HIPAA + AI: Navigating the Healthcare Compliance Challenges

Learn how healthcare providers can pursue AI-driven initiatives without compromising their compliance obligations under the HIPAA.

Course Description:

This webinar provides expert insight on the applicability of HIPAA rules and regulations to the use of AI tools by healthcare organizations. Healthcare providers are increasingly exploring AI applications for clinical decision support, administrative automation, and patient engagement. But there’s a lot of uncertainty, as there is no explicit regulatory guidance.

In this session, we’ll discuss how to identify protected health information (PHI), when an AI vendor may qualify as a business associate, and why a business associate agreement may be required. We’ll also outline permitted uses of PHI, the minimum necessary standard, Security Rule safeguards, and practical controls for common healthcare workflows such as clinical documentation and claims support.

The webinar is an operational review that includes steps for responding to possible disclosures and a checklist for reviewing AI tools before use.
 

Areas covered:

• AI in healthcare (current implementations and use cases)
• The compliance gap (reconciling emerging AI tech with existing privacy regulations)
• Framework for evaluating AI tools or systems
• Vendor evaluation and contractual protections
• Business Associate Agreements, Identity and Access Management, and encryption for AI tools
• Safe practices for PHI in AI systems
• Real-world cautionary tales on improper AI use in healthcare
• Managing Shadow AI at the workplace (in a healthcare setting)

Learning objectives:

• Identify PHI in AI inputs or outputs
• Assess vendor and business associate obligations, including when a BAA is needed
• Apply HIPAA privacy, minimum necessary, and security requirements to AI workflows
• Recognize practical safeguards and incident-response steps.

Why should you attend this webinar?

This session will approach AI and HIPAA compliance from complementary vantage points. While the HIPAA regulation’s core principles around privacy, security, and breach notification remain applicable, the specific technical and operational controls required when AI systems process protected health information remain subject to interpretation. This regulatory ambiguity creates genuine risk for healthcare organisations eager to implement AI systems.

The challenge extends beyond technical safeguards. Questions arise around data minimisation when training models, the scope of Business Associate Agreements with AI vendors, audit trail requirements for AI-assisted decisions, and patient consent when their health information contributes to algorithmic outputs.

This webinar will move beyond theoretical compliance frameworks to the practical realities of deploying AI tools within regulated healthcare environments. We’ll have time for audience questions, enabling attendees to raise specific scenarios relevant to their organisations.
 

Who will benefit:

• Compliance Officer
• Risk Managers
• Chief Information Officer
• Chief Technology Officer
• Head of Digital/ AI/ IT
• Healthcare Attorney
• Healthcare IT Manager
• Product Manager
• Product Strategist

About the instructor:

Rashmi T K is the founder of Scoleo Consulting Pvt Ltd, a consulting firm that specializes in end-to-end HIPAA compliance.

Rashmi is a HIPAA professional with two decades of experience in helping organizations protect patient information and meet regulatory requirements. She is killed in designing and delivering workforce training, conducting privacy and security audits, identifying compliance gaps, and implementing practical corrective actions. Rashmi has hand-on experience in developing policies and procedures, strengthening safeguards for protected health information, supporting risk assessments, and preparing teams for audits and incident response.

She is known for translating complex HIPAA requirements into clear guidance that supports consistent, effective compliance across organizations.
 

Refund policy:

Attendees may cancel up to two working days prior to the course start date, and the refund will be processed within two working days.

We will process/provide a refund if the webinar is canceled. Refunds will not be given to participants who do not show up for the webinar. On-demand recordings can be requested in exchange. The webinar may be canceled due to a lack of enrollment or unavoidable factors. Attendees will be notified 24 hours in advance if a cancellation occurs. Substitutions can happen at any time.

If you have any concerns about the content of the webinar and are not satisfied, please contact us at care@thecomplyguide.com

Alternatively, you can register here.