AI Vibe Coding Leads to Exposed Patient Data and Privacy Violations in Swiss Medical App

Summary

A blog post by Swiss technologist Tobias Brunner details a case where a medical professional used AI-assisted coding tools to build a patient management application without adequate software engineering or security expertise. The resulting application reportedly exposed all patient data unprotected to the internet and sent patient voice recordings to AI services without patient consent, likely violating Switzerland's Federal Act on Data Protection (nDSG) and potentially other healthcare-related