For patients

Warning Signs of Weak AI Governance

AI governance is not about blocking useful technology. It is about making sure the clinic knows what tools are used, what data is involved, what controls exist and who is accountable.

Patient transparency gaps

  • You are not told that a consultation is being recorded or summarised.
  • Staff cannot explain the purpose of the tool.
  • You cannot find clear wording in the privacy notice.

Supplier and data handling gaps

  • The clinic cannot name the supplier.
  • The clinic cannot explain where data is stored.
  • The clinic cannot explain whether data is used for model training.
  • The clinic cannot explain retention or deletion.

Clinical oversight gaps

  • The AI output appears to enter the record without clinician review.
  • A letter or note contains obvious AI-generated errors.
  • Staff describe the tool as making decisions rather than supporting a clinician.

Shadow AI indicators

  • Staff mention using ChatGPT or another public AI tool for notes, letters or summaries.
  • Personal devices or unapproved apps appear to be used for recording.
  • Different staff give different answers about what is allowed.

For clinics: turn patient questions into governance evidence

ELSA AI helps private healthcare providers move from informal AI use to a documented governance position.

View ELSA AI servicesRead the clinic guide