3 ms·

“on site”? Medical records are in the cloud already.

by jahewson 4y ago

szundi 4y ago
What is “the cloud” - that’s the question
- gffrd 4y ago
  As taken from the cover page of the July, 2018 edition of AARP Weekly.
MisterBastahrd 4y ago
Yes. But they aren't being shared with third party AIs. Sharing personal medical information with OpenAI is a good way to get both your medical org to get ground into dust under a massive class action lawsuit, not to mention huge fines from the government.
- sebzim4500 4y ago
  Why do you think sharing the data with OpenAI is legally any different than storing it on AWS/Azure/GCP/Whatever else they are using?
  - unusualmonkey 4y ago
    GCP respects hipaa (google 'gcp hipaa baa'). Does OpenAPI?
    - sebzim4500 4y ago
      If they don't now they will in the future, if they think there is money to be made. Why wouldn't they? They could even charge a premium for the service.
  - dragonwriter 4y ago
    GCP/AWS/Azure have HIPAA programs in places, and will, consequently, sign HIPAA BAAs to legally perform as Business Associates of covered entities, fully responsible for handling PHI in accord with HIPAA rules (for certain of their services.) OpenAI itself does not seem to offer this for either its UI or API offerings. Microsoft, OTOH, does now offer a HIPAA BAA for its Azure OpenAI service, which includes ChatGPT (which means either they have a bespoke BAA with OpenAI that OpenAI doesn’t publicly offer, or they just are hosting their own ChatGPT instance, a privilege granted based on them being OpenAI’s main sponsor.)
- geysersam 4y ago
  That's ridiculous. Sure if you put it into ChatGPT today that's a problem. But if you have a deal with the company providing this service, and they are certified to follow the relevant regulations around sensitive data, why would that be different from any other cloud service? If this proves actually useful I guess such agreements could be arranged quite quickly.
  - porknubbins 4y ago
    Yes, almost all eDiscovery is managed by cloud vendors as is, and no one worries about waiver of privilege to these companies. The only concerns I’ve heard have been relates to foreign companies or governments not wanting their data to be hosted in a foreign country. But domestically it should be fine to have a chatgpt legal where data is discarded not saved.
  - chaxor 4y ago
    It's only been a few hours since Ring was hacked... a system run by a large company which assured everyone they were taking good care of their data. Surely the wonderful Amazon, with all of it's massive capital, could do the simple thing of encrypting incredibly sensitive and private user data? Right?
peterashford 4y ago
Yes, but their access is strictly controlled. There's a lot of regulation about this stuff
- geysersam 4y ago
  If the chatbot technology proves useful I'm sure OAI could make some agreement to not store sensitive data.
  - peterashford 4y ago
    yes - you could add regulation
serf 4y ago
right, but 'the cloud' isn't a singular monolithic database that everyone inputs data into for a result. most of the AI offerings on the table right now aren't too dissimilar from that idea in principle.
- Semioj 4y ago
  That's not entirely true. Google has a contract with the biggest hospital operator in the USA. Tx also to some certificate they aquires
chaxor 4y ago
Is and ought https://en.m.wikipedia.org/wiki/Is%E2%80%93ought_problem https://en.m.wikipedia.org/wiki/Is%E2%80%93ought_problem

“on site”? Medical records are in the cloud already.

szundi 4y ago

What is “the cloud” - that’s the question

gffrd 4y ago
As taken from the cover page of the July, 2018 edition of AARP Weekly.

MisterBastahrd 4y ago

Yes. But they aren't being shared with third party AIs. Sharing personal medical information with OpenAI is a good way to get both your medical org to get ground into dust under a massive class action lawsuit, not to mention huge fines from the government.

sebzim4500 4y ago
Why do you think sharing the data with OpenAI is legally any different than storing it on AWS/Azure/GCP/Whatever else they are using?
- unusualmonkey 4y ago
  GCP respects hipaa (google 'gcp hipaa baa'). Does OpenAPI?
  - sebzim4500 4y ago
    If they don't now they will in the future, if they think there is money to be made. Why wouldn't they? They could even charge a premium for the service.
- dragonwriter 4y ago
  GCP/AWS/Azure have HIPAA programs in places, and will, consequently, sign HIPAA BAAs to legally perform as Business Associates of covered entities, fully responsible for handling PHI in accord with HIPAA rules (for certain of their services.) OpenAI itself does not seem to offer this for either its UI or API offerings. Microsoft, OTOH, does now offer a HIPAA BAA for its Azure OpenAI service, which includes ChatGPT (which means either they have a bespoke BAA with OpenAI that OpenAI doesn’t publicly offer, or they just are hosting their own ChatGPT instance, a privilege granted based on them being OpenAI’s main sponsor.)
geysersam 4y ago
That's ridiculous. Sure if you put it into ChatGPT today that's a problem. But if you have a deal with the company providing this service, and they are certified to follow the relevant regulations around sensitive data, why would that be different from any other cloud service? If this proves actually useful I guess such agreements could be arranged quite quickly.
- porknubbins 4y ago
  Yes, almost all eDiscovery is managed by cloud vendors as is, and no one worries about waiver of privilege to these companies. The only concerns I’ve heard have been relates to foreign companies or governments not wanting their data to be hosted in a foreign country. But domestically it should be fine to have a chatgpt legal where data is discarded not saved.
- chaxor 4y ago
  It's only been a few hours since Ring was hacked... a system run by a large company which assured everyone they were taking good care of their data. Surely the wonderful Amazon, with all of it's massive capital, could do the simple thing of encrypting incredibly sensitive and private user data? Right?

peterashford 4y ago

Yes, but their access is strictly controlled. There's a lot of regulation about this stuff

geysersam 4y ago
If the chatbot technology proves useful I'm sure OAI could make some agreement to not store sensitive data.
- peterashford 4y ago
  yes - you could add regulation

serf 4y ago

right, but 'the cloud' isn't a singular monolithic database that everyone inputs data into for a result. most of the AI offerings on the table right now aren't too dissimilar from that idea in principle.

Semioj 4y ago
That's not entirely true. Google has a contract with the biggest hospital operator in the USA. Tx also to some certificate they aquires

chaxor 4y ago

Is and ought https://en.m.wikipedia.org/wiki/Is%E2%80%93ought_problem https://en.m.wikipedia.org/wiki/Is%E2%80%93ought_problem