For Medical Billing & Coding Specialists ·
What you'll accomplish
By the end of this guide, you'll understand exactly what you can and can't do with free AI tools like ChatGPT (without violating HIPAA) and how to get set up with a HIPAA-compliant AI option for workplace use. You'll be able to use AI confidently for drafting appeal letters and PA narratives — with or without patient identifiers.
What you'll need
Before using any AI tool with patient information, you need to know one key rule: you cannot send Protected Health Information (PHI) to consumer AI tools like ChatGPT, Claude, or Gemini without a Business Associate Agreement (BAA).
PHI includes:
What you can do with free AI: Use de-identified information only — describe the billing scenario without any of the above identifiers.
What you should see: When you look at a free AI tool's terms of service, it will not include healthcare BAA provisions.
Troubleshooting: If your employer has a Microsoft 365 agreement with a healthcare BAA for Microsoft Copilot, you may be cleared to use it with PHI. Check with your IT department or compliance officer.
De-identification means replacing PHI with placeholders before sending to a free AI tool. This takes 30 seconds and is safe.
Original (unsafe): "Draft an appeal for Jane Smith, DOB 4/15/1962, Medicare ID 1EG4-TE5-MK72, denied 99213 on 1/15/2026 with CO-4."
De-identified (safe): "Draft an appeal for a Medicare patient who was denied CPT 99213 with CARC CO-4. The service was an established patient office visit for hypertension management."
The AI doesn't need the patient's name or ID to write a great appeal letter. You add those details yourself before submitting.
Create a simple template you can reuse. Open a text file (Notepad, Word, or Google Docs) and save this:
De-ID Appeal Template:
Payer: [PAYER NAME — no member ID]
Denied CPT: [CODE]
Denial reason: [CARC/RARC codes]
Patient type: [New/established, age range — no DOB]
Diagnosis: [ICD-10 code or condition — no patient name]
Clinical context: [brief clinical history — no identifiers]
Fill in this template for each appeal, then paste into ChatGPT or Claude.
What you should see: Consistently good AI output without any HIPAA exposure.
If you want to use real patient data in your prompts (faster, more accurate output), your practice needs a BAA-covered AI tool. BastionGPT is a healthcare-specific AI platform that:
To explore it:
What you should see: A platform designed for healthcare workflows with compliance documentation available.
Troubleshooting: BastionGPT is typically purchased at the organization level, not individually. Bring the option to your billing manager or practice administrator.
For any CO-50 (not medically necessary) denial:
Write a medical necessity appeal letter for [payer] who denied [CPT code] with CO-50. Patient is [age range, general condition]. The service was necessary because [clinical reason]. Request reconsideration with supporting documentation.
For CO-4 (inconsistent with modifier) denial:
Write an appeal letter for [payer] who denied [CPT code] with CO-4. Explain that modifier [modifier] was correctly applied because [clinical reason — e.g., separately identifiable service on same day]. Request reconsideration.
For timely filing denial:
Write an appeal for a timely filing denial from [payer] for [CPT code]. We can provide documentation showing the claim was originally submitted on [timeframe — e.g., within 90 days of DOS]. Request reinstatement.