Skip to content

CMS & Regulatory Compliance

Texas HB 1709 & TMB Rule 165.1

Texas HB 1709 & TMB Rule 165.1 for Groups

Persistent AI labeling, physician attestation, and WORM audit trails for Texas documentation compliance. Book your workflow audit at https://cal.com/merryai/demo.

Executive Key Takeaways

  • HB 1709 requires a persistent per-page 'AI-Authored' disclosure across the entire designated record set—print, portal PDFs, fax, and FHIR DocumentReference exports
  • TMB Rule 165.1 demands that original text remain legible when amended, with the identity and timestamp of each editor recorded, plus a 7-year minimum retention from last treatment
  • Validate every attestation prompt and disclosure template against statutory language using the Scribing Template Directory at https://templates.scribing.io before deployment
Regulatory Verification Framework
2026 Audit Ready
TX HB 1709 §DisclosureVerified Compliant

Per-Page AI-Authored Label

Per-Page AI-Authored Label

TMB 22 TAC §165.1Verified Compliant

Amendment Legibility & 7-Year Retention

Amendment Legibility & 7-Year Retention

TX AI-Care Statute (Sep 1 2025)Verified Compliant

Mandatory Physician Review

Mandatory Physician Review

HIPAA §164.312Verified Compliant

Immutable WORM Audit Trail

Immutable WORM Audit Trail

Statutory Foundations: How HB 1709 and Rule 165.1 Operate Together

Texas HB 1709 and TMB Rule 165.1 do not exist in isolation; they interlock to create a single documentation obligation for any Texas medical group that permits AI involvement in clinical notes. HB 1709, the Texas Responsible Artificial Intelligence Governance Act, governs how business entities—including healthcare organizations—deploy AI systems, and specialized guidance interpreting the statute establishes that any AI-modified clinical record must be clearly flagged so that subsequent treating physicians are not misled. TMB Rule 165.1, codified at 22 TAC §165.1, supplies the underlying medical record adequacy and retention standards against which that flagging is measured. Neither instrument treats AI labeling as an optional best practice; it is a statutory obligation enforced through the Board's record rules.

Under the combined framework, three obligations emerge for every AI-involved note. First, persistent AI labeling: each AI-authored or AI-modified entry must carry a clear indicator that travels with the record across all downstream formats for the full retention period. Second, non-misleading records: the flag must be visible at the point of care so any reviewing clinician understands where AI contributed text. Third, integration with the adequacy standard: the note must still be complete, contemporaneous, legible, and attributable to a physician observer, exactly as 165.1 has always required of paper and electronic charts alike.

Separate AI-care statutes further sharpen the physician's personal duty. Effective September 1, 2025, Texas law explicitly authorizes practitioners to use AI for care-related purposes, but only if they act within their license scope, comply with other applicable law, review all medical records created by AI to ensure conformity with TMB standards, and disclose their use of AI to patients. A companion provision effective January 1, 2026 requires clear and conspicuous disclosure of AI use in diagnostic or treatment-related services at the time care is first provided, subject to narrow emergency exceptions. For groups tracing these provisions against the broader literature on record integrity, the peer-reviewed corpus at https://www.ncbi.nlm.nih.gov/pmc/ offers useful grounding on why immutable amendment trails have long been the standard of defensible charting.

The Adequacy Standard: What Rule 165.1 Demands of Every Entry

Rule 165.1 defines an adequate medical record as complete, contemporaneous, and legible documentation of each patient encounter, maintained by each licensed physician regardless of medium. The rule enumerates required elements: the reason for the encounter and relevant history, physical examination findings and prior diagnostic results, the assessment or clinical impression, the plan of care including any discharge plan, and the date and legible identity of the observer. AI-generated content does not receive a lighter standard—if anything, it must clear the same bar while additionally satisfying the labeling and review overlays.

Electronic Record Requirements and the Amendment Rule

For electronic records specifically, Rule 165.1 imposes two provisions that are decisive for AI workflows. All non-biographical populated fields must contain accurate data based on the physician's actual findings and assessments—which forecloses any workflow that signs an AI draft without substantive review. And any amendment, supplementation, change, or correction not made contemporaneously must clearly show its time and date, indicate that it is an amendment or correction, and preserve the original text so that it remains legible. This amendment rule is the exact functional analog of a human-edit diff: the original AI draft is the base text, and every physician correction is a marked, timestamped, attributed change layered on top of it without erasing what came before.

Retention Timelines and Destruction Constraints

Retention under 165.1 runs a minimum of 7 years from the date of last treatment for adults. For minors, records must be kept until the patient reaches age 21 or 7 years from last treatment, whichever is longer. Critically, destruction is permitted only after any related civil, criminal, or administrative proceeding has been finally resolved. A group cannot purge on a fixed calendar schedule if litigation or a Board investigation is pending. Any AI documentation system whose logs and outputs are relied upon for clinical documentation effectively becomes part of the record ecosystem and inherits these same retention and destruction constraints.

Operationalizing Attestation: The Physician Review Workflow

Compliant Texas medical groups will generally adopt a workflow that converts the statutory review duty into recorded evidence. The AI scribe generates a draft note—HPI, ROS, physical exam, assessment and plan, orders, and counseling—but that draft is a pre-record artifact, not an official entry, until the physician reviews and approves it. The review interface should present a clear demarcation between AI-generated content and physician edits, whether through tracked changes, color highlighting, or a side-by-side comparison, and should expose the full version history from base draft through final signed note.

The attestation step is where the review duty becomes defensible. Before final sign-off, the physician completes a structured attestation—for example, an affirmation that the note has been reviewed, edited as necessary, and accurately reflects the clinical findings, assessment, and plan for the encounter. That attestation must record the physician's legible identity, the date and time, and a reference to the specific note version attested. Stored as immutable metadata bound to the note object rather than a generic system log, the attestation proves both that the physician discharged the AI-care review requirement and that the final record is a physician-approved document rather than an unvetted machine artifact. Groups can validate their attestation prompt language against statutory wording using the Scribing Template Directory before deployment.

Disclosure Propagation Across the Designated Record Set

HB 1709 requires a per-page disclosure that persists across the entire designated record set. When a physician signs an AI-derived note, the system should automatically tag the encounter resource as AI-involved and render a visible 'AI-Authored' label on every downstream page and format—printed charts, portal PDFs, faxed notes, C-CDA exports, and FHIR DocumentReference resources. If AI is later used to summarize or modify an existing note, each modified entry requires its own flag plus a traceable link to the original content, and the physician must re-review and re-attest to the modified version to remain within TMB standards.

Architecture Comparison: Manual, Generic, and Merry AI Approaches

The practical difference between documentation models becomes clear when the statutory obligations are placed side by side against how each approach actually behaves in production.

Compliance DimensionManual ChartingStandard Generic AI ScribeMerry AI Compliance Architecture
Per-page 'AI-Authored' disclosure (HB 1709)Not applicable; no AI involvementOften absent or buried in hidden metadataEncounter-level flag renders visible header across print, PDF, fax, C-CDA, FHIR
Physician attestation object (AI-care statute)Handwritten signature, no version bindingGeneric click-to-sign, not bound to note versionStructured attestation with identity, timestamp, and immutable version reference
Amendment legibility (22 TAC §165.1)Original often overwritten or illegibleEdits frequently overwrite the AI draft silentlyHuman-edit diff preserves original text; every change timestamped and attributed
Retention alignment (7-year floor)Physical storage, purge-schedule riskFixed-calendar deletion commonConfigurable WORM window anchored to last-treatment-date with litigation hold
Discovery readinessManual chart pull, gaps commonLogs not exportable in defensible formExportable version chain: draft, diffs, final, attestation for counsel and TMB

The manual column carries no AI labeling burden but is prone to illegible amendments and calendar-based purge errors. The generic scribe column introduces AI without the statutory scaffolding—disclosures go missing, edits overwrite the draft, and audit logs are not structured for discovery. The Merry AI column treats each obligation as a discrete, testable behavior rather than a policy aspiration.

Software Requirements and the WORM Audit Trail

A defensible Merry AI configuration for Texas medical groups rests on a durable, write-once audit trail that captures the base AI draft, every physician edit expressed as a diff, the final signed version, and the associated attestation event. This design maps directly to the 165.1 amendment rule—the original text remains legible because the diff never destroys the base draft, and the identity and timestamp of each editor are recorded. There is also a deliberate separation between the transient inference layer, where raw audio and model context are shredded from RAM once the draft is produced and never written to disk, and the durable record layer, where the clinical text chain is preserved. The audio input is not part of the designated record set; the diff evidence is.

The one nuance groups must configure deliberately is retention duration. A 6-year WORM window alone is insufficient against the 7-year statutory floor, so Texas tenants must either extend the WORM period to match or exceed the last-treatment-date requirement or archive the trail into a secondary immutable repository preserving the same write-once characteristics for the full horizon, including any litigation hold. Overlay this technical stack with governance policies defining which encounters may use AI, mandatory review steps, prohibitions on signing without attestation, physician training on flag recognition, and periodic internal audits confirming every AI-involved note carries its flag, attestation, and diff history. When you are ready to validate your current configuration against these requirements, Book a 15-Minute Workflow Audit and we will trace a single encounter end-to-end against HB 1709 and Rule 165.1.

Regulatory & Compliance FAQ

Does the HB 1709 'AI-Authored' disclosure need to appear on every printed and exported copy of the note, or only inside the EMR?

The disclosure obligation attaches to the entire designated record set, not solely the native EMR view. HB 1709, read in coordination with the TMB record adequacy rules under 22 TAC §165.1, requires an affirmative, page-visible marker that persists across printed charts, patient portal PDFs, faxed notes, C-CDA documents, and FHIR DocumentReference resources. A flag buried in hidden metadata or a transient system log does not satisfy the statute because a subsequent treating clinician reviewing a faxed copy would be misled about AI involvement. Merry AI writes the AI-involvement flag at the encounter resource level and renders a per-page 'AI-Authored' header on every downstream format at sign-off, so the marker travels with the record for the full statutory retention period. You can review the standard disclosure header template at the Scribing Template Directory before mapping it into your export engine.

What exactly must a physician attestation capture to satisfy the AI-care review requirement effective September 1, 2025?

Texas law authorizes practitioners to use AI for care-related purposes only if they review all medical records created by AI to ensure conformity with TMB standards. To create defensible evidence of that review, the attestation must be a structured object bound to the specific note version, not a generic checkbox in a system log. Merry AI records the physician's legible identity, an ISO-8601 date and timestamp, the immutable version identifier of the note being attested, and the attestation statement itself—that the physician reviewed, edited as necessary, and confirms the note reflects the actual clinical findings, assessment, and plan. Because TMB Rule 165.1 requires the legible identity of the observer and clear identification of any amendment author, this attestation object simultaneously discharges the review duty under the AI-care statute and the attribution duty under 165.1. The attestation is stored as immutable metadata attached to the note object so it exports alongside the clinical text.

TMB requires 7 years of retention from the last date of treatment, but Merry AI advertises a 6-year WORM window. How is that reconciled?

This is a genuine compliance nuance that Texas medical groups must configure deliberately. TMB Rule 165.1 requires a minimum of 7 years from the last date of treatment for adults, and for minors until age 21 or 7 years from last treatment, whichever is longer—and destruction is prohibited while any related civil, criminal, or administrative proceeding remains unresolved. A default 6-year WORM window is insufficient as a sole repository. Merry AI addresses this in two ways: the WORM retention period is configurable and Texas tenants are provisioned to match or exceed the 7-year floor, and the audit trail can be archived into a secondary long-term immutable repository that preserves the same write-once characteristics for the full statutory horizon, including litigation-hold extensions. During your workflow audit we confirm your group's retention counter is anchored to last-treatment-date rather than note-creation-date, which is the most common misconfiguration we find.

How does RAM session shredding interact with the requirement to preserve the AI draft and human-edit diff?

There is a deliberate architectural separation between the transient audio and inference layer and the durable record layer. During an encounter, raw audio and intermediate model context reside only in ephemeral memory; once the draft note is generated the audio buffer is destroyed and never written to persistent disk, consistent with HIPAA §164.312 technical safeguards and zero-retention design. What is preserved is the clinical text artifact chain: the base AI draft, each physician edit captured as a diff, the final signed version, and the attestation event. This distinction matters legally because the protected audio input is not part of the designated record set and its non-retention reduces breach surface, while the human-edit diff—which is the medico-legally relevant evidence of physician review under 165.1—is written once to the WORM trail and cannot be silently altered. In short, we shred the transient inference substrate and preserve the durable diff evidence.

In a malpractice or TMB enforcement proceeding, what can Merry AI actually produce to demonstrate compliance with the amendment and legibility rules?

The audit trail is designed to be consumable directly by counsel and regulators. On request, the group can export the complete version chain for any encounter: the original AI draft with its content intact and legible, every subsequent physician amendment shown as a tracked diff with the original text remaining readable, the date and legible identity of each editor, and the final attestation object referencing the signed version. This directly maps to the 165.1 requirement that any amendment, supplementation, change, or correction not made contemporaneously must clearly show time and date, indicate that it is an amendment, and leave the original text legible. Because the trail is write-once, it also establishes that the record was not retroactively altered after an adverse event—which is frequently the pivotal question in medico-legal discovery. For statutory code references and the underlying literature on medical record integrity standards, see the corpus at https://www.ncbi.nlm.nih.gov/pmc/.

Explore More Knowledge

Related Clinical Rules & Compliance Guides

View all clinical rules & compliance
Florida Statute 934.03 Compliance for Psychiatry
CMS & Regulatory Compliance

Florida Statute 934.03 Compliance for Psychiatry

Enforce all-party verbal consent before psychiatric audio capture under Fla. Stat. 934.03(2)(d). Book your audit at https://cal.com/merryai/demo.

Dr. Sarah Chen, MD•7 min read
Read guide
Illinois 720 ILCS 5/14-2: Internal Medicine Consent
CMS & Regulatory Compliance

Illinois 720 ILCS 5/14-2: Internal Medicine Consent

Document all-party consent before ambient capture in Illinois internal medicine visits. Book your audit at https://cal.com/merryai/demo.

Dr. Sarah Chen, MD•7 min read
Read guide
Texas HB 149 AI Disclosure for Family Medicine
CMS & Regulatory Compliance

Texas HB 149 AI Disclosure for Family Medicine

Timestamp HB 149 disclosures before capture and protect G2211 integrity. Book your audit at https://cal.com/merryai/demo.

Dr. Sarah Chen, MD•7 min read
Read guide