Hospital boards need to draw one line before anything else: which agent work is administrative and which touches clinical decisions. With that line drawn, directors need tested literacy on depth, certification and expiry, the decision record, and who stays accountable. Clinical judgement stays with clinicians; the board's job is to make sure the agents around them are governed.
Where is the line between administrative and clinical work?
Agents arrive in hospitals through the back office: appointment scheduling, referral sorting, clinical coding, discharge letter drafts, supplier invoices. Some of that work sits close to care. A referral an agent sorts into the wrong queue delays a patient; a discharge letter with a wrong medication list is a safety incident.
The board should require every proposed use to be classified before it goes live. Purely administrative uses can run at higher depth once certified. Anything that shapes a clinical decision stays at depth 1 or 2, so the agent reads or drafts and a clinician decides. That classification is a board-level choice, not an IT one.
What must directors understand about agent authority?
- Depth. 1 read, 2 draft, 3 routine work within bounds, 4 money or hard-to-undo actions, 5 coordinating other agents.
- Earned, not configured. Depth comes from certification against the hospital's own cases. The role sets a ceiling, evidence sets the depth, the lower wins.
- Expiry. Certificates lapse after 90 days, and a run that clears no depth drops an agent to depth 1 the same day. A scheduling agent that suddenly drafts instead of booking changes the workload on ward clerks overnight.
- The record. Every verdict is filed append-only. After an incident, the hospital can reconstruct what the agent did, what it read and who approved it.
What stays with clinicians and staff?
| Work | Agent | Stays with a person |
|---|---|---|
| Booking and rebooking outpatient slots | Executes within bounds at depth 3 | Clinical prioritisation |
| Sorting incoming referrals | Reads and suggests at depth 1 | The triage decision |
| Drafting discharge letters | Drafts at depth 2 | Clinician review and sign-off |
| Clinical coding | Drafts codes at depth 2 | Coder approval |
| Paying suppliers | Prepares and holds at depth 4, if certified | Releasing each payment |
How does health data change the board's questions?
Health data is special-category data under GDPR, and in the US it is governed by HIPAA. Either way, the board must know which agents can read patient records, why, and who decided that. A narrow source list is a control: an agent that drafts discharge letters needs the episode record, not the patient's full history.
Provenance matters too. A fact sealed by the hospital's own patient record outranks a declared statement in a referral letter or an external document attached to an email. Staff who review agent drafts should know which is which, and the board should ask whether they do.
What should reach the clinical governance committee?
Ask for a short report each quarter covering:
- Every agent use, its classification and its depth.
- Certification dates, expiries and any failed runs.
- Incidents involving agents, each reconstructed from the record.
- The proportion of reviewers and approvers holding a current credential.
A readiness assessment in the hospital gives the baseline, and a plan to roll out AI agent training across the hospital closes the gaps. Programmes such as Pryme Intelligence Academy's Foundations track cover the director-level concepts in a few hours. The executive who leads the deployment should be examined more closely, for example through a board review by independent assessors. Compare the approach of a bank board, and see the full model in AI literacy and certification for people who work with agents.
Questions people ask
Can an agent ever make a clinical decision?
Not under the governance described here. An agent can read and draft to support clinicians, but the decision and the accountability stay with a qualified clinician.
Who on the board should own agent oversight?
Usually the committee that already owns clinical governance and patient safety, with the audit committee covering data and finance uses.
How much training do non-executive directors need?
A few hours of tested literacy on the concepts in this article. Approvers and clinicians who review drafts need more, on their own cases.