Hushtag for dental offices · St. Albert, Edmonton and across Alberta

Let your staff use AI. Keep patients out of the prompt.

Front desk and clinical staff already use ChatGPT for referral letters, treatment explanations and insurance appeals. Hushtag swaps patient names, birth dates, Alberta health card and insurance numbers for hashtags on each computer before the AI sees them, puts the real details back in the answer, and keeps a record you can file. Below: a practical HIA checklist with official sources.

Nothing uploaded to usOffice plans from $49/moChrome & Edge
referral-draft.txt
Patient: Grace Whitford#PERSON_1, DOB 1981-04-09#BIRTHDATE_1 AHCIP: 98765-4321#HEALTH_ID_1 Insurer: Alberta Blue Cross#ORG_1, Member ID: XKH448219007#HEALTH_ID_2 Phone: (780) 555-0147#PHONE_1 Seen June 14, 2025: #36 MOD fractured, pain on biting x 2 weeks. Write a referral letter to endo and a plain-language note for the patient.
Highlighted details never leave your device.
What your team uses AI for

Same AI tools. No identities.

Referral letters

Turn chart notes into a clear letter to the specialist.

Treatment explanations

Plain-language summaries of a treatment plan the patient can take home.

Insurance predeterminations and appeals

Draft the letter from the claim details.

Recall and post-op messages

Friendlier wording for reminders and instructions.

Hushtag catches: Patient names · birth dates · Alberta health card (AHCIP/PHN) numbers · insurance and member IDs · phone numbers · addresses · email addresses. Add your own client or patient list so every name is always hushed.

The rules you work under

Alberta privacy law, in plain words.

Dentists, dental hygienists and denturists in Alberta are custodians under the Health Information Act (HIA). Custodians must protect health information with reasonable safeguards, submit privacy impact assessments for new systems that handle identifying health information, and report breaches where there is a risk of harm.

A consumer AI chat is an outside company, usually outside Canada. Hushtag keeps identifying details on your computer so they don't go out in the first place. It doesn't make your office HIA-compliant on its own. The checklist below walks through the rest.

AI-safe office in a day · Alberta HIA practical checklist

Using AI in a dental office without putting patients in the prompt.

1. Are you a custodian?

Yes, if you're a regulated member of the College of Dental Surgeons of Alberta, the Alberta College of Dental Hygienists or the College of Alberta Denturists: the Health Information (Ministerial) Regulation designates regulated members of these colleges as custodians (regulation). The CDSA's privacy standard of practice also expects a dentist acting as custodian to have privacy policies and procedures, safeguards, and PIAs where the HIA requires them (CDSA standard).

Your front-desk, clinical and admin staff are affiliates under the HIA. The custodian stays responsible for how affiliates handle health information, including what they paste into an AI chat (Alberta.ca).

2. Why patient details in AI chats are a risk

  • It's a disclosure to an outside company. A consumer AI chat is a service run by another company, usually outside Canada. The OIPC's guidance for small custodians says Alberta's privacy laws apply when AI systems process health information, and asks you to check whether the provider uses data for purposes you may not have authority for, such as training its models (OIPC guidance).
  • New systems need a privacy impact assessment. Under section 64 of the HIA, custodians submit a PIA to the OIPC before implementing a new system or practice that collects, uses or discloses identifying health information (PIA guide). The OIPC has published specific PIA guidance for AI scribes (AI scribe guidance).
  • Breaches must be reported. If health information is lost or disclosed without authority and there is a risk of harm, the HIA requires notice to the affected people, the Information and Privacy Commissioner and the Minister (Alberta.ca, OIPC).
  • Regulators have looked at ChatGPT. Canada's privacy commissioners, including Alberta's, concluded the initial development of ChatGPT did not comply with privacy laws (joint report).

3. The steps (most offices can do them in a day)

  1. Policy (20 minutes). Adopt a one-page staff AI-use policy: what never goes into AI, de-identify first, who to tell if something slips. Free fillable template (Word/PDF).
  2. Tool (10 minutes per computer). Install a de-identification step so names, birth dates, health card and insurance numbers are replaced before text reaches the AI. Hushtag does this on each computer and restores the details in the answer. Lock the settings with a manager PIN so protection stays on.
  3. Staff training (15 minutes). Walk everyone through the policy and one real example: paste a sample letter, look at what was hidden, restore the answer. Have everyone sign.
  4. Record (ongoing). Keep a record that the safeguard is used. Hushtag's AI-use record lists the date, AI site and how many details of each kind were hidden on each computer, never the text itself. Download it monthly and keep it with the signed policy.
  5. Breach plan (10 minutes). Name the person who decides whether an incident is a reportable breach, and bookmark the OIPC breach notification page.
  6. Check with your privacy officer or college whether your planned AI use needs a PIA or other steps. This checklist is a starting point, not legal advice.

What this does and doesn't do. De-identifying before you paste reduces what reaches an AI company. It doesn't make an office HIA-compliant on its own, doesn't replace a PIA where one is required, and doesn't cover text staff type by hand without pasting, or files uploaded directly to an AI tool.

Sources

Links checked October 18, 2026. Laws and guidance change; follow the official versions.

The AI-safe office package

Everything above, set up for your office.

How it works

Hush, ask, restore.

  1. Paste as usualThe Chrome extension hushes details the moment text is pasted into ChatGPT, Copilot, Claude or Gemini in the browser. For PDFs, scans, Word and Excel, the web app makes a hushed copy in your browser.
  2. The AI works with hashtagsThe same person always gets the same hashtag, so letters and summaries still make sense.
  3. Real details go back inOne shortcut restores names and numbers in the answer, on your screen only.