OpenAI integrates Epic Systems for read-only patient data access in ChatGPT Health

Close-up of a doctor's hand using a touchscreen tablet, highlighting digital healthcare technology.

In brief

  • OpenAI and Epic Systems launched a HIPAA-compliant integration on September 1, 2026, for enterprise clinical workflows
  • Clinicians access patient histories, medications, and lab results directly in ChatGPT without leaving their existing interface
  • Read-only constraints prevent ChatGPT from writing records, placing orders, or altering clinical documentation
  • Integration targets hospital systems and clinical teams, not personal consumer accounts
  • OpenAI also released Healthcare Public Data plugin connecting PubMed, ClinicalTrials.gov, and DailyMed

Epic Integration and Workflow Embedding

Epic Systems is one of two dominant electronic health record platforms in the US, alongside Oracle Health. The integration allows clinicians to pull Epic patient data into ChatGPT to review histories, medications, and lab results. More significantly, ChatGPT can be embedded directly inside Epic's own EHR interface, so the AI is surfaced within the clinician's existing workflow rather than requiring a context switch to a separate application.

The integration is built specifically for organizational use, meaning hospital systems and clinical teams, not individuals signing into a personal ChatGPT account. This distinction matters for deployment and governance; healthcare organizations can control access, audit usage, and enforce compliance at scale.

Security and Data Protection

Access is read-only, which is a deliberate and important constraint. ChatGPT cannot write to the patient record, cannot place orders, and cannot alter clinical documentation through this integration. This guardrail prevents accidental or malicious modification of critical medical data.

OpenAI confirmed that the integration is built to meet HIPAA requirements, the US federal framework governing the privacy and security of protected health information. Compliance with HIPAA is non-negotiable for any system handling patient data in a clinical setting.

Broader Healthcare Expansion

ChatGPT Health was initially launched in January 2026, broadened to all US adults 18 and older in July 2026. Health-related queries on ChatGPT hit 300 million per week as of July 2026, signaling strong demand for AI-assisted health information retrieval.

Alongside the Epic integration, OpenAI introduced a Healthcare Public Data plugin that connects users to nine official data sources, including PubMed, ClinicalTrials.gov, and DailyMed. This expands the breadth of evidence-based information clinicians and patients can access directly within ChatGPT conversations.

Frequently asked questions

Why is read-only access important for this integration?

Read-only access prevents ChatGPT from writing to patient records, placing orders, or altering clinical documentation. This guardrail protects against accidental or malicious changes to critical medical data while still allowing clinicians to retrieve and review patient information within their workflow.

Who can use the Epic integration—individual patients or healthcare organizations?

The integration is built specifically for organizational use, meaning hospital systems and clinical teams, not individuals signing into a personal ChatGPT account. This allows healthcare organizations to control access, audit usage, and enforce compliance at scale.

How does the integration fit into a clinician's existing workflow?

ChatGPT can be embedded directly inside Epic's own EHR interface, so the AI is surfaced within the clinician's existing workflow rather than requiring them to switch to a separate application. This reduces friction and keeps clinicians in their familiar environment.