Data Security

AI technology and healthcare data privacy concept

Data Security

AI-Generated Clinical Notes and PHI: The Privacy Risk Healthcare Leaders Are Ignoring

By: Christopher Perry, CEO — PrettyFluid Technologies, Inc. In the race to adopt AI-powered documentation tools, healthcare organizations are moving fast. Clinicians are dictating notes, AI transcribes them, and the EHR gets updated in seconds. The efficiency gains are real. So is the exposure. What most organizations have yet to internalize is that AI-generated clinical […]

Data Security

The HIPAA Security Rule Update Is Final. Here Is What Covered Entities Must Do Now.

After more than a decade of operating under a Security Rule last substantively updated in 2013, US healthcare organizations now face a new compliance baseline. The Department of Health and Human Services finalized updates to the HIPAA Security Rule in 2025, converting several previously “addressable” implementation specifications into mandatory requirements. The most operationally significant changes: […]

Data Security

The EU AI Act’s First Enforcement Deadlines Are Here. Is Your Product Ready?

The European Union’s AI Act entered into force in August 2024. In February 2025, its first enforceable provisions took effect: a ban on AI systems categorized as unacceptable risk. These include social scoring systems, real-time biometric surveillance in public spaces, AI that exploits psychological vulnerabilities, and systems that manipulate behavior through subliminal techniques. By the […]

Data Security

Why We Built on Zero-Knowledge Architecture (And Why It’s No Longer Optional)

By: Jeremy Diebert, Chief Architect — PrettyFluid Technologies When we designed the core infrastructure for Zentinel, we made a decision that added significant engineering complexity: we built the system so that we would never be able to read the data stored in it. Every record that enters Zentinel is encrypted on the client side — […]

Data Security

Twenty States. Twenty Privacy Laws. One Compliance Problem.

Twenty States. Twenty Privacy Laws. One Compliance Problem. As of mid-2025, more than twenty US states have enacted comprehensive consumer privacy laws. Virginia, Colorado, Connecticut, Utah, Texas, Florida, Montana, Oregon, Delaware, Iowa, Indiana, Tennessee, and others have joined California in establishing enforceable rights around data access, correction, deletion, and opt-out from sale and targeted advertising. […]

Data Security

DOGE, Federal Systems, and the Data Access Question Nobody Wanted to Ask

DOGE, Federal Systems, and the Data Access Question Nobody Wanted to Ask In early 2025, the Department of Government Efficiency gained access to a range of federal information systems at agencies including the Social Security Administration, the Department of Education, the Treasury Department, and others. The access was granted rapidly, without the standard security vetting […]

Archives

Categories