CLEARED Intelligence Brief — Issue 024

Everybody Has to Disclose Now, Just Not to Her

September 7, 2026

What happened this week in AI and health practice governance.

What it means for your practice.

What to do about it.

Signal 1

Texas Put Up a Form for Reporting AI in Health Care, and the Rule Behind It Turns on One Word

Texas has had an artificial intelligence law on the books since January 1 of this year, and most of what it forbids applies to government agencies rather than to anybody in private practice. One requirement is different. If an AI system is used in relation to health care services or treatment, the provider of that service has to give the person receiving it, or their representative, a clear disclosure in plain language, no later than the date the service is first provided. Emergencies aside, the telling comes first. The law also told the attorney general to put up an online place for the public to complain about it, and that deadline was September 1. The page is now live. It is called Consumer AI Rights, it sits inside the consumer protection section, it explains the law in ordinary language, and at the bottom there is a button that says File An AI Complaint. Only the attorney general can act on what comes in. Now the definition, because it decides who this is about. Health care services means services related to human health, or to the diagnosis, prevention or treatment of a human disease or impairment, provided by an individual licensed, registered or certified under applicable state or federal law.

Sources: Texas Office of the Attorney General, Consumer AI Rights  |  Norton Rose Fulbright on the Texas act

What this means for you

Skip past the enforcement machinery, because it is not the interesting part, and read the definition instead. That one word, certified, is carrying the whole thing. A board certification from a private organization is not a certification under state or federal law, so a coach holding that and nothing else sits outside this rule as it is written. A coach who is also a registered dietitian, a nurse, a licensed massage therapist, sits inside it, and the duty follows the license rather than the room she is sitting in. So two coaches can do identical work on the same Tuesday afternoon and owe different things, and neither of them has been told which one she is. Issue 023 argued that nobody had written a rule for a practice of one. Texas is the exception, and it is worth watching how the exception behaves, because the rule has been sitting there quietly since January and the only thing that changed this week is that there is now somewhere to report it. States copy each other, and Texas is a large state to copy. But hold the legal question and the useful question apart. Whether or not this rule reaches you, what it asks for takes one sentence at the start of a session. She hears, in plain words, before you begin, what the tool is and what it can see. A coach who already says that has nothing to do here. A coach who does not has just been handed a preview of what somebody is eventually going to ask her for.

Signal 2

Oura Filed to Go Public and Told Investors the Data Is the Moat, Not the Ring

On September 3, 2026 Oura filed its S-1 with the Securities and Exchange Commission, the public version of a confidential filing it made in May, and set out to list on the Nasdaq under the ticker OURA. The company was founded in Finland in 2013 and its ring tracks more than fifty metrics, among them heart rate, sleep, movement, stress, fertility windows and metabolic health. The financial picture is the part that will get reported everywhere. Revenue rose from 698 million dollars in the nine months to June 30 last year to 1.2 billion dollars in the same period this year, a rise of 74 percent, split between 974 million in hardware and 240 million in memberships, on gross margins of 55 percent and net income of 61 million. There are five million paid members across 56 markets, and Oura says more than 94 percent of ring activations have historically converted to a paid membership. The part worth reading twice sits elsewhere. Members wear the ring about 23 hours a day, and the filing states that Oura has accumulated nearly 42 billion hours of longitudinal biometric data, a dataset it describes as difficult for competitors to replicate and as the thing that makes its insights improve as more people wear it. It calls the arrangement a flywheel. On who those members are the filing is unusually specific. Roughly 72 percent are women, about 27 percent are over 45, about 37 percent report a household income below 100 thousand dollars, and more than half report at least one chronic condition. The feature list has moved well past step counting into nutritional guidance, conception planning and fertility insight, blood testing and analysis, and therapy and medication monitoring. More than 1,200 partners connect through its API, among them Dexcom and Natural Cycles, and the ring now reaches people through health plans, employer benefits and Medicare Advantage, including a collaboration with Cigna and an Essence Healthcare program that hands members the device at no cost.

Sources: Oura Form S-1, filed with the SEC September 3, 2026  |  Fierce Healthcare, September 4, 2026

What this means for you

An S-1 is the one document where a company has to stop marketing. Everything else Oura publishes is written for the person wearing the ring. This one is written for people deciding whether to buy the company, it has to survive a securities lawyer, and so it says what the business actually is. The business is the data. Forty-two billion hours of it, described in the filing as difficult for competitors to replicate and as improving every time another body is added. The ring is how the data arrives. Issue 020 covered an FTC complaint that was built out of timestamps rather than testimony, and made the point that a website writes a record about your clients whether or not anyone chose to send it. This is the consented version of that, and it is bigger. She did choose. She chose it 23 hours a day for a year. Now read the description of who the members are, because it is your client list. Roughly 72 percent women. More than half reporting at least one chronic condition. Fertility windows, metabolic health, nutritional guidance, medication monitoring. That is not a fitness tracker demographic. That is the woman who arrives in your room with a readiness score she cannot interpret and a theory about why she is tired. None of this is a scandal and none of it is illegal. It is a company telling the truth to the one audience that can require it, and she is not in that audience.

The Pattern

Two documents in one week, pointed in opposite directions. Texas told practitioners they have to say out loud when a machine is involved in somebody's care, and opened a page where the public can report the ones who do not. Oura told the Securities and Exchange Commission that 42 billion hours of its members' bodies is the asset that makes the company worth buying. One of those is a duty to speak. The other is a description of value. Neither of them is addressed to the woman in the middle. Issue 021 covered a poll finding one adult in five keeps something back from a doctor out of shame or mistrust, and argued the withheld question goes somewhere else instead. Here is where it went. It went onto a finger, 23 hours a day, into a dataset its owner describes as difficult for competitors to replicate. She agreed to that in a screen she scrolled past. And the one person in the whole arrangement who is going to be required, in writing, in at least one state, to explain what a machine is doing in the room, is you.

One Thing You Can Do This Week

Go and read the complaint form. It sits in the Texas attorney general's consumer protection section under Consumer AI Rights, it is open to anybody, and it takes ten minutes whether or not you practice in Texas. Read it from the other side of the desk. It is written for somebody who believes something went wrong and wants a person to look at it, and it shows you what she would be asked to describe. Who provided the service. What the tool was. Whether anyone told her before it was used. That last question is the entire rule, and reading it as a question is faster than reading the statute. Then notice what the form does not ask her. It does not ask whether the tool was accurate. It does not ask who else can see what it collected, or what the company does with it afterwards. Nobody has built anywhere to report those. So the form earns its ten minutes twice. Once as the plainest available description of the only duty anybody has written down for a practitioner, which is telling her first. And once as a map of everything still missing, which is most of what your client would want reported if she knew the page existed.

Last updated: September 7, 2026

WHERE TO START: CLEARED

The practitioner’s briefing on AI governance for solo and small health practices. The free Brief and the free Eight-Element Self-Audit, in one place.

Go to CLEARED →

Missed an issue? Read every prior brief in the archive →

← All Issues