Healthcare5 min read
Is ChatGPT HIPAA compliant?
No. Consumer ChatGPT is not HIPAA compliant, because OpenAI will not sign a Business Associate Agreement for it. Entering protected health information into it is a disclosure to a party with no BAA — impermissible under the Privacy Rule, regardless of how careful the staff member was.Read the answer →Healthcare4 min readIs there an AI that is HIPAA compliant?
No model is HIPAA compliant on its own — compliance is a property of the deployment, not the weights. An AI system becomes HIPAA-appropriate when PHI is only ever processed under a BAA or inside your own network, with encryption, access control, audit logging and a current risk analysis behind it.Read the answer →Legal5 min readCan lawyers use ChatGPT?
Yes — but not with client-identifying information in a consumer tool. ABA Formal Opinion 512 warns that self-learning cloud AI risks improper disclosure by its very nature, and Florida Bar Opinion 24-1 permits generative AI only with real confidentiality safeguards. Competence, supervision and reasonable fees apply to the output either way.Read the answer →Legal6 min readOn-premise vs cloud AI for law firms: which fits?
Cloud legal AI is faster to start and cheaper for a small firm; on-premise is the only option where client data never leaves the firm. Choose cloud for public-source research, on-premise for anything indexed over your own matters and work product.Read the answer →Accounting5 min readWhich AI is best for accountants — without the cloud?
For work touching client data, the best AI for an accounting firm is a private open-weight model on hardware the firm owns, indexed over its own engagement files. A smarter cloud model you cannot legally feed the actual workpapers is the weaker tool.Read the answer →Banks5 min readCan banks use AI under GLBA?
Yes. GLBA does not prohibit AI; it makes you responsible for safeguarding customer information wherever it goes. With generative AI left outside the agencies' 2026 model-risk guidance, examiners read your controls — so the defensible position is inference inside your own perimeter, with a validation file to match.Read the answer →Every answer here belongs to a practice: Law firms · Healthcare · Financial & Accounting · Community Banks.
Told when there’s a new answer
We publish these as firms ask them. One email per new answer, nothing else, and you can leave from any of them.