Opinion – AI’s privacy tipping point: Why America needs a HIPAA for chatbots

Opinion – AI’s privacy tipping point: Why America needs a HIPAA for chatbots

Opinion – AI’s privacy tipping point: Why America needs a HIPAA for chatbots

https://www.aol.com/articles/opinion-ai-privacy-tipping-point-160000282.html

Publish Date: 2026-02-24 13:10:00

Source Domain: www.aol.com

A federal judge just confirmed it: Your AI conversations are not private.

On Feb. 10, the Southern District of New York ruled that a defendant’s AI chatbot conversations are not protected by attorney-client privilege, even after he shared them with his lawyers. He assumed the conversation was confidential. But the chatbot’s privacy policy permits disclosure to government authorities.

That ruling should alarm every American who has ever typed something personal into a chatbot.

OpenAI’s research confirms that’s most of us — nearly three-quarters of all ChatGPT conversations are personal, not work related. Forty million people ask ChatGPT health questions every day, checking symptoms at two in the morning, asking about medications and diagnoses, navigating insurance claims. Seven in ten of those health conversations happen outside clinical hours.

No diary never had a privacy policy. Confessionals never had terms of service. But that’s what these conversations are governed by, if they are governed by anything at all.

My mother is a cancer survivor. If she had typed her symptoms into a chatbot before her diagnosis, that conversation would have no privilege, no HIPAA protection, and no barrier between the prompt and a subpoena. AI does not need to be sentient to be dangerous; it just needs to be in the room when you say something you thought was private.

Every generation gets a technology that outruns the instinct for privacy. In 1888, Kodak put a camera in the hands of amateurs and created the crisis that gave us American privacy law. A century later, Steve Jobs put a camera, a microphone, and a GPS tracker in more than 3 billion pockets. Both times, the technology moved first and the law caught up.

But once, the law got there early. In 1996, Congress passed HIPAA when most medical records were still on paper. The law looked like a solution searching for a problem. Then the federal government pushed healthcare to go digital. Every diagnosis,…

Source