Victoria lets a party record its own conversation, but bars communicating or publishing the recording without each party's express or implied consent. Its health records law binds private clinics, with a retention rule of seven years from the last service or age 25, whichever is later.
Recording notice
Partly
AI disclosure
No
Dental regulator statement
Partly
This is a guide for clinic owners, not legal advice. Every line points to the law or the regulator's own page, checked on 2026-10-20. Where we could not confirm something, the page says so.
The recording offence covers a listening device used on a private conversation to which the person is not a party, so a party recording its own call is not caught. A person must not knowingly communicate or publish a record of a private conversation made with a listening device unless each party gave express or implied consent, or another exception applies such as what is reasonably necessary to protect the person's lawful interests. Whether passing call audio to an AI vendor is a communication is not settled by the Act's text.
We found nothing in force in Australia that requires telling a caller they are speaking with an AI agent: not in the Privacy Act, the Spam Act, the Do Not Call Register Act, the telemarketing standard, the state recording Acts, or the Ahpra, dental and GP guidance, which are guidance rather than law. The Voluntary AI Safety Standard asks organisations to disclose when they use AI, and it is voluntary. The mandatory guardrails proposed in 2024 were not legislated; the National AI Plan of December 2025 relies on existing laws. The finding rests on the statutes read, not an exhaustive search of every state Act.
The Act applies to an organisation that provides a health service in Victoria. A provider must take reasonable steps to protect health information from misuse and loss and from unauthorised access. Health information may be transferred outside Victoria only where the provider reasonably believes the recipient is subject to a law, scheme or contract that effectively upholds substantially similar principles, the person consents, or another listed exception applies.
The federal rule applies here; nothing specific to this place was found.
A plain appointment reminder is not a commercial electronic message under the Spam Act, because its purpose is not to offer or promote goods or services; the regulator's own page lists appointment reminders among messages that are generally not spam. A reminder that adds a promotion becomes commercial and needs consent, which may be express or reasonably inferred from conduct and the business relationship; the regulator says inferred consent needs a provable, ongoing relationship with marketing directly related to it, and is less reliable than express consent. A telemarketing call under the Do Not Call Register Act is a voice call, including one with a recorded or synthetic voice, whose purpose includes offering or promoting goods or services; routine reminder and follow-up calls fall outside that definition, and the Act has no health-sector exemption, so a recall call that also promotes services is a grey area. The telemarketing standard sets calling hours (weekdays 9 am to 8 pm, Saturdays 9 am to 5 pm, no Sundays or national public holidays), requires the caller to identify itself at the start of the call (a given name is not required when the call uses only a recorded or synthetic voice), requires a way during a recorded or synthetic voice call for the recipient to ask for caller details, and requires the call to end at once when asked.
The Dental Board of Australia points to the Ahpra guidance of 22 August 2024 and has no separate AI standard that we found. The Australian Dental Association's policy statement on AI in dentistry says the extent of an AI system's contribution to clinical decision making should be clearly recognised and understood by practitioners and patients, that any application in clinical care must be supervised by a dental practitioner, and that data should be obtained with appropriate permissions and stored securely. It has no rule about telling patients they are speaking to an AI and says nothing about phone or reception agents.
The federal rule applies here; nothing specific to this place was found.
The Ahpra and National Boards guidance says practitioners should inform patients about their use of AI, obtain informed consent for AI tools that need personal patient data, and that consent is particularly important for AI that records private conversations. It addresses practitioners using AI in clinical practice, mainly scribing, and does not mention reception, booking or phone agents. The GP college's guidance on conversational AI asks GPs to obtain informed consent when using patient-facing AI tools, for example as part of intake, and to be transparent about the tool in the practice privacy policy.
A provider must not delete a person's health information until the later of seven years after the last health service it provided to them and, for information collected while they were a child, the person turning 25, unless another law permits or requires deletion.
From 10 December 2026, a clinic whose privacy policy must cover automated decisions will need to describe them if a computer program makes, or substantially drives, a decision that could significantly affect a person's rights or interests. That is a privacy-policy duty, not a spoken disclosure on a call, and whether a booking or triage routing by an AI phone agent counts is unsettled.
Aida opens every call with the recording notice your province or state needs, and says it is the practice's AI agent wherever you want it to. Request a demo with your clinic's rules in mind.
Notice
in the opening line
Approved
answers only
Staff
keeps control