AI in Health Care: Florida, Alabama and Mississippi Take Different Paths

Florida, Alabama, and Mississippi are taking different approaches to AI use in health care, creating different compliance and operational issues for physicians and administrators.

Florida does not have a health care-specific AI consent law. However, because Florida requires all parties to consent to a recording, practices that use ambient listening or AI transcription tools must obtain consent from everyone being recorded before recording begins. Alabama’s new law focuses on how health insurers use AI in coverage and prior authorization decisions. As a result, providers may need to pay closer attention to how they document medical need and prepare prior authorization requests. Mississippi, like Florida, has not enacted AI-specific rules but is actively studying AI regulation through its Artificial Intelligence Regulation (AIR) Task Force.

For health care providers, the key is to pair legal awareness with practical oversight. Know where AI is being used, obtain consent where recordings are involved, maintain strong prior authorization records, and be ready for new state requirements.

Florida: Existing Recording Law Creates a Practical Consent Requirement

Florida has not adopted AI-specific informed consent laws for health care providers, but its recording law creates a major practical issue for providers using AI scribes and ambient listening tools. The state’s all-party consent statute, Fla. Stat. § 934.03, generally requires consent from everyone involved before an oral communication can be recorded. For physicians, hospitals, clinics and other providers, this means AI transcription tools should not begin recording until the patient and any other recorded individuals, such as family members or staff have consented.

Alabama: AI Rules Focus on Insurers

Alabama’s AI law focuses primarily on health insurers and coverage decisions rather than the direct use of AI by physicians. Senate Bill 63, (effective October 1, 2026), regulates how health benefit plan providers use AI when making coverage decisions. For provider organizations, the biggest impact may be on prior authorization requests and appeals. Physicians and revenue cycle teams should expect greater emphasis on patient-specific clinical facts, medical history and records supporting medical necessity. Clear, thorough documentation may help reduce delays when payors use AI-assisted utilization review tools.

Mississippi: AI Rules May Be Coming But the Direction is Still Taking Shape

Mississippi is actively evaluating potential AI regulation through its Artificial Intelligence Regulation (AIR) Task Force, which is studying AI risks, policy options and statewide rules. The initial AIR Task Force report, issued in January 2026, did not recommend any health care-specific AI rules, it did flag health care-related concerns. 

Now is a good time to build AI governance practices while monitoring AIR Task Force reports and future legislative activity.

Key Steps for Health Care Organizations

Organizations operating in Florida, Alabama, and Mississippi should focus on three areas: recording consent, prior authorization documentation and readiness for future AI regulation.

• Florida: Obtain and document recording consent. Practices using AI scribes, ambient listening, dictation, or transcription tools should obtain and document consent from every recorded party before recording begins.
• Alabama: Strengthen prior authorization support. Physicians and revenue cycle teams should clearly document patient-specific clinical circumstances, medical history and other information that supports medical necessity. Complete documentation may help support prior authorization requests when payors use AI-assisted review tools.
• Mississippi: Monitor regulatory developments. Organizations should track AIR Task Force reports and related legislative proposals so they can prepare for any future health care-specific AI requirements.
• Review multistate workflows. Health systems operating in multiple states should avoid using a single AI transcription or notice process without confirming that it meets each state’s recording, privacy, and health care requirements.
• Maintain existing compliance obligations. Even in states that have not adopted AI-specific rules, providers remain responsible for protecting protected health information (PHI), maintaining accurate records, applying clinical judgment, and complying with applicable professional standards.

Steps Health Care Organizations Can Take Now

Health care organizations in Florida, Alabama, and Mississippi can do these things now to manage risk and prepare for future AI requirements:

• Create a clear consent process in Florida. Before using any AI recording or transcription tools, obtain consent from the patient and other recorded participants, document the consent, and offer a non-AI documentation option if consent is not granted. Even where not required by law, organizations should consider notice and consent procedures because these issues have drawn attention in other jurisdictions.
• Improve prior authorization support. Standardize how clinicians and revenue cycle teams collect and document medical history, failed therapies, patient-specific clinical circumstances and records supporting medical necessity for Alabama payors using AI-assisted utilization review.
• Assign ownership for regulatory monitoring. Designate a compliance, legal, operations, or leadership owner to track Mississippi AIR Task Force reports, Florida AI proposals and broader AI developments across the Southeast. While current proposals may not impose health care specific consent requirements, future amendments or related legislation could create new notice, disclosure or patient-rights obligations for AI tools used in clinical settings.
• Build an AI governance framework. A well-designed framework helps organizations use AI consistently across multiple states and respond quickly when new regulations emerge. Key components may include AI policies, an inventory of AI tools, processes for identifying tools that record or process PHI, clinician oversight where appropriate, documentation of  patient-notices or consent and vendor reviews before deployment.
• Review vendor contracts. Confirm that AI vendors can support state-specific consent and disclosure requirements, HIPAA compliance, regulatory changes, data security, audit trails and timely notice of material product changes.

If your organization operates in Florida, Alabama, or Mississippi and is deploying—or considering—AI-enabled tools, please contact Beau Haynes, Courtney Hurtig, Matt Harrell, Lucy Porter or any member of the Health Care or Artificial Intelligence teams to discuss how these developments may affect your operations and how to build a practical compliance roadmap.