Knowledge · phone
AI Phone Assistant for the Doctor's Office: Relief at the Front Desk, Designed with Legal Compliance in Mind
How an AI phone assistant relieves the practice team during peak hours, books appointments directly into the calendar and takes down prescription requests – and what Art. 9 GDPR and § 203 StGB mean for use in the practice.
Shortly after eight it rings without pause: appointment requests, prescription orders, follow-up questions about findings – and in between, the patients standing in person at the front desk. In exactly this hour the medical assistants are needed in two places at once, at the reception and on the phone. Whoever can't get through ends up with the busy signal, and experience shows that very few leave a message on the answering machine. The phone thus turns from a service channel into a daily stress test.
What really falls by the wayside at the practice phone
The damage is rarely the lost patient – many practices are at capacity anyway. It lies in the strain on the team and in the availability that patients expect and that a practice must guarantee. Every interruption at the front desk costs concentration, every unanswered call generates a second attempt – often precisely when things are already busiest. The peak repeats itself every morning, and it can hardly be absorbed with more staff alone.
What the Phone Agent takes over in the practice
An AI phone assistant answers incoming calls immediately – even several in parallel – and handles them according to your specifications:
- Book appointments directly: As an appointment agent it assigns free appointments according to your rules, takes into account the concern and insurance status and creates the entry directly in the calendar – around the clock, not just as a note.
- Prescription and sick-note extensions, referrals taken down in a structured way and handed over to the team in a bundled form.
- Standard questions answered from your stored Knowledge Base: opening hours, directions, parking, cover arrangements, documents to bring.
- Forwarding according to rules: urgent cases during consultation hours directly to a medical assistant.
What it deliberately does not do: give medical advice, assess complaints or make diagnoses. It is the organizational relief on the phone, not the professional one.
Health data: the legal framework a practice needs
There was long a misunderstanding here in the public debate – so to be precise:
- Special category of data. Health data are especially protected under Art. 9 GDPR. Their processing requires a legal basis under Art. 9 para. 2 (in the treatment context usually lit. h or consent) and correspondingly higher protective measures.
- Processing on behalf. A data processing agreement (DPA) under Art. 28 GDPR must exist with the service provider – ideally in the extended version customary for the healthcare sector.
- Confidentiality obligation. Decisive is § 203 para. 3 StGB: since 2017, "other contributing persons" – that is, external service providers – may expressly be involved if they are placed under an obligation of secrecy. Only this provision makes the use of an external phone service in the practice permissible at all.
- Place of processing. What matters is not "in Germany" but processing within the EU without unsafe third-country transfer, plus data minimization – only what the concern requires is recorded.
These points are not a formality but the precondition. Clarify the specific contract and the legal basis with your data protection officer – a reputable provider presents a data processing agreement (DPA), a confidentiality obligation and EU processing on its own initiative.
Emergencies remain the doctor's responsibility
An acute emergency never belongs in a waiting loop or a call log. That is why the assistant is set up to recognize emergency phrasings, refer unmistakably to the emergency number 112 and the medical on-call service 116117 and, during consultation hours, hand over to a human immediately. You define this escalation rule – the technology merely executes it reliably.
How to test it in your practice
With webRichtung phone you can check this with low risk: set up a Phone Agent with its own phone number, redirect the practice number there when busy or outside phone hours, and after a week look in the call log to see how many concerns would otherwise have been lost to the busy signal. How call answering works in principle is described in automatic call answering; what unavailability concretely costs is shown in What missed calls really cost.
FAQ
May a doctor's office use an external AI phone service at all – despite the duty of confidentiality?
Yes. § 203 para. 3 StGB has expressly permitted since 2017 the involvement of other contributing persons such as external service providers, as long as they are placed under an obligation of secrecy. This becomes legally sound through a data processing agreement under Art. 28 GDPR (ideally in the version customary for the healthcare sector) plus a confidentiality obligation. You should review the specific contract with your data protection officer.
This involves health data – what does the GDPR specifically require here?
Health data are special categories of personal data under Art. 9 GDPR and are especially protected. Their processing requires a legal basis under Art. 9 para. 2 (in the treatment context usually lit. h or consent), higher technical and organizational measures, data minimization and processing within the EU or without unsafe third-country transfer. What is decisive is therefore not a particular country but the complete GDPR framework.
Does the AI assistant book appointments itself or does it only take down requests?
It can book directly into the calendar. As an appointment agent it assigns free appointments according to your rules, takes into account insurance status and concern, and creates the entry directly in the calendar. What is confirmed fully automatically and what is double-checked by the team is decided by the practice.
What happens in a medical emergency on the phone?
Emergencies do not belong in a waiting loop. The assistant recognizes emergency phrasings according to your rules, refers unmistakably to the emergency number 112 and the medical on-call service 116117 and, during consultation hours, hands over to a human immediately. It does not give medical advice and makes no diagnoses.
Does this replace the medical assistants?
No. It relieves the team of the constant ringing during peak hours so that the medical assistants can attend to the patients at the counter. No call ends up with the busy signal anymore, and the team works through recorded concerns in a prepared way instead of being constantly interrupted.