The scenario compliance officers worry about
A patient access coordinator asks Copilot to “follow up with patients who missed appointments this week.” Copilot drafts emails using names, dates, and reasons pulled from scheduling data. One draft includes clinical detail that should not go to a personal inbox. Another goes to a stale address because the EHR sync lagged overnight.
There was no approval step. No record of which patient data Copilot read. No easy answer when privacy asks: “Prove this was minimum necessary.”
What Purview covers — and what it doesn't
Microsoft Purview and Business Premium sensitivity labels help classify content inside Microsoft 365 and support eDiscovery on Copilot interactions. That is necessary — not sufficient.
- Prior auth submissions in your payer portal — outside M365
- Patient callbacks logged in your phone system CRM
- ChatGPT Enterprise plugins reaching ticketing or billing APIs
- Agentforce updating patient outreach lists in Salesforce Health Cloud
Governance must follow actions, not just documents in SharePoint.
Three policies a 300-person health group can enforce today
No AI-sent patient communication without approval
Drafts are fine. Sending — especially external email or SMS — stops for a human who confirms content and recipient.
PHI export blocked by default
Bulk lists, chart exports, and copy-to-clipboard flows that leave your controlled environment require explicit policy and logging.
Hold actions on stale records
If patient or appointment data hasn't synced within your window, AI cannot act on it — held for review instead of silently using old data.
What your audit trail needs to show
- Which user and AI session initiated the action
- Which patient or record identifiers were involved
- Whether the action was allowed, blocked, or sent for approval
- Who approved patient-facing communication before it went out
- Timestamp chain from draft to final send
That is the difference between “we use AI carefully” and evidence you can hand an auditor. See how approval and audit work in the interactive demo.