Why doctors correcting AI output may be unpaid data annotation work

A complimentary, sharable link to this article is available in the first comment.

I am chary of clinical AI, especially AI scribes. Patient conversations are arguably one of the most scarce, and therefore most valuable, datasets in AI. I think clinicians might be going into this a bit rosey-eyed, thinking HIPAA and the GDPR have shored up privacy protections. Clearly, they haven't.

Theoretically, it could be possible to be HIPAA and GDPR compliant, and still share de-identified data with 3rd parties which can then be re-identified if they've got (or can generate) the metadata. De-anonymization with AI is remarkably easy — I've done it myself.

What can you do? I'd recommend you read the policies of clinical AI tools very thoroughly. Look for words like "improve services" or share with "related companies". Check out the consumer protection reports on every tool you use. There's a saying in tech that if the software is free (or cheap), you're likely the product. With AI, you may be an unwitting data generator/AI trainer, and your patients are the training data.