Anything that touches clinical judgement or a patient’s health information beyond routine administration. Clinic practice managers should never let an agent advise on symptoms, share results, disclose health data to anyone unverified, alter a clinical record, cancel clinically urgent appointments, answer complaints alleging harm, or chase patients the clinic knows are in difficulty. Each belongs to a person.
What are the red lines?
| Never let the agent | What could go wrong | Who decides instead |
|---|---|---|
| Advise on symptoms or decide urgency | A serious condition is booked as routine | The duty clinician |
| Confirm, explain or hint at test results | A patient learns bad news by message, or misreads a normal one | The clinician who ordered the test |
| Disclose health information to anyone not verified, including family | A breach of special category data | The manager, after identity and consent checks |
| Change anything in a clinical record | The record no longer reflects what the clinician wrote | The clinician who made the entry |
| Cancel or move a clinically prioritised appointment | Delay to urgent care | The clinician or manager, with the patient told directly |
| Reply in substance to a complaint alleging clinical harm | Admissions or denials that should be reviewed first | The manager with the clinical lead |
| Send payment reminders to patients flagged as vulnerable or bereaved | Distress and a complaint | The manager |
Why are these lines fixed, however good the agent becomes?
Because the agent is administrative by role, and these actions are clinical or deeply personal. A governed agent works within five bounds at once: its role scope, its certificate, its sources, the clinic’s own limits and the platform guardrails. Clinical work is outside the role scope of any administrative agent, so it is refused. The data protection lines sit in the clinic’s own limits.
Health data is special category data under GDPR, and in the US falls under HIPAA. Mistakes here are not recoverable by an apology: once information is disclosed, it cannot be taken back. That is the test for a red line: hard to undo, and personal.
Which line is most often crossed by accident?
Disclosure to family. A spouse calls to ask whether their partner’s appointment went ahead and what the doctor said. A parent of an adult child emails asking for a copy of a letter. The request sounds reasonable, and an agent trained to be helpful might want to answer.
A well-governed agent treats the caller’s claim to be family as declared, not verified, and holds the request. The manager must not then approve it on sympathy. They check consent on file and identity, and if there is no consent, the answer is a polite refusal and a suggestion that the patient makes contact.
What does a red line look like in the held queue?
Take a practice manager at a dermatology clinic. A held item proposes cancelling and rebooking twenty appointments because a consultant is away next week. Most are routine reviews. The agent has held the batch because it exceeds its limit on bulk changes.
Opening the list, the manager sees three patients on an urgent suspected-cancer pathway, marked clinically urgent. The agent had the appointment type but not the clinical priority. The manager removes those three, arranges cover with another consultant, and approves the rest. They ask the agent owner to add clinical priority as a source and to refuse bulk cancellation of urgent appointments.
The review method is set out in how clinic practice managers review an agent’s decisions. Risk managers hold related lines at an organisational level; see what risk managers should never let an agent do.
How should a clinic keep these lines in place?
Write them into the clinic’s own limits, so the agent refuses or holds each one. Agree trigger words with the clinical lead. Brief reception and admin staff, who review held items, on each line with real examples. Check the agent’s certification dates: certificates lapse after 90 days, and a run that clears no depth drops the agent to depth 1 the same day, sending all booking work back to the desk.
Rules differ by country. Compare clinic practice manager training in the Netherlands and in Kenya. Why the manager is the safeguard is argued in why clinic practice managers are the real control. The overview is in AI agent skills by role.
Questions people ask
Can the agent tell a patient their results are ready?
It can send a neutral message asking them to contact the clinic or log in, if the clinic’s policy allows. It should not say anything about the content.
Can the agent book urgent appointments?
It can offer urgent slots when a clinician has marked the need. It should not decide that a need is urgent.
What if a patient sends symptoms out of hours?
The agent should reply with the clinic’s approved urgent-care guidance and route the message to the next available clinician.