Our rule: no patient information in these tools.
CheckMyDSO tools and examples are for public practice information and fictional training material. Do not enter patient information into our tools or paste it into general-purpose AI services.
Removing a name is not enough.
Dates, images, unusual conditions, contact details, account information, and narrative details can still identify someone. For academy exercises, create a fictional scenario from scratch instead of editing a real patient record.
Separate learning from clinical systems.
A vendor’s privacy statement, paid plan, or claim about training does not by itself establish that a workflow is suitable for patient information. Any proposed clinical or patient-data use requires your practice’s own qualified privacy, security, and clinical review. This academy does not approve vendors or certify compliance.
Set a team rule everyone can follow.
Name the person who reviews new tools. Define approved uses, prohibited inputs, access controls, and how a concern is reported. Give staff safe examples they can use without copying records or patient communications.
If information is entered by mistake.
Stop using that workflow and follow your practice’s incident reporting process. Tell the designated privacy or security contact what happened. Do not attempt to resolve a possible disclosure by sharing the information with another AI tool.
Source and further reading
HHS guidance on de-identification. Our suggested workflow is educational guidance from CheckMyDSO.
Written and reviewed by CheckMyDSO. Updated 2026-10-16.
Get new prompts by email
Free AI prompts for the front desk, Tuesday and Thursday at 7 AM ET.