Decision inputs
Facts that change the policy answer
Here the tool receives an employee question and general workplace context, while someone ultimately relies on a proposed answer or next step. The policy must evaluate the whole path between them.
- 1Task and owner
- Workplace manager wants to answer a workplace medical question. Responsibility for a proposed answer or next step stays with a named person or team throughout the request.
- 2Information involved
- An employee question and general workplace context. Look beyond pasted text: files, integrations and retrieval connections can expose the same material.
- 3Tool and account
- An approved company account. Approval must cover the account and its settings, not merely the product name.
- 4Intended result
- The expected result is a proposed answer or next step. The policy needs to know what happens after generation, including publication, communication and automated use.
- 5Consequence if it is wrong
- Generated medical guidance can cause harm and the manager lacks clinical context. That risk sets the level of review and the person who should receive an exception.
- 6Human review
- qualified occupational health professional should inspect, change, reject or stop the result. Their role should include checking source facts, correcting errors and refusing the proposed use.
Possible policy routes
The task name alone cannot decide it.
A published workplace policy can return different answers for the same task. These are the practical branches worth encoding.
A routine policy route may be possible
The company can consider a standard route where the exact account is approved, only the minimum sensitive health information is used, a proposed answer or next step remains within the stated purpose, and qualified occupational health professional reviews it before use.
Approval may be required
Pause the ordinary route whenever the account or data handling is uncertain, generated medical guidance can cause harm and the manager lacks clinical context, or a proposed answer or next step reaches people or systems beyond the requester’s authority.
The request may need to stop or change
Do not continue unchanged when restricted information would enter an unapproved service, the output would act before qualified occupational health professional can intervene, or do not use AI as the medical decision maker and route urgent or individual advice appropriately cannot be maintained. Consider less information, a controlled account or a non-AI process.
Request checklist
Questions to ask before using the tool
- 01
Is the exact account approved for answer a workplace medical question, including its plug-ins and connected sources?
- 02
Who is permitted to expose an employee question and general workplace context to this tool and for this purpose?
- 03
Could someone treat a proposed answer or next step as final even though it was generated as assistance?
- 04
Does qualified occupational health professional have enough authority and time to stop the result?
- 05
Would another region, audience or frequency activate a different company rule?
Worked request
What the employee should submit
This example supplies decision facts without pasting the underlying material into the approval record.
- requester
- workplace manager
- task
- Use AI to answer a workplace medical question.
- information
- an employee question and general workplace context
- tool
- An approved company account
- frequency
- Recurring work
- region
- Where the work and affected people are located
- purpose
- Draft or analyse
- impact
- Health recommendation
- review
- Complete human review
- owner
- qualified occupational health professional
Useful safeguards
Controls that fit this request
- ✓
Do not use AI as the medical decision maker and route urgent or individual advice appropriately
- ✓
Start with a de-identified sample of an employee question and general workplace context before considering broader access.
- ✓
Reassess the request whenever its tool, information classification, frequency or consequence changes.
- ✓
Link the completed check to the applicable policy version and append later reassessments separately.
Questions people ask
About this AI use
Is using AI to answer a workplace medical question automatically allowed?
Treat this as a request pattern. The authoritative answer comes from the current company policy and the employee’s completed submission.
What does the policy need to know about this use?
Describe a proposed answer or next step, identify an employee question and general workplace context, name the exact tool and account, explain who will receive or rely on the output, and state how qualified occupational health professional will review it.
What should remain after the decision?
Link the completed check to the applicable policy version and append later reassessments separately. A classification and controlled reference may be enough when copying an employee question and general workplace context would create unnecessary risk.