OUR BLOG

AI Integration in Business &

AI Governance

Shadow AI and the HIPAA and 42 CFR Part 2 Violation Dilemma

Shadow AI and the HIPAA and 42 CFR Part 2 Violation Dilemma

Chances are your staff is using AI to do their work whether you authorized it or not. This unauthorized use of AI is called Shadow AI and it can lead to data breaches. This post outlines an AI governance strategy to assess the problem and fix it.

Peekskill, NY · Serving Clients Nationally

AI Integration and Operational Adoption Consulting Agency helping companies integrate AI and automation and manage everything that comes with getting their team to actually use it.

© 2026 Gemstone Consulting Services. All rights reserved.

Michele Davis, MPA · Founder and CEO