The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
OpenAI's new ChatGPT Health service encourages users to upload sensitive medical records and health data for personalized recommendations. Cybersecurity experts warn this poses significant privacy and data security risks, as the platform operates outside HIPAA protections and could be vulnerable to breaches or misuse of health information.[AI generated]
Why's our monitor labelling this an incident or hazard?
The event involves the use of an AI system (ChatGPT Health) that processes sensitive health data. Although no actual harm (such as a data breach or misuse) has occurred yet, the article presents credible expert warnings about the plausible risks of privacy violations, data breaches, and misuse of health information due to the AI system's operation outside of HIPAA protections. This fits the definition of an AI Hazard, as the development and use of this AI system could plausibly lead to significant harm related to privacy and data security. The article does not describe a realized incident, nor is it primarily about a response or update, so it is not an AI Incident or Complementary Information. It is also not a Beneficial Use since the AI system itself is the source of potential harm rather than solely a countermeasure to external harm.[AI generated]