Can a Clinic or Dentist in Spain Use an AI Receptionist?

Short answer: yes, for the routine work: booking, moving and cancelling appointments, opening hours, directions, prices you publish, and taking a message for the team. The agent should not give clinical advice or triage symptoms. Health data is a special category under the GDPR, and your practice remains responsible for what the agent collects, why, and where it goes. Start with a narrow job, ask your data-protection adviser what you need to put in place, and read the transcripts.

What can the agent do for a clinic?

• Book, move and cancel appointments in your calendar through Cal.com, or in your own system through its API, and offer the freed slot to the next patient.
• Answer routine questions from the material you load: opening hours, location, parking, what to bring, which insurers you work with, and the prices you publish.
• Take a message for the practice team with the caller's name and number, and keep a transcript you can read.
• Send reminders on WhatsApp, with approved templates, to patients who have agreed to receive them.
• Hand over to a person when you tell it to (transfer works on Plivo and Telnyx numbers, not on an imported Twilio number).

Patients in Barcelona, Madrid or on the coast often ring in English, Catalan or Spanish. Voice agents speak all three, and Basque and Galician too. See the Spain page.

What should it never do?

• Diagnose, advise or triage. If a caller describes symptoms, the agent says it cannot advise, offers an appointment and, where you decide so, a transfer. Write a line in the greeting that anyone facing an emergency should ring 112 and not wait for a callback.
• Collect more than it needs. A booking needs a name, a number, a type of visit and a time. It does not need the history of the problem. Tell the agent not to ask.
• Promise results or prices not in your material. It answers from what you gave it and says it will ask a person for the rest.

What does Spanish and EU law say about health data?

As read on the Spanish Data Protection Agency (AEPD) website on 25 October 2026: health data belongs to the special categories in article 9 of the GDPR, whose processing is prohibited unless an exception applies; the AEPD lists exceptions that include healthcare provision, and the clinical record is also governed by the patient-autonomy law, Ley 41/2002. Whether a supplier is a processor for your practice, and what contract you need under article 28 of the GDPR, depends on the facts, and the AEPD has treated clinics as acting in different roles in different situations. This is a question for your data-protection adviser, not for a blog post. We cannot give you a certificate and using the product does not by itself satisfy any legal duty.

What we can tell you is how the product behaves, so your adviser can assess it: we support region deployments for enterprise customers; calls are processed partly in other countries (speech recognition in the EU, the voice and the language model in the US) under transfer safeguards; recording is off by default and a per-agent switch; every call has a transcript and an outcome. The privacy policy gives the detail.

How do I start safely?

1. Choose one job. Out-of-hours calls only, or appointment changes only.
2. Write the greeting. Say who you are, that it is an automated assistant, and, if you record, that the call is recorded and why.
3. Write the limits. No advice, no symptoms collected, emergencies to 112, everything else to the team.
4. Test with the staff in the languages your patients use.
5. Review transcripts weekly and decide how long you keep them.

When is this not the right choice?

If most of your calls are clinical questions, follow-ups after treatment or conversations with anxious patients, a person should pick up and the agent should cover only the quiet hours. If you cannot yet say what data the practice is allowed to collect by phone, settle that before you switch on a campaign. For dental practices, see AI receptionists for dental practices, and for the sector view healthcare and the AI receptionist page.