What Hospital Boards Get Wrong About Healthcare AI And Why It Matters to You

Health system boards are approving eight-figure AI investments without a governance framework that tells them what they are actually approving. They are receiving technology presentations. What they need are risk assessments.In this episode, Dr. Sarah Matt breaks down what boards are actually approving when they approve AI investments, three misconceptions shaping board-level AI decisions, six questions every board should be asking before any investment vote, and how physician executives can bring governance concerns to the board table in language boards will act on.What you will take away:- What boards are approving and what the approval explicitly does not include- Three board-level misconceptions creating downstream clinical and operational risk- Six questions boards should ask their executive teams before any AI investment vote- How to frame governance concerns in fiduciary risk languageWebsite: https://drsarahmatt.com | Book a conversation: https://calendly.com/sarahmattmd | LinkedIn: https://www.linkedin.com/in/sarahmattmd/

—

Resources & Links:

📖 Get the Book: "The Borderless Healthcare Revolution" is available now on Amazon and major retailers.

💼 Work with Dr. Matt:
Looking for a keynote speaker or strategic advisor?
Visit: drsarahmatt.com

🔗 Connect on Social:
LinkedIn: https://www.linkedin.com/in/sarahmattmd/
YouTube: https://www.youtube.com/@DrSarahMatt-ClinicalRealist

📧 Subscribe to The Briefing: drsarahmatt.com/newsletter-signup
 
—
Disclaimer:
The views expressed on this podcast are those of Dr. Sarah Matt and her guests. They do not necessarily reflect the official policy or position of any affiliated institutions. This content is for informational and educational purposes only and does not constitute medical advice or a professional consulting relationship.

Transcript

SPEAKER_00 0:00

Health system boards are approving eight-figure AI investments without a governance framework that tells them what they're actually approving. They're being given technology presentations. What they need are risk assessments. The difference between these two things will determine whether AI becomes a competitive advantage for their health system or their next public performance crisis. I'm Dr. Sarah Matt. This is a show for physician executives, technologists, and health system leaders working at the real edge of AI strategy. Today's episode is aimed at the board conversation, specifically what hospital boards are getting wrong about healthcare AI investment and what that means for every physician executive and clinical leader who's accountable for the downstream results of those decisions. So I want to be direct about the audience. If you're a CMO or CMIO, a CNIO, a CHIO, if you're a clinical leader, this episode gives you language for the board conversation you may need to initiate. So if you're on a health system board, this episode is a framework for the questions you should already be asking your executive team. Either way, the governance gaps at the board level are shaping your clinical reality. Let's talk about them. So the core argument here is one sentence. Health system boards are approving capital expenditures and enterprise software contracts, not governance structures. Those are not the same thing, and the difference matters enormously. Here's what board AI approval typically looks like. The CFO presents a business case with a three-year ROI projection. Of course it does. IT or a consulting firm presents a technology overview. The board votes to approve the budget line. That's what get called, that's what gets called board level AI governance in most health systems. I mean, that's it. What's absence from that process is an actual governance framework that specifies who's clinically accountable for each AI deployment, what the criteria are for pausing or stopping a tool when a safety signal appears, how performance will be monitored after go live, and what the board will be told and when if something goes wrong. Boards are approving the spend. They're not approving the governance. That gap means that when a deployment underperforms or causes harm, there's no board level framework that explains what was supposed to happen. So let me put that more concretely. I attended a board presentation for a large health systems AI investment proposal. It was well-structured, 60-minute session. The CFO walked through the ROI model, the chief digital officer presented the vendor's capability demonstrations, and the CIO covered the integration timeline. 90 minutes of airtight, airtime, and not one slide covered who would be the named clinical accountability owner for the deployment, what performance data the board would receive and on what cadence, or what organizational authority existed to pause the deployment if a safety signal appeared post-launch. The board approved the investment. The governance framework that would have answered those questions did not exist. And no one on the board even asked for it. So this is not a story about a bad board. This is a story about a board that was given the information it was given and asked to make a decision with it. What the board was not told is that approving the spend without approving the governance structure is in itself a governance failure. And most boards don't know what they don't know here. Again, it's new for most of them. There's also a fiduciary dimension worth naming directly. Board members have fiduciary responsibility to the institution. In traditional capital investment decisions, fiduciary responsibility means understanding the financial risk. In AI decisions, financial risk and clinical risk are inseparable. And most board members are not equipped to evaluate clinical risk. And that's not a criticism. It's a structural gap that requires physician executive input or other clinician executive input at the board level, not just at the operational level. So when a board approves an AI investment without a clinical executive's clinical risk assessment on the table, they're making a fiduciary decision with incomplete information. Now, the clinical executives who bring that assessment, they're not being difficult. They're fulfilling a gap in the board's decision-making capability. So three specific misconceptions at the board level are shaping eye investment decisions in ways that create operational and clinical risk downstream. And I want to name each one directly. The first misconception is our vendor is accountable for performance. So boards hear vendor performance guarantees at the business case stage. I mean, this is SLAs on uptime, right? What they don't hear is what those guarantees actually cover and what they explicitly do not cover. Now, most AI vendor performance guarantees cover system uptime, right? Technical specifications, they don't cover clinical outcomes. So when a deployment underperforms clinically, the vendor is within the contract terms and the health system is holding the clinical accountability. And that's not a vendor betrayal. It's a construct in the contract. And most boards are never seen, have never seen it explained to them very plainly. So, you know, the board is approving the investment based on a vendor promise. Now, the vendor delivered on what the contract actually said they would deliver. And the gap between what the board understood they were buying and what the contract actually specified is where the institutional risk lives. So a clinical executive who walks into a board presentation and says, I'd like to review the vendor's contract language on clinical accountability before this vote is not slowing down a good decision. They're protecting the board from making an uninformed one. Now, the second misconception is that physician buy-in is a change management problem we can handle after launch. Insert whatever other clinicians you want there. The nurse buy-in is a change management, the PT, the physics, whatever it is. Boards see clinical staff resistance to AI tools as a communication and trading problem. Something to solve with education campaigns, shiny stickers, and workflow champions post-launch. What it actually is, in most cases, is a governance design signal. So clinical staff resist tools that were selected without their leadership, having genuine authority in the process. So that resistance is not irrational. It's actually a rational response to being accountable for tools you did not have authority over. So when a clinician knows, a physician, for example, that the CMO's role at a procurement cycle was to validate a decision already made rather than to shape the decision, they trust the resulting tool less. Not because they're anti-technology, but because they know that clinical judgment was not structurally in the room when the tool was selected. Now, boards tend to treat physician, nurse, pharmacist, et cetera, resistance as a change management problem. And this will keep funding change management. And this will keep funding change management campaigns. Boards that treat physician resistance as a change management problem will keep funding change management campaigns and keep getting the same result. The structural fix is not better communication about the tool. The structural fix is genuine clinical authority in the selection process. Third misconception is our AI governance committee handles governance. First of all, that's hilarious. Most health systems have stood up maybe an AI governance committee in response to institutional pressure to have a governance structure. That's a reasonable response to a real pressure. But committees are not governance. A committee that meets quarterly to review vendor performance reports, that's not the same thing as named clinical accountability. Define stopping criteria and explicit authority to halt a deployment, for example. A committee can recommend, a committee can advise, a committee cannot, by its nature, act with the speed that a clinical safety signal sometimes requires. So boards that equate committee existence with governance adequacy are significantly underestimating their institutional risk. So the question to ask is not, do we have a committee? Heaven help me. The question is who has the named authority to stop a deployment if a safety signal appears? And can they act without calling a committee meeting first? So what boards should actually be asking their executive teams? There's six questions. So if your board asks these before every AI investment approval, the quality of AI governance in your health system would improve immediately. So I'm going to give them to you in the order I think they matter most. Question one: Who's the name clinical executive accountable for this deployment and what is the scope of their authority? Not the CMO's office, a specific person by name with a defined authority scope. If the answer is a committee, ask again. Committees advise. A deployment needs an accountable individual whose professional standing is connected to the outcomes because that connection is what ensures the monitoring and governance actually get done. Question two. What are the criteria for stopping or pausing this tool after deployment? And who has the organizational authority to act on those criteria? This needs to be in the actual deployment plan before the board approves the budget. Not defined after a problem occurs. The criteria for stopping deployment are always easier to find before you're in the middle of a vendor relationship, a capital investment, and organizational momentum behind expansion. Question three. What is the validated scope of this tool and does our planned deployment match that scope? If the vendor validated the tool on a different patient population or in a different workflow context, the board is approving deployment outside the evidence base. And that's a risk the board should understand before approving the spend, not discover after the deployment is underperforming. Question four. What will you tell us and when if this deployment is not performing as projected? Define the performance reporting cadence and the threshold that triggers a board-level conversation before it becomes a crisis conversation. Boards often receive AI performance updates only when things are going well. The governance question is what triggers the conversation when they are not. Question five. So what does our vendor contract say about our clinical accountability if the tool produces an output that contributes to a patient harm event? Your legal team should be able to answer this in plain language. If they can't, that's information about the adequacy of the contract review process. Boards that approve AI investments without a plain language summary of their clinical liability exposure in the event of adverse outcomes are making incomplete fiduciary decisions. Question six, does the clinical or physician executive who will be accountable for this deployment have genuine authority to pause or stop it if they identify a safety signal? Not ceremonial oversight, actual organizational authority with the ability to act without needing executive consensus. If the clinical executive who is accountable for outcomes must seek approval from a committee before pausing a tool with an active safety signal, you have accountability without authority. And that's the most dangerous governance structure in clinical AI, and it's the most common one too. So getting governance right at the board level requires clinical executives to initiate the conversation, not wait to be asked. And most are waiting. Why? Because physician, nurse, pharmacy executives have been conditioned over careers to bring operational execution to boards, not strategic risk framing. Telling a board that their AI governance structure is adequate feels like overstepping. I'm telling you it's not. It's the job. The framing that works is fiduciary risk language, not clinical objection language. So when you frame physician governance concerns as fiduciary risk, institutional liability exposure, regulatory risk, the accountability gap that exists between approved spend and name clinical oversight. Boards understand it because that's their vocabulary. I am concerned about clinical outcomes. That reads as physician caution. I need the board to understand that we are approving a capital expenditure without an approved governance structure, and that gap creates institutional liability. That reads as board level input. Same concern, very different reception. So the specific ask is three things. First, a board-approved governance framework that specifies named accountability before each deployment. Not after, before. Second, explicit organizational authority for the named clinical executive, physician, nurse, pharmacist, you name it, to pause a deployment when a safety signal actually appears without needing to call a committee meeting. Third, a performance reporting cadence that reaches the board, not just the executive team. And here's what I have seen happen when physician executives bring this framing to the board. I worked with a CMIO at a regional system who had watched two AI deployments underperform significantly in an 18-month time frame. Neither deployment had a named physician accountability owner at the outset. Neither had documented stopping criteria. Both had governance committees that met quarterly. So when a third major AI investment came before the board, she asked for 15 minutes before the vote. She presented one page. On the left side, what the proposed deployment was approving. On the right side, the governance structure, the deployment required to be viable. She did not argue against the investment. She argued for the governance framework that would make the investment succeed. The board voted to approve both the investment and the governance framework, which they had never actually been asked to approve before. And that framework took four weeks to build and three years to become normal operating procedure. The CMIO told me that the board presentation was literally the hardest professional conversation she'd ever initiated in her entire career. It was also perhaps the most consequential. So most boards, when they understand the liability exposure that the current governance gap creates, they're going to want to close it. And they're not indifferent to the problem. They have not been given the programmatic problem in language they can actually act on. Clinical executives who bring it in that language, they're going to get the governance structure they need. So health system boards are not the obstacle to good AI governance. The absence of a clear governance framework, one that assigns accountability before deployment, not after, that's the obstacle. And fixing that requires doctors, nurses, pharmacists, all those clinical executives who are willing to bring the conversation to the board table in the duchier risk language, not clinical objection language. The investment is already being approved. The question is whether the governance structure that makes that investment actually viable is going to be approved alongside it. Right now in most health systems, that's not the case. So that's a solvable problem, but it does not solve itself. So I'm Dr. Sarah Matt, new episodes every Wednesday. If you found this useful, share it with a clinical executive who has a board presentation coming up or send it to the board member who just asked why your health systems AI deployment isn't performing as projected. Start the conversation.