AI, Healthcare Privacy, and the Pentagon: Why HIPAA Can't Protect You Anymore

The Pentagon just labeled Anthropic — the company behind Claude AI — a national security supply chain risk. Not because they're a foreign adversary. Because they refused to remove two guardrails: no mass surveillance of Americans and no autonomous weapons without human oversight.The $200 million contract is canceled. The Trump administration ordered every federal agency and defense contractor to phase out Anthropic's technology. Anthropic is preparing to sue.But the Pentagon fight is the opening act. The real story is what AI can already do with your health data — and why the rules protecting it don't work anymore.In this episode:How AI re-identifies "anonymous" medical records for 800,000+ Americans even after removing all 18 HIPAA-required identifiersWhy your body is becoming a biometric database — facial reconstruction from MRI scans (83-98% accuracy), chest X-rays as fingerprints, and 12 million voice biomarkers extracted per minute of a telehealth callDario Amodei's four warnings about government AI misuseThe HIPAA timeline: written in 1996, last major update in 2003, new rules expected late 2026 — none of which address AI re-identificationWhy Fitbit, Apple Watch, Oura, and AI health chatbots aren't covered by HIPAA at allWhat the Anthropic situation tells us about who's drawing the line on your health data (spoiler: almost nobody)The rules haven't caught up to the technology. This episode breaks down exactly where the gap is and why it matters.Full sources and the deep dive: danmccoymd.substack.com