Healthcare staff find AI-built tools handling patient data that IT never approved
RESEARCHredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
According to Paubox, nearly nine in ten healthcare leaders say security or compliance staff always or usually review AI-written code touching patient data before release. However, seven in ten have still discovered an AI-built tool handling such data without IT or security awareness. The article argues that code review only covers submitted code, leaving scripts, automations and integrations built with AI coding assistants outside governance.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Inventory scripts, automations and integrations that staff have built with AI coding assistants, especially those touching patient data.
- Extend governance beyond formal code review to cover tools created outside IT and security oversight.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Help Net Security