{"id":293773,"date":"2025-11-19T18:09:08","date_gmt":"2025-11-19T18:09:08","guid":{"rendered":"https:\/\/www.newsbeep.com\/ca\/293773\/"},"modified":"2025-11-19T18:09:08","modified_gmt":"2025-11-19T18:09:08","slug":"ai-bot-recorded-doctors-meeting-sent-patient-info-to-current-and-former-hospital-staff-watchdog-says","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ca\/293773\/","title":{"rendered":"AI bot recorded doctors\u2019 meeting, sent patient info to current and former hospital staff, watchdog says"},"content":{"rendered":"<p><a style=\"display:block\" href=\"https:\/\/www.theglobeandmail.com\/resizer\/v2\/SDEYDAOYP5EFNDW4XP2VBVYHQE.JPG?auth=bc036fc7fb81d8ff3e6d3b143696a58e05b00dee4d2238047899fc348a822aea&amp;width=600&amp;height=400&amp;quality=80&amp;smart=true\" aria-haspopup=\"true\" data-photo-viewer-index=\"0\" rel=\"nofollow noopener\" target=\"_blank\">Open this photo in gallery:<\/a><\/p>\n<p class=\"figcap-text\">The hospital notified the Privacy Commissioner of Ontario of the breach on Dec. 17, 2024, and also notified affected patients that their medical information had been compromised.Graham Hughes\/The Globe and Mail<\/p>\n<p class=\"c-article-body__text text-pr-5\">An AI bot listened in on a meeting of physicians at an Ontario hospital and sent details about the patients they discussed to dozens of current and former hospital employees, some of whom should not have had access to the information, according to the province\u2019s privacy watchdog.<\/p>\n<p class=\"c-article-body__text text-pr-5\">Details of the privacy breach are included in a <a href=\"https:\/\/www.ipc.on.ca\/en\/decisions\/informal-resolution-high-profile-breaches\/hospital-privacy-breach-involving-ai-scribes-tool\" target=\"_self\" rel=\"nofollow noopener\" title=\"https:\/\/www.ipc.on.ca\/en\/decisions\/informal-resolution-high-profile-breaches\/hospital-privacy-breach-involving-ai-scribes-tool\">letter<\/a> that the Information and Privacy Commissioner of Ontario\u2019s office sent to the hospital on Oct. 27. The letter was subsequently released publicly without the hospital\u2019s name.<\/p>\n<p class=\"c-article-body__text text-pr-5\">The incident is a cautionary tale for health care providers as transcription software is increasingly adopted and risks violating patient privacy, which is protected by law.<\/p>\n<p class=\"c-article-body__text mv-16 l-inset text-pb-8\" data-sophi-feature=\"interstitial\"><a href=\"https:\/\/www.theglobeandmail.com\/business\/article-ai-in-everyday-tech-brings-hidden-cybersecurity-risks\/\" rel=\"nofollow noopener\" target=\"_blank\">AI in everyday tech brings hidden cybersecurity risks<\/a><\/p>\n<p class=\"c-article-body__text text-pr-5\">According to the letter, on Sept. 23, 2024, a group of hospital physicians met for a virtual \u201crounds\u201d meeting, in which they discussed seven patients who had been admitted to the hospital and were receiving care. <\/p>\n<p class=\"c-article-body__text text-pr-5\">Many former employees of the hospital were still on the meeting invite list. One of those \u2013 a physician who had left the hospital in June, 2023 \u2013 had used his personal e-mail address (the letter does not name him but refers to him specifically as \u201che\u201d) and installed Otter.ai, an AI-powered transcription tool, on a personal device in September, 2024.<\/p>\n<p class=\"c-article-body__text text-pr-5\">On Sept. 23, an Otter.ai bot attended the meeting in his place and \u2013 unnoticed by the other participants \u2013 recorded the proceedings. Afterward, it sent a summary and a link to a transcript of the meeting to 65 people on the invite list, 12 of whom were no longer employed by the hospital.<\/p>\n<p class=\"c-article-body__text text-pr-5\">When the hospital discovered the breach, it directed staff to delete the e-mails and remove any such transcription tools from their devices, according to the letter. It also asked the physician who had installed Otter.ai to remove all hospital materials from his personal devices, which he said he did.<\/p>\n<p class=\"c-article-body__text text-pr-5\">On Dec. 17, 2024, the hospital notified the Privacy Commissioner of the breach. It also notified five of the seven patients that their medical information had been compromised. (The other two had died.)<\/p>\n<p class=\"c-article-body__text mv-16 l-inset text-pb-8\" data-sophi-feature=\"interstitial\"><a href=\"https:\/\/www.theglobeandmail.com\/business\/article-ai-sparks-debate-as-canadian-professionals-weigh-risks-and-rewards\/\" rel=\"nofollow noopener\" target=\"_blank\">AI sparks debate as Canadian professionals weigh risks and rewards<\/a><\/p>\n<p class=\"c-article-body__text text-pr-5\">The hospital updated its <a href=\"https:\/\/www.theglobeandmail.com\/topics\/artificial-intelligence\/\" target=\"_blank\" rel=\"noreferrer nofollow noopener\" title=\"https:\/\/www.theglobeandmail.com\/topics\/artificial-intelligence\/\">artificial intelligence<\/a> policies and changed its firewalls to block access to Otter.ai and other transcription tools.<\/p>\n<p class=\"c-article-body__text text-pr-5\">The Privacy Commissioner recommended that the hospital make a formal request to Otter.ai to delete the patient data and take other internal steps to ensure such a breach would not happen again.<\/p>\n<p class=\"c-article-body__text text-pr-5\">Otter.ai did not respond to a request for comment from The Globe and Mail.<\/p>\n<p class=\"c-article-body__text text-pr-5\">Teresa Scassa, the Canada Research Chair in information law and policy at the University of Ottawa, said the case exposed how vulnerable institutions are to breaches as the use of AI tools becomes more widespread.<\/p>\n<p class=\"c-article-body__text text-pr-5\">Even if an institution comes up with policies around AI use and signs contracts with software vendors to respect privacy, individual employees may still create vulnerabilities through the use of personal devices, she said.<\/p>\n<p class=\"c-article-body__text text-pr-5\">Prof. Scassa said the rise of agentic AI tools \u2013 which can act independently \u2013 poses an even greater threat. In this case, she said, it wasn\u2019t clear whether the physician even realized the Otter.ai bot had attended the meeting on his behalf and recorded it \u2013 or whether it had done so for other meetings as well. <\/p>\n<p class=\"c-article-body__text text-pr-5\">\u201cThat\u2019s a whole level of autonomy and independence that we haven\u2019t been prepared for but need to start thinking about,\u201d she said.<\/p>\n","protected":false},"excerpt":{"rendered":"Open this photo in gallery: The hospital notified the Privacy Commissioner of Ontario of the breach on Dec.&hellip;\n","protected":false},"author":2,"featured_media":293774,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[62,901,276,277,888,902,879,877,903,49,48,876,895,896,891,878,875,46,549,295,894,887,914,880,881,893,889,890,884,904,885,909,910,912,907,911,905,908,882,898,899,714,897,906,865,61,900,892,886,883,913],"class_list":["post-293773","post","type-post","status-publish","format-standard","has-post-thumbnail","category-artificial-intelligence","tag-ai","tag-alberta","tag-artificial-intelligence","tag-artificialintelligence","tag-arts-news","tag-bc","tag-breaking-news","tag-breaking-news-video","tag-british-columbia","tag-ca","tag-canada","tag-canada-news","tag-canada-sports","tag-canada-sports-news","tag-canada-trafficcanada-weather","tag-canadian-breaking-news","tag-canadian-news","tag-economy","tag-education","tag-environment","tag-federal-government","tag-foreign-news","tag-globe-and-mail","tag-globe-and-mail-breaking-news","tag-globe-and-mail-canada-news","tag-government","tag-life-news","tag-lifestyle","tag-local-news","tag-manitoba","tag-national-news","tag-new-brunswick","tag-newfoundland-and-labrador","tag-northwest-territories","tag-nova-scotia","tag-nunavut","tag-ontario","tag-pei","tag-photos","tag-political-news","tag-political-opinion","tag-politics","tag-politics-news","tag-quebec","tag-sports-news","tag-technology","tag-travel","tag-trudeau","tag-us-news","tag-world-news","tag-yukon"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/293773","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/comments?post=293773"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/293773\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media\/293774"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media?parent=293773"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/categories?post=293773"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/tags?post=293773"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}