CYBERSECURITYTRACKER
Permanent story citation

Athenahealth's Claude AI Connection Raises HIPAA Questions

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12294

As cited

Copy frozen at (site build).

regulatory

Athenahealth's Claude AI Connection Raises HIPAA Questions

Athenahealth has integrated Anthropic's Claude artificial intelligence (AI) chatbot to allow patients to use the AI service to interpret their electronic health records (EHRs). The arrangement transmits sensitive health information from EHR systems to a consumer AI service, creating uncertainty about compliance with Health Insurance Portability and Accountability Act (HIPAA) and other privacy regulations.

Why it matters: Healthcare organizations and patients using Athenahealth need clarity on whether this AI integration meets HIPAA requirements for protecting patient data when it leaves the EHR system and enters third-party consumer AI services.

First seen by Cybersecurity Tracker

Source attribution

Glossary