MCP servers can't tell if clients are under a BAA — a HIPAA compliance gap
SongGongSwim · reddit · 2026-11-01
A meeting-notes app developer distilled answers from r/hipaa and r/compliance: AI note-takers sell 'HIPAA compliant' with a BAA while shipping MCP servers, yet connecting them to personal ChatGPT or Claude plans moves transcripts outside BAA coverage — Anthropic's docs say MCP-connector third parties are out of scope, and OpenAI's HIPAA-eligible list excludes Free/Plus/Pro/Business.
Key points from compliance practitioners:
- The practice bears liability first: handing data to a non-BAA client is a disclosure, same as pasting.
- Vendors aren't clean either: default-on connectors or healthcare marketing weaken 'customer-enabled integration' disclaimers.
- Practical controls: admin gate off by default on BAA accounts, destination-naming warnings, per-connector access logs, and a connector allowlist requiring BAAs on file.
Four open MCP spec questions: servers can't verify the client's plan or contract (clientInfo is self-declared); no annotation for regulated-data results; spec-mandated client-side validation before results enter model context is rarely implemented; audit logging sits client-side with no per-record server logs. The author's own Locus app (local transcription + local MCP server) has the same hop and remains unsolved.
More from coding & agent
- ISUCON 2026 finalist says the tuning contest became a whole different game with AI — tkasasagi · 2026-11-01
- 64GB Macs are no longer a dead zone for agentic coding: 27B model at 256k context, measured — M5_Maxxx · 2026-11-01
- Together AI: route each task to the right model size instead of defaulting to the biggest — togethercompute · 2026-11-01
- How Boardy made its CI 20x faster, cutting PR waits from 40 minutes to 2 — HankYeomans · 2026-11-01
- Claude Duet team confirms coordination across CC sessions, projects and local threads is coming — daniel_mac8 · 2026-11-01
- Two isolated AI copies pass a secret word via Morse code and semaphore, no protocol agreed — emollick · 2026-11-01