Episode
SMME #490 You May Have Already Made a HIPAA Mistake With AI — Here's How to Know
- Published
- Jun 29, 2026
- Duration seconds
- 847
- Processing state
not_requested
Actions
POST https://stenobird.com/v1/public/podcasts/spa-marketing-made-easy-spa-business-growth-530839/episodes/smme-490-you-may-have-already-made-a-hipaa-mistake-with-ai-here-s-how-to-know/transcription-requests
Idempotently request low-priority transcript generation for this episode.GET https://stenobird.com/podcast/spa-marketing-made-easy-spa-business-growth-530839/smme-490-you-may-have-already-made-a-hipaa-mistake-with-ai-here-s-how-to-know.md
Read the agent-friendly Markdown representation of this episode resource.
Summary
If you typed your patient's name and an appointment date into ChatGPT this week, you may have just created a HIPAA violation. Not because you were careless. Because nobody explained what actually counts as protected health information when AI is involved, and the standard consumer tools you're using every day were not built with your clinical practice in mind. AI compliance is not a solved problem. The law is moving slower than the technology. Your insurance carrier may not cover AI-related incidents. And right now, without a written policy, every person on your team is making the AI call individually, under the pressure of a busy day. This episode gives you the framework to get ahead of it before something goes wrong. In this episode, we discuss: • what HIPAA actually protects and the 18 identifiers most spa owners miss (including before-and-after photos) • the one-sentence prompt rule that keeps you out of PHI territory in any AI tool • why your BAA doesn't protect you the way you think it does • the three things your insurance carrier is starting to ask about AI at underwriting • the four internal documents every spa and medspa should have in place right now • where to start if this feels overwhelming (it's one paragraph, and Daniela gives you the exact language) Please note: Addo Aesthetics is not a law firm and nothing in this episode constitutes legal advice. For guidance specific to your practice, please consult a qualified healthcare attorney. Resources Mentioned Blog post: "Your Patients' Data, Your Business Information, and AI: What Every Spa and Medspa Owner Needs to Know About Governing AI in 2026" — https://www.addoaesthetics.com/blog/hipaa-ai-tools-medical-spa/ Frier Levitt AI, EMRs and Liability Webinar - frierlevitt.com/webinars/ai-emrs-liability-2026/…