Secretaries are compelled by the same privacy and disclosure laws as doctors - AI notetaking apps may or may not be (it'll take examination of the product on a case by case basis) and the public is, at this point, used to AI companies blatantly lying about privacy, confidentiality, training sources, reuse of conversations and pricing - the good faith is gone as a default and in a setting like a HCP that is a terrible place to start from.

▲

vel0city 15 hours ago | parent [-]

> Secretaries are compelled by the same privacy and disclosure laws as doctors

What HIPAA-like law is there for secretaries?

▲

munk-a 15 hours ago | parent | next [-]

Anyone handling PII needs to be trained in HIPAA compliance and authorized in the same manner as the doctor themselves. There is no explicitly separate HIPAA like law though if your handling of the information is limited to a particular subset of the information (e.g. knowing that a patient has an appointment with a renal specialist and knowing their address information but not knowing the topic of the appointment) then there may be a relaxation of the requirements - but patients are also blabby so usually they're treated like anyone else.

When it comes to AI note-taking or other AI services that interact with PII the exact same requirements and data handling standards need to be adhered to as if the tool was an employee with proper certified training (or, in the case of a tool, review and certification) and appropriate contracts and disclosures.

I can't really provide a more specific answer because the topic is so broad and while I'm familiar with the process from one end I am not an expert on the process in general.

▲

vel0city 14 hours ago | parent [-]

> Anyone handling PII needs to be trained in HIPAA compliance

Anyone working at a covered entity needs HIPAA training. A random secretary working for some other random company unrelated to healthcare and isn't potentially a covered entity doesn't need it.

I originally took your comment as secretaries in general, but re-reading makes it more clear to me you're specifically talking about secretaries in a healthcare setting. In which case yes, they would be bound to the same HIPAA rules I agree.

	▲	munk-a 13 hours ago \| parent [-]
		Sorry about that confusion! Yeah, I was going off the example in the linked article which is specifically for note-taking during a physio appointment.

▲

15 hours ago | parent | prev [-]

[deleted]