The working environment changes the risk
An AI function within Word looks like an ordinary writing tool. Legally, however, what matters is which documents and additional sources the system may read, where content is transmitted and how long inputs, outputs or logs are retained.
For health data, professional secrecy, data security and the medical duty of care are particularly relevant alongside data protection.
A suitable starting point
Well-controlled use cases begin with extracting existing information and checking formal quality. The more AI evaluates, supplements or directly changes content, the stronger professional oversight must be.
- Allow only clearly defined document types and data categories
- Explicitly define permitted sources and prohibited additions
- Keep changes visible and traceable
- Review results professionally against the primary sources
- Reassess product changes and new data access
Technology follows responsibility
Tool selection should not come first. The starting point is the specific workflow: which task is supported, which data are involved, who checks the result and who is responsible for approval?