Putting patient data into ChatGPT is a HIPAA question, not a policy preference. What a BAA changes, what de identification really requires, and the safer path.

AI vendor questions worth asking before you sign: does it train on your inputs, is your data isolated, where does it live, and who at the vendor can see it.