Before implementing a new AI use case or project, WA health entities must undertake the Office of Digital Government's AI self-assessment under the WA Government AI Assurance Framework unless an exception applies, ensure the results are approved by a suitable Authorised Officer, provided to any overseeing governance bodies such as digital health, clinical and research governance, and transferred to an appropriate risk system or register for ongoing management; they must also adhere to existing processes for digital health governance, information use and disclosure, cyber and cloud security and, where applicable, patient safety risk management, clinical governance and research governance, providing those assessments to the relevant governing authorities. They must establish and document plans for ongoing monitoring, evaluation, reporting and risk management, using specialist guidance, AI risk frameworks, best practice standards and external auditors as the level of risk and complexity requires and as governing authorities direct; ensure channels exist for users to give feedback or raise concerns and that users know the incident management policies, including the Clinical Incident Management Policy and the Information Breach Policy; identify ongoing accountabilities and responsibilities; identify a risk system or register to manage risks through the life of the system, including residual risks from the assurance framework and ICT patient safety risk assessments; and seek legal advice on any AI project where there are compliance concerns.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.