The Imprivata survey found that more than half of healthcare leaders ranked security among their top concerns when adopting agentic AI.

Overview Debates Related claims Topics Sources

Epic Systems chief security officer Stirling Martin participated in Anthropic's Project Glasswing program to test how attackers could utilize open-source artificial intelligence agents to access confidential health records.

Epic Systems identified software flaws in certain MyChart configurations that could allow unauthorized individuals to view patient records without appearing in audit logs, using Anthropic's Claude Mythos model.

US regulatory guidance OCC Bulletin 2026-13, issued jointly by the OCC, Federal Reserve Board, and FDIC on April 17, 2026, explicitly excluded generative and agentic AI models from its scope.

The American Medical Association's framework focuses on four questions covering clinical functions, evidence of performance, conditions of permission, and risk accountability.

The Financial Stability Board declined to framing AI systems as synthetic employees, citing concerns that the analogy obscures unpredictable autonomous decisions.

The American Medical Association released a new governance framework on October 15, 2026, to guide the safe deployment of agentic AI assuming clinical functions in healthcare.

Bank of England Governor Andrew Bailey described frontier AI threat capabilities as the most immediate cyber risk facing global financial systems in an August 31, 2026 letter.

In a survey of 250 U.S. healthcare leaders, 28% reported deploying agentic AI tools and 72% reported that agentic AI is occasionally implemented without IT approval.

In a survey of 250 U.S. healthcare leaders, 44% of respondents reported conducting pilots or proof-of-concept projects with agentic AI tools.

Suki plans to use its Series E funding to develop autonomous AI agents to manage post-visit healthcare tasks including referrals, prior authorizations for new medications, filling orders, and scheduling follow-ups.

Suki's planned AI agents will utilize clinical information gathered from the company's existing documentation and point-of-care tools to execute post-visit healthcare tasks.

Suki plans to use its Series E funding to deepen integration with its more than 30 existing health technology partners, including Optum, Zoom, and athenahealth, by embedding new AI agent capabilities.

Human review should be mandatory for all clinical decisions made by agentic AI

Felix Sahm leads EUcanAI, a European multidisciplinary collaboration using agentic AI to improve treatment efficiency and reduce uncertainty for brain tumor and central nervous system cancer patients.

Dr. Sean Kelly of Imprivata stated that an autonomous AI agent with excessive permissions could access sensitive patient information, enter incorrect medical record data, or alter medication dosages.

A survey released by digital identity security firm Imprivata on September 17, 2026, found that healthcare organizations are rapidly adopting agentic AI, but governance frameworks are not keeping pace.

The Imprivata survey revealed that healthcare organizations take fragmented approaches to managing AI agents, with management split between IT departments, security teams, or ad hoc deployments.

Dr. Sean Kelly of Imprivata warned that because AI agents operate autonomously at machine speed, a single error could propagate before being recognized, directly impacting care delivery.

Dr. Sean Kelly of Imprivata recommended that AI agents have clearly defined identities, permissions, and boundaries, with human review for higher-risk activities and audit trails.

The Imprivata survey showed that more than 85% of healthcare leaders responsible for AI strategy are confident they have visibility into AI agent activity and can fully control autonomous actions.