OpenAI HIPAA BAA: What It Actually Covers (And What Leaves PHI Exposed)
OpenAI now offers a Business Associate Agreement. For healthcare organizations and health-tech teams racing to deploy AI, that single sentence felt like permission to move fast. But here’s the harder truth: a HIPAA BAA is a legal document, not a technical control. And the gap between what OpenAI’s BAA promises and what it protects is where patient data quietly slips through.