What PHI Can You Enter Into ChatGPT?

A plain-language guide for healthcare staff — with examples for every workflow.

Physicians, nurses, administrators, billing staff, and anyone working in a healthcare setting who uses AI tools in their daily workflow and wants to know exactly where the HIPAA line is.

Most healthcare workers are using AI tools without clear guidance on what patient information is safe to enter. The answer is not obvious — it depends on which version of the tool you are using, whether your organization has a BAA, and whether the specific information constitutes PHI.

A practical guide covering: the difference between consumer and enterprise AI tools and which can receive PHI, a table of all 18 HIPAA Safe Harbor identifiers with AI-specific risk ratings, practical workflow examples showing what to enter and what not to enter for common healthcare tasks, and a three-question test staff can apply before every AI interaction. Plus what to do if PHI is accidentally entered.