· ai-devtools
Healthcare can't govern the AI tools it hasn't found yet
Staff are constructing scripts, automations, and integrations using AI coding assistants, yet a significant blind spot remains in healthcare technology oversight.
According to Paubox, a substantial majority—nearly nine out of ten—of leaders in the healthcare sector state that their security or compliance personnel routinely or consistently examine any code generated by AI that interacts with patient information before deployment. Despite this practice, the situation is complicated by the fact that seven out of ten respondents have discovered an AI-generated tool processing sensitive data without the knowledge of the IT or security departments. The inherent limitation here is that a code review process is strictly confined to what an individual chooses to submit for inspection. This discussion, titled "Healthcare can't govern the AI tools it hasn't found yet," was originally published on Help Net Security.
Why it matters
This highlights a critical gap in current development practices where oversight only covers submitted code. Developers must be aware that unsubmitted or emergent AI-generated tooling poses significant, unreviewed security risks in healthcare environments.
