The Problem
AI Agents Create PHI Exposure Risks That Did Not Exist in Traditional Software
When an AI agent is given access to a data system, it often receives access to far more PHI than any individual task requires. LLM-powered tools ingest context windows full of patient data. Agentic pipelines pass PHI between models, tools, and APIs in ways that are difficult to audit or control after the fact.
Models Memorize and Leak PHI
AI models and agents that ingest PHI can inadvertently memorize, surface, or leak patient information in unrelated outputs.
Pipelines Multiply Exposure Points
Agentic pipelines often pass PHI between multiple AI systems and third-party APIs, each of which represents a new exposure point.
System-Level Access is Too Broad
Traditional access control operates at the system level. AI agents that are granted database access can read any record, not just the records relevant to the task.