Law proposed to ban AI companies from selling your health data
People commonly disclose all kinds of personal data to AI chatbots, including the highly inadvisable practice of asking them for health advice. In addition to the grave medical dangers of obtaining in
People commonly disclose all kinds of personal data to AI chatbots, including the highly inadvisable practice of asking them for health advice. In add
Read Full Story at 9to5Mac →Why This Matters
The proposal to ban AI companies from selling health data marks a critical inflection point in the regulation of digital health privacy—a field long plagued by insufficient guardrails. Unlike traditional medical records, interactions with AI tools often fall into legal gray areas, leaving users vulnerable to exploitation without clear consent or oversight. This shift could redefine how sensitive health information is treated in the digital economy.
Background Context
Health data has become a lucrative commodity for tech firms, with AI models trained on vast troves of personal information—often collected under vague privacy policies. Regulatory efforts have historically lagged, with HIPAA protections applying narrowly to healthcare providers, leaving gaps for AI-driven platforms. Meanwhile, studies show that users frequently overestimate the confidentiality of AI interactions, assuming protections similar to those in medical ethics.
What Happens Next
If enacted, the law could trigger immediate legal challenges from companies arguing that de-identifying health data exempts them from restrictions. Enforcement would likely require new oversight bodies, raising questions about scalability and the technical feasibility of policing AI training datasets. The debate may also push Congress to clarify broader federal privacy standards, reshaping the entire tech industry’s approach to personal data.
Bigger Picture
This reflects a growing global push to classify health data as a distinct category deserving stricter protections, paralleling moves in the EU and Canada. It also underscores a widening gap between public expectations of privacy and corporate data practices, which AI’s opaque algorithms have only exacerbated. The outcome could set precedents for how all sensitive personal data—from biometrics to mental health queries—is safeguarded in the AI era.
