WA Health Artificial Intelligence Policy MP 0193/25 and Standard
Western Australia's mandatory health system policy and standard for artificial intelligence: acceptable and clinical use conditions for staff, the strategic alignment, governance (with an executive AI Accountable Officer), workforce capability, risk and assurance (the Office of Digital Government AI self-assessment before every new use case) and vendor contract requirements on WA health entities, the eight AI Ethics Principles applied to health including bias control, privacy and security, clinical validation, generative AI disclosure, patient consent and contestability, defined accountable roles and recordkeeping, and annual compliance reporting through the AI Audit Compliance Tool.
WA Health Artificial Intelligence Policy MP 0193/25 and Standard is a compliance framework from Australia, Western Australia (WA health system) with 4 domains and 16 controls. The largest domains are Standard section 8 AI Ethics Principles as applied in the WA health system – WA Health Artificial Intelligence Policy MP 0193/25 and Standard (8 controls), Standard section 7 WA health entity requirements: strategic alignment, governance, workforce capability, risk and assurance, contract management – WA Health Artificial Intelligence Policy MP 0193/25 and Standard (5 controls), Standard section 6 Acceptable use of AI (overall and clinical) – WA Health Artificial Intelligence Policy MP 0193/25 and Standard (2 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (4)
Policy MP 0193/25: purpose, applicability, requirements and compliance monitoring – WA Health Artificial Intelligence Policy MP 0193/25 and Standard
| Code | Title |
|---|---|
| wa-health-artificial-intelligence-policy-mp-0193-25-and-standard::4 | Compliance monitoring: complete the annual Artificial Intelligence Audit Compliance Tool supplied by the Digital Health Unit, reporting compliance with the policy and standard, breaches and system governance, and submit it to the System Manager; provide local education and awareness strategies on request; act on the audit report that follows; and cooperate with System Manager audits or assessments at any time, including requests for information on digital security controls |
Standard section 6 Acceptable use of AI (overall and clinical) – WA Health Artificial Intelligence Policy MP 0193/25 and Standard
| Code | Title |
|---|---|
| wa-health-artificial-intelligence-policy-mp-0193-25-and-standard::6.1 | Overall acceptable use: staff use only AI systems that have been assessed and approved, never in a way that could harm a person's fundamental rights, safety or autonomy; use and release WA health information in AI only as the Data Custodian authorises; never enter information or use AI output in a way that breaches privacy, copyright or intellectual property; safeguard personal information with secure techniques; disclose AI use where results could affect people, decisions or public opinion; avoid over-reliance and keep accountability for final decisions; scrutinise outputs for inaccuracy, bias and hallucination and report concerns; understand liability where use breaches contracts or terms; complete required training first; keep AI-created records under the State Records Act 2000; and understand the limits of generative AI using the government guidance |
| wa-health-artificial-intelligence-policy-mp-0193-25-and-standard::6.2 | Clinical use of AI: staff use only AI systems approved by a relevant clinical governance body, designed for the clinical purpose and trained on suitable clinical data representative of the Western Australian population; implement clinical safety and quality policies including disclosure of AI use and informed consent; understand and mitigate the system-specific risks, use it under the right conditions, continually monitor for errors and bias and report performance issues; and ensure a qualified clinician makes the final decision, whether a diagnosis, a recommended treatment or confirmation of a consultation record, after carefully reviewing the output |
Standard section 7 WA health entity requirements: strategic alignment, governance, workforce capability, risk and assurance, contract management – WA Health Artificial Intelligence Policy MP 0193/25 and Standard
| Code | Title |
|---|---|
| wa-health-artificial-intelligence-policy-mp-0193-25-and-standard::7.1 | Strategic alignment: AI use aligns with the WA Health Digital Strategy and Sustainable Health Review priorities, optimising investment for patient benefit, meeting clinical safety and quality standards and addressing priority areas, building staff capability and organisational maturity, and reducing cost and waste by recognising whole-of-life cost and seeking system-wide collaboration, under the strategic oversight of the AI Oversight Committee reporting to the Digital Health Steering Committee |
| wa-health-artificial-intelligence-policy-mp-0193-25-and-standard::7.2 | Governance: comply with the WA Government AI Policy and Assurance Framework; define accountability and responsibilities for responsible AI adoption, including an executive AI Accountable Officer with overall responsibility for the entity's AI strategy and its alignment with ethics, strategy, policy, law and the external environment; keep AI governance consistent with existing clinical safety and quality, ethics, digital health, ICT, information and research governance; make sufficient expertise available to the bodies and officers who review and approve AI proposals; and keep knowledge current, amending local policy, procedures and contracts as needed, building on existing governance groups where appropriate |
| wa-health-artificial-intelligence-policy-mp-0193-25-and-standard::7.3 | Workforce capability: identify the training and skills the workforce needs to support and deliver AI-based services, including general understanding of AI, responsible, ethical and legal use, interpreting AI insights, qualifications for specialised roles such as clinical validation and data management, capability in governance roles, and the knowledge to identify and respond to AI risks and regulatory change; ensure staff who use or implement AI for work are adequately informed, trained and qualified in line with current and intended use cases |
| wa-health-artificial-intelligence-policy-mp-0193-25-and-standard::7.4 | Risk and assurance: before implementing a new AI use case or project undertake the Office of Digital Government AI self-assessment unless an exception applies, have it approved by a suitable Authorised Officer, provide it to the overseeing digital health, clinical and research governance bodies and transfer the results to a risk system or register; follow existing processes for digital health governance, information use and disclosure, cyber and cloud security and, where applicable, patient safety risk management, clinical governance and research governance; document ongoing monitoring, evaluation, reporting and risk management plans, using specialist guidance, AI risk frameworks and external auditors as risk and complexity require; provide user feedback channels and awareness of incident and breach policies; identify ongoing accountabilities; and seek legal advice where compliance concerns arise |
| wa-health-artificial-intelligence-policy-mp-0193-25-and-standard::7.5 | Contract management: when contracting for ICT, digital health systems and medical technology specify in writing that the vendor declares the nature of any AI in its products and services, notifies the contract manager of any new or updated AI feature, allows the customer to opt out of AI features, and provides assurance of ongoing adherence to the entity's requirements including AI specifications given in procurement, digital security under the Information Security Policy and information governance under the Information Access, Use and Disclosure Policy; and clarify liabilities and indemnities, especially any departure from standard terms |
Standard section 8 AI Ethics Principles as applied in the WA health system – WA Health Artificial Intelligence Policy MP 0193/25 and Standard
| Code | Title |
|---|---|
| wa-health-artificial-intelligence-policy-mp-0193-25-and-standard::8.1 | Principle 1, human, social and environmental wellbeing: every AI system is used for the benefit of patients, staff or the public and does not cause harm, with benefits outweighing risks and risks identified and manageable; its purpose, benefits, efficacy, datasets, flaws and limitations are documented and reported to authorised officers and governance bodies; stakeholders including clinicians, consumers, community members, experts and legal advisers give timely input and help shape design and use; and it is never designed or used for deception, unfair manipulation, surveillance beyond what is legally permitted, or concealment of its true purpose |
| wa-health-artificial-intelligence-policy-mp-0193-25-and-standard::8.2 | Principle 2, human-centred values: AI is not used to make unilateral decisions affecting patients, citizens or their human rights; humans remain in control of health care systems and clinical decisions, with AI assisting and clinicians deciding; the nature of AI use is disclosed so people can exercise self-determination; proposals receive ethical review by bodies such as Clinical Ethics Committees and Human Research Ethics Committees; and use complies with constitutional and legislated human rights protections, Australia's international human rights obligations, the WA Public Sector Code of Ethics and Code of Conduct Policy, and professional codes of conduct |
| wa-health-artificial-intelligence-policy-mp-0193-25-and-standard::8.3 | Principle 3, fairness: AI enables fair and equitable access to health care and government services without widening disparities by race, sex, gender or socioeconomic status; staff are trained to monitor and manage bias in algorithms including self-developed models, in training data appropriate to the WA ethical, societal, cultural and legal context, and in outputs monitored against anti-discrimination law and disproportionate impact; strategies mitigate racial and gender bias consistent with the Health Equity Impact Statement and Aboriginal Health Impact Statement policies and the NSQHS Aboriginal and Torres Strait Islander user guide; speech-based AI is tested across accents and languages; transparency is secured where language barriers exist; and Aboriginal data is handled consistent with the National Agreement on Closing the Gap |
| wa-health-artificial-intelligence-policy-mp-0193-25-and-standard::8.4 | Principle 4, privacy protection and security: collect, use and disclose information only under the Information Access, Use and Disclosure Policy and the Privacy and Responsible Information Sharing Act 2024; never enter Official or Official: Sensitive information including personal and health information into public generative AI connected to the internet without specific approval; apply anonymisation, de-identification, synthetic data, encryption and secure aggregation to personal information; have vendor data collection, access, use, storage and transfer arrangements disclosed to and agreed by the Information Custodian or Steward; comply with Information Privacy Principle 10 on automated decision-making; subject AI systems including vendor products to security risk assessment under the WA Government Cyber Security Policy and the Information Security Policy; complete a cloud service assessment for cloud hosting under the Cloud Policy; and keep staff current on AI-specific threats such as theft of data or algorithms, data poisoning, algorithm tampering and reverse engineering of patient data |
| wa-health-artificial-intelligence-policy-mp-0193-25-and-standard::8.5 | Principle 5, reliability and safety: before implementation the AI system is trained on fit-for-purpose data, tested with local, ethical, de-identified or synthetic data, piloted where residual risk is moderate or higher, evaluated against high quality evidence, used under appropriate conditions by trained people and accompanied by use-case guidance; in operation documented monitoring and evaluation plans verify acceptance criteria and detect drift, incorrect or biased results, with independent audits where risk warrants and clear reporting avenues; complex or high-risk implementations use an established AI risk framework (NIST AI RMF 1.0 and AI 600-1, or AS ISO/IEC 23894:2023); in health care settings suitable clinicians are key stakeholders, deployment stays under the responsible Clinical Executive, the clinician is the final decision-maker, users hold the qualifications and work within scope, the algorithms pass rigorous multi-modal clinical validation covering discrimination and calibration accuracy with internal and external testing, and an auditable clinical safety plan sets audit methods, frequency, oversight, patient safety event notification and active governance monitoring; the Safety and Quality area is consulted and the ACSQHC Clinical AI Usage Guidance applied; high-risk or statewide technologies go through the Health Technology Governance Policy; software as a medical device is confirmed as ARTG-included or exempt with the sponsor; and an ICT Patient Safety Risk Assessment captures hazards such as misunderstood outputs, evolving behaviour, over-reliance, unsafe or biased algorithms, unrepresentative data, hacking, inappropriate context, hallucination, absent validation and erosion of the clinician-consumer relationship |
| wa-health-artificial-intelligence-policy-mp-0193-25-and-standard::8.6 | Principle 6, transparency and explainability: use only AI models that can be explained and understood by developers, clinicians, patients, users and regulators, avoiding tools whose type, training and proof of performance are undisclosed; be open about AI that could significantly affect a person, community, group or environment, including material risks and benefits, so people can make informed decisions; seek the patient's consent to AI use unless an exception under the Consent to Treatment Policy applies, with the ability to opt out; disclose at minimum when generative AI informs government activities or decisions, generates official briefings or communications, or enables autonomous decisions, stating how the AI contributed, the human oversight or editing applied and the model version and type; address language and cultural barriers with the Language Services Policy and in partnership with CALD and Aboriginal communities; and comply with Information Privacy Principle 10 by notifying individuals of automated decision-making, explaining it on request and offering human intervention |
| wa-health-artificial-intelligence-policy-mp-0193-25-and-standard::8.7 | Principle 7, contestability: give patients and citizens an efficient, transparent review mechanism with human oversight when they question the use of data or AI-informed outcomes, including sufficient access to and understanding of the algorithm and the inferences drawn; uphold the patient's right to make informed decisions and offer alternative care where consent is not given or is withdrawn, with meaningful information on benefits and material risks specific to the patient; and meet the disclosure and human review obligations of the Privacy and Responsible Information Sharing Act 2024 where personal information and automated decision-making affect people |
| wa-health-artificial-intelligence-policy-mp-0193-25-and-standard::8.8 | Principle 8, accountability and records: oversee every AI system through a clear governance structure with defined roles, responsibilities, accountability and liability, identifying the AI Accountable Officer, an Executive Sponsor who is a Clinical Executive where patients are affected, the Accountable Supplier, Information Custodian, Authorised Officers, Technical Oversight, an AI Model Validator, an Independent AI Auditor where used, the clinician as final decision-maker, developers and data staff who assess the system under documented plans, and users who stay within the approved use case, train, monitor output quality and report incidents; and keep all records created by or about AI, including design, testing, implementation, evaluation and decommissioning, in the approved recordkeeping system under the State Records Act 2000 following the State Records Office AI recordkeeping advice |
What is WA Health Artificial Intelligence Policy MP 0193/25 and Standard and who does it apply to?
WA Health Artificial Intelligence Policy MP 0193/25 and Standard is a compliance framework from Australia, Western Australia (WA health system) with 4 domains and 16 controls. Western Australia's mandatory health system policy and standard for artificial intelligence: acceptable and clinical use conditions for staff, the strategic alignment, governance (with an executive AI Accountable Officer), workforce capability, risk and assurance (the Office of Digital Government AI self-assessment before every new use case) and vendor contract requirements on WA health entities, the eight AI Ethics Principles applied to health including bias control, privacy and security, clinical validation, generative AI disclosure, patient consent and contestability, defined accountable roles and recordkeeping, and annual compliance reporting through the AI Audit Compliance Tool. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does WA Health Artificial Intelligence Policy MP 0193/25 and Standard actually require?
WA Health Artificial Intelligence Policy MP 0193/25 and Standard has 16 controls organised across 4 domains. The largest domains are Standard section 8 AI Ethics Principles as applied in the WA health system – WA Health Artificial Intelligence Policy MP 0193/25 and Standard (8 controls), Standard section 7 WA health entity requirements: strategic alignment, governance, workforce capability, risk and assurance, contract management – WA Health Artificial Intelligence Policy MP 0193/25 and Standard (5 controls), Standard section 6 Acceptable use of AI (overall and clinical) – WA Health Artificial Intelligence Policy MP 0193/25 and Standard (2 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of WA Health Artificial Intelligence Policy MP 0193/25 and Standard do I already cover?
WA Health Artificial Intelligence Policy MP 0193/25 and Standard does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.
How do I implement WA Health Artificial Intelligence Policy MP 0193/25 and Standard?
Start your WA Health Artificial Intelligence Policy MP 0193/25 and Standard compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about WA Health Artificial Intelligence Policy MP 0193/25 and Standard requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 16 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,248 frameworks.
Get Started Free →Free forever, no credit card required