Managing AI Tools: Oversight, Risk, and Compliance in Practice

AI tools are increasingly embedded in healthcare operations, from EHR functionality and clinical documentation to coding, compliance research, revenue cycle, HR, and vendor platforms. In this episode of PYA's Healthcare Regulatory Roundup, Valerie Rock, Miriam Murray, and Erin Walker discuss how healthcare organizations can use AI while building governance, oversight, and risk management processes around it. The conversation covers AI inventories, shadow AI, data privacy and security, minimum necessary data standards, human-in-the-loop review, compliance program integration, frontline reporting channels, vendor due diligence, contract protections, and ongoing monitoring. The presenters emphasize that AI can support efficiency, but organizations remain responsible for knowing where AI is used, how outputs are reviewed, and how risks are documented and addressed.