Navigating AI, Compliance, and Data Privacy in Healthcare

“Not only is diligence important, it’s also important to have the contract reviewed by a lawyer and have somebody who understands IP and the health information and the privacy laws that are at play here.”

— Carolyn Metnick, Partner, Sheppard Mullin

How Legal Expertise Safeguards Responsible AI Adoption in Healthcare

As artificial intelligence transforms healthcare, organizations are racing to integrate new tools — but with innovation comes complexity. In this film, Carolyn Metnick, Partner at Sheppard Mullin, outlines how hospitals, health systems, and technology companies can adopt AI responsibly by understanding the legal, ethical, and privacy implications behind every implementation.

From intellectual property rights to state privacy laws in California, Colorado, Utah, and Texas, Metnick explains that compliance is not optional — it’s foundational. Without proper legal review and governance, healthcare organizations risk exposing sensitive patient data or allowing vendors to commercialize trained algorithms using protected information.

By reviewing vendor contracts, establishing clear guardrails, and ensuring “humans remain in the loop,” healthcare leaders can embrace AI with confidence. The goal isn’t to slow innovation, but to make it sustainable — protecting patients, providers, and data integrity while enabling technology to improve outcomes and reduce administrative burden.

About Sheppard Mullin

Sheppard Mullin leverages data privacy and AI expertise to advise healthcare stakeholders on regulatory, compliance and digital innovation—empowering clients to enhance patient care.

More about Sheppard Mullin