Responsible Adoption and Continued Learning
Directed Studies on Artificial Intelligence in Health Sciences
Learning objectives for this lesson:
- Explain how AI tools can widen or narrow health inequities through training data, outcome labels, language, access to tools and the way outputs are used.
- Describe the First Nations principles of OCAP® and the CARE Principles for Indigenous Data Governance accurately, and apply them with the commitments of the B.C. framework to the stages of an AI project.
- Summarize the WHO guidance on large multi-modal models (2024), the EU Artificial Intelligence Act (2024), the NIST AI Risk Management Framework (2023) and its Generative AI Profile (2024), and the federal Directive on Automated Decision-Making.
- Describe the state of federal AI legislation since the Artificial Intelligence and Data Act lapsed in January 2025, and apply the Responsible AI Policy Framework for the B.C. Health Sector to a team's use of AI.
- Estimate the energy used by a team's AI use from published figures and weigh that cost against the benefits of the use.
- Assemble a personal AI workflow from a prompt library, a verification routine, an AI use log and a set of tools matched to tasks, and audit an AI-drafted workflow against a team's rules.
- Evaluate a new AI tool with nine questions covering coverage, method, independent evaluation, reproducibility, data terms, provider, error detection, cost and accountability.
- Design structured trials and a schedule for continued learning that keep a personal workflow current as tools and rules change.
This course was developed by Dr. Kiffer G. Card, Faculty of Health Sciences, Simon Fraser University. Product examples are current as of 2026.
Equity, Bias and Indigenous Data Sovereignty
Learning Objectives for this section
- Explain five routes by which AI tools can widen health inequities: training data, outcome labels, language, access and skills, and the way outputs are used.
- Describe ways in which AI can narrow inequities, including translation, accessibility and support for small teams in under-resourced settings.
- Apply equity checks to the everyday use of a general-purpose assistant in public health work.
- Describe the First Nations principles of OCAP® and the CARE Principles for Indigenous Data Governance accurately, and apply them to the stages of an AI project.
- Relate these principles to the Indigenous Rights and Reconciliation and the Equity and Anti-Discrimination commitments of the Responsible AI Policy Framework for the B.C. Health Sector.
Introduction: Responsible Adoption as the Basis for Confident Use
The first nine lessons of this course taught students to use AI tools for learning, searching, writing, thinking, analysis and professional work. This final lesson asks what makes that use dependable over time. Its answer is that responsible adoption is the basis for confident use. People and teams gain most from AI when they pair the tools with training, clear rules and evaluation, and the same practices allow them to take up new capabilities quickly. A team that already knows which data may enter a tool, how outputs are checked and who is accountable can trial a new release in a week; a team without those rules tends either to avoid new tools or to adopt them without checks.
This section examines equity and Indigenous data governance; Section 2 covers governance and environmental cost, Section 3 the personal AI workflow, and Section 4 continued learning.
Box 10.1 introduces the Cedar Valley population health team, a fictional team whose Connector program, AI assistant pilot and co-op student, Jordan, supply the examples used throughout this lesson.
The Cedar Valley Health Authority is a fictional, mostly rural health authority in British Columbia with about 210,000 residents, about 46,000 of them aged 65 and older, and 24 primary care clinics. Its population health team runs the Cedar Valley Connector program, a community connector (social prescribing) program for adults aged 65 and older who screen as socially isolated or lonely, in 12 of those clinics. For one year the team has piloted an enterprise AI assistant, procured after a privacy impact assessment, that may receive public documents, internal non-confidential documents and aggregate data, and never personal health information or other identifiable data.
As the pilot ends, the team lead has asked the team to write rules for AI use that will continue after it. Jordan, a Health Sciences co-op student in the final weeks of a four-month placement, is drafting the sections on equity and Indigenous data governance. The team lead's instruction is brief: "Before we write rules about prompts and checks, write down whom our use of AI could leave out or harm, and what we owe to the First Nations communities in our region."
Section 1.1 takes up the first part of the team lead's instruction, the routes by which the team's use of AI could leave people out or cause them harm.
1.1 How AI Can Widen Health Inequities
Health equity is the absence of unfair and avoidable differences in health between groups of people. Figure 10.1 sets out five routes by which an AI tool can affect equity, each with an example from the research literature and the check that applies.
Training data that leave people out
A model performs best on cases that resemble its training data. When some groups are rare in the data, performance for those groups is usually lower, and an overall accuracy figure hides the gap. Daneshjou and colleagues (2022) tested dermatology algorithms on a curated set of clinical images that represented a wide range of skin tones. Algorithms that had been trained mainly on images of light skin performed considerably worse on images of dark skin, and fine-tuning the algorithms on a subset of the diverse images closed much of the gap. The usual remedy is representative data and testing of performance separately for each group.
Outcome labels that measure the wrong thing
Every supervised model predicts a label, the outcome recorded in the training data. When the label is a convenient proxy for the outcome that matters, the model learns whatever inequity the proxy contains. Lesson 9 described the commercial algorithm studied by Obermeyer and colleagues (2019), which used health care costs as a proxy for health need. Because less money had been spent on Black patients with the same level of illness, the algorithm underestimated their needs. The same mechanism appears whenever a recorded measure (service use, a diagnosis code, a referral) tracks access to care as much as health, a pattern that HSCI 230 Lesson 9 describes for measurement error.
Uneven performance across languages
Large language models learn from text, and the amount of text available differs greatly between languages. Ahuja and colleagues (2023) evaluated generative models across many languages and tasks and reported a consistent performance gap between high-resource languages written in Latin script and under-resourced languages. The gap matters in British Columbia, where many residents speak languages other than English at home. A fluent-looking translation can be inaccurate or culturally unsuitable, and the person requesting it is often unable to tell. Lesson 6 set the rule that follows from this: translated health materials are reviewed by fluent speakers and community members before release.
Unequal access to tools and skills
The benefits of AI go first to the people and organizations that have the tools and know how to use them. Humlum and Vestergaard (2025) surveyed about 18,000 workers in 11 occupations exposed to AI in Denmark, linked to national register data. Women were 16 percentage points less likely than men to have used ChatGPT for work, and users had earned slightly more than non-users even before the tool appeared. If the gains accrue mainly to people who were already advantaged, AI can widen existing gaps. The same pattern can appear between organizations: a health authority with an enterprise licence and training can work faster than a small community organization or a First Nations health service that has neither, unless access and training are shared.
How outputs are used
The last route concerns people. A fluent draft invites acceptance, and a model's default assumptions about families, culture, gender or age can pass into program materials unexamined. Automation bias is the tendency to accept an automated output with less scrutiny than the same content would receive from a person, and it is strongest when users are busy and the output looks complete. The verification routine from Lesson 3, scaled to the stakes of the task, is the main defence.
These five routes describe how AI can widen health inequities. Section 1.2 turns to three uses in which the same tools can narrow them.
1.2 How AI Can Narrow Health Inequities
The same tools can also reduce inequities when they are used with care. Three uses are especially relevant to public health practice.
The flip cards that follow describe the three uses: translation, accessibility and capacity for small teams.
Each benefit depends on the checks described in Section 1.1, such as fluent review of translations and verification of simplified text.
Section 1.3 turns these checks into questions that a team can ask of its everyday use of general-purpose assistants.
1.3 Equity Checks for Everyday AI Use
Most public health staff will not build models. They will use general-purpose assistants such as ChatGPT, Claude, Gemini and Microsoft Copilot (examples available in 2026), or enterprise versions procured by their employer. For this kind of use, a team can ask of each recurring task whose perspective the output assumes, which groups a summary of evidence leaves out, whether a translated or simplified text has been checked by people from the intended audience, whether every team member has the same access and training, and whether the output will inform a decision about who receives a service. The last question matters most, because an AI-assisted decision about eligibility or priority carries the label and data problems described in Section 1.1.
Box 10.2 applies these questions to a short paragraph that the team's assistant drafted to invite older adults to the Connector program.
Jordan asked the team's assistant for a short paragraph inviting older adults to the Connector program. The assistant wrote: "Feeling lonely since retiring? Ask your doctor about the Connector program. A friendly volunteer will visit you at home and help you join local clubs. Visit our website or email us to sign up today." Identify at least three equity concerns before reading the model answer.
First, the paragraph assumes that the reader has retired from paid work and has a regular doctor, which excludes people who never had formal employment and people without a primary care provider. Second, it offers only a website and email for sign-up, which excludes people without internet access; a telephone number and referral through the clinic should be added. Third, it is written only in English, so versions in the region's main languages, reviewed by fluent speakers, are needed. The paragraph also contains a factual error: in the Connector program a community connector meets each person up to six times over twelve weeks, and the program description says nothing about home visits by a volunteer.
These checks concern the people whom a tool's outputs may leave out or misrepresent. Section 1.4 turns to the second part of the team lead's instruction, what the team owes to the First Nations communities in its region, through the principles of Indigenous data sovereignty.
1.4 Indigenous Data Sovereignty
Indigenous data sovereignty is the right of Indigenous Peoples to govern the collection, ownership and use of data about their communities, peoples, lands and resources. It follows from the inherent rights of Indigenous Peoples and responds to a history of research done to Indigenous communities without their consent. In Canada, the approach is distinctions-based, which means that First Nations, Inuit and Métis Peoples have each set out their own principles. The First Nations principles of OCAP® are the best known. The Métis principles of OCAS (ownership, control, access and stewardship) were developed by Métis communities, and Inuit Tapiriit Kanatami has set out Inuit priorities for research and data in its National Inuit Strategy on Research. HSCI 207 Lesson 4 and Lesson 5 cover the research obligations that come from these principles and from Chapter 9 of TCPS 2, the Tri-Council Policy Statement.
The First Nations principles of OCAP®
OCAP® stands for ownership, control, access and possession. The principles were established in 1998 at a meeting of the National Steering Committee of the First Nations and Inuit Regional Longitudinal Health Survey, and OCAP® is a registered trademark of the First Nations Information Governance Centre (FNIGC). FNIGC describes OCAP® as a set of specifically First Nations principles and as a tool to support strong information governance on the path to First Nations data sovereignty. The principles concern collective information about First Nations communities as well as information about individuals.
The tabs that follow state each of the four principles and the questions it raises for an AI project.
The principle. A community or group owns its collective cultural knowledge, data and information, in the same way that an individual owns their personal information.
Questions for an AI project. Who owns the outputs that a model derives from First Nations data, such as summaries, classifications or a fine-tuned model, and does the agreement with the community say so?
The principle. First Nations have the right to control all aspects of research and information management that affect them, from start to finish.
Questions for an AI project. Did the community decide whether AI would be used, and can it stop the use, review outputs and decide how findings are reported?
The principle. First Nations must be able to access information about themselves and their communities wherever it is held, and they decide how others may access their collective information.
Questions for an AI project. Can the community see the outputs and any model built from its data, and will the vendor have access to them?
The principle. Possession is physical control of the data, the means by which ownership is asserted and protected.
Questions for an AI project. Where are the data processed and stored? Uploading data to a third party's cloud service moves them even further from the community's physical control, beyond the organization that already holds them.
The CARE Principles for Indigenous Data Governance
The CARE Principles were developed by Indigenous scholars and data practitioners and set out in the Data Science Journal by Carroll and colleagues (2020). They complement the FAIR principles of open science, which ask that data be findable, accessible, interoperable and reusable. The authors observe that FAIR is data-centred, while Indigenous frameworks give more weight to the people and purposes for which data exist, and they ask data stewards to apply CARE and FAIR together.
The flip cards that follow summarize the four CARE Principles: collective benefit, authority to control, responsibility and ethics.
Card text is paraphrased from Carroll and colleagues (2020), Data Science Journal, 19, article 43 (doi.org/10.5334/dsj-2020-043).
Applying the principles to the stages of an AI project
Table 10.1 pairs each stage of an AI project with questions drawn from OCAP® and CARE. It is a teaching aid prepared for this lesson; the principles themselves, and the communities that hold them, remain the authority.
Table 10.1. Questions drawn from OCAP® and CARE for each stage of an AI project, from idea and purpose to sharing and reuse.
| Stage | Questions drawn from OCAP® and CARE |
|---|---|
| Idea and purpose | Was the community involved in deciding that AI should be used, and does the purpose reflect a benefit that the community has identified? |
| Data | Which data about First Nations, Inuit or Métis communities are involved, including aggregate figures, and is there an agreement that permits this use? |
| Tool and processing | Where will the data be processed and stored, will the vendor retain them, and does that arrangement respect possession and control? |
| Outputs and interpretation | Who reviews summaries and findings before they are shared, and could they stigmatize or misrepresent the community? |
| Sharing and reuse | Who may access the outputs, and will the community decide on any future reuse of the data, prompts or derived models? |
Two features of AI sharpen these questions. Large models are trained on text gathered from the web, which can include Indigenous knowledge published without the consent of the communities concerned, and information learned in training cannot simply be removed afterward. Commercial AI services may also retain what users enter. The Indigenous Protocol and Artificial Intelligence Position Paper (Lewis and colleagues, 2020), which the B.C. framework cites, sets out Indigenous perspectives on how AI should be designed and governed.
Box 10.3 applies OCAP® to a table of Connector program participation among First Nations clients, which identifies no individual.
Box 10.3: Aggregate data are still community data
A table showing Connector program participation among First Nations clients in one clinic area identifies no individual, yet it is collective information about those communities. Under OCAP®, decisions about its use belong with the Nations concerned and their governance bodies.
OCAP® and CARE set out what communities may expect of any project that uses data about them. Section 1.5 turns to the commitments on equity and Indigenous data governance that the B.C. framework makes for the province's health sector.
1.5 The Commitments of the B.C. Framework
Lesson 9 introduced the Responsible AI Policy Framework for the B.C. Health Sector (Ministry of Health, June 2026). Its eight Responsible AI Principles were developed in consultation with the health authorities, the First Nations Health Authority and Doctors of BC, and three of them bear directly on equity and Indigenous data governance.
Table 10.2 sets out what the framework commits to under each of the three principles and how the Cedar Valley rules apply each commitment.
Table 10.2. Three Responsible AI Principles of the B.C. framework, with what the framework commits to and how the Cedar Valley rules apply each one.
| Principle | What the framework commits to | How the Cedar Valley rules apply it |
|---|---|---|
| Indigenous Rights and Reconciliation | AI systems must uphold the rights of Indigenous Peoples, in line with B.C.'s Declaration on the Rights of Indigenous Peoples Act. The principle recognizes Indigenous-specific racism embedded in data, tools and systems, prioritizes cultural safety, calls for consultation with communities on AI initiatives that involve them, and commits to working toward OCAP® and the Métis principles of OCAS. | No data about First Nations, Inuit or Métis communities, including aggregate data, enter the assistant without an agreement with the communities concerned. |
| Equity and Anti-Discrimination | AI systems must be used to prevent the amplification of biases, use representative data where possible, comply with the Anti-Racism Data Act, and undergo ongoing testing for bias by race, gender, geography and socioeconomic status. | Public outputs receive the equity review from Section 1.3, and analyses report results by group where the data allow. |
| Public Benefit | AI use must align with provincial priorities and the needs of individuals and communities, with specific consideration of impacts on First Nations, Inuit and Métis Peoples. | Each new use is described by its benefit and whom it might affect before it begins. |
The framework names OCAP® and OCAS and does not mention the CARE Principles, which are consistent with its commitments and widely used internationally. The framework's emphasis on Indigenous-specific racism has a documented basis in British Columbia: the In Plain Sight review led by Mary Ellen Turpel-Lafond (2020) found widespread systemic racism against Indigenous people in the province's health care system. Data and tools built from that system's records can carry its patterns.
Box 10.4 sets out the four equity rules that Jordan drafted in response to the team lead's instruction.
Jordan's draft contains four rules. The assistant never receives data about First Nations, Inuit or Métis communities, including aggregate tables, unless an agreement with the communities concerned permits that use. AI-assisted material for the public receives an equity review of assumptions, access channels, language and accuracy. The team does not use the assistant to rank, screen or prioritize individual clients for services. Every team member, including students and part-time staff, has the same access and training. The team lead accepted the draft and arranged to review it with the health authority's Indigenous health team before it is finalized.
This section has described the routes by which AI can widen or narrow health inequities, the equity checks that apply to everyday use, and the obligations that follow from Indigenous data sovereignty and the B.C. framework. The reflection and knowledge check that follow review these points, and Section 2 then turns to governance and the environmental cost of running models.
Reflection
A rural B.C. health authority team has an approved enterprise AI assistant that may receive public documents, internal non-confidential documents and aggregate data, and never identifiable data. The team plans two uses. (1) It will ask the assistant to draft an invitation to its program for socially isolated older adults in English, Punjabi and Tagalog, offering sign-up by website and email. (2) It will enter an aggregate table, with no names, showing program participation by clinic area, including a row for clients who self-identify as First Nations in one area.
The First Nations principles of OCAP® (ownership, control, access and possession; a registered trademark of the First Nations Information Governance Centre) hold that First Nations communities own and control collective information about them, including aggregate data. The Responsible AI Policy Framework for the B.C. Health Sector commits to working toward OCAP® and to consulting communities on AI initiatives that involve them.
Identify two equity risks in use (1) and the check you would apply to each. Then state what should happen before the table in use (2) is entered, and explain why removing names does not settle the question.
The first equity risk in the invitation is translation quality. Generative models perform less well in under-resourced languages than in English, and a fluent-looking Punjabi or Tagalog draft can contain errors or wording that does not suit the community, which the team cannot detect itself. The check is review of each translation by fluent speakers, ideally older adults from those communities, before release. The second risk is access: offering sign-up only by website and email excludes older adults without internet access or digital skills, who are often the most isolated. The check is an equity review of access channels, which would add a telephone number and referral through the clinic.
Before the table is entered, the team should seek agreement from the First Nations concerned through their governance bodies and the agreements the health authority holds with them, and it should not enter the First Nations row until that agreement exists. Removing names does not settle the question because OCAP® concerns collective information about a community as well as information about individuals. A row describing First Nations clients in one clinic area is information about that community, and decisions about its use, including whether it is processed by an external AI service, belong to the Nations. A strong answer might also note that a small count in one area could identify individuals.
Minimum 20 characters required.
Question 1: A health authority uses a model that predicts each patient's future health care costs to decide who receives extra care coordination. Which equity problem does this design most directly risk?
Question 2: Which description of OCAP® is accurate?
Question 3: The Cedar Valley team wants to enter a table of Connector participation counts for First Nations clients in one clinic area into its approved assistant. The table has no names. What should happen first?
Question 4: Ahuja and colleagues (2023) reported a consistent performance gap between high-resource, Latin-script languages and under-resourced languages. Which practice follows for a team translating health materials with AI?
Governance, Regulation and Environmental Cost
Learning Objectives for this section
- Describe the layers of governance that apply to AI in health, from international guidance to a team's own rules, and identify which layers bind a B.C. health authority team.
- Summarize the WHO guidance on large multi-modal models (2024), the NIST AI Risk Management Framework (2023) and its Generative AI Profile (2024), and the risk-based structure of the EU Artificial Intelligence Act (2024).
- Explain the federal Directive on Automated Decision-Making and the state of federal AI legislation since the Artificial Intelligence and Data Act lapsed in January 2025.
- Describe the requirements of the Responsible AI Policy Framework for the B.C. Health Sector for risk assessment, accountability, training and incident reporting.
- Interpret published estimates of the energy used to run AI models, and weigh that cost against the benefits of a proposed use.
Introduction: Why Governance Supports Confident Use
Governance is the set of rules, institutions and processes that decide how AI is developed, bought, used and monitored. In practice it works like the safety rules of a laboratory: it tells people which uses are already approved, which need review and which are off limits, so that they can work quickly within the approved space. The Cedar Valley team's pilot shows this. Because the health authority completed a privacy impact assessment before the pilot and set clear limits on the data that the assistant may receive, team members could use it daily for public and internal documents without asking permission each time.
This section describes governance in layers, from international guidance to the team's own rules, and then turns to the energy used to run models.
Figure 10.2 shows the six layers, with the upper layers shaping the products on the market and the lower layers binding a B.C. health authority team directly.
Section 2.1 begins with the first of these layers, international guidance and standards.
2.1 International Guidance and Standards
International guidance and standards set expectations for the governments, companies and health care providers that develop, regulate and use AI. This subsection describes two documents of this kind: the WHO guidance on large multi-modal models and the NIST AI Risk Management Framework with its Generative AI Profile.
The WHO guidance on large multi-modal models (2024)
On 18 January 2024 the World Health Organization (WHO) released guidance on the ethics and governance of large multi-modal models, which are models that accept and produce several kinds of data such as text, images and audio. The guidance builds on WHO's 2021 report Ethics and governance of artificial intelligence for health, which set out six principles that include protecting human autonomy and ensuring inclusiveness and equity. The 2024 guidance identifies five broad applications of these models in health: diagnosis and clinical care, patient-guided use such as exploring symptoms and treatments, clerical and administrative tasks, medical and nursing education, and scientific research and drug development.
It makes more than 40 recommendations to governments, technology companies and health care providers. Governments are asked to assign a regulatory agency to assess and approve health-related models and to introduce mandatory auditing and impact assessment after release by independent third parties when a model is deployed at scale, with results published and broken down by user characteristics such as age, race or disability. Developers are asked to involve potential users and other interest holders, including clinicians, researchers and patients, from the early stages of design, and to design models to perform well-defined tasks with the accuracy and reliability those tasks need. The call to break results down by user characteristics echoes the equity checks in Section 1.
The NIST AI Risk Management Framework (2023) and Generative AI Profile (2024)
The United States National Institute of Standards and Technology (NIST) released its AI Risk Management Framework, version 1.0 (NIST AI 100-1), in January 2023. It is voluntary and widely used as a common vocabulary for AI risk, and it organizes risk management into four functions. Govern establishes the policies, roles and culture for managing risk; Map sets out the context and identifies risks for a specific use; Measure assesses and tracks those risks; and Manage prioritizes and acts on them. The framework describes trustworthy AI as valid and reliable, safe, secure and resilient, accountable and transparent, explainable and interpretable, privacy-enhanced, and fair with harmful bias managed.
In July 2024 NIST published a companion Generative AI Profile (NIST AI 600-1), which applies the four functions to generative AI and lists twelve risks that generative AI creates or makes worse. Several of them correspond to the error types that this course has taught students to check.
The accordion that follows describes six of these risks, with the check or the part of the course that addresses each, and lists the remaining six.
Confabulation is NIST's term for the confident production of false or fabricated content, which this course has called fabrication (Lesson 3). The check is verification at the primary source.
The risk that personal or sensitive data are leaked, inferred or misused through a model's training, inputs or outputs. The check is to classify information before entering it (Lesson 3) and to use only approved tools for anything beyond public material.
The risk that outputs reproduce societal biases or converge on a narrow range of content and perspectives. Lesson 7 described the homogenization of ideas, and Section 1 of this lesson described bias.
Risks that arise from how people and systems interact, including over-reliance on automated output (automation bias) and attributing human qualities to a system. The check is a clear division of responsibility and review at defined points.
The risk that generative AI makes it easier to produce and spread misleading content at scale. Lesson 9 discussed AI in the management of health misinformation.
The energy, water and materials consumed in training and running models. Section 2.4 below takes up this risk.
The profile also lists chemical, biological, radiological and nuclear information or capabilities; dangerous, violent or hateful content; obscene, degrading or abusive content; information security; intellectual property; and value chain and component integration, which concerns the third-party data, models and components that a system is built from.
The WHO guidance makes recommendations and the NIST framework is voluntary. Section 2.2 turns to a law that applies to AI providers, the European Union's Artificial Intelligence Act.
2.2 Law Abroad: The EU Artificial Intelligence Act
The European Union's Artificial Intelligence Act (Regulation (EU) 2024/1689) is the first comprehensive law on AI adopted by a major jurisdiction. It entered into force on 1 August 2024 and applies in stages. It matters to Canadians because it applies to any provider that places an AI system on the European market, wherever the provider is based, and many products used in Canada are designed to meet it. The Act sorts AI uses by risk.
Table 10.3 sets out its five categories, with examples of each and the main obligations that apply.
Table 10.3. Categories of AI use under the EU Artificial Intelligence Act, with examples and the main obligations for each.
| Category | Examples | Main obligations |
|---|---|---|
| Prohibited practices | Manipulative techniques that cause significant harm, social scoring and certain uses of biometric identification | Banned since 2 February 2025 |
| High-risk systems | AI in regulated products such as medical devices; systems used to evaluate eligibility for essential public services, including health care; emergency patient triage | Risk management, data governance, technical documentation, human oversight, accuracy and post-market monitoring |
| Transparency obligations | Chatbots and systems that generate synthetic images, audio or text | People must be told when they interact with AI, and synthetic content must be identifiable |
| General-purpose AI models | The large models behind general-purpose assistants | Documentation, copyright policies and summaries of training content since 2 August 2025, with further duties for the most capable models |
| Minimal risk | Spam filters and AI in video games | No new obligations |
The Act has already been amended. A 2026 amending regulation known as the Digital Omnibus on AI (Regulation (EU) 2026/1744), published in July 2026, postponed the obligations for high-risk systems: those for stand-alone high-risk uses now apply from 2 December 2027, and those for AI in regulated products such as medical devices from 2 August 2028. The prohibitions and the obligations for general-purpose models were not delayed. Dates in this field change, so the current text of a law, read at its official source, is the authority.
The EU Act reaches Canada through the products designed to meet it. Section 2.3 turns to the federal and provincial rules in Canada, including the framework for the B.C. health sector that applies to the Cedar Valley team's health authority.
2.3 Canada and British Columbia
Canada and British Columbia govern AI through three kinds of instrument: a federal directive on automated decision-making, federal legislation and strategy, and a provincial framework for the health sector. The tabs that follow describe each in turn.
The Directive on Automated Decision-Making. Canada's main binding rule on AI in government is a Treasury Board directive that took effect in April 2019 and applies to automated systems that federal institutions use to make or support administrative decisions. Before such a system goes into production, the institution completes an Algorithmic Impact Assessment, a questionnaire of 65 risk questions and 41 mitigation questions that assigns the system one of four impact levels, from Level I (little to no impact) to Level IV (very high impact). The requirements rise with the level and include notice to the people affected, explanation of decisions, peer review, testing and monitoring of outcomes, training of staff, human involvement and options for recourse. Completed assessments are published. The directive binds only federal institutions; it is a widely used model, and the B.C. framework cites it for its definition of artificial intelligence.
The Artificial Intelligence and Data Act and after. The Artificial Intelligence and Data Act (AIDA), part of Bill C-27, the Digital Charter Implementation Act, 2022, would have regulated high-impact AI systems in the private sector. The bill died on the order paper when Parliament was prorogued on 6 January 2025, and AIDA lapsed with it. In May 2025 the federal government appointed its first minister responsible for artificial intelligence, and on 4 June 2026 Innovation, Science and Economic Development Canada released Canada's National Artificial Intelligence Strategy: AI for All. The strategy did not propose a comprehensive AI law. It proposed targeted measures, including new consumer privacy and online safety legislation, the marking of AI-generated content, a trusted AI certification program, expanded support for the Canadian AI Safety Institute and a national AI literacy initiative, and it named health care as the first of its AI missions. As of October 2026, Canada has no comprehensive federal AI law; privacy law, human rights law and sector rules such as Health Canada's regulation of medical devices apply to AI as they apply to other technologies.
The Responsible AI Policy Framework for the B.C. Health Sector (June 2026). The framework applies to the Ministry of Health, the regional health authorities, the Provincial Health Services Authority and BC Shared Health Services. It does not apply to care providers working only in private practice. Compliance will be phased in, with an initial compliance expectation of 31 August 2027, and the framework will be updated regularly. Lesson 9 introduced its principles; the requirements below are the ones that shape a team's daily work.
- Risk assessments must be completed before and during the procurement, development, implementation and operation of any AI system, and AI features embedded in other software must be assessed with the same rigour.
- Personnel must not provide financial, organizational or personally identifiable information to any unauthorized party or AI system.
- Each AI system has a lead system owner who is accountable for its implementation and ongoing management, and a human in the loop is required where AI supports patient diagnosis.
- Users are responsible for applying AI tools appropriately and exercising professional judgment, and organizations are responsible for ensuring that users have AI literacy and system-specific training.
- Personnel must report incidents in which AI systems do not perform as expected, and uses that may contradict the framework or the law.
- Third-party tools may be used only for their approved, intended uses, and a tool licensed for internal work is not extended to patient-related uses unless the licence says so.
- When an update changes a system's core functionality or performance, a new risk assessment is required.
Box 10.5 asks the reader to place three situations that the Cedar Valley team could meet within the layers of governance described in this section.
For each situation, name the governance layer that most directly applies to the Cedar Valley team, using the six layers in Figure 10.2. (a) The vendor of the team's assistant releases a new version that can browse the web and act in other applications. (b) A colleague wants to paste a clinic's referral list, with names removed, into a free consumer chatbot to look for patterns. (c) A European company offers the health authority a triage tool that it describes as compliant with the EU AI Act.
(a) The provincial and organizational layers apply. Under the B.C. framework, an update that changes core functionality requires a new risk assessment, and the health authority's system owner decides whether the new capabilities may be switched on. Until then the team uses the assistant as approved. (b) The organizational and provincial layers apply, and the answer is no. A referral list with names removed is still record-level information about clients and can often be re-identified; the framework forbids giving personally identifiable information to an unauthorized AI system, and the pilot's rules allow only aggregate data in the approved tool. (c) Compliance with the EU AI Act is useful evidence about the vendor's documentation and testing, but the health authority still applies the B.C. framework's vendor and system assessment, its privacy obligations and, if the tool is a medical device, Health Canada's requirements.
Section 2.4 turns to a risk that both the NIST profile and the B.C. framework name, the environmental cost of running models.
2.4 The Environmental Cost of Running Models
Training a large model consumes a great deal of energy once, and running it consumes energy every time someone uses it. The second cost, the cost of inference, grows with the number of users. Three sources give a sense of its size.
What the estimates show
Luccioni, Jernite and Strubell (2024), in a paper presented at the ACM Conference on Fairness, Accountability, and Transparency, measured the energy needed for 1,000 inferences across many openly available models and tasks. Generative tasks used more energy than tasks that classify or label existing content, and image generation was by far the most energy-intensive task. Averaged across the models they tested, classifying 1,000 texts used about 0.002 kilowatt-hours (kWh), generating 1,000 texts used about 0.047 kWh and generating 1,000 images used about 2.9 kWh. The least efficient image model used 11.49 kWh per 1,000 images, which the authors compared with 522 smartphone charges. They also found that multi-purpose generative models were orders of magnitude more expensive than task-specific models for the same task, even after accounting for model size, and concluded that the usefulness of such models should be weighed more deliberately against their energy and emissions costs.
In August 2025 Google reported that the median text prompt in its Gemini apps used about 0.24 watt-hours (Wh) of energy and 0.26 millilitres of water, with emissions of about 0.03 grams of carbon dioxide equivalent, using a method that included idle capacity and data centre cooling. It also reported that the energy per median prompt had fallen 33-fold over the previous twelve months. These are figures from one provider for a median text prompt; long documents, reasoning modes, image generation and training are not included.
At the scale of the whole system, the International Energy Agency (2025) estimated that data centres, which serve all kinds of computing and not AI alone, used about 415 terawatt-hours of electricity in 2024, about 1.5 percent of the world's electricity, and projected that this would more than double to about 945 terawatt-hours by 2030, with AI as a main driver.
Worked Example 10.1 applies Google's figure for a median text prompt, and the average for image generation reported by Luccioni and colleagues, to the Cedar Valley team's use.
Worked Example 10.1: Energy used by one team's year of text prompts
Suppose the eight members of the Cedar Valley team each send 30 prompts per working day for 220 working days. The team sends 8 × 30 × 220 = 52,800 prompts per year.
At 0.24 Wh per prompt, the year's use is 52,800 × 0.24 = 12,672 Wh, or about 12.7 kWh, the energy that a 1-kilowatt space heater uses in about 13 hours.
If the team's prompts were ten times as demanding (an assumption made here for long documents and reasoning modes, not a measured figure), the total would be about 127 kWh. If the team also generated 500 images at the average of 2.9 Wh per image reported by Luccioni and colleagues, the images would add about 1.5 kWh. The two published figures were measured in different ways (Google's figure is a median for its own production service, and Luccioni's are averages across openly available models in a laboratory setting), so totals that combine them indicate an order of magnitude and should not be read as a precise comparison.
Interactive 10.1 repeats this estimate for other assumptions. It gives an order of magnitude from published averages and does not measure any particular tool.
Interactive 10.1. Calculator that estimates a team's yearly energy use from the number of team members, prompts per person per day, working days per year and a published figure for energy per request.
Weighing the cost against the benefit
Two conclusions follow from these figures, and both hold at once. For a single team, the energy used for text prompts is small compared with the energy used to heat the team's office, and it is easily justified when the work saves staff hours or improves a service. Across a health system and a society, the demand from AI is large and growing, and the choices that users and organizations make add up. The B.C. framework's Sustainability principle states that AI systems must be designed to minimize environmental impacts and resource consumption, and the NIST profile lists environmental impacts among its twelve risks.
A team can respect both conclusions through a few habits that cost little. It can use the smallest tool that does the job well, since Luccioni and colleagues found that task-specific models use far less energy than general-purpose generative models for tasks such as classifying text; it can avoid generating images for decoration and regenerating answers many times in search of a better wording; it can prefer providers that publish energy and water figures; and it can count the benefit in the same terms as the cost, in staff hours saved, residents reached or errors avoided, before deciding that a use is worthwhile.
Box 10.6 shows these habits applied to two proposals that reached the Cedar Valley team lead in the same week.
Two ideas reached the Cedar Valley team lead in the same week. One was to generate several new illustrations with an image model for each of the Connector program's monthly newsletters. The other was to use the enterprise assistant to draft the program's referral guide in the region's five most common languages, each draft going to a fluent reviewer. The team lead approved the translations, which would save reviewers many hours and reach residents who could not read the English guide, and declined the illustrations, which offered little over the program's existing photographs and relied on the most energy-intensive of the common tasks. Both decisions and their reasons went into the team's AI use log.
Read together, these documents give a public health worker a short set of practical questions: whether the tool and the data are approved for this use, who owns the system, how its outputs are checked, how problems are reported, and whether the benefit justifies the cost. Section 3 turns the answers into a personal workflow.
Before that, the reflection and knowledge check that follow review the layers of governance and the environmental cost of AI.
Reflection
A manager proposes switching on a new "agent mode" in the team's enterprise AI assistant. The mode can read the team's shared inbox, draft replies to clinic staff and schedule meetings. The team has five members, who currently send about 40 text prompts each per working day over 220 working days a year.
Use these facts. (a) The Responsible AI Policy Framework for the B.C. Health Sector requires a new risk assessment when an update changes a system's core functionality, designates a lead system owner for each AI system, forbids giving personally identifiable information to any unauthorized AI system, limits third-party tools to their approved uses, and requires personnel to report incidents. (b) Google (2025) reported about 0.24 watt-hours of energy for a median text prompt, and long or reasoning tasks can use considerably more.
Explain what must happen before the agent mode is used and why, identify one specific privacy risk of giving the agent access to the inbox, and estimate the team's current annual energy use for text prompts in kilowatt-hours, showing your arithmetic. State whether the energy cost is a reason to stop the current use.
The agent mode changes the assistant's core functionality: it reads email and acts on the team's behalf, which the original approval did not cover. Under the framework, a new risk assessment is required before it is switched on, and the lead system owner decides whether and how it may be used. The team should continue to use the assistant only as approved until then, since third-party tools are limited to their approved uses.
A specific privacy risk is that the shared inbox contains messages from clinic staff about individual clients, such as referral questions that name a person or describe their circumstances. Giving the agent access would pass personally identifiable information to the AI system, which the pilot's rules and the framework forbid unless that use has been assessed and authorized. The agent could also send a reply containing such information to the wrong person.
The current energy use is 5 × 40 × 220 = 44,000 prompts per year. At 0.24 watt-hours each, that is 44,000 × 0.24 = 10,560 watt-hours, or about 10.6 kilowatt-hours, roughly what a 1-kilowatt heater uses in under eleven hours. This is small compared with the staff time the assistant saves, so it is no reason to stop the current use, although the team should still avoid wasteful uses such as repeated regeneration, and an agent that runs long tasks would use more.
Minimum 20 characters required.
Question 1: Which statement about the EU Artificial Intelligence Act is accurate as of October 2026?
Question 2: The Cedar Valley team's enterprise assistant receives an update that adds web browsing and the ability to act in other applications. What does the B.C. framework require?
Question 3: What happened at the federal level after the Artificial Intelligence and Data Act lapsed in January 2025?
Question 4: A team will sort 50,000 open-ended survey responses into topics. Based on Luccioni, Jernite and Strubell (2024), which choice uses the least energy?
Building a Personal AI Workflow
Learning Objectives for this section
- Describe the four components of a personal AI workflow (a prompt library, a verification routine, an AI use log and a set of tools matched to tasks) and explain how they work together.
- Write prompt library entries that record the purpose, the tested prompt, the tool and its known failure modes.
- Assign a verification tier to a task according to the consequences of an error, and state the checks that each tier requires.
- Keep an AI use log that supports disclosure, team evaluation and the record-keeping expectations of the B.C. framework.
- Match tools to tasks, including the tasks for which AI should not be used, and audit an AI-drafted workflow against a team's rules.
Introduction: From Separate Habits to a Workflow
Lesson 3 introduced the prompt library, the verification routine and the AI use log, Lessons 4 to 8 applied them to learning, searching, writing, thinking and analysis, and Lesson 9 added the governance of public health practice. A workflow joins these practices into a routine that a person follows without reconstructing it each time. Its value lies in consistency: a check done every time catches the error that appears once in fifty uses, and a log kept every day can show months later how a document was produced. This section assembles the workflow from four components and then follows Jordan as they draft and audit a workflow for the team's analyst role.
Figure 10.3 arranges the workflow as a six-step cycle and shows how the four components supply the tools for each step.
Sections 3.1 to 3.4 describe the four components in turn, beginning with the prompt library.
3.1 The Prompt Library
A prompt library is a personal collection of tested prompts, each stored with what it is for and what has been learned about it. Lesson 3 introduced the idea; a working library adds three things to each prompt. It records the tool and the date on which the prompt was tested, because the same prompt can behave differently after a model is updated. It records the known failure modes, which are the errors that the prompt tends to produce, so that the verification step can target them. It also records a standing context block where one is needed, such as a short description of the team, the program and the audience, so that the context does not have to be retyped and is not forgotten.
Table 10.4 shows three entries from such a library, each with the tool and date of testing and its known failure modes.
Table 10.4. Three entries from a prompt library, with an abridged prompt, the tool and date on which each was tested, and its known failure modes.
| Entry | Prompt (abridged) | Tested | Known failure modes |
|---|---|---|---|
| P-07 Plain-language summary | "Rewrite the abstract below for adults aged 65 and older at about a grade 8 reading level. Keep every number unchanged. After the summary, list each technical term you replaced and the plain word you used." | Enterprise assistant, September 2026 | Drops hedging words such as "may" and "was associated with", which can turn an association into a cause; occasionally rounds numbers despite the instruction. |
| P-12 Reading guide | "Before I read the attached paper, give me a reading guide: the question, the design, the population, the main measures and three things to look for in the methods. Quote the sentence from the paper that supports each item." | Enterprise assistant, August 2026 | Sometimes names the design wrongly when a paper reports several analyses; the quoted sentence allows a quick check. |
| P-15 Pre-mortem | "Imagine it is a year from now and the plan below has failed. List the eight most likely reasons, the evidence that would warn us early, and one change that would reduce each risk. Do not praise the plan." | Two general-purpose assistants, July 2026 | Tends toward generic risks such as "insufficient funding"; asking for risks specific to older adults in rural areas improves the list. |
A library stays useful when it is pruned: prompts that no longer improve on a plain request are retired, and prompts are retested after tool updates. Keeping the library in an ordinary document or spreadsheet, outside any one tool, means that it can move with the person when tools or employers change.
The known failure modes recorded in the library tell the verification step what to look for, and Section 3.2 turns to that step.
3.2 The Verification Routine
Lesson 3 classified the errors that AI tools make: fabrication, misattribution, outdated information, errors of arithmetic and logic, and sycophancy. It also set the principle that the effort given to verification should rise with the consequences of an error. A workflow turns that principle into tiers, so that the level of checking is decided before the output arrives.
Table 10.5 sets out three tiers, with the typical tasks and the checks required at each.
Table 10.5. Three tiers of verification, with typical tasks and the checks required at each tier.
| Tier | Typical tasks | Checks required |
|---|---|---|
| Low stakes | Personal study notes, brainstorming, rewording an email to a classmate | Read the whole output; spot-check any fact you will rely on against course materials or a trusted source. |
| Medium stakes | Internal team documents, drafts for a supervisor, code for an exploratory analysis | Check every factual claim and citation at its source, recompute every number, run and test code on data with a known answer, and record the checks in the log. |
| High stakes | Materials for the public, documents that inform a decision, anything about the care of individuals | All medium-tier checks, plus an independent second reviewer, an equity review, review by a subject-matter expert, and sign-off by the person accountable for the document. |
Two habits make the routine harder to skip: deciding the tier when the task begins and writing it in the log, and keeping the checks independent of the tool that produced the output. Asking an assistant whether its own references are real is a weak check, because a model that produced a fabricated reference can also confirm it; opening the source in a library database is a strong one. Lesson 5 set out the four-step citation check (confirm that the reference exists, open the source, find the claimed finding and record the result), and Lesson 8 set out the checks for code, such as confirming row counts and recomputing a result by a second method.
Box 10.7 asks the reader to assign three tasks from the Cedar Valley team to a tier and to name the check that cannot be skipped for each.
Assign each task to the low, medium or high tier and name the one check you would not skip. (a) Jordan asks an assistant to explain the difference between a rate and a proportion before a statistics quiz in another course. (b) The epidemiologist asks an assistant to draft R code that produces the quarterly table of Connector referrals by clinic for the team's internal dashboard. (c) The team lead asks for a plain-language summary of the program's six-month results for a public newsletter.
(a) Low stakes. Jordan should compare the explanation with the course textbook or lesson, since the main risk is a subtly wrong definition that Jordan then learns. (b) Medium stakes, because the table informs internal monitoring. The check that cannot be skipped is to confirm that the total number of referrals in the table matches the total in the source data, which detects rows dropped by a filter or a join. (c) High stakes, because the summary reaches the public and describes program results. Every number must be checked against the six-month report, and a second reviewer, ideally the epidemiologist, should confirm that the summary does not overstate what the results show, for example by describing a change in loneliness scores as an effect of the program when the design cannot establish that.
The tier and the checks done are recorded in the AI use log, the third component of the workflow, which Section 3.3 describes.
3.3 The AI Use Log
An AI use log is a dated record of the AI assistance used in work or study. Lesson 3 introduced it as the basis for disclosure. In a workflow it also allows a person to reconstruct how a document was produced, gives a team the evidence it needs to evaluate a tool, and fits the B.C. framework, which asks system owners to keep records of the performance of AI systems and asks personnel to report incidents. An individual's log is the raw material for both.
A useful entry is short. It records the date, the tool and mode (for example, the enterprise assistant with web search turned off), the task, the class of data entered, the prompt or its library number, the verification tier and the checks done with their results, and how the output was used and disclosed.
Table 10.6 shows three entries from a log that covers both work and study.
Table 10.6. Three entries from an AI use log covering work and study, with the tool and task, the data entered, the tier and checks, and the use and disclosure of each output.
| Date | Tool and task | Data entered | Tier, checks and result | Use and disclosure |
|---|---|---|---|---|
| 2 Oct 2026 | Enterprise assistant; reading guide for a review of social prescribing (P-12) | Published paper | Low; design checked against the methods section; correct | Personal notes; no disclosure needed |
| 6 Oct 2026 | Enterprise assistant; draft monthly update for clinic managers | Internal non-confidential notes; aggregate counts | Medium; all 9 numbers recomputed from the source table; 1 rounding error corrected | Sent by team lead; footer states that AI assisted with drafting |
| 8 Oct 2026 | General-purpose assistant (personal account); explanation of a regression term for a course | None beyond the question | Low; compared with lecture notes; explanation omitted one assumption | Study only; course rules on AI checked |
Keeping one log for study and work makes patterns visible, such as a tool that explains well and rounds numbers.
The log records which tool was used for each task. The fourth component, described in Section 3.4, decides in advance which category of tool suits each recurring task.
3.4 Tools Matched to Tasks
The fourth component is a short list that pairs each recurring task with a category of tool, the reason for the choice and the check that follows. Writing the list down keeps one familiar assistant from drifting into every task, including those it does poorly. The categories in Table 10.7 are the ones this course has described; the product names are examples available in 2026 and will change.
Table 10.7. Recurring tasks matched to a category of tool, with the reason for each choice and the check that follows.
| Task | Tool category | Reason | Check |
|---|---|---|---|
| Understand a new concept | General-purpose assistant, such as ChatGPT, Claude, Gemini or Microsoft Copilot, in a tutoring or study mode | Patient explanation adapted to the learner | Compare with course materials; attempt problems unaided (Lesson 4) |
| Scope a topic and find starting sources | Scholarly AI search, such as Elicit, Consensus or Semantic Scholar, or an assistant with web search | Fast mapping of concepts and key papers | Four-step citation check (Lesson 5) |
| Search that must be complete and reproducible | Bibliographic databases, with a librarian's review | Documented, repeatable coverage | Search log and reporting standards (HSCI 241) |
| Draft, edit and adapt text | Approved assistant for internal documents; any assistant for public material | Fast restructuring and editing | Claim check, readability check, disclosure (Lesson 6) |
| Write and debug R code | Chat or coding assistant given a data dictionary, never the records | Speed for new programmers | Row counts, second method, known-answer test (Lesson 8) |
| Answer questions from a fixed set of documents | A retrieval-based tool that cites passages, such as Lewis for this course | Answers grounded in known sources | Open the cited passage (Lesson 2) |
| Work with confidential or record-level data | No external AI service; approved platforms or local models only, with governance approval | Privacy law and agreements | Approval recorded before any use (Lesson 8) |
The list also names the tasks for which a person chooses not to use AI. Lesson 4 identified two for students: building first fluency with a new method, and preparing for examinations taken without assistance. For professionals, a third is any task in which the person could not detect an error in the output, such as an unfamiliar statistical method or a language they do not read, unless a qualified reviewer will check the work.
With the four components described, Section 3.5 follows Jordan as they use the team's assistant to draft a workflow for the analyst role and then audit the draft.
3.5 Worked Demonstration: Drafting and Auditing an Analyst's Workflow
This worked demonstration brings the four components together in one task. Worked Example 10.2 gives Jordan's prompt to the team's enterprise assistant, an abridged version of the workflow it drafted for the analyst role, and the three checks that Jordan applied to the draft, each of which found a problem.
In the last weeks of the placement, the team lead asks Jordan to draft a workflow for the team's analyst role that new staff and students can follow after the pilot. Jordan uses the team's enterprise assistant, which is approved for internal non-confidential documents, to turn a list of recurring tasks into a first draft, and then audits the draft against the team's rules. The output below is a representative example prepared for this lesson; its strengths and errors are typical of those documented in the studies discussed in this course.
Prompt
I am a co-op student on the population health team of a B.C. health authority. Our approved AI tool is an enterprise assistant that may receive public documents, internal non-confidential documents and aggregate data, and never personal health information. Below are the eight tasks the team's analyst does most often. For each task, propose the type of tool to use, a verification check scaled to the stakes, and what to record in our AI use log. Present the result as a table, and then list any tasks for which AI should not be used. Tasks: (1) summarizing new papers on social prescribing; (2) drafting the monthly program update for clinic managers; (3) writing R code for quarterly tables from the aggregate program dataset; (4) checking the six-month referral spreadsheet for data entry errors; (5) preparing plain-language materials for older adults; (6) building a reading list on a new topic; (7) summarizing meeting notes; (8) answering staff questions about the referral process.
Output (abridged: six of eight rows shown)
Task 1, paper summaries. Tool: enterprise assistant with the paper attached. Check: compare the summary's design, sample and main result with the abstract and results section. Log: paper, prompt, check result.
Task 3, R code. Tool: assistant given the data dictionary. Check: run the code, confirm that totals match the source and compare one cell with a manual count. Log: prompt, script name, checks.
Task 4, referral spreadsheet. Tool: enterprise assistant. Remove client names, upload the spreadsheet and ask the assistant to flag impossible dates and duplicate entries. Check: review the flagged rows. Log: file name, number of rows flagged.
Task 5, plain-language materials. Tool: enterprise assistant with prompt P-07. Check: readability score, every number compared with the source, review by two older adults from the program's advisory group. Log: draft version, reviewers' comments.
Task 6, reading list. Tool: scholarly AI search or assistant with web search. Check: ask the assistant to confirm that each reference it lists is real. Log: search terms, number of sources.
Task 8, staff questions. Tool: the approved referral guide, with the assistant used only to draft answers to general questions from that guide. Check: the program coordinator reviews new answers. Questions about individual clients are never entered.
General note. Under the B.C. Responsible AI Policy Framework, every AI output must be approved by the regional privacy officer before it is used.
Commentary. The draft does several things well. It assigns tool categories sensibly, it attaches a specific check to most tasks, it routes staff questions to the approved referral guide and keeps questions about individual clients out of the assistant, and its plan for plain-language materials includes review by members of the intended audience. Jordan applied three checks to the draft, and each found a problem.
Check 1: compare each proposal with the pilot's data rules and the B.C. framework. Task 4 fails. The referral spreadsheet has one row per client, and without names it still holds dates, clinic, age and referral details from which clients can often be re-identified. The pilot allows only aggregate data in the assistant, and the framework forbids giving personally identifiable information to any unauthorized AI system. Jordan replaced the row: the analyst asks the assistant to write R code from the data dictionary that flags impossible dates and duplicates, then runs that code on the approved internal system, so that no record leaves it (the workflow from Lesson 8).
Check 2: find the stated requirement in the framework itself. Jordan searched the framework for the claim in the general note and did not find it. The framework requires a lead system owner for each AI system, a human in the loop where AI supports patient diagnosis, professional judgment by users, risk assessments and incident reporting. The privacy officer's role in the pilot came through the privacy impact assessment and does not include approving each output. Jordan deleted the note and added a sentence citing the framework's actual requirements.
Check 3: test whether each verification step is independent of the tool. The check proposed for Task 6 asks the assistant to vouch for its own references, which is a weak check. Jordan replaced it with the four-step citation check from Lesson 5, and replaced the similar check proposed for Task 1 in the rows not shown.
Result. Of the eight rows in the full output, five were accepted with minor edits, two were revised (the verification steps for Tasks 1 and 6) and one was replaced (Task 4), and the general note was deleted. The twenty-minute audit caught one error that would have breached the pilot's data rules and one false statement about the framework that new staff might have repeated, and Jordan recorded the checks and changes in the AI use log.
The audit checked the drafted workflow against the pilot's data rules and the B.C. framework. Section 3.6 sets out the team rules within which such a workflow sits.
3.6 The Cedar Valley Team's Rules
A personal workflow sits inside a team's rules. The Cedar Valley team combined Jordan's equity rules, the B.C. framework's requirements and the lessons of the pilot year into one page.
Box 10.8 sets out the resulting rules.
- For work documents, use only the approved enterprise assistant; use consumer tools only for public information and personal study.
- Never enter personal health information, record-level client data (even with names removed) or confidential organizational or financial information into any AI tool.
- Enter data about First Nations, Inuit or Métis communities, including aggregate data, only under an agreement with the communities concerned.
- Decide the verification tier when a task begins; materials for the public receive a second reviewer and an equity review.
- Check every factual claim, number and citation in any document that leaves the team at its source.
- Log each work use of AI, including the data class, the checks and their results.
- Disclose AI assistance in documents according to the health authority's guidance.
- The person who signs or sends a document is accountable for it, and an AI tool is never cited as the authority for a claim.
- Report harmful outputs and unexpected tool behaviour to the system owner as incidents.
- Trial new tools and features only with public material, and obtain the system owner's approval before using them with internal documents.
- Review these rules every six months and whenever the tool or the B.C. framework changes.
The rules are short because most of the detail lives in the workflow, and they make clear which uses are already approved, which is what allows the team to use AI with confidence.
This section has assembled a personal workflow from four components, audited an AI-drafted version of it and placed it within the team's rules. The reflection and knowledge check that follow review these components, and Section 4 then turns to the evaluation of new tools and to continued learning.
Reflection
You are a fourth-year Health Sciences student who also works ten hours a week as a research assistant on a study that has interview transcripts with participants. Your instructors decide whether AI may be used in each course and require disclosure where it is used, and the study's ethics approval does not permit transcripts to be entered into external AI services.
A personal AI workflow has four components: a prompt library (tested prompts stored with the tool, the date of testing and the known failure modes), a verification routine (tiers of checking set by the consequences of an error: low, medium and high), an AI use log (a dated record of the tool, task, data entered, checks and their results, and disclosure), and a list of tools matched to tasks, including tasks done without AI.
Write one prompt library entry for a task you do often, assign a verification tier and the main check to two tasks (one from your studies and one from the research assistant role), write one AI use log entry, and name one task for which you will not use AI, with your reason.
Prompt library entry. P-03, reading guide. "Before I read the attached article, list its question, design, sample, main measures and main finding, and quote the sentence that supports each item." Tested on a general-purpose assistant in October 2026. Known failure modes: it sometimes calls a cross-sectional analysis of cohort data a cohort study, and it shortens hedged findings; the quotes make both easy to check.
Verification tiers. Explaining logistic regression for my own revision is low stakes; I compare the explanation with the course notes and then work a practice problem without help. Drafting the literature summary section of the study's interim report for my supervisor is medium stakes; I check every citation at its source with the four-step check and confirm that each finding matches the paper.
Log entry. 14 October 2026; general-purpose assistant, web search off; reading guide (P-03) for a published article on loneliness; data entered: the published article only; tier low; design checked against the methods and found correct; used for personal notes; no disclosure needed.
Task without AI. I will not use any external AI service on the interview transcripts, because the ethics approval does not permit it and participants did not consent to it. I will also code the first transcripts myself to build my own skill.
Minimum 20 characters required.
Question 1: Jordan wants to verify the references in an AI-drafted reading list. Which check is independent of the tool that produced the list?
Question 2: Which task belongs in the high verification tier?
Question 3: Beyond the prompt itself, what does a working prompt library entry record?
Question 4: In the worked demonstration, the assistant proposed uploading the referral spreadsheet with client names removed. Why did Jordan replace this step?
Continued Learning
Learning Objectives for this section
- Apply nine questions to a new AI tool: the six questions from HSCI 241 Lesson 6 on coverage, method, independent evaluation, reproducibility, data terms and funding, and three further questions on error detection, cost and accountability.
- Design a structured trial of a new tool or release, using a personal test set of tasks with known answers.
- Compare ways of staying current with AI, including communities of practice, primary documentation, preprints and professional development, and judge the reliability of each.
- Explain how public health roles are likely to change as AI agents take on routine work, including the risk of deskilling.
- Build a practical schedule for continued learning that keeps a personal workflow current as tools change.
Introduction: Learning a Method That Outlasts the Products
The product examples in this course are current as of 2026, and some of the tools it names will be renamed, merged or withdrawn within the span of a degree. The course has therefore taught categories of tools, the mechanisms behind them and practices that transfer from one product to the next. This final section adds a method for evaluating tools that did not exist when the course was written and a plan for continued learning.
4.1 Nine Questions for Any New Tool
HSCI 241 Lesson 6 introduced six questions for evaluating an AI tool for evidence retrieval, to be answered from the tool's own documentation. They concern coverage, method, independent evaluation, reproducibility, data terms, and the provider and its interests, and they apply to almost any AI tool once stated in general terms. This section adds three questions that the rest of the course has shown to matter: how the tool's errors can be detected, what it costs, and who is accountable for its output.
Figure 10.4 groups the nine questions by what they establish and marks the three new ones.
The accordion that follows explains each of the nine questions in turn.
The documentation should state whether answers come from training data alone, a web search, a named database or the user's documents, and what dates these cover. A tool that answers from training data alone cannot report events after its cut-off (Lesson 2).
Ranking, retrieval, generation, code execution and agent actions all shape the output. For an agent, the documentation should state which actions it can take on the user's behalf, such as opening web pages or sending messages (Lesson 2).
An independent evaluation for a similar task carries more weight than a developer's general claims of accuracy. When none exists, a structured trial on tasks with known answers (Section 4.3) is the substitute.
The user needs to save the prompt, settings, date, version and full output, or the use cannot be disclosed or logged.
The terms should state whether inputs are stored, for how long and where, whether they are used to train or improve models, and who can see them. Silence on any of these points is treated as a concern.
Ownership, funding and commercial relationships can affect what a tool promotes and how long it will be available.
Every tool makes errors, so the useful question is how a user will find them. Tools that cite sources the user can open, show the code or passages they used, and flag uncertainty make errors easier to detect. An error that only an expert could see requires expert review before the output is relied on (Section 3.4).
Cost includes the price after any free trial, the time needed to learn the tool and verify its output (which can exceed the time it saves), the environmental cost discussed in Section 2.4, and the cost of switching later if work becomes locked into one product. It is also an equity question, since a tool that only some team members or partners can afford divides them from the rest.
Terms of service usually make the user responsible for checking outputs, so accountability rests with the person and the organization. Under the B.C. framework each AI system has a lead system owner and users exercise professional judgment; in publishing, the ICMJE and COPE positions discussed in Lesson 6 hold human authors accountable. A tool whose role in a decision cannot be traced makes accountability hard to exercise.
Interactive 10.2 records answers to the nine questions as a person works through a tool's documentation and suggests a next step. It applies simple rules written for this lesson and does not replace the judgment of the person, the team or the system owner.
Interactive 10.2. Nine-question tool check that records what a tool's documentation shows for each question and suggests a next step.
Section 4.2 applies the nine questions to a hypothetical tool that stands for any product released after this lesson was written.
4.2 Worked Demonstration: Evaluating a Tool Released After This Course Was Written
The second worked demonstration continues the Cedar Valley case from Worked Example 10.2. In Worked Example 10.3, the team's enterprise assistant answers the nine questions from a new tool's public product page and terms of service, and Jordan applies three checks to its answers before making a recommendation.
In Jordan's final week, a vendor offers the Cedar Valley team a free trial of a new "policy brief agent" that searches the web, reads documents the user uploads and drafts a referenced briefing note. The product is hypothetical and is called Tool X here; it stands for any product released after this lesson was written. The team lead asks Jordan to evaluate it before anyone tries it. Jordan copies the vendor's public product page and terms of service, which are public documents, into the team's enterprise assistant and asks it to answer the nine questions from those documents. The output below is a representative example prepared for this lesson; its strengths and errors are typical of those documented in the studies discussed in this course.
Prompt
Below are the public product page and the terms of service for a new AI tool. Answer each of the nine questions that follow using only these two documents. For each answer, quote the sentence that supports it. If the documents do not answer a question, write "Not stated" and do not infer an answer. Questions: (1) What does the tool draw on? (2) How does it produce its output? (3) Has it been independently evaluated for a task like ours? (4) Can a use be recorded and repeated? (5) What happens to the information entered? (6) Who provides it, and what are their interests? (7) How can its errors be detected? (8) What does it cost? (9) Who is accountable for its output? [Product page and terms of service pasted here.]
Output (abridged)
1. Coverage. The tool searches the open web and documents that the user uploads. Quote: "Tool X searches the open web and your own files."
2. Method. It plans a search, reads sources and drafts a brief with citations. The underlying model is not named. Quote: "Our agent plans, researches and writes for you."
3. Evaluation. The tool has been independently validated. Quote: "Internal testing shows industry-leading citation accuracy."
4. Reproducibility. Reports can be exported with their sources, and prompt history is kept for 30 days. Quote: "Export any report, with every source, in one click."
5. Data terms. Uploaded documents are not used to train models. Quote: "We take your privacy seriously."
6. Provider. Not stated.
7. Error detection. Each claim in a brief links to the source it came from. Quote: "Every sentence is linked to its source."
8. Cost. Free for 30 days, then a monthly fee per user. Energy use is not stated.
9. Accountability. The user is responsible for checking outputs, and the company accepts no liability for decisions based on them. Quote: "You are responsible for reviewing all outputs before use."
Commentary. The output quotes its support for most answers, reports two gaps honestly (the provider and the energy cost), and extracts coverage, reproducibility, error detection, cost and accountability accurately, which saved Jordan a line-by-line reading of two long documents. Jordan applied three checks, and two found errors.
Check 1: find each quoted sentence in the original documents and confirm that it supports the answer. All quotes were present, but the quote for question 5 does not support the answer. The terms of service say nothing explicit about training; they state that the company may use customer content "to improve and develop our services". The assistant filled a gap with a reassuring inference despite the instruction not to. Jordan corrected the answer to "Not stated whether inputs are used for training; content may be used to improve the company's services", which the team treats as a concern.
Check 2: decide whether the cited evaluation is independent. The quote for question 3 describes the vendor's own internal testing, which is not an independent evaluation. Jordan searched for published evaluations of Tool X and found none, as expected for a new product. The answer was corrected to "No independent evaluation; vendor's internal claim only".
Check 3: confirm that each "not stated" answer is a real gap. Jordan searched both documents for the company's ownership, funding and the model it uses and found nothing, which confirmed the gaps.
Result. After correction, four questions had clear answers (coverage, reproducibility, error detection and accountability), three were unclear (method, provider and cost) and two raised concerns (evaluation and data terms). Jordan recommended that no internal documents be entered into Tool X, that the system owner ask the vendor directly about data use and model identity, and that, if the answers are satisfactory, the team run a structured trial on public material. Under the B.C. framework, a third-party tool requires a vendor and system assessment before a vendor relationship begins, so the free trial itself was referred to the system owner. Jordan logged the evaluation, the two corrections and the recommendation.
Jordan's recommendation ends with a structured trial on public material, the method that Section 4.3 describes.
4.3 Structured Trials of New Releases
A structured trial tests a new tool, or a new version of a familiar one, on a fixed set of tasks with known answers, scored the same way each time. Lesson 3 described this as mapping the jagged frontier for one's own tasks. In a continued-learning plan, the same set of tasks becomes a personal test set, kept in the prompt library and reused whenever a tool changes. Because the answers are known, changes in performance show up quickly, and the result is recorded in the log.
Table 10.8 sets out six test tasks for such a set, with the known answer or standard for each and what the task reveals.
Table 10.8. Six test tasks for a personal test set, with the known answer or standard for each and what it reveals about a tool.
| Test task | Known answer or standard | What it reveals |
|---|---|---|
| Summarize a paper you have already extracted by hand | Your own extraction of design, sample and findings | Accuracy of summaries and extraction |
| Find key papers on a topic with an established reference list | The reference list of a recent systematic review | Coverage and fabricated citations |
| Compute a rate and a percentage change from a small table | Your own calculation | Arithmetic reliability |
| Write R code for a descriptive table from synthetic data | Totals known in advance | Code correctness and silent errors |
| Rewrite an abstract in plain language | Every number and hedge kept; target reading level | Faithfulness when simplifying |
| Ask about a recent event outside the tool's sources | The tool should search, flag uncertainty or decline | Honesty about the limits of its knowledge |
A trial of six tasks takes about an hour. Run when a major release appears, it gives a dated record of how each tool performs on the work that matters to that person.
A structured trial shows how a tool performs once it is available. Section 4.4 turns to the sources through which a person stays current with new tools, research and rules.
4.4 Ways to Stay Current
A sustainable approach relies on a few sources of different kinds, each read with an understanding of what it can show.
The tabs that follow describe five such sources: communities of practice, primary documentation, research and preprints, professional development, and governance updates.
A community of practice is a group of people who share a concern and learn together through regular interaction (Wenger, 1998). For AI, it can be a team's monthly half hour in which members show one useful prompt and one failure, a departmental channel for sharing tested prompts, or a professional network. Such communities spread practical knowledge quickly, although enthusiasm can outrun evidence, so their claims are tested like any other.
Providers publish release notes, model documentation (sometimes called system cards or model cards), usage policies and terms of service. These are the authoritative sources for what a tool is designed to do, what data it uses and what has changed. They are written by the provider, so claims about performance in them are treated as claims until independent evidence supports them.
Much AI research appears first as preprints on servers such as arXiv and medRxiv, before peer review. Preprints give early access to new findings, and some are later revised or never published. Peer-reviewed studies, systematic reviews and reporting guidelines such as TRIPOD+AI and TRIPOD-LLM (Lesson 9) provide firmer ground. Reading the methods of a study, and asking whether its tasks resemble one's own, matters more than its headline result.
Employers, professional associations and universities offer training, and the B.C. framework makes organizations responsible for ensuring that users have AI literacy and system-specific training. The federal strategy released in June 2026 includes a national AI literacy initiative. Formal training is most useful when it is followed by practice with one's own tasks.
Rules change. The B.C. framework states that it will be updated regularly, the EU AI Act's dates were amended within two years of its adoption, and federal legislation remains under development. A yearly check of the documents that govern one's work, read at their official sources, keeps a workflow within the rules.
These sources keep a person's knowledge of tools, evidence and rules current. Section 4.5 turns from the tools to the work itself and to the changes that AI is likely to bring to public health roles.
4.5 How Public Health Roles Are Likely to Change
Estimates of how AI will affect work vary, and most describe exposure rather than replacement. Eloundou and colleagues (2024) estimated that around 80 percent of United States workers could have at least 10 percent of their work tasks affected by large language models, and that about 19 percent could see at least half of their tasks affected, with greater exposure in many higher-income occupations. Public health analysts, planners and communicators spend much of their time on tasks that this course has shown AI to assist.
Lesson 2 described AI agents, which plan a task, call tools, observe the results and repeat until the task is complete. As agents become dependable for routine multi-step work, such as compiling an environmental scan, refreshing a dashboard's commentary or preparing a first draft of a report from data, the human part of the work is likely to shift toward specifying tasks clearly, checking outputs at defined points, interpreting results in context, working with communities and interest holders, and taking accountability for decisions.
The shift carries a risk of deskilling, the loss of skills that people no longer practise. Budzyń and colleagues (2025) studied colonoscopies at four centres in Poland after an AI system for detecting polyps was introduced. In procedures performed without AI assistance, the rate at which endoscopists detected adenomas fell from 28.4 percent before the AI system was introduced to 22.4 percent afterward. The study was observational and concerns one clinical skill, but it suggests that routine reliance on AI can weaken the skill the AI supports. For public health workers, the corresponding practice is to keep core skills in use: to calculate some results by hand, to read some papers without a summary, and to write some drafts unaided, as Lesson 4 recommended for students.
The flip cards that follow summarize the skills likely to grow in value, the tasks likely to be shared with AI, the responsibilities that stay with people and the habits that protect skills.
Section 4.6 brings the practices of this section together in a plan for continued learning.
4.6 A Plan for Continued Learning
A plan for continued learning works when it is small enough to keep. The schedule in Table 10.9 takes about two hours a month beyond ordinary work and keeps each component of the workflow from Section 3 current.
Table 10.9. A schedule for continued learning, with the activities for each working day, each month, each major release and each year.
| How often | Activity |
|---|---|
| Every working day | Log AI use with the data class, tier and checks; note any surprising success or failure. |
| Every month | Review the log for patterns; add, revise or retire one or two prompts in the library; share one useful prompt and one failure with colleagues. |
| When a major release appears, and at least every three months | Run the personal test set on the new release or tool and record the results; apply the nine questions to any tool being considered for work. |
| Every year | Read the current versions of the rules that govern your work at their official sources; update the list of tools matched to tasks; choose one new skill to learn in depth, such as a new analysis method or a new category of tool. |
Tasks with known answers show what a tool can do, logs show what happened, and governance documents show what is allowed. With those three sources of evidence, a person can adopt new capabilities quickly and with confidence.
Box 10.9 draws the lesson together. Table 10.10 sets out, for six tasks covered in this lesson, how AI performs and the check that applies, and the box ends with a short statement of what responsible adoption makes possible.
Box 10.9: Strengths and limits: responsible adoption and continued learning
Table 10.10. How AI performs at six tasks of responsible adoption and continued learning, and the check that applies to each.
| Task | How AI performs | The check that applies |
|---|---|---|
| Translating and simplifying materials for under-served groups | Fast and broad, with weaker results in under-resourced languages | Review by fluent speakers and members of the audience |
| Summarizing regulations and governance documents | Useful first summaries that can misstate requirements or dates | Read each requirement in the current official text |
| Drafting team rules and personal workflows | Sensible structure that can include uses that breach data rules | Audit each line against the team's rules and the B.C. framework |
| Estimating the energy cost of a use | Explains methods well, with figures that vary and are often provider-reported | Use published sources and state every assumption |
| Evaluating a new tool from its documentation | Extracts answers quickly and sometimes fills gaps with assumptions | Quote the supporting sentence and mark gaps as not stated |
| Keeping up with new releases | Summarizes release notes but cannot test the tool on your tasks | A structured trial with a personal test set |
Across these tasks, AI saves time on reading, drafting and summarizing, while judgments about data, equity, accountability and fitness for purpose remain with people. Responsible adoption, through training, clear rules and evaluation, is what allows individuals and teams to gain from each new capability as it appears.
This section has set out nine questions for evaluating a new tool, structured trials of new releases, sources for staying current, the likely changes in public health roles and a plan for continued learning. The reflection and knowledge check that follow review these practices.
Reflection
A new AI note-taking app is offered free to students for one year and by monthly subscription afterward. It records lectures and meetings and produces summaries. Its documentation states that recordings are stored on servers outside Canada for 90 days and "may be used to improve our services". It does not name the AI model it uses or who funds the company. No independent evaluation has been published, and the vendor states that its summaries are "highly accurate". Each point in a summary links to a timestamp in the recording, and summaries can be exported as text files. The terms state that users are responsible for how they use summaries.
The nine questions for any tool are: (1) coverage, meaning what the tool draws on; (2) method; (3) independent evaluation; (4) reproducibility; (5) data terms; (6) provider and interests; (7) error detection; (8) cost; and (9) accountability.
Classify each question as clear, unclear or a concern using only this information. Decide whether and how you would use the app for a lecture and for a meeting of a research team, and describe a short structured trial with a known answer.
Classification. Coverage is clear: the app works from the recording. Method is unclear because the model is not named. Independent evaluation is a concern, since only the vendor's own claim exists. Reproducibility is clear, because summaries can be exported. Data terms are a concern: recordings are held outside Canada for 90 days and may be used to improve the service. The provider is unclear. Error detection is clear, since each point links to a timestamp I can check. Cost is clear for the first year, with a subscription afterward and a switching cost if my notes stay in the app. Accountability is clear in that it rests with me.
Decision. For a lecture, I would use the app only if the instructor permits recording, and I would treat the summary as a study aid checked against my own notes. For a research team meeting, I would not use it, because participants' details or unpublished work could be discussed and the data terms do not allow confidential material to be recorded and stored abroad.
Trial. I would run the app on a recorded public lecture for which I already have detailed notes, compare the app's summary with my notes point by point, follow five timestamps to confirm them, and count omissions and errors before deciding whether the app saves time.
Minimum 20 characters required.
Question 1: Which of the following is one of the three questions that this lesson adds to the six questions from HSCI 241 Lesson 6?
Question 2: A vendor's product page states that "internal testing shows industry-leading accuracy." How should this be recorded under the question about independent evaluation?
Question 3: What is the main purpose of a personal test set?
Question 4: Budzyń and colleagues (2025) found that after an AI system was introduced, the adenoma detection rate in colonoscopies performed without AI fell from 28.4 to 22.4 percent. Which practice does this finding support?
Final Assessment
Bringing It All Together
This lesson closed the course by treating responsible adoption as the basis for confident use. Section 1 showed that AI can widen health inequities through its training data, its outcome labels, its uneven performance across languages, unequal access and uncritical use of its outputs, and that it can narrow them through translation, accessibility and extra capacity for small teams when the right checks are in place. It applied the First Nations principles of OCAP® and the CARE Principles to the stages of an AI project and related them to the Indigenous Rights and Reconciliation and Equity and Anti-Discrimination commitments of the Responsible AI Policy Framework for the B.C. Health Sector.
Section 2 set out the layers of governance, from the WHO guidance on large multi-modal models, the NIST AI Risk Management Framework and the EU Artificial Intelligence Act to the federal Directive on Automated Decision-Making, the situation since the Artificial Intelligence and Data Act lapsed, and the B.C. framework's requirements for risk assessment, accountability, training and incident reporting. It also showed how to estimate the energy used by a team's AI use and weigh it against the benefit. Sections 3 and 4 turned these requirements into practice: a personal workflow built from a prompt library, a verification routine, an AI use log and tools matched to tasks, and a method for continued learning built on nine questions for any new tool, structured trials with known answers and a schedule that keeps the workflow current.
The worked demonstrations followed Jordan through two audits. An AI-drafted workflow proposed an upload that would have breached the pilot's data rules and attributed a false requirement to the B.C. framework, and an AI-assisted tool evaluation filled a gap in a vendor's terms with a reassuring inference. In both cases, checks that took minutes found the errors, and the result was a workflow and a decision that the team could rely on.
Key Takeaways from this lesson
- Responsible adoption, through training, clear rules and evaluation, is what allows people and teams to use AI with confidence and to take up new capabilities quickly.
- AI can widen inequities through unrepresentative training data, proxy labels, weaker performance in under-resourced languages, unequal access and skills, and uncritical use of outputs.
- AI can also narrow inequities through translation, accessibility and extra capacity for small teams, provided that fluent review, verification and shared access are in place.
- OCAP® is a set of First Nations principles held by FNIGC that applies to collective information, including aggregate data, and the CARE Principles complement the FAIR principles with people- and purpose-oriented commitments.
- The B.C. framework commits to working toward OCAP® and the Métis principles of OCAS, and it requires risk assessment, a lead system owner, AI literacy training, incident reporting and new assessments when tools change.
- Canada has no comprehensive federal AI law since AIDA lapsed in January 2025; the federal directive binds federal institutions, and the 2026 national strategy proposed targeted measures.
- A team's text prompts use little energy compared with other office activities, while aggregate demand is large, so teams choose the smallest suitable tool and avoid wasteful uses such as decorative image generation.
- A personal workflow joins a prompt library, a verification routine with tiers set before the output arrives, an AI use log and a list of tools matched to tasks, including tasks done without AI.
- Any new tool can be evaluated with nine questions, and a missing answer in its documentation is itself useful information.
- Continued learning works best as a small routine of daily logging, monthly review, structured trials on a personal test set and a yearly reading of the rules, with core skills kept in practice.
Core Concepts Reviewed
Section 1: health equity, five routes by which AI can widen inequities, automation bias, uses of AI that narrow inequities, Indigenous data sovereignty, OCAP®, OCAS, the CARE Principles and the equity commitments of the B.C. framework.
Section 2: layers of governance, the WHO guidance on large multi-modal models, the NIST AI Risk Management Framework and Generative AI Profile, the EU AI Act and its 2026 amendment, the Directive on Automated Decision-Making, the lapse of AIDA and the 2026 national strategy, the B.C. framework's requirements, and the energy cost of inference.
Section 3: the personal AI workflow, prompt library entries with known failure modes, verification tiers, the AI use log, tools matched to tasks, and the audit of an AI-drafted workflow against a team's rules.
Section 4: nine questions for any new tool, the evaluation of a hypothetical new product, structured trials and personal test sets, communities of practice and other ways to stay current, exposure and deskilling, and a schedule for continued learning.
The final reflection asks you to turn the lesson's method for continued learning into your own plan for the coming year.
Reflection
This course ends, and AI tools will keep changing. The plan for continued learning in this lesson has four parts: (1) logging AI use every working day, with the data class, the verification tier and the checks; (2) a monthly review of the log and the prompt library, sharing one useful prompt and one failure with colleagues or classmates; (3) a structured trial of new releases, at least every three months, on a personal test set of tasks with known answers; and (4) a yearly review of the rules that govern one's study or work, read at their official sources.
Write your own plan for the next twelve months. For each of the four parts, state specifically what you will do, using examples from your own studies or work. Then name one skill you will keep practising without AI and explain why, and state one rule about data that you will always follow.
Daily. I will keep one log in a spreadsheet for study and my part-time job, recording the tool, task, data class, tier and checks for each use that contributes to something I submit or send.
Monthly. On the first Sunday of each month I will spend thirty minutes reading the log for patterns, such as a tool that rounds numbers, and I will revise or retire at least one prompt. I will share one useful prompt and one failure in my program's study group chat.
Trials. My test set has five tasks with known answers: summarizing a paper I have already extracted, finding papers from a known review's reference list, computing a rate from a small table, writing R code for a table with known totals, and asking about a recent event. I will run it on any major new release and in January, April, July and October.
Yearly. Each September I will read SFU's current guidance on AI in teaching and learning and, if I am working in health care, my employer's AI policy and the current Responsible AI Policy Framework for the B.C. Health Sector, and update my tool list.
Skill without AI. I will calculate and interpret basic epidemiological measures by hand, because I need to recognize a wrong number in AI output.
Data rule. I will never enter personal health information or anyone's unpublished work into a tool that is not approved for it.
Minimum 30 characters required.
Final Knowledge Assessment
Question 1: Which statement best expresses this lesson's view of responsible adoption?
Question 2: An assistant's summary of the B.C. framework states that "every AI output must be approved by the regional privacy officer." What should the analyst do?
Question 3: Which pairing of a governance instrument and its nature is correct?
Question 4: A team will use AI to draft its referral guide in one of the region's most common languages other than English. Which checks from this lesson apply?
Question 5: Which statement about the CARE Principles for Indigenous Data Governance is accurate?
Question 6: A team sends about 52,800 text prompts a year. Using the median of 0.24 watt-hours per text prompt reported by Google (2025), about how much energy is this?
Question 7: Which example illustrates the outcome-label route to inequity?
Question 8: In the Tool X demonstration, the assistant answered that uploaded documents "are not used to train models" and quoted "We take your privacy seriously." What kind of error is this?
Question 9: Under the B.C. framework, who is responsible for ensuring that staff have AI literacy and system-specific training?
Question 10: R code drafted with an assistant will produce an internal quarterly table of referrals by clinic. Which tier and check fit?
Question 11: Which statement about the federal Directive on Automated Decision-Making is accurate?
Question 12: A colleague says that the energy cost of AI is so small that teams never need to think about it. Which response is best supported by the lesson?
Question 13: Why does the lesson recommend keeping a prompt library outside any single AI tool?
Question 14: Which is the best example of a community of practice that supports continued learning about AI?
Question 15: Eloundou and colleagues (2024) estimated that around 80 percent of United States workers could have at least 10 percent of their tasks affected by large language models. Which interpretation fits the lesson?
Glossary: Key Terms, People & Frameworks
📚 Reference page, available throughout the lesson
Terms, frameworks and people used in this lesson on responsible adoption and continued learning, with links to stable sources where helpful.