AI notes and your professional obligations

Is AI session-note drafting compliant with PACFA, ACA or AHPRA standards?

Short answer: using an AI tool to draft session notes doesn't breach PACFA, ACA or AHPRA obligations on its own — but how it's built matters. Here's what the professional bodies actually say, and how that maps onto what Zenvia does.

Written by Steve Daniel, founder of Zenvia — GAICD · MBA · Master of IT · Author, Cybersecurity for Australian Not-for-Profits · Last reviewed 5 October 2026

Where the professional bodies stand

This has already been addressed, not left open

PACFA published its own good-practice guideline directly on point — Integrating Artificial Intelligence in Counselling and Psychotherapy (February 2025) — and its direction is that AI can assist with administrative tasks like note-drafting, provided client consent is obtained, data handling is transparent, and the practitioner remains the one who reviews and takes responsibility for what ends up in the record. ACA hasn't published a separate AI-specific position as at October 2026. AHPRA's guidance, Meeting your professional obligations when using Artificial Intelligence in healthcare (last reviewed August 2024), takes the same core line — a practitioner using an AI scribing tool is responsible for checking the accuracy and relevance of what it produces, and the record is only ever what you signed off on, not what the AI drafted — but it's worth being precise about who that applies to: AHPRA registers psychologists and other National Scheme professions, not counsellors, so its guidance binds you directly only if you also hold AHPRA registration. For PACFA/ACA-registered counsellors it's not a compliance obligation, but it's the closest thing to a government-adjacent benchmark, and Zenvia is built to the same standard regardless of which body you answer to. Neither position treats AI-assisted drafting as inherently non-compliant — both treat it as fine if consent, transparency and final practitioner accountability are actually built in, not just claimed.

What that actually requires

The bar both bodies set, and how Zenvia meets it

What's required
What Zenvia does
Informed client consent before any AI processing of session content
Note-drafting only runs for a session you've turned it on for, with consent captured first — using a script we provide.
Transparency about how client data is used and stored
Never used to train any AI model — contractually excluded, for us and our model providers. Audio and its transcript are automatically deleted 7 days after the session.
The practitioner remains responsible for the final clinical record
The AI drafts; it doesn't diagnose, assess risk or decide anything. Nothing enters the client record until you've read, edited if needed, and signed it.
An auditable record of what was AI-assisted and what a practitioner reviewed
A full access and edit log on every note, exportable for supervision, your insurer, or a professional-body query.

The Privacy Act angle

Session recordings are "sensitive information" under the Privacy Act

Health information — which session audio and AI-drafted notes both are — is classified as sensitive information under the Privacy Act 1988, meaning it gets a higher bar than ordinary personal information: APP 3 generally requires consent before you collect it, and APP 11 requires you to take reasonable steps to protect it from misuse, loss or unauthorised access, and to securely destroy or de-identify it once it's no longer needed. If a breach of that data is likely to cause serious harm, the Notifiable Data Breaches scheme requires you to report it to the OAIC and affected individuals — a practitioner-level obligation, separate from whatever your AI vendor's own terms say.

This is exactly the gap a generic transcription or note-taking tool can leave you exposed on — one built for general business use has no particular reason to treat your recordings as sensitive health information requiring APP 11-grade protection. See our security page for how Zenvia's AI pipeline is built around that specific obligation, and our privacy policy for the full detail on what's collected and why.

Record-keeping, not just note-drafting

An AI-drafted note is still a client record

PACFA's own Good Practice Guideline on maintaining client records treats any information documenting the nature, delivery, progress or results of counselling as a client record, regardless of whether a human or an AI tool drafted the first version. That means an AI-drafted note sits under the same accountability, accuracy and unauthorised-disclosure obligations as a handwritten one, and under whatever retention period your professional body, insurer or state health-records law requires of you — these vary by state and aren't set by a single national rule. Zenvia doesn't set your retention period for you; what it gives you is the access-and-edit log mentioned below, so if your supervisor, insurer or professional body ever asks exactly what was AI-drafted versus practitioner-reviewed on a given note, that's a straightforward export rather than a reconstruction job.

What we're not claiming

This isn't a compliance certificate

This page explains how Zenvia is built and where that lines up with published professional-body guidance — it isn't legal or professional advice, and it isn't a substitute for checking your own obligations against your specific registration body's current code of ethics and any supervision or insurance requirements that apply to you. If AI-assisted note-drafting is new to your practice, it's worth raising with your supervisor or professional indemnity insurer before you start, the same way you would for any new clinical tool.

For the full plain-language FAQ on exactly what the AI does and doesn't do — consent, recording, data use, clinical judgement — see our AI session notes page.

See a real draft, free for 90 days

Bring one session and see exactly what it produces, before you decide.

How it works Start free — 90 days

Want the full picture? See all our funder and practice guides — including PACFA vs ACA vs AHPRA and Medicare billing — or see exactly how Zenvia secures client data.