Insights

Writing on AI, compliance, and regulated industries

Specific answers to the questions healthcare and legal leaders actually ask me, not general AI hype.

What staff can and cannot paste into AI tools under HIPAA

A practical rule for what belongs in a consumer AI tool, what requires a BAA, and what to do about staff already using AI on their phones.

Confidentiality duties, privilege-waiver risk, court disclosure orders, and the sanctions risk from fabricated citations, in plain terms.

How to scope a pilot narrowly, triage risk on two axes, name a human checkpoint, and walk into the compliance conversation prepared.