Field notes on AI in business
Practical writing on AI, automation and the day-to-day work of running a business. From the team that builds and runs AI systems.
AI compliance
Broker-Dealer Use of AI for Client Communications and the FINRA Rule 2210 Question
Broker-Dealer Use of AI for Client Communications and the FINRA Rule 2210 Question FINRA Rule 2210 was written in 2012. The drafters were thinking about websites, email blasts, maybe some early...
Basel IsmailMay 5, 2026
AI compliance
PCI DSS 4.0 and the Cardholder Data Question When You Use AI
PCI DSS 4.0 and the Cardholder Data Question When You Use AI PCI DSS 4.0 became the only active standard on March 31, 2025, when version 3.2.1 officially retired. Most of the structural changes...
Basel IsmailMay 5, 2026
AI compliance
The Healthcare CIO's Defensible AI Adoption Framework
The Healthcare CIO's Defensible AI Adoption Framework Every healthcare system I talk to is somewhere between "we have six AI pilots running with no oversight" and "we locked everything down and now...
Basel IsmailMay 4, 2026
AI compliance
Independent Practice Associations and the Shared AI Risk Problem
Independent Practice Associations and the Shared AI Risk Problem IPAs have a structural problem with AI that almost nobody is talking about. When 40 or 200 independent practices share administrative...
Basel IsmailMay 4, 2026
AI compliance
Medical Coding AI and the HIPAA Boundary You Cannot See
Medical Coding AI and the HIPAA Boundary You Cannot See Medical coding is one of the first places where AI delivers obvious, measurable ROI in healthcare operations. Automated code suggestion, claim...
Basel IsmailMay 4, 2026
AI compliance
Patient Portal Chatbots: The Lowest-Hanging HIPAA Fruit for an OCR Investigation
Patient Portal Chatbots: The Lowest-Hanging HIPAA Fruit for an OCR Investigation If you run a health system or a digital health company with a patient-facing chatbot, I want you to try something....
Basel IsmailMay 4, 2026
Get the next article by email
One short email when something new goes up. Practical, no fluff, written by the people who build.
Free. Unsubscribe any time. Privacy policy
AI compliance
Health Information Exchanges, Interoperability, and the AI Aggregation Risk
Health Information Exchanges, Interoperability, and the AI Aggregation Risk Health Information Exchanges have been around long enough that most compliance teams treat them as mature infrastructure....
Basel IsmailMay 4, 2026
AI compliance
GLBA in the Age of ChatGPT: What Financial Institutions Are Quietly Getting Wrong
GLBA in the Age of ChatGPT: What Financial Institutions Are Quietly Getting Wrong A loan officer pastes a borrower's W-2 data into ChatGPT to draft a summary for underwriting. A wealth advisor...
Basel IsmailMay 4, 2026
AI compliance
Why a HIPAA Risk Analysis That Does Not Mention AI Is Already Out of Date
Why a HIPAA Risk Analysis That Does Not Mention AI Is Already Out of Date OCR has been hammering organizations on risk analysis failures for years. It is, consistently, the most cited deficiency in...
Basel IsmailMay 3, 2026
AI compliance
Medical Device Manufacturers, FDA AI Guidance, and the HIPAA Overlay
Medical Device Manufacturers, FDA AI Guidance, and the HIPAA Overlay FDA has been steadily building its regulatory framework for AI and ML-enabled medical devices since the 2021 action plan, and the...
Basel IsmailMay 3, 2026
AI compliance
Breach Notification Timelines When the Breach Happened Through an AI Tool
Breach Notification Timelines When the Breach Happened Through an AI Tool HIPAA's breach notification rule is straightforward until it isn't. You discover a breach, you notify affected individuals...
Basel IsmailMay 3, 2026
AI compliance
Why Healthcare AI Pilots Keep Failing the Procurement Stage
Why Healthcare AI Pilots Keep Failing the Procurement Stage A pattern keeps repeating across health systems. An innovation team finds a promising AI tool, runs a pilot, gets clinicians excited, maybe...
Basel IsmailMay 3, 2026
1,319 articles