HIPAA is a United States standard for protecting healthcare data in AI systems. It imposes strict security and privacy controls when systems handle healthcare information or support healthcare-related decisions. section 11.2.3 section 11.1.3
Practical controls associated with HIPAA include:
- Encrypt sensitive data and communications. section 11.2.3
- Restrict access through role-based permissions. section 11.2.3
- Maintain audit logs for access and system activity. section 11.2.3
Healthcare AI deployment
Before deploying an AI system that handles healthcare data or informs healthcare-related decisions, teams can assess encryption, role-based access, and audit logging as baseline security and privacy controls. section 11.2.3 section 11.1.3
