EU AI Act for Clinics: AI Phone Receptionists and Triage

Is an AI receptionist for a clinic high-risk under the EU AI Act?

No, not for front-desk work. The AI Act does not make healthcare a high-risk sector as a whole. It lists specific uses in Annex III, and the healthcare-related ones are narrow: emergency triage, emergency call handling and dispatch, and public authorities deciding who is eligible for public healthcare services.

A phone agent that books a check-up, moves a cleaning appointment or tells a caller where to park does none of those things. What it does is talk to people, so it falls under Article 50: patients must be told they are talking to an AI.

Which clinic phone tasks are high-risk, and which are not?

Point 5(a) is often misread. It covers AI "used by public authorities or on behalf of public authorities to evaluate the eligibility of natural persons for essential public assistance benefits and services, including healthcare services". A private clinic booking appointments is not evaluating anyone's eligibility for public benefits.

Where does triage start, and why does it matter?

Annex III point 5(d) lists AI systems "intended to evaluate and classify emergency calls by natural persons or to be used to dispatch, or to establish priority in the dispatching of, emergency first response services ... as well as of emergency healthcare patient triage systems". If your phone agent is meant to judge how urgent a patient is and decide who is seen first in emergency care, it is in this category.

A receptionist agent can be built so that it never makes that judgment. The clinic writes a short list of red-flag phrases with its clinicians, such as chest pain or trouble breathing. When a caller says one, the agent follows a fixed script: it tells the caller to call the emergency number and transfers the call to staff. It does not weigh symptoms, score urgency or decide who waits. That is a handover, not triage. Point 5(d) also covers AI that evaluates and classifies emergency calls, so ask your counsel to check that part as well. Whether your exact design stays on the right side is their call, and the script itself is a question for your medical lead.

Could a clinic AI phone agent be a medical device?

Only if it does medical work. Software with a medical purpose, such as giving diagnosis or treatment advice, may qualify as a medical device under the EU Medical Device Regulation. That is a separate route into the AI Act: under Article 6(1), an AI system that is a product covered by the listed EU product laws, or a safety component of one, and that needs a third-party conformity assessment, is high-risk. After the 2026 amendment, those duties apply from 2 August 2028.

A receptionist that books, informs and hands over does not give medical advice. Keep it that way in the script: "I can't give medical advice, but I can book you with a doctor or put you through to the nurse."

What must a clinic AI agent tell patients?

Article 50(1) requires AI systems that talk to people to be designed so that people know they are dealing with an AI, unless that is obvious. Article 50(5) says the information must be clear and given at the latest at the first interaction. On the phone, that is the greeting.

A clear opening: "Good morning, you've reached the AI assistant of [Clinic]. I can book, move or cancel your appointment, or put you through to reception." Use the same line for reminder calls, and answer honestly whenever a patient asks if they are speaking to a person. Breaching this duty can be fined up to EUR 15 million or 3% of worldwide annual turnover; for SMEs the lower of the two applies (Article 99).

What are the key dates for clinics?

The ban on inferring emotions at the workplace (Article 5(1)(f)) applies to clinics as employers too: no AI that reads your receptionists' or nurses' emotions from their voice, unless it is for medical or safety reasons.

What about patients' health data?

The AI Act sits on top of GDPR; it does not replace it. Patients mention symptoms, medication and conditions on the phone, and health data is a special category under GDPR. So the data side matters as much as the AI side: who can open the recordings and transcripts, how long you keep them, and what the agent writes into your practice system. Your DPO sets those rules. Our GDPR guide for AI voice agents covers the questions to ask.

How should a clinic set up its AI receptionist?

How does an AI phone agent from AInora fit?

AInora builds AI receptionists for clinics and practices: booking, rescheduling, reminders and answers to everyday questions. How it lines up with the points above:

• The agent says it is an AI assistant in its first sentence, in the words you choose.
• It hands the call to your team when the patient asks, or when your rules say so, including your red-flag script.
• Every call gets a transcript and a summary your staff can review.
• You decide what it may and may not say. No medical advice means no medical advice.
• It speaks many languages, so patients can book in the language they are most comfortable with.

Your counsel and your medical lead decide the rules; the agent follows them. To hear one with your own services and opening hours, fill out the short form and we build a demo receptionist from your website. More on the use case: AI answering service for medical practices.