A survey released by digital identity security firm Imprivata on September 17, 2026, found that healthcare organizations are rapidly adopting agentic AI, but governance frameworks are not keeping pace.

Overview Debates Related claims Topics Sources

NHS England stated that legal and operational responsibility for deploying and operating the Oxevision camera system rests entirely with individual NHS foundation trusts.

On October 20, 2026, AstraZeneca announced a collaboration with Oracle to leverage artificial intelligence, cloud, and healthcare data capabilities to refine clinical research

AstraZeneca and Oracle plan to combine drug development expertise with artificial intelligence and healthcare data to identify eligible patients for clinical trials and monitor safety signals

Epic Systems chief security officer Stirling Martin participated in Anthropic's Project Glasswing program to test how attackers could utilize open-source artificial intelligence agents to access confidential health records.

India's Ministry of Health launched the Strategy for Artificial Intelligence in Healthcare for India in February 2026 to govern data, validation, deployment, and monitoring.

India's Central Drugs Standard Control Organisation issued guidance in July 2026 establishing approval pathways for Software in a Medical Device and Software as a Medical Device.

Regulatory sandboxes allow health authorities to evaluate rapidly evolving artificial intelligence technologies and balance patient safety against clinical innovation.

A joint report by European science academies proposed regulatory sandboxes as controlled, time-limited environments to test medical artificial intelligence tools under regulatory oversight before clinical deployment.

Sound Practice 10 of the Financial Stability Board's guidance establishes a risk-based intervention model requiring mandatory human sign-off for financial transactions exceeding specific thresholds.

The Financial Stability Board published 12 non-binding recommended practices on October 16, 2026, for the responsible adoption of artificial intelligence in financial institutions across G20 economies.

Bank of England Governor Andrew Bailey proposed pre- and post-deployment testing protocols for frontier AI models used in finance and G20-level agreements governing access to foreign-built frontier models.

The OCC, Federal Reserve Board, and FDIC plan a future request for information regarding bank AI model risk management, though no timeline has been set.

US regulatory guidance OCC Bulletin 2026-13, issued jointly by the OCC, Federal Reserve Board, and FDIC on April 17, 2026, explicitly excluded generative and agentic AI models from its scope.

The American Medical Association's framework focuses on four questions covering clinical functions, evidence of performance, conditions of permission, and risk accountability.

The Financial Stability Board declined to framing AI systems as synthetic employees, citing concerns that the analogy obscures unpredictable autonomous decisions.

Updated Sound Practice 12 requires financial institutions to perform due diligence and maintain ongoing oversight of embedded AI functionality extending to fourth- and nth-party vendors.

The American Medical Association released a new governance framework on October 15, 2026, to guide the safe deployment of agentic AI assuming clinical functions in healthcare.

Moody's warned in August 2026 that banks deploying AI risk systemic dependency on concentrated technology providers, specifically naming OpenAI and Anthropic.

In a survey of 250 U.S. healthcare leaders, 28% reported deploying agentic AI tools and 72% reported that agentic AI is occasionally implemented without IT approval.

Moody's warned in August 2026 that technology providers OpenAI and Anthropic face investor pressure to reach profitability, creating potential pricing leverage over dependent financial institutions.