Industries / Healthcare
AI for small healthcare practices
PHI never goes into consumer AI tools. Period. With that line drawn, there's still real value in administrative workflows.
Reviewed by Level Up Automate.This is general information, not legal advice. Confirm specifics with your own counsel.
TL;DR
Any tool touching PHI must have a signed BAA — full stop.
Administrative wins (scheduling comms, policy drafting, training materials) are safe and significant.
Clinical decision support requires a much higher bar of validation and is rarely a fit for small practices today.
Where AI is safe and useful
Administrative use cases that don't touch PHI.
- Drafting patient education materials (no individuals named).
- Policy and procedure documents.
- Staff training materials.
- Practice marketing content and FAQs.
Where to be cautious
Even with a BAA, additional discipline is required.
- Note-taking AI in patient encounters — only with BAA-covered vendors and patient notice.
- Prior-authorization automation — vendors must support HIPAA workflows end-to-end.
- Patient-facing chatbots — clinical advice has higher liability stakes.
Common questions
Plain-English answers
Can we use ChatGPT or Claude to summarize a chart?
Not the consumer versions of either. Both OpenAI (ChatGPT) and Anthropic (Claude) offer HIPAA-eligible business tiers, but they require specific contracts including a signed Business Associate Agreement. Default: no PHI in any AI tool — ChatGPT, Claude, Copilot, or otherwise — until your contract specifically supports it.
Related reading
Next step
Want a hand getting this right?
A 30-minute conversation often saves weeks of guessing. We'll talk through your team, your data, and what to do first — no slide deck required.