Resources

Responsible Use of AI in Health Care: Guidance from The Joint Commission and CHAI, The Joint Commission & Coalition for Health AI, 2026.

This guidance recommends that hospitals establish multidisciplinary AI governance, validate AI models on local patient data and workflows before use, and continuously monitor for drift, bias, and performance issues after deployment. Leaders should care because it makes clear that responsibility for AI safety, oversight, and accountability sits with the healthcare organization using the tools, not just the vendors supplying them.

Regulatory Bodies & Legal Implications

The EU AI Act Single Information Platform, European Commission AI Act Service Desk, 2024.

This interactive platform helps organizations determine whether they're subject to the EU AI Act's legal obligations and guides them through compliance steps. The AI Act, which entered into force on 1 August 2024, establishes harmonized rules for trustworthy AI across the EU, using a risk-based framework that imposes requirements based on an AI system's potential impact on health, safety, and fundamental rights. Leaders should care because any organization deploying or developing AI that touches the EU market needs to understand its obligations under this regulation—and this official service desk provides the authoritative starting point for compliance.

AI Governance Vendor Report 2026, International Association of Privacy Professionals (IAPP), 2026.

This comprehensive report catalogues over 70 AI governance vendors across four categories: policy and compliance tools, technical assessments and evaluations, assurance and auditing services, and consulting and advisory firms. The report provides a framework for understanding what different vendors offer and includes detailed profiles of each company's focus areas, sectors served, and capabilities. Leaders should care because selecting the right external partners for AI governance is increasingly critical—and this vendor landscape analysis helps organizations identify which types of support they need and who can provide it.

Commission Guidelines on Prohibited Artificial Intelligence Practices (AI Act), European Commission, 29 July 2025.

These official guidelines explain which AI uses are considered unacceptable and illegal under the EU AI Act and how regulators will interpret and enforce those prohibitions.

The document outlines banned practices such as:

  • Manipulative AI

  • Social scoring

  • Emotion recognition in workplaces

  • Biometric categorisation of sensitive traits

  • Predictive criminal profiling, and

  • Real-time facial recognition in public spaces.

Critically, the prohibition applies not only to vendors placing AI on the market, but also to organizations using AI systems in these ways. This resource clarifies where AI governance shifts from risk management to legal exposure and highlights why visibility into how AI is used across workflows is now a leadership responsibility.

The Five Key Questions to Ask in the Board on AI, Bas Overtoom (Nemko Digital), 26 January 2026.

This paper outlines five diagnostic questions boards should ask to reveal the true maturity of their organization’s AI governance, focusing on accountability, visibility of AI use, human decision boundaries, continuous oversight, and third-party risk.

Leaders should care because these questions expose whether AI is being deliberately governed or quietly adopted through workflows, vendors, and local experimentation without clear ownership or evidence of control.

Strategy

Guide on Departmental AI Responsibilities, Government of Canada (Office of the Chief Information Officer), 16 January 2026.

This official guide clarifies recommended functions and responsibilities for adopting and governing AI within federal departments, emphasizing multidisciplinary governance, alignment with data strategy, and effective risk management. Leaders should care because it outlines how AI initiatives should be structured, governed, and evaluated to ensure responsible, consistent, and value-driven deployment across complex organizational environments.