Does Zero Data Retention Satisfy HIPAA, and What a BAA Covers That ZDR Does Not
Zero Data Retention alone doesn't satisfy HIPAA's full legal requirements for vendors.
Priya Venkatasubramanian
Section
HIPAA & PHI for AI
2 stories in HIPAA & PHI for AI.
What Counts as PHI in an LLM Prompt and What Must Be Redacted Before a Model Provider Sees It
Organizations must redact patient data from LLM prompts before sending them to external providers.
Marcus Delgado-Wirth