Your AI doctor doesn’t have to follow the same privacy rules as your real one

AI health applications from major tech firms are growing quickly, but experts warn they largely operate outside HIPAA, leaving sensitive medical data governed by company policies rather than enforceable protections; despite touted security features (e.g., encryption, isolation, MFA) and claims of being “HIPAA-ready,” risks like data leakage, hallucinations, prompt injection, and pervasive healthcare breaches persist, creating accountability and trust gaps even as cost and access pressures drive wider adoption.