Artificial intelligence and governance

Artificial intelligence in healthcare: decisions, data and responsibilities

An automated recommendation can influence care even when the final decision remains with a professional. Understanding that influence makes it possible to assess technical, clinical and legal risks.

A tool embedded in everyday work

Artificial intelligence in healthcare does not always arrive as a new application. It may be built into electronic health records, triage systems or tools that organise examinations and results. An alert can change the priority assigned to care or highlight a finding that influences a professional’s assessment. Even when it does not make decisions autonomously, it takes part in the clinical process by determining which information is visible and when it appears.

It is therefore important to distinguish between displaying data, interpreting them and recommending a course of action. A system’s significance does not depend solely on whether it uses machine learning, but on its actual intended purpose, how it fits into work and the possible consequences of an error.

Errors, confidence and alert fatigue

A clearly presented automated answer may appear more reliable than it really is. In medicine, this creates a risk of overconfidence: a recommendation shapes professional judgment even without formally replacing it. The opposite effect also occurs. If an application generates too many irrelevant alerts, teams may begin to ignore them and overlook an important warning.

Errors also depend on the setting. An application trained on data from one hospital may not adequately represent patients in another region or of different ages. Changes in epidemiological patterns or clinical procedures may also alter a model’s performance over time. A responsible response is to monitor those outcomes, not to assume that an algorithm validated once will function indefinitely.

Validation in real-world settings

Validation must match the intended population and use. In pediatrics, it is not prudent to extrapolate automatically the performance of a model trained on adults to neonates, infants or adolescents. Nor is an overall score enough if the system performs worse for particular groups. It is necessary to understand which decisions it is intended to support, how its errors were measured and which limitations were identified.

A tool may be technically accurate yet harm the care process if it constantly interrupts consultations, delays reviews or encourages automatic responses. Assessing it means combining safety, usefulness, oversight and real working conditions. These questions help explain why adopting AI is an organisational decision as well as a technical one.

The different layers of regulation

In the European Union, several legal instruments may apply to the same tool. The AI Act sets requirements according to its classification and the roles of those who develop or use it; its application is phased. If the software has an intended medical purpose under the relevant legislation, the medical-device regime may also apply under the MDR or IVDR. Classification does not depend merely on an application being used in a hospital, but on its purpose, characteristics and the specific legal circumstances.

The GDPR governs the processing of personal data, including health data, and requires consideration of purposes, legal bases, safeguards and individual rights. The European Health Data Space, established by Regulation (EU) 2025/327, sets out rules on access to and use of electronic health data and applies in stages. These frameworks do not replace one another: they address different issues and may operate together under specific conditions.

Traceability and responsibilities

When a tool contributes to significant decisions, it should be possible to reconstruct which version was used, what data were entered, what output it produced and what review the professional carried out. Without that information, it is difficult to investigate an error, identify causes or justify a decision. Logs must be retained with suitable controls so that sensitive information is not exposed, and their usefulness depends on how they were generated.

Effective human oversight requires a genuine ability to understand, accept, challenge or disregard a recommendation. Institutions also need clear responsibilities for selection, deployment, monitoring and incident reporting. The fact that a third party supplies the system does not remove the need to examine the obligations of each participant.

A scenario to connect the concepts

A pediatric emergency department adopts a tool that classifies patients according to an automatically calculated risk. Its overall results are good, but its performance with infants has not been sufficiently assessed. The screen displays a low-priority recommendation. A clinician observes signs that justify reassessment and decides not to follow it.

A subsequent investigation should distinguish whether the model was suitable for that population, what information it received, which version was active, how its limitations were communicated and whether there was a genuine way to challenge its output. The scenario shows how clinical, technical, organisational and legal considerations interact.

The interface influences a decision even when it does not make it

A prominent warning, a red risk indicator or a recommendation displayed before the original data have been reviewed can influence a clinician’s attention. This effect does not depend solely on the model’s mathematical accuracy. Screen design, pressure on care services and the practical ability to review the underlying information also matter. Safety must be assessed across the whole process, not only from the result of an isolated technical test.

A useful test might compare how teams act with and without automated recommendations in simulated clinical scenarios. The point is not to delegate medicine to an interface, but to examine whether the tool helps identify relevant information or introduces distractions. Technical documentation should explain intended conditions of use, known limitations and available oversight mechanisms. This helps people integrating the system understand why an apparently precise output still needs additional controls.

Sources and further reading

Educational discussion based on the manuscript Inteligencia Artificial y Nuevas Tecnologías en Pediatría, by Mariano Enrique Torres Ponce and María Noel Arana. This mention identifies the underlying document; it does not imply publication in a journal or the assignment of a DOI.