Silent cyber threats: How shadow AI could undermine Canada’s digital health defenses

Across Canada, doctors and nurses are quietly using public artificial intelligence (AI) tools like ChatGPT, Claude, Copilot and Gemini to write clinical notes, translate discharge summaries or summarize patient data. But while these services are fast and convenient, they also pose unseen cyber risks when sensitive health information is no longer under the hospital’s control.

New evidence suggests that this behavior is becoming more common. A current one ICT & Health Global Article cites a BMJ Health and Care Informatics A study shows that around one in five GPs in the UK report using generative AI tools such as ChatGPT to write clinical correspondence or notes.

While data specific to Canada remains limited, anecdotal reports suggest that similar informal uses may be emerging in hospitals and clinics across the country.