Do not put identifiable medical records, accommodation documents, doctor’s notes, personnel records, or confidential work material into a public or unapproved AI tool. Whether a particular AI use is lawful or adequately protected depends on what the data is, who holds it and in what role, what the AI provider does with it, and which jurisdiction’s laws apply. “Medical” does not automatically mean HIPAA applies, and removing a name does not necessarily make a record safe to share.
This guide covers U.S. federal HIPAA and ADA principles. State and local privacy or employment laws, sector-specific rules, contracts, collective bargaining agreements, and laws outside the United States may add requirements.
First identify the data, its holder, and the AI workflow
The same health-related detail can be governed differently depending on where it came from and why an organization holds it. A patient record held by a covered health care provider is not automatically the same legal category as an employee’s accommodation file held by that person’s employer.
| Situation | What to understand | Relevant federal guidance |
|---|---|---|
| A health plan, clearinghouse, or qualifying health care provider holds identifiable health information | HIPAA’s Privacy Rule applies to specified covered entities and, in relevant circumstances, their business associates. A provider’s or plan’s use of an AI service that can access protected health information needs a workflow-specific review. | HHS Office for Civil Rights, “The HIPAA Privacy Rule” and “The HIPAA Privacy Rule and its Application to Health Information Held by Employers.” |
| An employer holds a medical, leave, accommodation, or other employment record in its employer role | HIPAA generally does not protect the employer’s employment records, even when they contain health information. ADA confidentiality rules may still apply to covered employers’ applicant and employee medical information. | HHS Office for Civil Rights, “Employers and Health Information in the Workplace”; EEOC, “Disability Discrimination and Employment Decisions.” |
| A consumer-facing service receives health-related details or can infer health from them | Do not assume that information is outside privacy concerns just because it is not a formal diagnosis. HHS/FTC guidance and the FTC’s consumer-health materials address health-data practices and representations in relevant contexts. | HHS and FTC, “Health Privacy” guidance; FTC health-information materials. |
For HIPAA purposes, the organization’s role and the specific flow of information matter. A hospital acting as an employer does not make every employee file protected health information, and a generic “HIPAA compliant” label does not establish that a specific AI workflow is appropriate.
#1 Best Overall
- 【Instant Snap-on Magnetic Attachment】- The Patented Magnetic Privacy Screen – Protected by U.S. Patents 9,829,669 and D844,012. Simply place the privacy screen along the top of your MacBook and let the magnets attach along the top. No need for tricky placement, messy tape, or damaging adhesive. Easily remove and reattach when you need it.
- 【Filter Dimensions】: Width: 11 15/16" (304 mm), Height: 7 1/2" (190 mm), Diagonal: 14.1" (358.14 mm) - SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- 【Superior Privacy】- Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful UV and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- 【Perfect for Travel and Open Workspaces】- The Laptop Privacy Screen Filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports, and public areas.
- 【Package Contents】- Each package includes a magnetic privacy screen filter, magnetic stickers, a webcam privacy cover, a storage folder, and a cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
Trace the complete workflow, not just the text typed into a prompt. It may include uploaded files, prompts, generated summaries, chat history, browser extensions, connected apps, and organizational access to the account. The service’s exact terms and any organizational contract determine questions such as retention, access, reuse for service improvement or model training, deletion, and incident handling; do not assume the answer from the product category or a vendor’s general claims.
What HIPAA and ADA protections mean in practice
HIPAA applies to defined entities and workflows
HHS says the HIPAA Privacy Rule applies to health plans, health care clearinghouses, and health care providers that conduct certain electronic health care transactions. It also reaches business associates in relevant circumstances. Protected health information generally means individually identifiable health information held or transmitted by covered entities or business associates.
Rank #2
- 【Instant Snap-on Magnetic Attachment】- The Patented Magnetic Privacy Screen – Protected by U.S. Patents 9,829,669 and D844,012. Simply place the privacy screen along the top of your MacBook and let the magnets attach along the top. No need for tricky placement, messy tape, or damaging adhesive. Easily remove and reattach when you need it.
- 【Filter Dimensions】: Width: 13.56" (344.5 mm), Height: 8.49" (215.6 mm), Diagonal: 16" (406 mm) - SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- 【Superior Privacy】- Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful UV and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- 【Perfect for Travel and Open Workspaces】- The Laptop Privacy Screen Filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports, and public areas.
- 【Package Contents】- Each package includes a magnetic privacy screen filter, magnetic stickers, a webcam privacy cover, a storage folder, and a cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
Where HIPAA applies, an organization must have a permitted basis for use or disclosure, apply safeguards, and use the minimum necessary standard where it applies. A covered entity that uses a service provider with access to protected health information must determine whether that provider is acting as a business associate and whether a business associate agreement and permitted-use restrictions are required. A vendor badge alone does not answer those questions.
Employer-held medical records are not automatically HIPAA records
HHS states: “The Privacy Rule does not protect your employment records, even if the information in those records is health-related.” HIPAA generally governs disclosures by a health care provider, not what an employer may ask. A provider generally cannot give an individual’s information to an employer without authorization unless another legal basis applies.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #3
- Compatible Models: Width: 13 9/16" (13.5 inch/344 mm), Height: 7 5/8" (7.6 inch/194 mm), Diagonal: 15.6" (396.24 mm) widescreen laptops which have a 16:9 aspect ratio. Not touchscreen compatible !!! Not fit for 16:10.Do NOT rely solely on your laptop’s diagonal size when ordering. Use a ruler to measure your screen’s visible area (excluding the black bezels). If the width reads 344mm and height reads 194mm, this filter is a perfect match for your device.
- Keep Information Privacy: Effective "black out" privacy from side views outside the 60-degree viewing angle. Designed for optical clarity when viewing from the front, a person not at the front of the screen can only see the dark side of the screen, so it protects buisness secrets and personal privacy
- Eye and Screen Protection: Privacy filter does not only protect your private life but also protects your eyes by blocking 30% of blue light , blocking the harmful blue light between 380 - 495nm, it filters out the blue light and relieves eye strain. Our laptop privacy screen also helps keep your screen safe from dust and scratches
- Perfect For Open Workspaces: Great for maintaining screen privacy in high traffic areas such as open work spaces, airports, airplanes, commuter trains, coffee shops and other public places, etc
- Easy Installation: Choose between 2 simple Options; Slide-On/Off or Mounted. Not touchscreen compatible
That distinction does not mean an employer may freely share medical information. EEOC guidance says covered employers generally must keep applicant and employee medical information confidential and in separate medical files, including when the information is stored electronically. Limited disclosures may be allowed—for example, to a manager who needs accommodation or work-restriction information, safety personnel responding to an emergency, or officials investigating compliance.
AI use in employment decisions raises a separate issue
Confidentiality is not the only concern if an AI system helps screen applicants, evaluate workers, or make other employment decisions. EEOC’s 2024 worker guidance explains that existing federal employment discrimination protections remain relevant when employers use AI, including protections related to disability and genetic information. That guidance does not by itself provide an exhaustive compliance framework for every tool or decision.
Rank #4
- Filter Dimensions: Width: 11 15/16" (304 mm), Height: 7 1/2" (190 mm), Diagonal: 14.1" (358.14 mm) - SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- Two Attachment Options - Installs in minutes. Option 1 uses clear adhesive strips that securely attach to any screen. Option 2 uses slide mount tabs that easily stick to the display frame, allowing you to slide the filter on and off the screen as needed.
- Superior Privacy and Anti Glare - Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful glare, UV, and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- Perfect for Travel and Open Workspaces - Our computer screen privacy filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports and public areas.
- Package Contents - Each package includes one privacy screen shield filter, two sets of clear adhesive strips, two sets of slide mount tabs, and a microfiber cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
What individuals and workers should do before using AI
- Check the applicable policy first. Find out whether your employer, health care provider, or other organization permits the specific tool and use. If the policy or tool status is unclear, ask its privacy, security, or compliance contact before sharing the information.
- Use the minimum information needed. If the workflow is approved, remove direct identifiers and unnecessary details where that still lets the tool do the task. A combination of dates, job titles, locations, rare diagnoses, and unusual events may identify someone even without a name. HIPAA de-identification, where applicable, follows specified methods; deleting a name alone is not equivalent.
- Review the exact service and contract terms. Check what is retained, who within the organization can access inputs and outputs, whether content is used for service improvement or model training, how deletion works, and how incidents are reported. These answers can vary by service, account type, settings, and contract.
- Use the required account, device, and access controls. Where policy requires it, work through an approved organizational account and device. Use available multifactor authentication and access controls, avoid shared accounts, and keep sensitive files in access-controlled systems. Follow the organization’s retention and incident-reporting rules; these steps reduce risk but are not a complete legal safe harbor.
- Reduce nearby viewing in shared spaces. Position a screen to limit casual viewing in an office, clinic, or public place. An optional laptop or monitor privacy filter can address that narrow physical risk, but it does not protect information sent to an AI provider or change the provider’s data practices.
What employers and organizations should put in place
Map the data flow and legal roles
Before selecting an AI workflow, document what information it collects, where it comes from, why it is used, who receives it, and how long it is kept. Determine whether the organization is acting as a HIPAA covered entity or business associate for that particular flow, or as an employer holding employment records. One organization can have different roles in different workflows.
Approve both the tool and the use
Have privacy, security, legal, and HR functions review the specific workflow rather than approving a tool in the abstract. Set purpose and retention limits, restrict access by role, minimize data, train users, periodically review safeguards, and ensure public privacy statements match actual practices. HHS/FTC guidance emphasizes understanding data flows, safeguards, training, supervision, retention, and purpose limits.
Recommended Free Tools
Best Value
- 【Filter Dimensions】: Width: 13 9/16" (345 mm), Height: 7 5/8" (194 mm), Diagonal: 15.6" (396.24 mm) - SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- 【Two Attachment Options】- Installs in minutes. Option 1 uses clear adhesive strips that securely attach to any screen. Option 2 uses slide mount tabs that easily stick to the display frame, allowing you to slide the filter on and off the screen as needed.
- 【Superior Privacy and Reduce Glare】- Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful glare, UV, and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- 【Perfect for Travel and Open Workspaces】- Our computer screen privacy filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports and public areas.
- 【Package Contents】- Each package includes one privacy screen shield filter, two sets of clear adhesive strips, two sets of slide mount tabs, and a microfiber cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
Protect workplace medical information separately
For ADA-covered applicants and employees, keep medical information apart from ordinary personnel files, including in electronic systems, and limit disclosure to circumstances allowed by law. Do not send accommodation documents into a general-purpose AI workflow without a specific, approved basis and safeguards. ADA rules on disability-related inquiries and medical examinations also differ across hiring stages; a particular employment decision requires facts-specific review.
Review employment effects as well as information security
Assess whether AI-assisted employment decisions could produce discriminatory effects and determine what appropriate human oversight is needed. The EEOC’s worker-facing guidance establishes that existing federal anti-discrimination laws remain relevant; it should not be treated as a complete technical or legal checklist for an employer.
If sensitive information has already been submitted
- Stop sending additional sensitive material until the organization or account owner has reviewed the workflow.
- Notify the responsible contact—such as your employer’s privacy, security, or compliance team, or the health care provider’s privacy contact—under the applicable incident-reporting procedure. Organizations should follow their established escalation process.
- Ask what the service retained and what actions are available. Check the exact service terms and account controls for deletion or other remedies; do not assume removing a chat from view deletes every retained copy.
- Preserve the facts needed to assess the event, such as what was shared, when, which account and service were used, and whether files or connected apps were involved. Follow internal instructions on records and reporting.
When to get case-specific advice
For real patient records, employee medical files, or a proposed employment decision, ask the organization’s privacy, security, or legal contact before proceeding; consult qualified counsel where appropriate. The federal HIPAA and ADA distinctions here do not resolve additional state, local, contractual, collective-bargaining, sector-specific, or non-U.S. requirements.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →
