Key points
- Since 1 January 2025, Health and Safety Code 1339.75 requires an AI disclaimer and a route to a human on AI-generated messages about a patient's clinical information, unless a licensed provider has read and reviewed them.1
- Scheduling, billing and other business messages sit outside that rule, so the clinic decides which drafts a clinician reviews.1
- Penal Code 632 makes recording a confidential conversation without the consent of all parties an offence, with fines up to $2,500 per violation.2
- 38.5% of San Diego residents aged five and over speak a language other than English at home, 21.0% Spanish and 11.3% an Asian or Pacific Island language.5
- wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic.
Summary
A San Diego clinic can use AI for notes and patient messages in 2026, provided a licensed provider reviews AI drafts about clinical information or the message carries California's AI disclaimer. Every party must agree before a consult is recorded, and records stay in the United States.
San Diego clinics now reply to every patient the same day, in English, Spanish or the other languages the city speaks at home, with a clinician reading anything clinical before it leaves. California wrote the terms for that in AB 3030, which took effect on 1 January 2025.
Part of the Joint Commission hub, with the framework explained, a readiness checklist and 8 guides.
Part of the AAAHC hub, with the framework explained, a readiness checklist and 7 guides.
See it in your clinicThirty minutes on your own patients and doctors.
Request a demoSee a San Diego patient's question about a result go to the clinician for review while the booking reply goes to the desk, in fifteen minutes with a clinician who uses wai daily.
| Body or law | Rule | What to ask | How wai meets it |
|---|---|---|---|
| Health and Safety Code 1339.75 (AB 3030) | AI disclaimer and a route to a human on AI messages about clinical information, unless a licensed provider reviewed them | Who reviews each clinical draft, and is the review logged | Drafts wait for approval, and every approval is logged |
| Medical Board of California | Hears breaches of 1339.75 by physicians | Which messages each clinician signs off | Clinical messages routed to the clinician before sending |
| Penal Code 632 | Consent of all parties before recording a confidential conversation | How the patient agrees before the scribe starts | The clinic asks first, and the clinician signs the note |
| Civil Code 56.36 (CMIA) | Nominal damages of $1,000 and penalties up to $2,500 for negligent release | Who can see each record, and how access is limited | Role-based access enforced in the database, encryption at rest and in transit |
| HIPAA | Business associate agreement with vendors handling PHI | When the BAA is signed | For Checkout, a BAA is signed before go-live |
The private care market in San Diego
The city of San Diego had an estimated 1,406,106 residents on 1 July 2025, inside a county of 3,282,248.4 Health care and social assistance businesses in the city took $22.7 billion in receipts in 2022, and $36.0 billion across the county.4
6.7% of city residents under 65 have no health insurance, and the median household income was $108,077 in the 2020 to 2024 survey, so most private patients arrive insured and choose a clinic on speed of reply and convenience.4 The city is home to 70,280 veterans, and 25.1% of residents were born abroad.4
The rules a San Diego clinic works under
HIPAA sets the federal floor. California adds a rule written for generative AI, and two older statutes that shape every consult.
Health and Safety Code 1339.75, added by AB 3030, applies to any health facility, clinic or physician's office that uses generative AI to write patient communications about clinical information.1 Each such message must open with a disclaimer that AI wrote it and give clear instructions for reaching a human, and in chat the disclaimer stays on screen throughout.1 The duty falls away when a licensed or certified health care provider has read and reviewed the message, and appointment scheduling, billing and other business matters sit outside it.1 A physician who breaches it answers to the Medical Board of California.1
Penal Code 632 makes it an offence to record a confidential communication without the consent of all parties, whether in the same room or by telephone, with a fine of up to $2,500 per violation.2 Every patient is asked before the scribe starts, and the consent form template gives the wording.
The Confidentiality of Medical Information Act lets a patient recover nominal damages of $1,000 for a negligent release of their records without proving actual harm, and adds civil penalties of up to $2,500 per negligent disclosure.3
wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic. wai is compliant with these rules and built for clinics in San Diego. A business associate agreement covers Checkout from the day it goes live.7
The languages San Diego patients write in
Of 1,312,120 city residents aged five and over, 38.5% speak a language other than English at home in the 2019 to 2023 American Community Survey.5 Spanish accounts for 275,807 people, or 21.0%, and Asian and Pacific Island languages for 147,888, or 11.3%, with other Indo-European languages at 4.8%.5
wai works in any language.6 The draft is written in the patient's language and is sent only after the right person at the clinic has approved it.
What a demo shows in San Diego
Two messages arrive overnight. One, in Spanish, asks to move Thursday's appointment to the afternoon, and wai drafts a reply with the open times it reads from each clinician's Google Calendar, Outlook or Apple Calendar. That is a scheduling message, so the front desk approves it at 8am.
The other asks what a raised result in last week's blood test means. wai drafts a reply and routes it to the clinician, who reads, edits and approves it, which is the review Health and Safety Code 1339.75 names.1 See how human approval works on patient messages.
A new patient then books a consult on the clinic's site and pays a deposit in US dollars through the clinic's own Stripe account, with no wai subscription or setup fee for Checkout.7 After the consult, the clinician signs the drafted note.
For health systems, universities and insurers in San Diego
A San Diego County hospital system or research university can have wai build a pathway of its own, for example clinician-reviewed replies to patient questions about results, run under its own brand. The contract settles who owns the data, the configuration and the models, and the organisations page sets out the first steps.
Where to start
First, sort the clinic's outgoing message types into clinical and administrative, and name the licensed reviewer for each clinical type, so every AI draft about clinical information is read before it goes.1 Second, put the all-party recording consent into intake and the scribe workflow.2
Third, ask how a change to a record is logged and exported. Fourth, count last month's enquiries by language, so the demo runs on the Spanish and Asian-language messages the clinic really received. Everything here reflects California statutes as read on 15 October 2026 and is general information, so confirm the application with the clinic's lawyer.
Bring one clinical and one booking message from last week, and see who approves each.
Frequently asked questions
Does a San Diego clinic have to label AI-written messages?
For messages about a patient's clinical information, yes, unless a licensed or certified provider read and reviewed them first. Scheduling and billing messages sit outside the rule.1
Who enforces the AI disclaimer rule against doctors?
Health and Safety Code 1339.75 places a physician's breach under the Medical Board of California, and a licensed clinic's under the clinic enforcement provisions of the Code.1
Is California a one-party consent state for recording a consult?
No. Penal Code 632 requires the consent of all parties to record a confidential communication, in person or by phone.2
What does a records leak cost under the CMIA?
A patient can claim $1,000 in nominal damages for a negligent release without proving harm, plus any actual damages, and penalties of up to $2,500 per violation can follow.3
Where are our patient records hosted?
wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic. For Checkout, a business associate agreement is signed before go-live.7
Can patients write in Spanish or another language?
wai works in any language, and the desk approves every Spanish or Asian-language draft before it goes.6 Bring a real message in each language to the demo.
Sources
- 1California Legislative Information, 2024Health and Safety Code section 1339.75, artificial intelligence in health care services (AB 3030)Read 15 October 2026Read source
- 2California Legislative InformationPenal Code section 632, eavesdropping on or recording confidential communicationsRead 15 October 2026Read source
- 3California Legislative InformationCivil Code section 56.36, Confidentiality of Medical Information Act remediesRead 15 October 2026Read source
- 4US Census Bureau, 2025QuickFacts, San Diego city, California and San Diego County, CaliforniaRead 15 October 2026Read source
- 5US Census Bureau, 2024American Community Survey 2019 to 2023 5-year estimates, table S1601, language spoken at home, San Diego cityRead 15 October 2026Read source
- 6wai, 2026wai changelog, intake answered by voice in any languageRead 15 October 2026Read source
- 7wai, 2026wai CheckoutRead 15 October 2026Read source
Every San Diego patient answered the same day, by the right person.
Fifteen minutes with a clinician who uses wai daily, on your own messages and diary. We reply within one working day.
Partner with us
See it on your own patients, then build it with us
Thirty minutes on your own patients, doctors and rules, in your market. We reply within one working day, and the clinics that partner with us early shape what we build next.
See what wai does between the visits