Why 90% of healthcare organizations are unknowingly exposing patient data through AI tools, the three architectural gaps that create the exposure, and the detection infrastructure that closes them.
A 600-bed hospital found that clinical staff had been pasting discharge summaries into a general-purpose AI assistant for eight months. Nobody knew because the policy had no enforcement layer.
Clinical staff using ChatGPT, Gemini, or Copilot on patient data. Invisible to policy alone — it requires network-layer monitoring of API calls to commercial AI endpoints.
Developer-built pipelines call external LLM APIs. Without lineage tracking, nobody knows which pipelines touch PHI sources or which external APIs are uncovered by BAA.
BAAs are signed for one product tier; teams integrate through a different tier. 2024–2025 vendor policy changes silently invalidate prior coverage.
Monitoring outbound API calls to known commercial AI endpoints, with rules for what is allowed from which network segments. Policy without detection is theater.
Tracking which pipelines read from PHI-containing sources and which external APIs they call. Pipelines that touch PHI and call uncovered APIs need to be blocked or BAA'd.
Verifying the actual product tier in use against the BAA's scope. PHI detection in inputs to AI pipelines catches sensitive data before it crosses the compliance boundary.
Network-layer detection makes commercial AI API usage visible to security in real time.
Clinical or operational staff using unapproved general-purpose AI tools — ChatGPT, Gemini, Copilot — that almost certainly touch PHI. Policy alone does not detect it; only network-layer monitoring of outbound API calls does.
Detection and escalation ($1.47M), lost business ($1.38M), post-breach response ($1.2M), plus notification and legal — and roughly $398 per exposed PHI record.
Not necessarily. Vendor BAAs typically cover specific product tiers and processing activities. Teams that integrate through a different tier or after a 2024–2025 vendor policy change are operating outside BAA scope without knowing it.
