Clinical Notes Summarizer
HIPAA, the Conditions of Participation and the CCPA carry the weight: the business associate agreement, who authenticates the record, how AI errors enter the quality program, and the Texas disclosure to the patient.
AI in healthcare
Same health system, two AI tools, two different rulebooks.
A note summarizer used by clinicians in Texas and a symptom-checking chatbot used by patients in Germany and the United Kingdom belong to the same organization. Not one law that returned obligations for one of them returned any for the other. That is what use and jurisdiction do to the answer.
Side by side
The two tools, as the determination saw them.
Same organization, same sector, both generative. Jurisdictions, users and use differ, and so does every law that returned obligations.
| Clinical Notes Summarizer | Patient Triage Chat | |
|---|---|---|
| What it does | Summarizes visit notes for the chart and the referral letter | Suggests how urgently a patient should be seen |
| Who uses it | Clinicians, inside the organization | Patients, on the public portal |
| Does it touch a clinical decision? | No: the clinician edits every summary; it decides nothing | Yes: it suggests urgency, and a nurse sees the urgent ones |
| Jurisdictions declared | United States, California, Texas | Germany, United Kingdom |
| Laws considered there | 52 | 19 |
| Laws that returned obligations | 7 | 6 |
| Obligations | 25 | 39 |
| EU AI Act tier | None shown: no EU jurisdiction | High-risk |
| Medical-device rules | Not among the laws considered in its jurisdictions | MHRA AIaMD applies: 7 obligations |
| Who must be told | The patient, in Texas, by the first date of service; individuals and the Secretary of HHS after a breach of unsecured PHI | The supervisory authority within 72 hours of a breach; serious incidents within 2 days (public-health threat) or 10 days (death or unanticipated serious deterioration) |
| Laws in common | None among the laws that returned obligations. Both determinations evaluated the same 313 laws. | |
Patient Triage Chat
Device regulation, the EU AI Act's high-risk tier and the breach clocks of GDPR and UK GDPR: classification and UK marking, incident reporting in 2 and 10 days, the supervisory authority within 72 hours.
The figures are as recorded on October 7, 2026 and move when the law library or the answers change and the AI use case is checked again. Your result depends on your own answers.
Where your judgment comes in
LegisGate prepares the work. Your counsel decides.
A determination tells you what attaches to an AI use case. It does not tell you that you have met the law. Whether it is sufficient is for your counsel.
Getting started
Your first five AI use cases are free.
Add your own AI use case, answer the intake form and read the determination.