Can my office put patient or client information into ChatGPT?
Not into the free, Plus or Business versions: OpenAI signs a business associate agreement only for sales-managed ChatGPT Enterprise and Edu accounts and for its API, so patient details typed into the everyday plans fall outside HIPAA.
Is ChatGPT HIPAA compliant?
ChatGPT itself is not compliant or non-compliant; your use of it is. OpenAI's help center says only sales-managed ChatGPT Enterprise and Edu accounts can get a business associate agreement for ChatGPT, and that it does not offer one for ChatGPT Business. Without a signed BAA, protected health information does not belong in it.
Does ChatGPT store my data?
Yes. On the individual plans, OpenAI may use your conversations to train its models unless you turn off "Improve the model for everyone" in Settings, Data controls. On ChatGPT Business, Enterprise, Edu and the API, OpenAI says it does not train on your inputs or outputs by default. Not training on it is not the same as not keeping it.
Source: OpenAI: how your data is used to improve model performance
Is an AI medical scribe HIPAA compliant?
Only if the vendor signs a BAA with your practice and you can read how long it keeps recordings and transcripts. Ask for both in writing before anyone records a visit.
What if a staff member already pasted patient details into ChatGPT?
Treat it as a possible privacy incident, not a secret. Write down what was entered and when, delete the conversation, and bring it to whoever handles HIPAA for your office, because they decide whether it has to be reported.
Can some AI work stay inside the office?
Yes. Open models can run on a computer you own, with nothing sent to an outside company. JKCA runs its own drafting and checking this way on its own hardware. It suits summarizing and sorting, not anything that needs to be right about a patient without a person reading it.