With all the excitement about Fable, here's how it affects healthcare companies:
TLDR Fable 5 is HIPAA compliant for *API usage* but not within Claude Code.
For API usage, you have to disable Zero Day Retention and possibly upgrade to a new type of BAA. They now require 30 day retention for Fable usage to flag safety issues, which is awkward at best for healthcare companies. They do commit to not training models on your data, which is good.
In general a lot of the best Claude features - including Cowork, remote control, and now Fable - are not fully HIPAA compliant. This is a huge bummer and I hope they make quick progress on this.