Data Protection is NOT the (Only) Issue

Ciara Ferrier • 18 September 2026

When we talk about standards and regulations for AI, we do not mean just data protection. We must also consider the safety around how we think about that data.


Heidi AI Scribe is registered as a Class I medical device under MHRA guidance for summarisation functionality. The Heidi website states that as the company explore “new and innovative features” their “regulatory footprint will increase, which is why we are progressing what Class II certification would look like for Heidi.”


With its current functionality, some clinicians feel almost affronted that Heidi would be classed as a medical device. This is because the superiority of clinical knowledge is so ingrained amongst them. Of course they are going to review content. Of course any output will reflect their own judgement! Putting Heidi through this additional layer of bureaucracy feels like an affront to their integrity.


Several years ago I worked in medical software development building maternity information systems. A patient record feels like it would just be a series of boxes that the clinician will fill in, ergo it is not a medical device. However, as soon as you put a calculation in, such as deriving age from date of birth, you allow the system to make a judgement and the threshold for needing to comply to medical device standards is really that low.


With an administration/technical background, I have no issue with that rule. You probably are doing the right thing, if you feel affronted by it, but actually this protects your integrity by maintaining that standard across all your colleagues and holding developers to account.


Heidi maybe doesn’t influence your thinking but simply by being able to summarise, it can and that is the key point. The rest of us can relate to this in terms of AI internet search summaries. Do you always look at the links in the summary, check what they say and question the veracity of the source?


So, I view the MHRA guidance on AI scribes as some level of guidance on the protection of critical thinking. Many of us, myself included, will say, “Oh, it’s got ISO 27001 so your data is safe.” But it isn’t actually just about keeping that data safe; it is about the safety of how we THINK about that data.


I’m not aware of a similar device standard applied to products in other sectors such as academic research, law, accountancy, engineering, journalism and so on – please let me know if you are aware of one.  I put my hands up to needing to read more on the EU AI Act, however from initial reading I would expect more products will ultimately fall under those deemed high risk in Annex III.


Medicine already has this more stringent check in place. It is simply asking other sectors to come up to a similar standard and protect their professional judgement and critical thinking. Medics already have the self-worth to know that their opinion should take precedence. The rest of us should do the same. 


Society of Virtual Assistants Approved Member
by Ciara Ferrier • 20 October 2026
Ciara Ferrier Ltd is an approved member of the Society of Virtual Assistants, having met the terms of their standard of best practice for the industry.
by Ciara Ferrier • 1 October 2026
How do you share calendars between Google and Outlook? At first, it looks like they don't talk to each other but a fix is available.
by Ciara Ferrier • 29 September 2026
What you learn when people are allowed to call you out on being wrong. 
by Ciara Ferrier • 20 September 2026
You gain by giving.
by Ciara Ferrier • 20 September 2026
"A Landslide will bring you down."
by Ciara Ferrier • 18 September 2026
I'm sorry there wasn't much to write in the first column. We may think of more for the second.
by Ciara Ferrier • 10 August 2026
Whilst acknowledging questions and concerns around the use of AI, it must also be acknowledged that AI can introduce greater efficiency simply by assisting in small everyday tasks.
by Ciara Ferrier • 8 August 2026
Loving the "Transcribed using Human Ingenuity" badge, courtesy of Hi from a Human!
by Ciara Ferrier • 6 August 2026
It’s an uncomfortable truth that, in private healthcare, a treatment plan is also a sales pitch.
A picture of parked cars.
by Ciara Ferrier • 5 August 2026
Patients can be fragile and vulnerable. Looking after patients begins and ends in the administrative cycle. Systems and processes should make the journey as ea