How to transcribe patient interviews with AI under GDPR

Patient interviews are among the most valuable and most sensitive data in research. Health information is a special category under GDPR, so the rules are stricter. Here is how to get accurate transcripts without putting patients or your approval at risk.

Updated 2026-10-09

The short answer

You can use AI transcription for patient interviews when your ethics approval and your organisation allow it, patients have given informed consent to recording and transcription, and the service processes data in the EU under a data processing agreement without training on it. Because health data is involved, expect your organisation to ask for more: often a data protection impact assessment and a named, approved tool.

Why patient recordings need extra care

Data concerning health is a special category of personal data under GDPR Article 9. Processing it is prohibited unless an exception applies, such as explicit consent (Article 9(2)(a)) or scientific research with appropriate safeguards (Article 9(2)(j) together with Article 89). National law adds its own rules, and clinical settings add professional confidentiality on top.

A patient interview often contains far more than the topic you asked about: diagnoses, medication, family situations, other people’s names. Assume the whole recording is health data, not only the parts you plan to analyse.

Processing health data at scale or with new technology often requires a data protection impact assessment (Article 35). Ask your data protection officer early, since this can take weeks.

Research interviews vs clinical documentation

This guide is about research: interviews with patients as study participants. Recording clinical consultations to write medical records ("ambient scribe" tools) falls under healthcare rules, your organisation’s medical record system and often medical device regulation. Do not use a research tool to create clinical documentation, and do not reuse clinical recordings for research without the right approval.

A safe workflow for patient interviews

  • 1. Approval: name the transcription tool in your ethics application and data management plan. Check if a DPIA is needed.
  • 2. Recording: use an encrypted recorder or an approved device. Avoid personal phones that sync to consumer clouds.
  • 3. Upload: transcribe with an EU-processed service that does not train on your data, with redaction of names and identifiers switched on if available.
  • 4. Verify: check the transcript against the audio. Medical terms, drug names and numbers need extra attention.
  • 5. Pseudonymise: replace remaining identifiers, including clinic names, rare diagnoses and dates that could identify someone.
  • 6. Restrict access: share pseudonymised transcripts only with named team members.
  • 7. Delete: remove recordings on schedule, and keep a log of the deletion.

How Kahubi supports patient interview studies

Kahubi transcribes with European providers and never trains on your recordings or transcripts. You can switch on redaction so names, health details and other identifiers are masked in the transcript, and you can label speakers as Interviewer and Patient straight away.

Analysis happens in the same project, so transcripts do not need to be copied into other tools: framework or thematic analysis with suggested codes you confirm, and a findings draft with quotes linked to the transcript. Redaction is a help, not a guarantee, so always read the transcript before sharing it.

What AI transcription changes for clinical researchers

Manual transcription takes around four to six hours per hour of audio. For a typical study of 20 patient interviews that is several weeks of work, often done by the busiest people on the team. AI transcription turns that into minutes of processing and a few hours of checking, so analysis can start while the interviews are still fresh, and themes can feed back into the next interviews.

Sources

  1. Regulation (EU) 2016/679 (General Data Protection Regulation). EUR-Lex.
  2. European Commission (2026). Living guidelines on the responsible use of generative AI in research, third version.
  3. European Data Protection Board (2025). Guidelines 01/2025 on pseudonymisation.

Last updated 2026-10-09.

Frequently asked questions

Can I use AI to transcribe patient interviews?
Yes, if your ethics approval and organisation allow it, patients consent to recording and automated transcription, and the service processes data in the EU under a data processing agreement without training on it. Health data is a special category under GDPR, so check whether a DPIA is required.
Is patient interview audio health data?
Usually yes. Even when the topic is not medical, patients tend to mention diagnoses, treatment and medication. Treat the whole recording as health data under GDPR Article 9.
Does redaction make transcripts anonymous?
No. Redaction masks direct identifiers like names, but the story itself can still identify someone, especially with rare conditions or small communities. Treat redacted transcripts as pseudonymised personal data.
Can I use an AI scribe from a clinic for my research?
Not without the right approval. Clinical documentation tools serve patient care and fall under healthcare rules. Using those recordings for research needs its own legal basis and ethics approval.

Related

Transcribe patient interviews in the EU

EU processing, optional redaction, never used for training, and analysis in the same project. 30 minutes free.