This article explains how healthcare organizations can get a HIPAA-compliant Business Associate Agreement with OpenAI to process protected health information via the API. Email baa@openai.com with your company details and use case; most requests are approved within a few business days. If your request is denied, you can seek reconsideration through your sales contact.

• Emailing baa@openai.com with company details and use case gets most BAA requests approved within a few business days.
• Denied requests can only be reconsidered if you already have an OpenAI sales rep or account director to escalate through.
• Nearly all API services are covered under the BAA (exceptions listed in the platform docs), and no enterprise agreement is required to get one.

OpenAI’s ChatGPT Health adds a HIPAA-compliant wrapper over its regular models but delivers no new technology and raises doubts about data use and fine-tuning. It feels like another marketing stunt as Big Tech probes the healthcare market without real change.

• ChatGPT Health is just a HIPAA-compliant wrapper on existing models—no new underlying technology despite the marketing push.
• OpenAI's promise not to "train" on patient data leaves open whether they still fine-tune on it behind closed doors, echoing 23andMe's fine-print bait-and-switch on DNA data.
• This fits a pattern: AI Consult was human-curated ChatGPT, HealthBench was just a dataset, and GPT-5's health story was retracted amid lawsuits—all flash, no substance.
• The real goal is likely market-testing healthcare economics to undercut purpose-built HIPAA-compliant competitors, using hype to gauge demand before committing.

Claude for Healthcare is now available, providing HIPAA-compliant tools for healthcare providers and patients to improve medical processes such as prior authorizations and claims appeals. Additionally, Claude for Life Sciences has expanded its capabilities to better support clinical trial operations and regulatory submissions. These advancements aim to streamline healthcare tasks and enhance the quality of patient care.

• Claude for Healthcare launches with HIPAA-compliant tools plus connectors to CMS Coverage Database, ICD-10, and the NPI Registry for faster data retrieval and report generation
• New Agent Skills target prior authorization reviews and interoperability, letting organizations customize workflows to speed approvals and support claims appeals
• Opus 4.5's improved medical/scientific performance extends Claude's use into ambient scribing, clinical decision support, and personal health data summarization for individual users
• Claude for Life Sciences adds integrations with Medidata and ClinicalTrials.gov to support clinical trial patient recruitment, protocol design, and access to historical trial data

ChatGPT Health may be a marketing strategy rather than a genuine innovation, potentially allowing tech giants to dominate the healthcare sector. The article questions OpenAI's claims of enhanced security and adherence to HIPAA standards, drawing parallels to past controversies with data privacy in the tech industry.

• OpenAI's claims of HIPAA compliance and enhanced security for ChatGPT Health may be more marketing spin than substantive privacy protection
• The move could let a tech giant leverage user trust to gain a dominant foothold in the healthcare data market
• The situation echoes past tech industry controversies over data privacy, raising skepticism about the sincerity of OpenAI's promises