or sensitive concerns, they have no face-to-face context to verify who (or what) they are talking to. California regulators designed AB 489 and AB 3030 explicitly with these platforms in mind.
The Medical Board of California has indicated that telehealth platforms and high-volume patient portals will be the first targets of enforcement audits.
AB 489: Disclosure at Every Patient Touchpoint
Under AB 489, any AI system that communicates directly with a patient must disclose its non-human nature at the start of every interaction. For telehealth platforms this includes:
- Intake chatbots — pre-visit symptom and history collection
- Triage assistants — urgency assessment and appointment routing
- Virtual waiting room bots — queue management and pre-visit instructions
- Post-visit follow-up messaging — automated check-ins and care instructions
- Mental health check-ins — mood tracking and crisis screening tools
A generic "automated message" footer is insufficient. The disclosure must be prominent, immediate, and appear before clinical content is exchanged.
Compliance Tip
Every new session — even if the patient has used your platform before — must trigger a fresh disclosure. Session cookies do not satisfy the "start of every interaction" requirement.
AB 3030: The Human-in-the-Loop Requirement
AB 3030 specifically targets Generative AI used to produce patient-facing clinical communications. For telehealth platforms, the most common triggers are:
- AI-drafted visit summaries sent to patients
- Automated care plan communications
- AI-generated prescription reminders with clinical advice
- Post-visit follow-up messages drafted by LLMs
Platforms have two compliance paths:
- Human review path: A licensed clinician reviews and approves each AI output before it reaches the patient. This exempts the platform from the strictest disclaimer requirements but requires workflow infrastructure.
- Disclosure path: If review is impractical (e.g., after-hours automated follow-ups), the AI output must carry a specific disclosure stating it was generated by AI and was not reviewed by a human clinician, with clear instructions to contact a provider.
The 1 Million User Threshold (SB 942)
Large telehealth platforms with over 1 million monthly California users face an additional obligation under SB 942: they must provide a free, publicly accessible AI content detection tool. Platforms using AI to generate health content (summaries, educational materials) must also apply manifest and latent watermarking to that content.
Recommended Compliance Checklist for Telehealth Platforms
- Add AI disclosure to the first message of every bot interaction (intake, triage, follow-up)
- Audit all AI-generated patient communications for human review or AB 3030 disclaimer coverage
- Implement a "Contact a Human Clinician" pathway visible in every AI conversation
- Document your Human-in-the-Loop review workflows with audit logs per AB 3030
- Review AI avatar design for clinical camouflage (white coats, scrubs, "Dr." names)
- Check if your monthly active user count triggers SB 942 obligations
Frequently Asked Questions
Does AB 489 apply to telehealth chat bots?
Yes. Any AI system interacting directly with patients — including telehealth intake bots, symptom checkers, and virtual waiting room assistants — must disclose at the start of the interaction that it is an AI, not a licensed healthcare professional.
Do AI-generated visit summaries require a human review under AB 3030?
Yes. If a generative AI drafts a visit summary that is sent to the patient without a licensed clinician reviewing and approving it, AB 3030 requires a specific disclosure stating the summary was AI-generated and was not reviewed by a human provider.
What disclosure is required for telehealth AI in California?
The disclosure must appear at the start of the interaction and state clearly that the user is communicating with an AI system. For generative AI clinical communications sent without human review, the disclosure must also include instructions on how to reach a human provider.
Generate Your AB 3030 Disclosure
Use our free tool to create compliant disclosure language for your telehealth chatbot or automated messaging system.
Open Disclosure Generator →