JAMA Viewpoint Commentary: When Patients Share Their Entire Medical Records with AI—The Opportunities and Risks of ChatGPT Health
From the Democratization of Medical Knowledge to the Democratization of Medical Data
As large language models (LLMs) rapidly enter the healthcare sector, artificial intelligence is evolving beyond providing general health information and is beginning to interact directly with patients’ most sensitive personal health data.
A recent Viewpoint article in JAMA, “When Patients Share Everything With an AI Chatbot: Risks and Opportunities of Large Language Models,” examines the opportunities and challenges posed by a new generation of health-focused AI platforms such as ChatGPT Health. The authors argue that as patients gain the ability to synchronize their complete electronic health records (EHRs) with AI systems, healthcare is moving from the democratization of medical knowledge toward the democratization of medical data.
While this transformation has the potential to advance personalized medicine, it also raises unprecedented concerns regarding privacy, bias, and regulatory oversight.
What Is the Potential Value of AI Access to Complete Medical Records?
In theory, if AI systems can integrate patients’ medical histories, health monitoring data, wearable device information, and lifestyle records, they may provide several important benefits:
*More personalized health recommendations
*Earlier identification of rare diseases
*Enhanced epidemic and public health surveillance
*Greater utilization of Real-World Data (RWD)
*Accelerated clinical research and drug development
For researchers, large-scale and real-time integration of health data may become a critical foundation for the future of precision medicine.
Medical Records Are Not Entirely Objective
However, the authors highlight an important reality:
Electronic health records are not neutral repositories of facts.
In addition to objective laboratory and diagnostic findings, medical records often contain subjective assessments and interpretations made by healthcare professionals.
Examples include:
1. Behavioral descriptions of patients
2. Preliminary diagnostic impressions
3. Unconfirmed clinical assumptions
4. Potentially biased language or documentation
If AI systems learn directly from these records, they may reproduce—or even amplify—existing biases.
For example, a patient suffering from chronic pain may have previously been labeled as “drug-seeking.” Even if subsequent evaluations confirm a legitimate physiological cause for the pain, an AI system may still be influenced by earlier documentation and provide less appropriate recommendations.
In other words, AI systems may learn not only medical knowledge but also the biases embedded within healthcare systems.
AI May Reinforce Existing Health Disparities
The authors further note that healthcare systems already face significant health disparities.
Patients from different racial, ethnic, socioeconomic, and demographic backgrounds may experience unequal diagnosis and treatment.
If such disparities are reflected in EHR data and AI systems treat these records as objective truth, future applications may generate:
*Biased diagnoses
*Biased recommendations
*Biased risk assessments
As a result, existing healthcare inequities could become further entrenched.
Therefore, the risks associated with AI may stem not only from the model itself but also from the data used to train and inform it.
Can HIPAA Protect Patient Data Uploaded to AI Platforms?
Another key issue discussed in the article is data privacy.
Many patients assume that their medical information remains protected under the Health Insurance Portability and Accountability Act (HIPAA).
However, the authors point out that once patients voluntarily upload their medical records to a commercial AI platform, those data may no longer be fully protected under HIPAA.
The reason is that most AI platforms are not considered HIPAA-covered entities.
Consequently:
1. HIPAA restrictions on data use may not apply.
2. HIPAA security requirements may not apply.
3. HIPAA breach notification obligations may not apply.
Although AI companies may promise strong privacy protections, corporate privacy policies are fundamentally different from legally enforceable regulatory safeguards.
Lack of Transparency May Be the Greater Concern
According to the authors, the most significant challenge may not be data breaches, but rather the lack of transparency.
Currently, independent researchers have limited ability to evaluate:
*Whether AI systems exhibit bias against specific populations
*Whether safety incidents have occurred
*Whether inappropriate medical recommendations are being generated
*Whether AI is influencing patients’ healthcare-seeking behavior
Because these data remain under the control of platform developers, external validation is often impossible.
As a result, even when AI companies report strong performance, there may be insufficient independent evidence to verify such claims.
PI-Union Medical Science Commentary
Health-focused AI platforms such as ChatGPT Health represent an important milestone in the evolution of AI-powered healthcare. For the first time, patients may be able to provide AI systems with comprehensive health records for personalized analysis.
However, when AI begins reading entire medical records, it receives not only information about diseases and treatments but also decades of accumulated clinical assumptions, documentation biases, and systemic healthcare challenges.
For this reason, the future development of healthcare AI should not focus solely on technological innovation. Equal attention must be given to data governance, clinical evidence generation, regulatory oversight, and ongoing performance monitoring.
Only through robust safeguards can AI become a tool for improving healthcare outcomes rather than amplifying existing inequities and risks.
Reference: When Patients Share Everything With an AI Chatbot–Risks and Opportunities of Large Language Models
Reviewer: PI-Union Medical Science Ltd.
* E-mail: piunion@pi-union.com
* Official Website: https://pi-union.com/
* Facebook: www.facebook.com/piunion2020
* Youtube: www.youtube.com/@pi-union
* Instagram: www.instagram.com/piunion2020
* LINE: @654eukag