Healthcare AI Regulation
Coverage from The Regulatory Review, Pharmacy Business, and others

Healthcare AI regulation sets the rules for assessing and overseeing AI used in clinical care, including medical devices and generative AI systems.
Proposals and frameworks address staged authorization, pre-market evidence, documentation, patient transparency, clinician oversight, and monitoring after deployment as systems and software change. The United Kingdom, United States, and European Union take different approaches, from sector-specific oversight to broader risk-based rules, while regulators such as the MHRA and FDA consider how existing medical-device frameworks apply to AI. These choices shape how safety, accountability, and innovation are weighed throughout a system’s lifecycle.
If you read one thing
It clearly introduces the UK commission’s lifecycle-based proposal and explains its central safeguards, including clinician oversight and patient disclosure.
Best explainer
It broadens the view beyond the UK by explaining how distributed US oversight leaves some clinical AI responsibilities with institutions.
Latest development
It reports Utah’s latest sandbox expansion, including independent audits and physician-reviewed pilots, adding an operational example to the regulatory proposals.
The evidence
It explains why benchmark scores alone are insufficient and makes local, repeated validation a distinct part of clinical-readiness oversight.
Oversight is framed around the full AI lifecycle
UK recommendations and other governance proposals favor staged authorization, evidence from real-world use, change controls, and monitoring after deployment over one-time approval. These approaches remain proposals or guidance rather than a settled cross-jurisdictional framework.
Clinical oversight and accountability remain key safeguards
Proposals and active pilots give clinicians roles in reviewing, challenging, or authorizing AI-supported decisions, with patient disclosure also emphasized. The stated standard is meaningful authority to intervene, not merely nominal human involvement.
Utah is testing supervised AI pilots in clinical settings
Utah's sandbox is putting bounded healthcare AI applications into supervised testing, with physician review and independent evaluation. The pilots create an operational test case for gathering evidence, but are intended to inform future policy rather than establish a broader framework.
Oversight remains distributed and directionally contested
Healthcare AI responsibilities are spread across regulators, jurisdictions, and clinical settings, leaving some consequential tools reliant on institutional governance. Lifecycle and transparency proposals coexist with a US proposal to remove some certified-health-IT AI requirements.
10 September 2026
report date
“The immediate trigger is the 10 September 2026 report of the UK National Commission into the Regulation of AI in Healthcare, which proposes a future framework including phased approvals, continuous monitoring in real-world practice and public safety information for AI-supported medical devices.”
12-month months
initial pilot agreement period
“The pilots begin with 12-month agreements. Companies must notify the state before beginning operations, and the state may consider renewals after the initial period.”
about 148 medications
medications in August AI’s initial formulary
“August AI plans to test AI-supported renewals for existing, non-controlled prescriptions used to manage chronic conditions. The company said its initial formulary includes about 148 medications, starting with lower-risk drugs. The AI will not write new prescriptions, change doses or substitute medications.”
78 participants
Health Foundation qualitative workshop participants
“Approval declined significantly for autonomous systems. Qualitative workshops conducted by the Health Foundation with 78 participants confirmed that meaningful human oversight is a primary determinant of public trust.”
May 2026
publication date
“The Coalition for Health AI published governance playbooks in May 2026 covering policy, organizational structures, lifecycle management, risk assessments, data management, third-party management, training and feedback.”
Utah launches supervised healthcare AI pilots under a new sandbox
Utah has put healthcare AI oversight into practice through a state-run sandbox that allows limited, temporary rule relief for reviewed pilots. The program pairs clinical testing with independent evaluation and physician oversight, while leaving broader boundaries for AI clinical decisions and future liability rules unresolved.
Previously
Healthcare AI oversight proposals increasingly emphasize risk-based authorization, clinical validation, professional accountability, and monitoring after deployment. The UK commission's lifecycle recommendations are a prominent current reference point, while US agencies and health-sector groups are debating how to apply or revise existing rules. Jurisdictions and institutions differ on regulatory structure and transparency requirements, and most proposals have not yet taken effect.
Utah’s supervised healthcare AI sandbox adds an operational test case to a story previously centered on proposals and consultations. The pilots move oversight into monitored clinical use, though they do not establish a broader regulatory framework.
