Where does responsibility lie? Analysing legal and regulatory responses to flawed clinical decision support systems when patients suffer harm.

Clinical decision support systems (CDSSs) are digital healthcare information systems that apply algorithms to patient data to generate tailored recommendations. They are designed to support, but neither dictate nor execute, clinical decisions. CDSSs can introduce new risks, both by design features that heighten clinician burden and by outright errors that generate faulty recommendations for care. In the latter instance, if such unintercepted recommendations were to result in harm to the patient, novel legal questions emerge. Does legal responsibility for this harm lie with the clinician, the software developer or both? What is the clearest path to a remedy? Further, how does the Australian regulatory framework provide for oversight and redress? This article analyses the potential forms of legal redress in negligence, contract and under statutory consumer law, for the patient and the clinician. It also examines the Australian regulatory framework, specifically in relation to the Australian Competition and Consumer Commission and the Therapeutic Goods Administration, and reflects on the framework's adequacy to protect patients and clinicians. It finds that the regulatory approach and the contour of legal risk still centre upon the clinician's duty to exercise decisional autonomy and to intercept flawed recommendations generated by algorithmic errors within CDSSs.