An Alberta dental clinic that puts an AI agent on its phone line answers to the Health Information Act, its regulation, the College of Dental Surgeons of Alberta and the province's consumer rules. Here is what each one asks of you, in plain words, with the source for every line.
Short answer
A dentist holds patient information as a custodian under Alberta's Health Information Act. Before a new system that handles that information goes live, the clinic must send a privacy impact assessment to the Information and Privacy Commissioner, sign a written agreement with the vendor, and add terms of its own if the information is stored or used outside Alberta. Callers must be told why their information is collected and whether it goes into an automated system. Each use of an automated system must be recorded, by the clinic or by an automatic log, and kept at least a year. Dental records are kept at least ten years.
This is a guide for clinic owners, not legal advice. Every line points to the law or the regulator's own page, checked on 2026-10-27. Where we could not confirm something, the page says so.
Alberta has one law for health information and another for everything else a clinic holds.
What this means for the clinic. Booking calls carry patient names, numbers, appointment details and often the reason for the visit. Plan the AI agent under the health law, not only the general privacy law.
What this means for the clinic. The opening of each call needs the purpose, a contact at the clinic and a plain line that an automated system is involved. The agent should say which clinic it speaks for and never claim to be a human.
What this means for the clinic. Tell callers the call is recorded and why. Get advice on section 23 before relying on spoken consent for recording alone.
A custodian that puts health information into an automated system, or uses it there, must record the custodian's name or number, the patient's name, the date and purpose, and a description of the information. That record is not needed if an electronic system automatically logs the custodian's name or number, the patient's name, the date and time, and a description of the information. The record or log must be kept at least one year after the input or use, and the patient can ask for a copy.
What this means for the clinic. Find out whether the vendor's system keeps that automatic log. If it does not, the clinic must keep its own record, including the purpose. Either way, the clinic needs the record or log for at least a year and must be able to give a patient a copy.
What this means for the clinic. Budget time for the assessment before the agent goes live, and treat the closing letter as review comments to act on, not an approval to advertise.
What this means for the clinic. Ask the vendor where every part of a call goes (phone network, audio, transcript, summary, backups) and have the written terms the Act and regulation require in place before launch. A Canadian data centre outside Alberta still needs the outside-Alberta terms.
What this means for the clinic. Decide which parts of each call (note, summary, transcript, audio) become part of the patient record, and keep those for the minimum. The standard does not say every raw recording must be kept ten years; set separate retention for anything that stays outside the record.
What this means for the clinic. Put the vendor's incident notice duty in the agreement and write down who at the clinic decides on notice.
What this means for the clinic. A booking or a recorded yes on the phone is not informed consent to treatment. Keep the agent to scheduling and information the clinic has approved, and set clear limits on prices, offers and conditions it can state.
Drawn from the rules above. The sources are the Health Information Act, its regulation and the College's standards.
Aida is Attainment's AI agent for clinic phones and messages. Each practice sets its opening notice, its AI disclosure and its call handling before launch, using its own state or province rules; what the law requires is not optional, and this guide does not replace that check. The guide stands on its own whether or not you look at the product.