AI notetaker for healthcare
My Notetaker records your conversations and automatically turns them into a transcript, a summary and action items. During a case meeting or intake you keep your attention on the people instead of on your notes. Conversation content stays in the EU and only you can see your own conversations.
Typical conversations in healthcare
- Case meetings and multidisciplinary meetings. A meeting between, for example, a GP and a specialist is captured, with agreements and action items for follow-up care and a clear summary for the team.
- Intake. You can read back everything that was said, word for word. You don't need to type anything during the conversation.
- Team meetings. Who does what, and when? The action items are ready right away.
What you get
- Transcript: the full conversation, per speaker.
- Summary: the core of the conversation in a few sentences.
- Action items: what needs to happen, at a glance.
- Search your conversations: ask a question about your own conversations and get an answer with the source.
- On every device: record in your browser, on your laptop or on your phone.
Points to watch in healthcare
Conversations in healthcare are often about health. Extra rules apply to that. These are the points to discuss with your data protection officer (DPO) before you start. We are a Dutch company, so the Dutch rules are mentioned below. Working in another country? Check with your DPO which national rules apply there.
Health data is a special category of personal data
It is given extra protection by the GDPR. Your organisation needs a valid exception to the ban on processing it (Article 9 GDPR and, in the Netherlands, the GDPR Implementation Act (Uitvoeringswet AVG)). Discuss with your DPO which exception applies to your situation. More from the Dutch DPA (in Dutch).
Tell the patient or client
Tell the people you speak with that you are recording the conversation and why. Ask for consent where needed. Only record conversations you take part in yourself: recording a conversation you do not take part in is a criminal offence.
The medical record remains your responsibility
Care providers are legally required to record health data in a medical record (in the Netherlands: the Medical Treatment Contracts Act (WGBO), Article 7:454 of the Dutch Civil Code). My Notetaker is not a medical record and not an electronic health record (EHR). Read the summary carefully, because AI can make mistakes, and copy into the record yourself what belongs there. More about the medical record (in Dutch).
Check whether you need a DPIA
For large-scale processing of health data, a data protection impact assessment (DPIA) is mandatory (Article 35 GDPR). On request we provide information about the processing, our processors and security for it. Does your organisation follow a security standard such as NEN 7510? Then discuss with your DPO what that standard requires from a supplier. More about the DPIA (in Dutch).
Want to know how to assess an AI notetaker against the GDPR in general? Read AI notetakers and the GDPR: what to look for.
Privacy and hosting
- Conversation content stays in the EU. Speech recognition, analysis and storage run on our AI platform Artific in Google Cloud, region europe-west4 (the Netherlands).
- Only you can see your conversations, also within a team. An admin only sees your name, email address, role and the number of minutes recorded.
- Not used to train AI. We do not use your conversations to train or improve AI models.
- Encrypted in transit (HTTPS with TLS 1.2 or 1.3) and at rest (AES-256).
- Data processing agreement included for business customers.
- Retention: conversations are kept until you delete them yourself. Set a period (30 days to 1 year) and older conversations are deleted automatically.
All details are in the privacy statement, the list of sub-processors and the data processing agreement.
Frequently asked questions
May I record a conversation with a patient?
In the Netherlands, recording a conversation you take part in yourself is in principle not a criminal offence, but the GDPR does apply. Tell the patient that you are recording and why, and ask for consent where needed. Agree with your DPO on which legal basis your organisation does this. For health data you also need an exception to the processing ban (Article 9 GDPR).
Does conversation content leave Europe?
No. Conversation content is only stored and processed in the EU: the content is stored in the Netherlands, and audio is stored temporarily and encrypted in Frankfurt while it is processed. Some of our sub-processors belong to a group with a parent company in the US. Insofar as they can access data from outside the EU, the safeguards in the privacy statement apply.
Does My Notetaker replace the patient record?
No. My Notetaker is not a medical record and not an EHR. Use the transcript and the summary as an aid, check them, and copy into the record yourself what belongs there.
Are my conversations used to train AI?
No. We do not use your conversations to train or improve AI models. The language models run on Google Cloud Vertex AI, which under its terms does not use customer data to train models.
Does my organisation need to do a DPIA?
Your organisation decides that itself. For large-scale processing of health data a DPIA is mandatory. On request we provide information about the processing, our processors and security free of charge.
Who can see my conversations?
Only you. Team members and your organisation's admin cannot open your conversations either. The admin only sees your name, email address, role and the number of minutes recorded.
Try My Notetaker free for 14 days. No payment details needed.
Sources
- Dutch DPA (Autoriteit Persoonsgegevens): using and sharing health data (in Dutch)
- Dutch DPA (Autoriteit Persoonsgegevens): health data in a medical record (in Dutch)
- Dutch DPA (Autoriteit Persoonsgegevens): data protection impact assessment (in Dutch)
- General Data Protection Regulation (EUR-Lex)
This page is general information, not legal advice. Discuss your own situation with your data protection officer or lawyer.