HIPAA, AI, and Privacy
Plain-language operational guidance for evaluating privacy, vendor relationships, access, and data handling when a US healthcare organization considers AI.
12 practical guides01HIPAA and AI in Healthcare: Questions to Ask Before a Pilot02Does an AI Vendor Need a Business Associate Agreement?03A Clinic Checklist for Reviewing AI Data Retention04Protected Health Information and AI: A Practical Overview05Why Prompt-Based Anonymization Is Not a Privacy Guarantee06AI Access Controls for Small Healthcare Practices07How to Map Patient Data Flows Through an AI Tool08A Practical AI Risk Register for Clinics09What to Do When Patient Data May Have Reached an AI Tool10How Clinics Can Set Rules for Staff AI Accounts11Documenting an AI Privacy Review: A Clinic Template12Reassessing AI Privacy When a Vendor Changes Its Terms