Option A: Execute Original Commitments
The Argument
The original CapDev commitments remain valid and are more relevant than ever given the shifted AI landscape:
- Healthcare Compliance - If we're now using commercial AI APIs (GPT-4, Claude) with patient data, understanding NZ Privacy Act and Health Information Privacy Code compliance is critical, not optional.
- R&D Information Management - Systematic documentation of API evaluations, integration approaches, and compliance decisions is foundational R&D practice.
- RDTI Knowledge - Already completed.
The landscape shift doesn't invalidate these commitments - it makes them more urgent.
Reframed Execution Plan
Original Deliverable:
"Research and secure resources to understand ensure compliance with health and medical data privacy standards."
Reframed for Current Context:
Research compliance requirements for using third-party AI APIs (OpenAI, Anthropic) with NZ patient data. Specifically:
- NZ Privacy Act implications for cloud-based AI processing
- Health Information Privacy Code requirements
- Data sovereignty considerations - where is data processed?
- Consent and disclosure requirements for AI-assisted healthcare
Action Required:
- Engage external healthcare compliance advisor (eligible CapDev cost)
- Document compliance framework for AI integration
- Produce guidance for practice management system integrations
Estimated cost: $15,000 - $25,000
Original Deliverable:
"Establish a centralised research information management system to securely store and organise R&D data, ensuring efficient access, compliance, and integration with other internal systems."
Progress to Date:
Refactored Gitcode reporting.
Remaining Work:
- Complete structured R&D data collection system
- Integration with existing infrastructure for reporting/analysis
- Security and privacy protocols aligned with compliance framework
- Team training on research data management practices
Action Required:
- Continue internal system development (R&D labour - already budgeted)
- External training on research data management (eligible CapDev cost)
Estimated CapDev cost: $5,000 - $10,000 (external training)
Deliverable:
"Knowledge about RDTI programme."
Status: Completed.
Summary
Pros and Cons
Pros
- No Change Request required
- Aligns with signed contract
- Lower compliance risk
- Original commitments are genuinely valuable
- Faster to execute - just do the work
Cons
- Healthcare Compliance is significantly overdue
- May need to explain delay to Callaghan
- Doesn't expand into other potentially valuable categories
- Lower total CapDev spend (~$30K vs $49K minimum)
Recommendation
If you choose Option A:
- Acknowledge Healthcare Compliance is overdue and commit to immediate action
- Engage a healthcare compliance advisor within 30 days
- Frame progress reports to show how original commitments are being executed in the new AI context
- Complete Information Management activities by due date