Privacy, Security and AI in the Workplace
12/1/2025
Recent polls and news articles indicate that a significant portion of the workforce is using artificial intelligence (AI) tools for work purposes. Absent organizational regulation, training and oversight, employees will use these tools as they see fit. This puts healthcare organizations at risk of breach of both protected health information and confidential business information, among other risks. Many AI tools use “generative” AI, a type of artificial intelligence designed to produce new material—such as text, images, audio, and other output—based on patterns the model has “learned” from large collections of data. The model is continuously hungry for more and more data, that is, “input.” Because generative AI models are typically built on large, shared model architecture, data provided in the form of “prompts” may be stored somewhere the organization does not control, may be processed along data provided by outsiders, is often used to “train” and “improve” the model, may be handled by multiple vendors and subprocessors, and may be retained in unexpected or unknown ways. Resultingly, a healthcare organization’s data may be at significant risk when workforce members use generative AI tools, especially without governance and oversight.
Lani M. Dornfeld
CHPC, Member
Healthcare Law
973.403.3136 · 973.618.5536 Fax
ldornfeld@bracheichler.com
