Each week, we schedule our rounds with Healthcare Brew readers. Want to be featured in an upcoming edition? Click here to introduce yourself. There’s an oft-repeated adage in healthcare right now: An AI model is only as good as the data it’s trained on. This truth has turned patients’ health information into a hot commodity. Healthcare organizations are increasingly using it to build AI-fueled drug discovery models, digital twins, and clinical trial emulations. Eli Lilly is one such company. The trillion-dollar biopharma not only has its own vast library of 500,000+ data points but is also collecting data from other biotech companies in exchange for allowing those companies to use its AI models. But as the collection and use of patient health information grows, so does its risk of compromise. Around 57 million patients’ healthcare records were exposed in 2025, per a preliminary count by the HIPAA Journal. Alongside patients’ personal information, healthcare giants also have to guard their intellectual property and trade secrets. It’s not always easy, particularly when considering that many healthcare leaders have decades’ or even a century’s worth of files, sometimes stored on outdated legacy technology. So how do major healthcare innovators balance their ambition with caution and make sure their work is secure? Andrea Abell, chief information security officer (CISO) at Eli Lilly, sat down with Healthcare Brew at CES to discuss her role. See the full conversation here.—CC |