HIPAA

HIPAA (Health Insurance Portability and Accountability Act) is the US federal law governing protected health information (PHI). HIPAA-compliant AI deployments use BAA-covered model endpoints (AWS Bedrock, Azure OpenAI, Google Cloud Healthcare API), keep PHI in controlled storage, and produce audit logs of every model call. Off-the-shelf consumer ChatGPT or Gemini is not HIPAA-compliant.