Only on an account covered by a signed business associate agreement. The regulator certifies no product at all, so the question is never whether an assistant is approved in the abstract. It is whether your specific plan is covered, and most consumer plans are not. Everything else follows from that one fact.
The regulator does not certify products
This is the part that makes vendor badges hard to read. The Department of Health and Human Services states directly that it and its Office for Civil Rights "do not certify any persons or products" against the rules. There is no government seal to look for, which means a marketing page saying a tool meets the standard is the vendor's own assertion rather than an external finding.
The practical replacement for a badge is a contract. The rules put the obligation on you and let you extend it to a vendor in writing, which is what a business associate agreement is.
Who the rules actually bind
A covered entity is a health plan, a health care clearinghouse, or a health care provider who transmits health information electronically for a covered transaction, per the definition at 45 CFR 160.103. The electronic-transaction condition matters more than clinicians expect: HHS lists doctors, psychologists, dentists, and pharmacies as providers, but only if they transmit information electronically in a standard transaction such as an electronic claim.
A vendor becomes a business associate when it creates, receives, maintains, or transmits protected health information for a regulated function on your behalf. That status follows what the vendor does, not what the contract is called. If an assistant receives identifying patient information from you, the arrangement needs an agreement, and if no agreement exists then the disclosure is the problem rather than the paperwork.
Which ChatGPT plans can be covered?
OpenAI publishes this by plan, and the answer is genuinely uneven. The distinction that catches people is that a paid plan is not the same as a covered plan.
| Plan | Business associate agreement | Inputs train models by default |
|---|---|---|
| Free, Plus, Pro | Not listed as eligible | Yes, unless you turn it off |
| Business | Stated as not offered | No |
| Enterprise, Edu | Available to sales-managed accounts | No |
| API platform | Available on request | No |
OpenAI states that only sales-managed Enterprise or Edu customers are eligible for an agreement covering ChatGPT, and says plainly that it does not offer one for ChatGPT Business. Its enterprise privacy page separately describes signing agreements in support of customers' compliance on the API platform, and it publishes healthcare-specific products with their own coverage.
Read the wording carefully wherever you land. OpenAI describes its products as designed to support compliance rather than as carrying it, which matches the regulator's position that the obligation stays with the covered entity.
Does removing the name make it safe to paste?
It helps, and it is not the same as de-identification. The Safe Harbor method in 45 CFR 164.514(b)(2) requires removing eighteen categories of identifier covering the individual and their relatives, employers, and household members. It also carries a second condition that is easy to miss: you must have no actual knowledge that the remaining information could still identify the person alone or in combination.
That second condition is where clinical notes get difficult. A rare diagnosis, an employer, a court date, and a town can single out one person with every listed identifier already gone. Removing fields is mechanical. Judging what remains is not.
What to do before the paste
- Check which plan you are signed in to, and whether an agreement covers that plan rather than another one.
- Decide whether the task needs the person at all. Most drafting and phrasing tasks need the content.
- Cover identifying values before the prompt leaves your machine, not after you notice.
- Read what remains as a stranger would, and ask whether the person is still recognizable.
- Keep the identified version in the record you already keep.
Where PHI Mask fits
PHI Mask makes the third step quick enough to actually do every time. Paste text, a screenshot, or a PDF, and it marks the names, dates, and identifiers it finds so you can take a covered copy to the assistant on whatever plan you are on. It works in your browser, with no account and nothing to install.
Because the map between real values and their stand-ins stays in that tab, the reply that comes back restores to the real record in one step. Detection results by document type are published openly on the benchmark, so you can see how it performs before you rely on it.
Review before sharing.
Start with text, a PDF, or a screenshot.
Sources and review notes
Reviewed against the current federal definitions, HHS guidance on covered entities, de-identification, and misleading marketing claims, together with OpenAI's published agreement eligibility and enterprise privacy page. Plan availability changes; this page carries a review date for that reason.
Common questions
- Is ChatGPT approved for use with patient information?
- No product is certified by the regulator, which states it does not certify any persons or products. What exists instead is a signed agreement covering a specific account, and most consumer plans are not eligible for one.
- Does a paid plan mean my account is covered?
- No. OpenAI limits ChatGPT agreements to sales-managed Enterprise and Edu accounts and states it does not offer one for ChatGPT Business, so paying for a plan and having a covered plan are different things.
- Are my prompts used to train models?
- OpenAI publishes that business and API inputs are not used for training by default, while consumer plans train on inputs unless you turn that setting off. Check the setting on the account you actually use.
- Does removing names de-identify a record?
- Not on its own. Safe Harbor requires removing eighteen categories of identifier and having no actual knowledge that what remains could still identify the person alone or in combination.
- Am I even a covered entity?
- A provider is covered only if it transmits health information electronically in a standard transaction, such as an electronic claim. Professional confidentiality duties apply either way.