OpenAI's BAA now covers ChatGPT for Healthcare and for Clinicians
OpenAI's HIPAA implementation guide, posted July 9, 2026, lists ChatGPT for Healthcare, ChatGPT for Clinicians and Enterprise or Edu workspaces with the Regulated Workspace as BAA-eligible. Consumer plans (Free, Plus, Pro) and ChatGPT Business are not. API use with PHI requires a Modified Retention setting for each organization and project.
What changed. OpenAI’s BAA used to be available only for sales-managed Enterprise and Edu workspaces and for the API with zero data retention. Its HIPAA guide of July 9, 2026 names these eligible ChatGPT services: ChatGPT for Healthcare (launched January 2026), ChatGPT for Clinicians — a workspace individual verified clinicians can put under a BAA themselves — and ChatGPT Enterprise or Edu with the Regulated Workspace. For the API, the BAA must name the API, and a Modified Retention setting (for example zero data retention or modified abuse monitoring) must be active for every organization and project that sends PHI.
What didn’t change. ChatGPT Free, Plus, Pro and Business are still not eligible: patient information must not go into them.
What we updated. The ChatGPT, ChatGPT for Healthcare and Enterprise, and OpenAI API pages, a new ChatGPT for Clinicians page, and the AI tools comparison.