The Checkable Controls Are Already Written Into Federal Rule
ONC's HTI-5 and CMS-0057-F already specify the kind of checkable AI control health systems have been debating abstractly.
HIPAAbriefings.
The Merger Clause Nobody's Underwriting
Hospital M&A due diligence checklists have no line item for inherited AI model inventories, and two live deals show why that gap is now material.
When the Scribe Starts Writing Orders
Ambient AI is moving from transcribing encounters to placing orders and updating charts, crossing a governance line hospitals have not yet staffed for.
Ambient Documentation Is Becoming Clinical Infrastructure, Not a Convenience Feature
As AI scribes specialize by setting and plug into revenue cycle workflows, health systems need governance for notes that double as the legal and billing record.
Prior Authorization AI Is Scaling Faster Than the Rules Meant to Govern It
Utilization management AI is automating prior authorization ahead of any finalized federal oversight, leaving NIST AI RMF and HIPAA as the only real guardrails.
Clinical AI Already Has Rules. Most Deployments Sit Outside Them.
The real governance decision for health systems is not whether to build an AI committee, but which deployments already sit inside CLIA, ONC certification, or HIPAA, and which sit in open air.
The Breach Behind Healthcare's AI Interoperability Push
A 20 million-person Oracle Health breach exposes a certification gap: AI riding on certified EHR pipes answers to no one in particular.
Epic's Connectors Turn Data Access Into Action Access
Epic's new Connectors let AI agents act inside third-party apps, shifting health system compliance focus from data sharing to agent authorization and auditability.
Hospitals Are Granting AI Agents the Keys. Few Have Mapped the Locks.
As agentic AI moves from drafting text to taking action in hospitals, authority mapping and accountability frameworks are lagging behind deployment.
The Federal AI Health IT Floor Just Dropped. The Governance Burden Didn't.
ONC's HTI-5 rule narrows federal health IT certification just as agentic AI deployment accelerates, shifting real oversight onto voluntary frameworks and liability law.
When Patients Hand Their Records to an AI Agent, Who Is Governing What Happens Next
Athenahealth and Zocdoc now route patient records into third-party AI agents, and HHS just deferred the rule change that would address it.
CMS-0057-F Turns AI Governance Claims Into Testable Controls
A binding prior authorization deadline, not a voluntary standard, is now the test of whether healthcare AI vendors can show real control mapping.
The Claims Pipeline's Real Risk Isn't AI vs. AI. It's No One Verifying Either Side
Providers and payers are both automating the claims lifecycle with AI, but governance visibility hasn't kept pace with either deployment.
When the Scribe Starts Talking to Patients
Ambient AI vendors are moving from note-drafting scribes to patient-facing intake agents, and most health systems haven't re-run the risk assessment for that leap.
The Breach Wasn't the Algorithm. It Was the Spreadsheet.
A Johns Hopkins data exposure shows the nearest-term AI risk in hospitals is unauthorized employee tool use, a gap neither model governance nor AMA's new accountability framework covers.
