The figure is striking: 46%. Almost one in two Italian general practitioners has already used generative artificial intelligence tools in their practice.[1] This is the figure presented by the Digital Health Observatory of Politecnico di Milano at its May 2026 conference. But the number that should give pause is the one that follows: in virtually all cases, these are ChatGPT and generalist platforms not designed for clinical use. Only 1 in 5 professionals uses specialised AI tools.
The Politecnico conference showed digital investments reaching EUR 2.47 billion in 2024 (+12% vs 2023). GenAI is growing rapidly, but Observatory Director Chiara Sgarbossa is explicit: "to provide support in healthcare it is essential to have dedicated, specific AI solutions capable of managing the sensitivity of health data and based on certified information".[3]
This disorganised adoption of generalist tools is happening precisely as Italy's regulatory framework becomes significantly more stringent. Three recent events change the picture:
The 2026 paradox
The moment generative AI adoption explodes among Italian physicians coincides exactly with the moment the rules governing its use become binding. A physician using ChatGPT with patient data today was not in a grey zone yesterday — they were already in violation. But now there is an explicit inspection plan and 40 scheduled assessments.
The problem is not AI itself — it is the wrong tool. A physician wanting to use AI to reduce administrative burden has every right to do so. In fact, it is the most sensible thing: according to the DREES, 25-35% of physicians' time is spent on documentation and administrative tasks. That is the share to free up.
The distinction is simple:
See also our articles on GDPR and medical AI in Italy and on how to choose a compliant AI tool.
What is the difference between ChatGPT and a dedicated medical AI tool?
The difference is fundamental on three levels. Legally: ChatGPT is hosted in the USA (CLOUD Act), has no legal basis for processing health data under GDPR Art. 9, and may use conversations to train its models. A dedicated medical AI is hosted in the EU or an adequacy zone, has a signed DPA, and never uses patient data for training. Clinically: ChatGPT generates plausible but unverified responses — it can hallucinate diagnoses, dosages or drug interactions. A dedicated tool integrates certified medical knowledge bases. Practically: a medical tool is designed for physician workflows (SOAP notes, transcription, letters), not generic conversations.
What does a physician risk by using ChatGPT with patient data?
A sanction from the Garante (Italian data protection authority). Health data is classified as a 'special category' under GDPR Art. 9 — processing it requires a reinforced legal basis and compliant hosting. OpenAI is an American company subject to the CLOUD Act. The maximum fine for violating GDPR Art. 9 is EUR 20 million or 4% of global turnover. The Italian Garante has included diagnostic AI in its 2026 inspection plan with at least 40 assessments in the healthcare sector.
What does the Politecnico di Milano's Digital Health Observatory say?
The Observatory, presenting data at its May 2026 conference, highlighted that generative AI adoption has grown rapidly but 'with serious issues regarding the use of non-dedicated tools'. Director Chiara Sgarbossa stressed that 'to provide support in healthcare it is essential to have dedicated, specific AI solutions capable of managing the sensitivity of health data and based on certified information'. Only 1 in 5 professionals uses specialised tools — the vast majority uses generalist platforms.
What is the EHDS and why does it matter for Italian physicians?
The EHDS (European Health Data Space) is the first European regulatory framework entirely dedicated to health data exchange. The regulation entered into force on 26 March 2025, and Italy installed its national coordination body on 5 May 2026. For physicians, it means that health data will increasingly flow across European borders according to strict rules — making it even more critical to use compliant, traceable AI tools rather than generalist platforms that offer no data sovereignty guarantees.
Not ChatGPT. Not a generalist tool. An AI designed for daily clinical documentation: SOAP notes, histories, referral letters. Hosted in Switzerland, GDPR Art. 9 compliant, data never used for training.
Try free for 14 days →