I help hospitals turn the EU AI Act, NIS2 and NEN7510 into practical lifecycle governance for clinical AI.
Physician & CEO @LifecycleGov • Brussels ⚖️📊
The governance challenge is often not lack of policy.
It is lack of operational visibility across deployed systems.
Across many healthcare organisations, AI systems are introduced incrementally:
• radiology tools
• documentation assistants
• operational optimisation
• vendor-embedded AI
• clinical decision support
Often across separate departments.
Over time, organisations may struggle to answer fundamental governance questions:
Which systems are currently active?
Which workflows are affected?
Who holds operational oversight responsibility?
Which systems may qualify as high-risk under the EU AI Act?
Is governance evidence audit-ready?
The governance issue is no longer theoretical.
It is operational.
Clinical AI governance increasingly requires:
structured inventory visibility
accountability assignment
lifecycle oversight
governance evidence maintenance
executive reporting
Operational governance is becoming a board-level capability.
https://t.co/oktIN6Ibzs
#AIGovernance #ClinicalAI #EUAIAct #HealthcareAI #HospitalLeadership
The Centaur Model represents a promising approach to responsible AI, combining human intelligence with machine capabilities to enhance decision-making processes.
This model emphasizes collaboration between humans and AI systems, ensuring that ethical considerations and transparency are at the forefront of AI development.
For those interested in a deeper understanding, a white paper is available upon request.
hashtag#AIGovernance hashtag#ResponsibleAI hashtag#CentaurAI hashtag#EUAIAct hashtag#HumanCenteredAI hashtag#AIethics hashtag#Transparency hashtag#LifecycleGovernance
For those who reached out with interest in the executive brief:
the Kindle edition of AI Governance Infrastructure is available for free download for the next five days.
You can access it here: https://t.co/hUQZdOIyPY
This window is part of the KDP Select launch cycle and offers open access to the full briefing for healthcare leaders, CIOs, and governance teams working on operational AI visibility.
If it supports your work or ongoing discussions, feel free to share it within your network.
Renewal isn’t seasonal — it’s structural. Every cycle is an opportunity to refine clarity, strengthen governance, and lead with purpose.
https://t.co/cJOZUesHDU
Independence in AI governance is not determined by who pays, but by how control, accountability, and incentives are structurally separated.
In practice, it requires:
• Structural separation — governance sits outside delivery and implementation
• Auditability — oversight is traceable, documented, and reviewable
• Incentive neutrality — no linkage to deployment, vendor selection, or commercial outcomes
This is where most models fail.
Our approach is to position governance as a dedicated operational layer, independent from delivery.
Not advisory, but assignable, measurable, and auditable in real time.
This allows organisations to implement AI while maintaining credible, regulator-aligned oversight.
Outcome: materially stronger trust, audit readiness, and compliance posture.
Under the EU AI Act, this is moving from best practice to expected architecture.
If your board asked today:
“Are we compliant with the EU AI Act?”
Could you answer with evidence?
Not policy.
Not intention.
Not assumptions.
Evidence.
In most hospitals, the answer is still no.
Not because AI is not used —
but because governance is not operationalised.
No clear inventory of AI systems.
No classification of high-risk use.
No ownership of decisions.
This is where the real gap sits.
AI governance is not a future requirement.
It is already a board-level responsibility.
Most clinical AI in hospitals is bought, not built.
That makes hospitals deployers under the EU AI Act — with real obligations from 2 Aug 2026. Oversight, logging, incident reporting, staff information.
Are your vendor contracts ready?
���High-risk AI” is widely mentioned.
Few understand what it actually requires.
Under the EU AI Act (Regulation (EU) 2024/1689), high-risk systems must meet strict operational standards.
This is not theoretical.
It translates into concrete requirements:
• A documented risk management system
• Use of high-quality, relevant, and unbiased data
• Technical documentation sufficient for audit
• Built-in logging capabilities
• Clear human oversight mechanisms
• Accuracy, robustness, and cybersecurity safeguards
And this is just the baseline.
For hospitals, this means:
→ You must verify that these requirements are actually met
→ You must be able to demonstrate this during audit
→ You must monitor performance continuously in real-world use
Not once. Ongoing.
What I see in practice:
→ AI systems are implemented without full documentation
→ Limited visibility into model performance over time
→ No structured monitoring or audit trail
This creates a false sense of compliance.
Important distinction:
Having AI in production
is not the
Where hospitals are currently failing on AI governance (2026 readiness)
Across organisations, I see the same pattern emerging.
AI is being used.
Governance is not keeping pace.
The most common gaps:
• No central AI system inventory
• No clearly assigned governance owner
• Vendor contracts not aligned with EU AI Act obligations
• No structured monitoring or incident reporting
• Limited or absent audit documentation
• No clear classification of high-risk systems
Individually, these seem manageable.
Combined, they create systemic exposure.
Because under the EU AI Act, compliance is not based on intent —
it is based on demonstrable control.
What this means in practice:
→ You must know which AI systems are in use
→ You must know their risk classification
→ You must show how they are governed
→ You must evidence this continuously
What concerns me most:
Many organisations assume they have time.
But governance takes longer to implement than technology.
2 August 2026 is closer than it appears.
Question for hospital leadership:
Which of these gaps exist in your organisation today?
#EUAIAct #HealthAI #ClinicalAI #HealthTech #AIGovernance
If you’re a hospital preparing for the EU AI Act, where do you start?
Not with tools.
Not with vendors.
Start with governance.
A practical starting point:
Create a central AI system inventory
→ What is currently in use?
Classify systems under the EU AI Act
→ Which are high-risk?
Assign clear governance responsibility
→ Who is accountable?
Review vendor contracts
→ Are deployer obligations covered?
Establish monitoring & incident processes
→ Can you detect and report issues?
Build audit-ready documentation
→ Can you demonstrate compliance?
Simple in structure.
Complex in execution.
Because this is not a one-time exercise —
it is an ongoing governance function.
The shift is clear:
AI adoption is no longer the challenge.
Accountability is.
Question for healthcare leaders:
Where is your organisation starting?
#EUAIAct #HealthAI #ClinicalAI #HealthTech #AIGovernance
“We didn’t build the AI, so we’re not responsible.”
This is one of the most common misconceptions I encounter.
Under the EU AI Act, hospitals are typically not developers — they are deployers.
And deployers carry direct legal obligations.
From 2 August 2026, organisations using high-risk AI systems must:
• Ensure use aligns with vendor instructions
• Assign appropriately trained human oversight
• Monitor performance and report serious incidents
• Maintain logs (minimum 6 months)
• Inform users and patients where required
This applies regardless of whether the system is internally developed or externally procured.
In practice, I often see:
→ Vendor contracts focused on procurement, not compliance
→ Responsibilities between supplier and hospital insufficiently defined
→ Oversight roles not formally assigned
Key point:
You do not need to build the AI
to be accountable for its outcomes.
Question for leadership teams:
Are your current vendor agreements aligned with your obligations as a deployer?
hashtag#EUAIAct hashtag#HealthAI hashtag#ClinicalAI hashtag#HealthTech hashtag#AIGovernance