AI receptionist rules for clinics in India: what it can and can't say to patients

Why rules written for doctors reach a clinic's phone line

India has no law written for AI receptionists. What it has is a set of professional rules for doctors, and one of them speaks directly to AI. The Telemedicine Practice Guidelines were issued on 25 March 2020, early in the Covid-19 pandemic, to let doctors consult and prescribe remotely. They came from the Board of Governors in supersession of the Medical Council of India, meaning the board that had taken over the MCI's powers, and were prepared with NITI Aayog.

In a section on technology platforms, the guidelines say AI and machine-learning platforms "are not allowed to counsel the patients or prescribe any medicines to a patient" (Telemedicine Practice Guidelines, para 5.4). Only a registered medical practitioner (RMP), meaning a doctor on a medical register, may counsel or prescribe, and the doctor must communicate with the patient directly. The same paragraph leaves room for AI behind the scenes: it can "assist and support" a doctor with evaluation, diagnosis or management, as long as the final advice comes from the doctor.

That settles two questions people often ask. AI cannot give medical advice to a patient in India, and AI cannot prescribe medicine, because both are reserved for a registered doctor. Prescribing by telemedicine also carries the same professional accountability as an in-person visit (para 3.7.4).

Where the front desk ends: what the agent can and cannot say

If the agent must never counsel or prescribe, the practical question is where the front desk's job ends. The line runs between running the clinic and advising the patient. The guidelines define counselling as "specific advice given to patients" about their condition (para 3.7.3), and prescribing is the doctor's call (para 3.7.4). Admin and logistics, which depend on facts the clinic controls, sit on the safe side.

The table applies that line to the questions a clinic front desk hears most often. Where a row says the agent can speak, it is passing on facts such as slots, fees and written instructions. Where it must not, the answer would depend on the patient's own condition, and the agent should give one fixed reply and offer a doctor or staff member instead.

Medicine questions need the most care, because the ban on prescribing goes further than not writing prescriptions. Telling a caller to take a painkiller, or to keep taking a tablet, is a medicine instruction, even when it sounds like ordinary helpfulness. General wellness tips carry the same risk: the guidelines' own examples of counselling include food restrictions and do's and don'ts for a patient on anticancer drugs (para 3.7.3). A diet tip given in reply to a patient's description of their condition is counselling.

Handling a medical emergency on the line

The emergency check comes first because a caller in danger needs help, not a booking. Even for doctors consulting remotely, the guidelines say that in all cases of emergency the patient "MUST be advised for an in-person interaction" with a doctor at the earliest (para 4.5). A doctor may also advise first aid in that moment. An agent is not a doctor, so it should not try to assess the emergency or give first-aid advice. It should tell the caller to get emergency help at once, then hand over to a person without asking more questions first.

112 is India's single emergency number, and in many states 108 is the ambulance number. Many clinics also have their own emergency line, so the agent's script should say plainly which number to use. The instruction belongs at the top of the agent's script, and it should be tested with the phrases callers actually use, in every language the clinic serves.

Data protection law does not stand in the way. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), no consent is needed to respond to a medical emergency that threatens someone's life or immediately threatens their health (DPDP Act, section 7(f)). Passing the caller's details to staff or emergency services in that moment is covered. The flow shows where the emergency check sits in a full call, right after the agent introduces itself.

Telling patients they are speaking to an AI

Indian law does not clearly require a clinic's voice agent to say it is an AI, but the country's ethical guidance for AI in healthcare expects it. The Indian Council of Medical Research (ICMR) published Ethical Guidelines for Application of Artificial Intelligence in Biomedical Research and Healthcare in 2023. They are ethical guidance, not a statute, written for clinicians, institutions, ethics committees and AI developers, and they name clinic management, including appointment scheduling, as a use of AI.

The guidelines set ten principles, starting with autonomy, safety and risk minimisation, trustworthiness, data privacy, and accountability and liability. Under autonomy, "patients should be fully informed about the use of AI technologies" and "must have complete autonomy to choose or reject AI technologies" (ICMR guidelines, para 1.1). The same paragraph backs a "Human in The Loop" model, and para 1.2 says unsupervised models carry more risk.

For a voice agent, the practical reading is an opening line that names the clinic, says the caller is speaking to an AI assistant and offers a person. Something like "Hello, you've reached [Clinic]. I'm an AI assistant. I can book or change appointments, or connect you to the team" does all three. A human then stays responsible for anything clinical. The AI disclosure and recording-notice scripts have versions in several Indian languages. The guide to AI voice labelling rules in India explains why the IT Rules' labelling duty for synthetic audio may or may not reach phone calls.

Outbound calls: reminders yes, promotion no

The 2002 code also shapes how a clinic may use an agent that calls out. Soliciting patients "directly or indirectly", by a doctor or by an institution, is unethical (para 6.1.1). NMC's Guidelines on Ethical Advertising and Public Communication of 6 October 2026 go further for AI: they treat AI-generated or AI-assisted promotional communication as advertising (NMC public notice, para 3.2).

A clinic using an AI agent to call out should therefore keep to reminders and follow-ups for existing patients, such as confirming tomorrow's appointment or a review the doctor asked for. Cold calls offering a health check or a discount on a procedure look like solicitation by an institution, whatever voice delivers them.

Health claims carry a separate risk under a different law. The Drugs and Magic Remedies (Objectionable Advertisements) Act, 1954 restricts advertisements suggesting a drug can treat or cure listed diseases (section 3). Its definition of advertisement covers "any announcement made orally" (1954 Act, section 2(a)). In our reading that can reach a spoken call script, though we found no case applying it to automated calls, so keep cure claims out of every script.

Patient call data under the DPDP Act

Every call the agent handles creates a record, and that brings in India's data protection law. Call recordings and transcripts that identify a patient are digital personal data under the DPDP Act. The Act has no separate "sensitive" category, so health details get the same protections as other personal data. The EU's GDPR, by contrast, treats health data as a special category with extra conditions.

The main duties, including notice, security, breach reporting, erasure and patients' rights, start on 13 May 2027, under the Act's commencement notification (G.S.R. 843(E)) and the matching DPDP Rules, 2025 (rule 1(4)). Until that date the Information Technology Act, 2000 still applies. Its 2011 rules list a person's health condition and medical records as sensitive personal data, and a company that negligently fails to protect such data must compensate the person harmed (section 43A). The DPDP Act deletes section 43A on 13 May 2027 (section 44(2)(a)). Either way, a clinic needs to decide where recordings and transcripts are kept, who can hear them and when they are deleted. The guide to the DPDP Act for voice AI sets out each duty, and how long to keep call recordings in India covers retention.

Children's data has its own rule. For children, the Act normally needs verifiable consent from a parent, but clinical establishments, mental health establishments and healthcare professionals are exempt (rule 12 and the Fourth Schedule). The exemption covers only health services to the child "to the extent necessary for the protection of her health".

Clinics that connect to the Ayushman Bharat Digital Mission (ABDM), the government's digital health programme, also have to follow its Health Data Management Policy, which is built around the patient's consent before health records are shared. We could not load the ABDM site to confirm the current version on 24 October 2026, so check it there before relying on it.

Key dates