Chi Mei Hospital President Lin Hung-jung: Before AI Agents Enter Hospitals, a Secure Sandbox Environment Must Be Built
Lin Hung-jung presented Chi Mei Hospital's four-stage path from basic digitalization in 2005 to targeting Agentic AI by 2025 at the Taiwan Hospital CIO Conference. His core argument is that hospitals must first complete data governance and establish secure sandbox environments before allowing AI agents to read medical records or operate systems, thereby preventing data leaks or improper actions. He uses the metaphor of a 'lobster tank' to describe this prerequisite, noting that the currently deployed A+ Medication Safety Specialist utilizes Retrieval-Augmented Generation (RAG) combined with the Medi-Span pharmaceutical database to reduce hallucination risks, while the integration method between AI agents and existing Robotic Process Automation (RPA) remains under exploration.
Lin Hung-jung divides Chi Mei Hospital's AI development into four steps: starting with data warehousing and business intelligence tools in 2005; establishing an AI Center in 2019 to extend biostatistical capabilities to machine learning; entering the generative AI assistant stage in 2023; and targeting Agentic AI starting in 2025. The logic driving each step is not technological availability, but whether the organization has already met the conditions for safely using the next layer of capability.
During the disease prediction phase, Chi Mei deliberately avoided medical imaging AI. Lin Hung-jung explained that imaging models require significant computing resources and manual annotation labor, whereas Chi Mei has accumulated years of clinical data and biostatistical experience. Focusing on disease risk prediction based on these existing capabilities is more pragmatic. This choice later yielded 32 online predictive models covering 13 departments, allowing physicians to view patient-related risks directly on the Hospital Information System (HIS) page.
Upon entering the generative AI stage, Chi Mei started with documentation tasks such as nursing records, converting vital signs and catheter logs into drafts, and then expanded to other professions like physicians and pharmacists. This collaborative mechanism operates independently of the existing HIS, avoiding the need to modify original programs and thus preventing version-change risks and cascading system crashes.