Clinical meeting minutes and AI privacy: what a practice meeting gives away in ChatGPT or Claude.

The monthly clinical meeting is where a practice talks openly about what went wrong: a near miss, a complaint, a result that was missed. The minutes are typed up by the practice manager, and AI note-takers and tools such as ChatGPT or Claude are now often used to turn the recording or rough notes into tidy minutes. The minutes name patients and staff and record judgements made in confidence. This page marks a routine set of minutes and shows how the same minutes are written up on Ermos inside the practice.

The clinical meeting minutes

Written up by the practice manager after the clinical team’s meeting, kept with the practice’s quality and risk records and read by the clinical team.

Wombeyan Street Family Practice
8 Wombeyan Street, Eastwood NSW 2122 · (02) 5550 0161

Clinical meeting minutes · 5 November 2026 · Minutes by Odette Sorensen, Practice Manager

Present: Dr Rafael Szabo, Dr Theodora Vasilakis, Dr Callan Whiteley (registrar), Mereana Tuck RN, Odette Sorensen¹

1. Near miss. Esther Goldfarb, 84, on warfarin, was given a script for a new antibiotic that interacts with it. The pharmacist called before it was dispensed.² Root cause: the warfarin was recorded as a past medicine after the hospital discharge summary was filed.³

2. Open disclosure. Dr Vasilakis called Mrs Goldfarb and her son on 3 November to explain and apologise. Son was angry and said he would complain.⁴

3. Staff. Second documentation error by Dr Whiteley this term. Supervisor to meet him and review his notes weekly for a month.⁵

4. Complaint. HCCC has written about a complaint from a patient about a delayed skin cancer diagnosis. Response due 20 November; insurer notified.⁶

5. Doctor wellbeing. Dr Szabo will reduce to three days from December for health reasons and has asked that the reason is not shared with patients.⁷

6. Action items. Medication reconciliation check on every discharge summary filed; repeat the warfarin audit in three months.⁸

Next meeting: 3 December 2026, 12:30 pm, staff room.⁹

Invented minutes. The practice, staff and patients are fictional. Hover or tap any highlighted item for the analysis; the full list is below.

What leaves the practice

Names of the clinical team

Who attended. Personal information about staff, harmless alone but linked here to everything below.

Frontier Models (ChatGPT, Claude)	Staff names, tied to what follows
Ermos Edge	Stays on your instance in Australia; leaves only inside a permitted excerpt, per question, to the named provider
Ermos Dominion	Stays on the unit in your office

A patient and a near miss

A named elderly patient, her medicine and a prescribing error. Health information, which is sensitive information under the Privacy Act. Patient data guide.

Frontier Models (ChatGPT, Claude)	Sensitive health information transmitted; on consumer tiers it can train future models
Ermos Edge	Stays on your instance in Australia; leaves only inside a permitted excerpt, per question, to the named provider
Ermos Dominion	Stays on the unit in your office

The root cause

How the error happened, which is the practice’s own quality analysis.

Frontier Models (ChatGPT, Claude)	The practice’s internal quality analysis transmitted
Ermos Edge	Stays on your instance in Australia; leaves only inside a permitted excerpt, per question, to the named provider
Ermos Dominion	Stays on the unit in your office

An open disclosure conversation

An apology, a family’s reaction and a threat to complain. Patient data guide.

Frontier Models (ChatGPT, Claude)	An open disclosure and a threatened complaint transmitted
Ermos Edge	Stays on your instance in Australia; leaves only inside a permitted excerpt, per question, to the named provider
Ermos Dominion	Stays on the unit in your office

A registrar’s performance

A named doctor’s errors and the supervision put in place. Information about an employee that the practice would protect as carefully as any patient’s.

Frontier Models (ChatGPT, Claude)	A named doctor’s performance management transmitted
Ermos Edge	Stays on your instance in Australia; leaves only inside a permitted excerpt, per question, to the named provider
Ermos Dominion	Stays on the unit in your office

A regulator complaint

A complaint to the Health Care Complaints Commission about a delayed diagnosis, with a deadline and an insurer notification.

Frontier Models (ChatGPT, Claude)	Details of a regulator complaint transmitted
Ermos Edge	Stays on your instance in Australia; leaves only inside a permitted excerpt, per question, to the named provider
Ermos Dominion	Stays on the unit in your office

A doctor’s health

A colleague’s health, shared with the team on the condition that patients are not told. Health information about a staff member. Privacy Act guide.

Frontier Models (ChatGPT, Claude)	A colleague’s health transmitted
Ermos Edge	Stays on your instance in Australia; leaves only inside a permitted excerpt, per question, to the named provider
Ermos Dominion	Stays on the unit in your office

Action items

Process changes with no identifying detail.

Frontier Models (ChatGPT, Claude)	Process changes with nothing identifying
Ermos Edge	Stays on your instance in Australia; leaves only inside a permitted excerpt, per question, to the named provider
Ermos Dominion	Stays on the unit in your office

9
The next meeting
A date and a room.

Frontier Models (ChatGPT, Claude)	A date and a room
Ermos Edge	Not about where data goes
Ermos Dominion	Not about where data goes

What happens in Frontier Models (ChatGPT, Claude)

The whole document is transmitted to the provider’s servers. On personal plans the user cannot choose where it is stored or processed, and for the major providers that has generally meant outside Australia, under that country’s legal process. Some business plans offer storage in Australia, but the provider still receives the content.
On consumer tiers, prompts can be retained and used to train future models.
The provider’s staff and systems can reach the content under the provider’s own policies.
Once sent, the practice no longer controls it. Retention and deletion happen on the provider’s terms.

The same document on Ermos

Ermos Dominion

The document is drafted on a unit in your office, from your own templates and the patient record. Every marked item stays on the unit, which keeps working with the internet switched off. Nothing in it is transmitted to an AI provider, so there is no disclosure to analyse: the confidentiality work is the same as for your file server.

Ermos Edge

Your documents, the index and your access boundaries stay on your own instance in an Australian data centre. When a staff member asks for this draft, only their question and the excerpts they are permitted to see go to a named Australian provider, who is contractually barred from keeping the content or training any model on it. Nothing is processed outside Australia.

	Frontier Models (ChatGPT, Claude)	Ermos Edge	Ermos Dominion
Where the document is processed	Provider servers, generally offshore on personal plans	Your instance in an Australian data centre; answers generated in Australia	The unit in your office
Who can read it	Provider staff and systems, under policy	Your staff, within the boundaries you set. The named Australian provider processes only permitted excerpts, under contract, and keeps nothing	Your staff only
Is it kept	On the provider’s terms	Kept on your instance; the provider is barred from retaining it	Stays on the unit
Can it train a model	On consumer tiers, yes	No, by contract	Only your own unit learns from it, on your hardware

Part of AI data leakage in general practitioner (GP) practices.

Common questions

Do ChatGPT and Claude use the information in clinical meeting minutes?

Yes, pasted minutes are sent to the AI company's servers and processed there to produce a reply. As at October 2026, whether a conversation on a personal plan (ChatGPT Free, Plus or Pro; Claude Free, Pro or Max) can be used to train the models depends on a setting each user controls. Business plans (ChatGPT Business and Enterprise, Claude Team and Enterprise) and the developer APIs sit under commercial terms, and OpenAI and Anthropic each say they do not train on that content by default (OpenAI, Anthropic). On either product, the thumbs up and thumbs down buttons can send a whole conversation back for training. These minutes name a patient in a prescribing near miss, a registrar's performance management, a complaint to the HCCC and a GP's health.

Is it safe to paste clinical meeting minutes into ChatGPT or Claude if we remove the patient's name?

No, because the rest still identifies her and the staff. Removing names rarely makes a document anonymous. Information stays personal information while the person is reasonably identifiable, and the OAIC warns that information can be at risk of re-identification even when it has been de-identified or anonymised. An 84-year-old on warfarin whose son threatened to complain is recognisable, and the staff are named in the attendance list. The Office of the Australian Information Commissioner (OAIC) recommends in its guidance on commercially available AI products that organisations do not enter personal information, and particularly sensitive information, into publicly available generative AI tools, because of the significant and complex privacy risks.

Is it safe to use an AI note-taker or meeting recorder for a clinical meeting?

Not until the practice knows where the recording is stored, whether the tool's vendor trains a model on it and who can review it. Recording and transcription tools send the audio or transcript to the tool's vendor, so each of those questions needs an answer first. The OAIC's guidance also tells organisations to review carefully the terms and settings that will apply to their use of any AI product. A recording also catches what the minutes would leave out, such as remarks about a colleague.

How can a GP use AI for clinical meeting minutes without sending it to ChatGPT or Claude?

Ermos is built so the document stays under your control. On the Dominion AI unit it is drafted inside your office and none of it is sent to an AI provider. On Ermos Edge your documents and index stay on your own instance in an Australian data centre, and only the question and the excerpts the user is permitted to see go to a named Australian provider that is contractually barred from keeping them or training any model on them. The minutes are written up from the practice manager's notes in the practice's own format. The practice manager checks them before they are filed.

Can we use an AI note-taker in a clinical meeting?

Only once the practice knows where the recording and transcript are stored, whether the vendor can train on them and who can review them. A clinical meeting discusses named patients and staff, so every answer matters.

Are staff details in the minutes covered by the Privacy Act?

The Act has an exemption for some employee records held by a private sector employer, but the minutes also hold patients' health information, which is fully covered. A doctor's health is also information colleagues have been asked to keep private.

Why does a near miss discussion matter outside the practice?

It names the patient, records the error and the practice's own analysis, and sits beside a family's threat to complain. The practice needs to control who sees that record.

See Dominion answering from your own documents.

A demonstration takes 30 minutes, uses no client data, and comes with no obligation.

Book a demo

Keep reading

AI data leakage in general practitioner (GP) practices AI for general practitioners (GPs) AI and patient data All professions