Traci Tamiko Eto said she spent a year and a half trying to prevent Mayo Clinic that its AI strategy was compromising patient privacy and safety. She is now suing the Rochester, Minn.-based health system.
Below are six key takeaways from her retaliation lawsuit.
—Eto joined May in December The lawsuit said she joined Mayo as director of research operations, responsible for aligning the health system’s practices with federal AI governance standards and overseeing a team of 36 employees.
—She said she witnessed major AI security errors during her time at Mayo. Over the course of 18 months, Eto reported several lapses in Mayo’s compliance with federal AI rules, including circumvention of an institutional review board on a study of Mayo’s digital assistance tool, mishandling of patient data during de-identification processes, and unauthorized approval of cardiac surgery without appropriate institutional review, according to the complaint.
—Eto’s denunciation was ignored and ultimately punished, according to the complaint. The lawsuit alleged that Mayo executives were informed of Eto’s concerns but chose to prioritize speed and competitive advantage over compliance, thereby overruling its objections. In July 2025, Eto was demoted from her supervisory role and subsequently took medical leave under the Family and Medical Leave Act — a request Mayo initially denied before approving it once she retained an attorney, the complaint states. While she was on leave, she was informed that her position was being eliminated as part of a reduction in force that the suit claims only affected her role. Eto said she applied for 15 internal positions but was only granted one interview and was officially terminated on December 1, 2025.
—Eto said Mayo also tried to limit his professional position in the future. The complaint alleged that Mayo downplayed her role in a patent application for an AI tool she said she helped design, and that the health system maintained an internal “ghost file” system marking her as ineligible for rehire.
—Mayo said its AI practices were compliant. In a statement emailed to MedCité Newsthe health system said it is “committed to the responsible development and deployment of AI, with privacy, security, transparency and compliance built in throughout.” [its] process. » Although Mayo does not comment on active litigation, it has maintained that its “research and clinical innovation are conducted in accordance with applicable laws and regulations” and that it remains “committed to maintaining the trust that patients place in us and respecting their privacy.”
—Eto is seeking damages under several federal laws. The lawsuit, filed July 6 in the U.S. District Court for the District of Minnesota, claims under the retaliation provisions of the False Claims Act, the Americans with Disabilities Act and the Family and Medical Leave Act. Eto is seeking a jury trial, as well as back pay, prepayments, lost benefits, and compensatory and punitive damages.
Photo: boonchai wedmakawand, Getty Images