Weill Cornell patient data entered into AI tools without authorization
Weill Cornell Medicine disclosed that patient health information was used in AI and machine learning tools without authorization during a radiology research study. The institution discovered the incident on September 6 and opened an investigation into how patient data from its imaging unit was handled.
Why this matters: Patients at a hospital imaging center did not agree to have their health data fed into AI tools. They did not know it happened. Health information is about as personal as data gets — it can affect insurance, employment, and relationships. Research exceptions in health privacy law exist for a reason, but they are not a blank check. When a hospital uses patient data to train or test AI outside its authorized purpose, the people whose scans and records were used deserve a straight answer about what was taken, where it went, and what comes next.
Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals · General readers · AI governance · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.