Key points
- HB 300, in force since 1 September 2012, requires a separate patient authorization for each electronic disclosure of health information outside treatment, payment and operations, and bans selling it.1
- Its civil penalties reach $5,000 a violation for negligence, $25,000 for knowing violations and $250,000 where health information is used for financial gain.2
- A breach involving 250 or more Texans must reach the Attorney General within 30 days, and each affected person within 60 days.4
- 30.3% of Austin residents aged five and over speak a language other than English at home, Spanish at 20.2% and Chinese at 1.5%.7
- wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic. A clinician signs every note.
Summary
An Austin clinic can use AI for notes and the front desk in 2026 under HIPAA plus Texas's own health privacy law, HB 300, and the 2025 record storage and AI rules. Tell patients about AI before care starts, keep records in the United States, get separate authorization for electronic disclosures outside care and payment, and have a clinician sign every note.
Austin clinics answer every message the morning after it arrives and close the day with every note signed. Texas has written detailed health privacy rules since HB 300, and in 2025 it added rules on where records live and how AI is disclosed.
Part of the Joint Commission hub, with the framework explained, a readiness checklist and 8 guides.
Part of the AAAHC hub, with the framework explained, a readiness checklist and 7 guides.
See it in your clinicThirty minutes on your own patients and doctors.
Request a demoSee a Spanish voice note and a Mandarin email from Austin patients become approved bookings with deposits, in fifteen minutes with a clinician who uses wai daily.
| Body or law | Rule | What to ask | How wai meets it |
|---|---|---|---|
| HB 300, Health and Safety Code 181.154 | Posted notice, and separate authorization for electronic disclosures outside treatment, payment and operations | Does any vendor disclose patient data onward | Patient data is never used to train models, and every access is logged |
| HB 300, Health and Safety Code 181.201 | Civil penalties of $5,000, $25,000 or $250,000 per violation | Who is accountable for each disclosure | Every message, draft, approval and signature is logged and exportable |
| SB 1188, Health and Safety Code 183.002 and 183.004 | Records kept in the US, and no credit score or voter registration status in the record | Which country holds every copy | Records hosted in the clinic's own country, set up with the clinic |
| Business and Commerce Code 521.053 | 60 days to notify people, 30 days to notify the Attorney General at 250 or more Texans | How fast can the vendor identify affected patients | A full audit trail of every action |
| Texas Medical Board | Licenses physicians and regulates healthcare licensees | Is every signing clinician licensed in Texas | Every note stays a draft until the licensed clinician signs it |
The private care market in Austin
Austin had 979,539 residents in the 2020 to 2024 American Community Survey, inside a Travis County of 1,330,015.8 10.4% of residents are aged 65 or older, and 18.7% were born abroad.8
12.4% of the city's civilian noninstitutionalized population has no health insurance, against 12.1% across Travis County.8 Published prices and a deposit at booking make self-pay visits simple to book.
The rules an Austin clinic works under
HIPAA is the federal floor. The Texas Medical Board licenses physicians and regulates more than 173,213 healthcare licensees across the state.6
HB 300, passed in 2011 and in force from 1 September 2012, rewrote the Texas Medical Records Privacy Act. Section 181.154 requires a clinic to post notice that health information may be disclosed electronically, and a separate authorization from the patient for each electronic disclosure beyond another covered entity's treatment, payment, health care operations or insurance functions.1 Section 181.153 prohibits disclosing health information for remuneration, with narrow exceptions.1
Section 181.201 lets the Attorney General seek civil penalties of up to $5,000 for each negligent violation in a year, $25,000 for each knowing or intentional violation and $250,000 for each violation using health information for financial gain.2
SB 1188, in force from 1 September 2025, keeps electronic health records of Texas patients physically in the United States or a US territory, cloud copies included, and bars a covered entity from storing a patient's credit score or voter registration status in the record.3 HB 149 adds that where AI is used in a health care service, the patient receives a plain-language disclosure no later than the first day of care, and a link to a web page is allowed.9
Breach notice falls under Business and Commerce Code section 521.053, which sets 60 days to tell each affected person and 30 days to notify the Attorney General through its online form when 250 or more Texans are involved.4 Recording is lawful under Penal Code section 16.02(c)(4) where the person is a party or one party gave prior consent, and clinics still ask before the scribe starts.5
wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic. wai is compliant with these rules and built for clinics in Austin. Austin records sit in the United States, which is what SB 1188 asks, and Checkout comes with a business associate agreement signed ahead of launch.10
The languages Austin patients write in
281,540 Austin residents aged five and over speak a language other than English at home.7 Spanish accounts for 187,226 of them, or 20.2%, followed by Chinese with 13,822, Vietnamese with 6,881, Arabic with 6,348 and Korean with 5,099.7 Across Travis County, 30.0% speak a language other than English at home.7
wai works in any language.11 Replies are drafted in the patient's language and sent once the coordinator approves them.
What a demo shows in Austin
The demo starts with a Spanish WhatsApp voice note left at 10pm by a patient in East Austin who wants a Tuesday evening slot, and an email in Mandarin from a newly arrived engineer asking about an annual check-up. wai reads busy times from each doctor's Google Calendar, Outlook or Apple Calendar, drafts two replies with open evening slots, and the coordinator signs them off at 8am.
The patient picks the first open slot and pays the deposit by card or Apple Pay, straight into the clinic's Stripe account.10 The clinic's HB 149 disclosure is linked from the booking page, and Checkout stores the service booked, never the reason for the visit.910
The note and letter wait as drafts until the clinician edits and signs them. A voice note from the clinic's own WhatsApp makes the sharpest test.
For health systems, employers and payers in Austin
Central Texas employers with their own health benefit, and the systems that serve them, can commission a pathway on wai carrying their brand. Rights over data, configuration and models are agreed up front, and the organisations page sets out the build.
Where to start
First, post the section 181.154 notice on the clinic website and at the front desk, and list which electronic disclosures need a separate authorization.1 Second, publish the HB 149 AI disclosure and link it from booking, using the consent form template as a base.9
Third, add the 30-day Attorney General and 60-day patient deadlines to the breach plan.4 Fourth, count last month's enquiries by language and hour. Texas law here is as read on 15 October 2026, as general information for the clinic's counsel to confirm.
Send us last month's enquiries by language and hour, and we show the evenings they would have filled.
Frequently asked questions
What does HB 300 add to HIPAA for an Austin clinic?
When must an Austin clinic tell the Attorney General about a breach?
Within 30 days when 250 or more Texas residents are involved, using the Attorney General's online form.4
Can Austin patient records be hosted outside the United States?
No. SB 1188 requires electronic health records of Texas patients to be physically maintained in the United States or a US territory, including cloud copies.3
Do patients need to be told when AI is used in their care?
Yes. HB 149 requires a plain-language disclosure no later than the date care is first provided, and allows a link to a web page.9
Does Texas require both parties to agree to a recording?
Penal Code section 16.02 allows recording where one party has given prior consent.5 A Texas clinic still asks the patient before the scribe starts.
Can Austin patients write in Spanish or Mandarin?
Yes. wai reads any language and drafts in the patient's own, and nothing is sent until the team approves it.11
Sources
- 1Texas Legislature, 2011H.B. No. 300, enrolled text, 82nd Legislature, amending Health and Safety Code Chapter 181Read 15 October 2026Read source
- 2Texas Legislative CouncilHealth and Safety Code Chapter 181, Medical Records Privacy, section 181.201Read 15 October 2026Read source
- 3Texas Legislature, 2025S.B. No. 1188, enrolled text, adding Health and Safety Code Chapter 183Read 15 October 2026Read source
- 4Texas Legislative CouncilBusiness and Commerce Code Chapter 521, section 521.053, notification required following breach of securityRead 15 October 2026Read source
- 5Texas Legislative CouncilPenal Code Chapter 16, section 16.02, unlawful interceptionRead 15 October 2026Read source
- 6Texas Medical Board, 2026Texas Medical BoardRead 15 October 2026Read source
- 7US Census Bureau, 2025American Community Survey 2020 to 2024 5-year estimates, tables S1601 and C16001, language spoken at home, Austin city and Travis CountyRead 15 October 2026Read source
- 8US Census Bureau, 2025American Community Survey 2020 to 2024 5-year estimates, tables DP05, DP02 and S2701, Austin city and Travis CountyRead 15 October 2026Read source
- 9Texas Legislature, 2025H.B. No. 149, Texas Responsible Artificial Intelligence Governance Act, enrolled textRead 15 October 2026Read source
- 10wai, 2026wai CheckoutRead 15 October 2026Read source
- 11wai, 2026wai changelog, intake answered by voice in any languageRead 15 October 2026Read source
Every Austin message answered by morning, every note signed by evening.
Fifteen minutes with a clinician who uses wai daily, on your own enquiries and diary. We reply within one working day.
Partner with us
See it on your own patients, then build it with us
Thirty minutes on your own patients, doctors and rules, in your market. We reply within one working day, and the clinics that partner with us early shape what we build next.
See what wai does between the visits

