Your Chief AI Officer · Thursday, November 5, 2026

Close the shadow AI gap before staff draft patient notes elsewhere

Two Washington state facilities found staff drafting patient notes in personal ChatGPT accounts, the clearest case this week for giving clinicians an approved tool rather than a ban. Elsewhere, ambient documentation is reaching scale at HCA, Humana and athenahealth are taking prior authorization into the encounter, and CMS finalized a deeper 2027 physician pay cut. Each points to less clerical work for staff, provided governance and contracts keep pace.

4 items · about 8 minutes · ordered for the CISO and security

Read as:Editor Chief AI Officer CEO COO CFO CIO and CTO CISO CMO (medical)CNO CHRO CMO (marketing)Compliance Patient experience

Act today

Insights a leader can act on this week: what happened, the one move to make, and the roles it falls to.

01Reported2 sourcesFor patients and employees

Chief AI Officer CISO Compliance CNO

Staff at two Washington state facilities drafted patient notes in personal ChatGPT

A staff member at a Washington state-run mental health facility used a personal ChatGPT account to draft patient notes, and a similar incident occurred at a second state facility, potentially exposing the protected health information of 16 patients, The Seattle Times reported, per Becker's Behavioral Health. One facility named is Lake Burien Transitional Care Facility, which treats youth. Separately, a report covered by Cybersecurity Dive found shadow AI remains a persistent problem even as IT and security budgets grow.

Do this week. Inventory which generative AI sites clinical staff can reach from work devices this week, and pair any block on personal accounts with an approved, contracted documentation tool. Run this

The claim.: The Cybersecurity Dive report says shadow AI persists despite rising IT and security budgets.
The evidence.: The Seattle Times reporting, via Becker's Behavioral Health, documents two incidents and 16 patients potentially affected; no data on how common this is across health organizations is given.

For the CISO and security. Add web and DNS controls on consumer AI endpoints from clinical workstations and log attempts to see where the demand is.

For the Chief AI Officer. Treat unmet demand for note drafting as a portfolio signal and put an approved tool in front of the staff most likely to reach for a personal account.

For the Compliance, privacy and legal. Confirm the policy on generative AI use with PHI is written, trained and attested, and that the breach assessment process covers this scenario.

Disclosure: Ecofy orchestrates OpenAI for clients and says so on every item that names it. The item was selected and checked by the same rules as every other.

Read the full item

Sources:Becker's Behavioral Health Cybersecurity Dive

02Reported1 sourceFor employees and patients

Chief AI Officer CFO COO

Humana and athenahealth expand FHIR-based prior authorization to 180,000 clinicians

Humana and athenahealth expanded nationwide electronic prior authorization inside athenaOne across 180,000 clinicians, HIT Consultant reported. The capability goes beyond checking whether authorization is required, creating a bidirectional, automated data pipeline between the clinical encounter and Humana's adjudication engine using the Da Vinci Project FHIR standards.

Do this week. Ask your revenue cycle lead which Humana prior authorizations still run by fax or portal and whether athenaOne users can route them in-workflow now. Run this

The claim.: The companies describe the integration as automated adjudication connected directly to the encounter.
The evidence.: HIT Consultant describes the architecture; no independent data on approval times or denial rates is given.

For the Chief AI Officer. Track which payers support Da Vinci FHIR prior authorization and prioritize integrations where volume is highest.

For the CFO and revenue cycle. Model staff hours and days to authorization for Humana volume before and after enabling the in-workflow path.

Disclosure: Ecofy orchestrates Intuitive Surgical for clients and says so on every item that names it. The item was selected and checked by the same rules as every other.

Read the full item

Sources:HIT Consultant

03Reported1 sourceFor employees and patients

Chief AI Officer CIO and CTO Compliance

HHS cut 14 EHR certification rules, and the checklist shrinks Dec. 28

The federal certification checklist behind practice EHRs shrinks on Dec. 28 after HHS cut 14 EHR certification rules, Physicians Practice reported. The article advises practices to lock down EHR contracts, MIPS reporting and referral workflows while they have leverage.

Do this week. Review your EHR contract for capabilities that relied on the removed certification criteria and get commitments in writing before Dec. 28. Run this

The claim.: Physicians Practice says practices have leverage now to protect contract terms, MIPS reporting and referral workflows.
The evidence.: The change is reported by Physicians Practice; no data yet on how vendors will respond.

For the Chief AI Officer. Check which AI tools depend on EHR interfaces that were certification requirements and confirm they stay supported.

For the CIO and CTO. Ask the EHR vendor to confirm in writing which affected functions it will keep.

For the Compliance, privacy and legal. Confirm MIPS reporting will not be disrupted by the change.

Read the full item

Sources:Physicians Practice

04Announced2 sourcesFor patients and employees

Chief AI Officer CIO and CTO CMO (medical)

Google shares its framework for evaluating health AI at scale

Google published its framework for building safer and more helpful AI for health, describing how it evaluates health AI at scale. The same week, npj Digital Medicine published a cross-paradigm audit of large language model judges for clinical text evaluation.

Do this week. Compare Google's evaluation framework with how your team currently tests AI tools before go-live, and close the gaps you find. Run this

The claim.: Google says the framework is aimed at safer and more helpful health AI.
The evidence.: This is a company announcement; no independent evaluation of the framework exists yet.

For the Chief AI Officer. Use published vendor evaluation methods as a reference when writing your own acceptance criteria for clinical AI.

For the CIO and CTO. Ask vendors, including Google, which evaluation results they will share for the specific use you are buying.

For the Chief Medical Officer and physicians. Review whether automated LLM judges are part of any vendor's quality claims and ask how they were validated.

Disclosure: Involves Google, a platform Ecofy tracks; editor to confirm any relationship.

Read the full item

Sources:Google Health blog npj Digital Medicine

Less administrative work. Better patient care. A better working life for the people who deliver it. Drafted by Lumen from the named sources above, checked by rule against those sources (every figure, two independent outlets or a primary source) and published only when it passes. A person can pull any item, and corrections are published. Apolitical, always. Nothing here is medical advice. How Your Chief AI Officer is made. Ecofy LLC.

Your Chief AI Officer

What AI and robotics can do for your organization today, and what is coming in thirty days.

Every weekday morning, ordered for your role. Free.