Healthcare AI Fails at the Data Layer: Privacy, Governance & Trust | Sid Dutta
Send us Fan Mail [https://www.buzzsprout.com/2550733/fan_mail/new]
Sid Dutta is a 24-year cybersecurity veteran, former data-protection executive at American Express, Worldpay, Activision Blizzard, and OpenText and Founder & CEO of Privaclave AI. His work targets the layer most healthcare AI conversations ignore: the runtime data layer where pilots actually stall.
In this episode, Chris Hutchins and Sid examine why healthcare data governance is the bottleneck in clinical AI, what privacy-preserving AI looks like in practice (tokenization, federated learning, secure enclaves, differential privacy), how organizations can collaborate on PHI without exposing it, why static perimeter controls fail in non-deterministic AI workflows, what healthcare leaders get wrong about vendor risk, and the shift from "block first" to enabling controlled data usage at runtime.
For health-system executives, CIOs/CISOs, data and compliance leaders moving AI from pilot to production without compromising patient trust.
What We Cover
• Why healthcare AI initiatives stall before models are ever deployed
• How runtime data protection differs from static perimeter controls in non-deterministic AI workflows
• What privacy-preserving AI actually means in practice — tokenization, federated learning, secure enclaves, differential privacy
• Why cross-institutional research breaks down when data leaves an EHR boundary
• Where shadow AI emerges — and how to remove the friction that creates it
• What separates trustworthy AI infrastructure from a checkbox compliance posture
Key Takeaways
The bottleneck is the data layer, not the model. Healthcare AI does not fail because the model is wrong. It fails because the data layer cannot be governed safely as data moves between systems, copilots, and agents.
Static security models break in AI workflows. Encryption at rest and in transit clear an audit checkbox without protecting data once it leaves an EHR. Runtime, context-aware controls are the only governance that survives non-deterministic agents.
Stop framing privacy and access as opposing forces. Privacy-preserving infrastructure is the unlock for cross-institutional research, real-time clinical decision support, and partnerships that have been blocked for compliance reasons.
Trust comes from technical enforcement, not contracts. Data-sharing agreements describe intent. Auditability, traceability, and runtime policy enforcement deliver it.
Block-mode is a sign of immaturity. Organizations that default to "deny" instead of enabling controlled data usage are signaling that their governance model is not ready for AI partnerships.
Frameworks & Tools Mentioned
• Tokenization, format-preserving encryption, deterministic encryption
• Homomorphic encryption, federated learning, differential privacy
• Trusted Execution Environments (confidential computing, secure enclaves)
• Data Discovery & Classification / DSPM (Data Security Posture Management)
• Runtime context-aware access controls and intent-based policy enforcement
• Data clean rooms for cross-institutional analytics and research
Chapters
00:00 - Cold open and guest introduction
02:14 - Why healthcare AI stalls before models deploy
07:04 - Data sharing, regulations, and runtime control
11:58 - What privacy-preserving AI actually means
16:54 - What becomes possible: cross-institutional research at scale
22:04 - Misconceptions and the rise of shadow AI
27:48 - Why cross-institution collaboration is hard
31:00 - Privacy-preserving infrastructure as the partnership unlock
35:31 - Infrastructure vs models: the underestimated data layer
40:19 - Building trustworthy AI: governance and shared accountability
43:09 - Signals an organization isn’t ready
48:55 - From institutional to network-centric data ecosystems
55:21 - What leaders should pay attention to right now
About Sid Dutta
Sid Dutta is the Founder & CEO of Privaclave AI and a 24-year cybersecurity veteran with more than a decade leading data protection and privacy engineering at scale. Before Privaclave, he was Vice President of Data Protection & Privacy Engineering at Activision Blizzard (Microsoft Gaming), Product Head of Voltage SecureData at OpenText (formerly Micro Focus), Vice President & Global Head of Data Protection & Applied Cryptography at Worldpay, and Director of Cryptographic Utilities & Services at American Express. He holds nine issued patents in cryptography, blockchain, and tokenization, with one additional patent pending, and has served on multiple vendor and cybersecurity advisory boards.
About The Signal Room:
The Signal Room is a podcast exploring leadership, ethics, and innovation in healthcare and artificial intelligence. Hosted by Christopher Hutchins, Founder & CEO of Hutchins Data Strategy Consultants.
Support the show [https://www.buzzsprout.com/2550733/support]
About The Signal Room: The Signal Room is a podcast and communications platform exploring leadership, ethics, and innovation in healthcare and artificial intelligence. Hosted by Christopher Hutchins, Founder and CEO of Hutchins Data Strategy Consultants. Leadership, ethics, and innovation, amplified.
Website: https://www.hutchinsdatastrategy.com
LinkedIn: https://www.linkedin.com/in/chutchins-healthcare/
YouTube: https://www.youtube.com/@ChrisHutchinsAi
Book Chris to speak: https://www.chrisjhutchins.com