Will Patients’ Data Ever Be Safe if We Let GPTs Into Healthcare? | Huntress

This report examines the use of custom GPTs in healthcare, outlining potential benefits for administration and care delivery alongside significant risks to patient data privacy and regulatory compliance. It emphasizes that public ChatGPT is not HIPAA-compliant, advises private/on-prem LLM deployments, and recommends controls such as data anonymization, transparency, staff training, and regular audits, while noting evolving regulations like the EU AI Act. The piece concludes by advocating for managed EDR solutions tailored to healthcare to strengthen security and support safe AI adoption.