Skip to content
ChatGPT Health's Data Upload Raises Cybersecurity Concerns

ChatGPT Health's Data Upload Raises Cybersecurity Concerns

First seen 4 Oct 2026, 04:08 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 4, 2026 at 06:06 UTC
  • •ChatGPT Health encourages uploading sensitive medical data.
  • •OpenAI is not covered by HIPAA regulations, raising privacy concerns.
  • •Experts warn against sharing personal health information with non-compliant platforms.

ChatGPT Health, a new service from OpenAI, encourages users to upload sensitive medical records and connect health devices for personalized recommendations. Cybersecurity experts warn that this could expose users' health data to risks, as OpenAI is not classified as a healthcare provider and thus not subject to HIPAA regulations. Experts like Robert D’Ovidio emphasize the potential dangers of sharing such personal information with a non-HIPAA compliant entity. The service aims to consolidate health data but raises alarms about data privacy and security. Users are advised to be cautious before uploading their medical information online.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-03
ChatGPT Health launched
OpenAI introduced ChatGPT Health, prompting users to upload medical records and connect health devices.
Pogowasright
2026-10-03
Experts raise concerns
Cybersecurity experts, including Robert D’Ovidio, expressed concerns about data privacy due to lack of HIPAA coverage.
HuffPost

More articles in this cluster (2)

Following this threat?

Track ChatGPT Health in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 2

Common questions

What data does ChatGPT Health require?
ChatGPT Health encourages users to upload medical records, test results, and connect health devices.
Is ChatGPT Health subject to HIPAA?
No, OpenAI is not classified as a healthcare provider and is not covered by HIPAA regulations.
What should users consider before uploading data?
Users should weigh the risks of sharing sensitive health information with a platform not bound by privacy regulations.