Patient disclosure standard
What it is
The Patient disclosure standard is the artifact that satisfies RUAIH focus area 5 — Transparency, education and training — at the control level.
Who signs it
The chief medical officer, with privacy and legal.
A document without a signature is a draft. An assessor is checking that someone with authority put their name to it.
What an assessor asks for
A written rule for when patients are told, what they are told, and the actual wording used.
What goes in it
- The classification rule — which tools trigger disclosure and which do not
- The reasoning behind that line, written down
- Disclosure wording, in plain language
- Where and when disclosure happens in the encounter
- Consent handling where relevant, and what ‘relevant’ means here
- How a patient declines, and what happens then
- Staff-facing guidance for the questions that follow
The most common failure
A blanket notice in the privacy policy. It satisfies a lawyer and nobody else, and it is not what ‘notification when AI directly impacts their care’ describes.
Where this sits
See the RUAIH crosswalk for how this control maps across CHAI’s playbooks and the NIST AI RMF.
Written and reviewed by Neel Chauhan, MD MBA, physician-executive and founder of the Healthcare AI Institute. Last reviewed 2026-07-30.
Specified from the published RUAIH focus areas and the September 2025 Joint Commission and CHAI guidance, plus the failure modes we see most often in practice.
The Institute accepts no vendor sponsorship, holds no vendor equity and takes no referral fees.