Tag
This paper examines privacy risks in clinical foundation models, where model-mediated leakage can enable patient re-identification despite de-identification. It proposes a practical risk assessment framework and maps realistic leakage scenarios to legal regimes like HIPAA and GDPR, offering combined technical and legal mitigations.