Updated September 2026: this post now covers the Joint Commission's Responsible Use of AI in Healthcare certification, launched in June 2026.

The governance vacuum is closing, from the outside in.

For years, health systems governed AI however they saw fit. There was no accrediting-body standard, no national floor. A committee could write a policy—or not. Deploy a model—or not. Whether any of it actually protected patients was left entirely unanchored.

What Is the Joint Commission's RUAIH Guidance?

That changed in mid-2025. The Joint Commission and the Coalition for Health AI (CHAI) partnered to build the first national framework for responsible AI use—with guidance reaching more than 80% of U.S. healthcare organizations. On September 17, 2025, they released their foundational guidance: Responsible Use of AI in Healthcare (RUAIH).

The Seven Elements of the RUAIH Framework

The framework does not demand operational brilliance; it demands seven baseline elements, in writing:

1. Formal AI policies and governance structures
2. Patient privacy and transparency protections
3. Data security and data-use safeguards
4. Ongoing quality and output monitoring
5. Voluntary, blinded reporting of AI safety events
6. Systematic risk and bias assessments
7. Role-specific workforce education and training

None of this is exotic to anyone familiar with health system governance. That is precisely the point. The framework does not demand groundbreaking innovation—it demands that the basics exist and that institutions can show their work. While voluntary today, accreditation guidance invariably becomes tomorrow's non-negotiable floor.

What's Changed: The RUAIH Certification Is Here

The guidance was the warning. The certification is the follow-through.

In June 2026, the Joint Commission launched a voluntary Responsible Use of AI in Healthcare certification. Any healthcare organization can apply—Joint Commission accreditation is not required. It certifies organizational practice, not individual AI products, and it evaluates five domains:

• Governance
• Effective data management
• Risk and bias reduction
• Monitoring, evaluating, and validating safety performance and responsible use
• Transparency, education, and training

CHAI has since published eight governance playbooks aligned with the certification standards. Announcing the program, Joint Commission CEO Dr. Jonathan Perlin pointed to the urgency: more than 80% of physicians are already using AI in professional settings.

Voluntary—for now. But the floor has been poured. The question is no longer whether your committee will be measured. It is whether you will be ready when you are.

Compliance Is Not Sovereignty

Conforming to the framework proves to an auditor that your institution meets a floor. It does not tell your clinicians or patients whether algorithms are augmenting human expertise or quietly usurping it.

Compliance answers: "Are we following the rules?"

Real governance answers: "Who holds authority over the clinical decision?"

A hospital can clear the accreditation bar while running a culture of passive algorithmic compliance—where clinician overrides are treated as performance variance and care teams learn to suppress their own judgment. True accountability is not the same as software adoption, nor is it settled by a certificate on the wall.

The Three Operational Absences: Governance Gaps to Close Before the Audit

Before the auditor arrives, test for the three operational gaps where governance quietly fails in practice:

1. The Inventory: Do you maintain a living inventory of every AI-enabled tool in operational use—vendor products, legacy software features, and shadow AI alike? If you cannot name the tools, you cannot govern them.

2. Pause Authority: Is there a named individual with explicit, documented authority to halt an AI tool when performance degrades? If no one holds the explicit power to pull the kill switch, the algorithm will run until it fails publicly.

3. The Escalation Route: When a clinician observes that an algorithm is wrong about a patient, where does that signal go? If it does not reach the governance committee within a fixed, enforced timeframe, the near-miss remains isolated locally—leaving patient safety vulnerable to repeatable harm.

Answering "no" to any of these questions is not a rebuke. It is the framework's own diagnosis: you have a charter and a meeting cadence, but you do not yet have governance.

What RUAIH Means for Patients

Read the seven elements again and look for the patient. They appear once—as a privacy and transparency obligation. Protected. Informed. Disclosed to.

Protection matters. But protection is not participation.

And the gap is widening. Patients are already bringing their own AI into the exam room—often without telling their clinicians. A framework built to govern the hospital's AI says little about the AI patients carry in with them.

I write from the observer position—a patient looking into medicine, not up at it. From here, transparency is the floor, not the goal. A committee that meets the RUAIH standard should also be able to answer three patient-facing questions:

1. Would a patient know when AI shaped their care?
2. Can a patient—not just a clinician—report that an AI tool got something wrong?
3. Does your Patient and Family Advisory Council have a seat at the governance table?

Freeing the patient and freeing the clinician are the same goal. The hospital that governs AI with patients—not merely for them—will do more than clear an audit. It will earn what no certificate can confer: trust that is built, not assumed.

Frequently Asked Questions

What is RUAIH?

RUAIH stands for Responsible Use of AI in Healthcare. It is guidance released on September 17, 2025, by the Joint Commission and the Coalition for Health AI (CHAI), setting out seven baseline elements for how healthcare organizations should govern AI.

Is the Joint Commission's AI certification mandatory?

No. The Responsible Use of AI in Healthcare certification, launched in June 2026, is voluntary. Accreditation guidance, however, has a long history of becoming the expected standard.

Does my organization need Joint Commission accreditation to apply?

No. Any healthcare organization may apply for the certification. Joint Commission accreditation is not required.

Does the certification approve specific AI tools?

No. It certifies an organization's practices for using AI responsibly—not individual AI products.

Where should a governance committee start?

With the three operational absences: a living AI inventory, named pause authority, and an enforced escalation route. Then ask the three patient-facing questions above.

Where Does Your Institution Stand?

Take the free AI Governance Readiness Audit — a sixty-second diagnostic on whether you have governance, or just a charter and a meeting cadence.

Want your leadership team to see AI governance through the patient's eyes? The AI-Informed Patient: Hospital Briefing brings that perspective into the room.

Sources

• Joint Commission: Joint Commission and CHAI Release Initial Guidance (September 2025)
• Joint Commission: Voluntary Responsible Use of AI in Healthcare Certification (2026)
• Coalition for Health AI: Joint Commission and CHAI Release Initial Guidance
• HIT Consultant: The Joint Commission and CHAI Partner to Set National Standards (June 2025)
• Fierce Healthcare: Joint Commission Launches Voluntary AI Certification Program

Where does your institution stand? Take the free AI Governance Readiness Audit — a sixty-second diagnostic on whether you have governance, or just a charter and a meeting cadence.