Artificial intelligence (AI) is bringing efficiencies and convenience to healthcare, but HIPAA expectations remain constant. As healthcare organizations manage the integration of AI, they “must remain cognizant of the potential privacy risks and violations associated with AI platforms’ use of [protected health information],” state two of PYA’s thought leaders, Senior Manager Miriam Murray and Manager Erin Walker.
In May, Murray and Walker published an article, “Privacy Under Pressure: Challenges in the Age of AI,” in the Health Care Compliance Association’s Compliance Today magazine. They discuss AI in healthcare in depth, including regulatory requirements and safeguarding strategies, such as
- Develop an inventory
- Conduct risk assessments
- Limit access
- Implement system safeguards
- Conduct regular training
- Continually monitor systems
- Establish response plans
- Tighten agreements
- Understand third-party practices
The authors write:
“While the ability to process vast amounts of information drives innovation, it simultaneously heightens privacy risks, making it imperative for healthcare organizations and their [business associates] to implement adaptive privacy and security programs designed to anticipate and mitigate AI-specific vulnerabilities. While in this new frontier, organizations must continue to ensure that AI tools do not circumvent established privacy protections, such as the ‘minimum necessary’ standard for data use and disclosure….”
Murray and Walker urge healthcare organizations to establish AI governance committees to develop transparent guidelines for the use of AI, which helps maintain trust with patients and regulators. Governance could include
- Risk assessment policies
- Technical safeguards
- Third-party vendor management policies
- Training and education
- Reporting procedures
- Auditing and monitoring procedures
The full article is available to HCCA members, or download a PDF of the article here.
SCCE & HCCA is a member-based association with more than 19,000 members worldwide. The organization promotes high standards in compliance and ethics programs through knowledge-rich educational opportunities.
Learn about PYA’s Healthcare Technology and Cybersecurity services and our Revenue Integrity services.
With decades of experience, PYA consultants advise clients on healthcare AI and data security, regulatory compliance, and other matters related to healthcare operations and strategy.
