My doctor violated my privacy by using AI (in a very disturbing way)

If you’re in the US you can complain to HHS about a HIPAA violation. I would recommend this over confronting them directly. They won’t understand and think you’re just crazy if you confront them personally. You can also complaint to your state’s medical licensing authority, though they may just respond advising you to submit a HIPAA complaint to HHS. https://www.hhs.gov/hipaa/filing-a-complaint/complaint-process/index.html I do believe this would constitute a HIPAA violation, assuming they just used a standard generative AI service and not something specifically tailored to the medical industry, and that’s almost certainly what happened based on my experience with doctors and HIPAA (they usually have good intentions but no idea what kinds of IT things they shouldn’t be doing) However, you do not need to know for a fact that a violation occurred to submit a complaint, you just need to believe in good faith that one did based on the information available to you. If you’re in Europe, there may be a similar medical information specific recourse available, but I am not familiar with the process so I can’t provide details. It might just be GDPR though.