Re:GPT-4
by sebzim4500 on Tuesday March 14, 2023 @07:09PM
(#35160671)
Why do you think sharing the data with OpenAI is legally any different than storing it on AWS/Azure/GCP/Whatever else they are using?
[ Parent
| on HN ]
Re:GPT-4
by unusualmonkey on Tuesday March 14, 2023 @07:40PM
(#35161184)
GCP respects hipaa (google 'gcp hipaa baa'). Does OpenAPI?
Re:GPT-4
by sebzim4500 on Tuesday March 14, 2023 @09:28PM
(#35162454)
If they don't now they will in the future, if they think there is money to be made. Why wouldn't they? They could even charge a premium for the service.
Re:GPT-4
by dragonwriter on Tuesday March 14, 2023 @08:05PM
(#35161555)
GCP/AWS/Azure have HIPAA programs in places, and will, consequently, sign HIPAA BAAs to legally perform as Business Associates of covered entities, fully responsible for handling PHI in accord with HIPAA rules (for certain of their services.) OpenAI itself does not seem to offer this for either its UI or API offerings.
Microsoft, OTOH, does now offer a HIPAA BAA for its Azure OpenAI service, which includes ChatGPT (which means either they have a bespoke BAA with OpenAI that OpenAI doesn’t publicly offer, or they just are hosting their own ChatGPT instance, a privilege granted based on them being OpenAI’s main sponsor.)