HIPAA law holds everyone who has access to the data accountable. A single violation can be punished by up to 50k in fines and prison time. If multiple records were accessed improperly you can see absolutely outrageous fines and this has happened! It’s perhaps one of the few areas in government that is taken seriously and there’s a lot of tech jobs in security in healthcare because of it.

Carbon health specializes in urgent but not emergency care. It’s relatively low acuity. I’ve seen gpt4 use cases like this assessed by doctors (read a recent paper on this actually) and when it’s employed in this kinda of fashion most doctors are in favor of it. They have to review it anyways, this doesn’t feel particularly different to them than reviewing what a nurse or scribe was writing up for them (or they were writing themselves) and often the LLM does a better job putting it all into plain English so it’s both patient and doctor readable.