Compliance Is Not Governance: A Lesson Health Service Leaders Need to Learn
Health services managers and leaders are familiar with compliance. There are standards to meet, policies to maintain, incidents to report, committees to convene, audits to complete and accreditation requirements to satisfy. All of these things are important and necessary, but they are not, by themselves, evidence of good governance.
Australia's new 2026 National Model for Clinical Governance makes this distinction particularly important.
The Australian Commission on Safety and Quality in Health Care describes the new model as a strategic shift in how clinical governance is understood and embedded in health services.
Importantly, it moves the emphasis away from viewing clinical governance primarily through the lens of accreditation and towards something much broader: the organisational culture, systems, leadership and accountability required to deliver consistently high-quality care.
That is an important development and one that we are excited about, because we have known for a long time that an organisation can be compliant on paper and still be poorly governed in practice.
Clinical governance cannot live in the quality department
One of the persistent risks in health service organisations is the gradual institutionalisation of governance. Over time, governance becomes a framework, quality becomes a department, and risk becomes a register. Consumer participation becomes a committee while continuous improvement becomes an agenda item.
Eventually, the machinery designed to support good care can become separated from care itself. We are seeing this at the moment with the high number of older Australians living in hospitals, because there simply are not enough community aged care places for them to transition towards. Almost 4,000 older Australian are awaiting transition to an aged care position nation-wide, and nearly 1,700 of those are in Queensland hospitals.
The 2026 National Model offers a useful corrective.
It identifies six foundations of clinical governance:
leading systems and organisational culture;
partnering with patients, carers and consumers;
building a healthy workforce culture;
enabling high-quality and integrated clinical practice;
managing and reducing risk; and
using data for better care.
These are both compliance domains and managerial responsibilities.
The board's responsibility does not end with assurance
The new model explicitly elevates clinical governance to the highest level of organisational leadership and oversight.
That matters because boards can sometimes approach quality and safety principally through assurance. Board members ask things such as:
Are we compliant?
Have incidents increased?
Are audits complete?
Are accreditation actions closed?
Are the required committees functioning?
And what does all this mean for our audits?
Those questions are legitimate, but they are totally incomplete and need to be rationalised much more intimately at every level of the organisation.
A board governing for high-quality care should also be asking:
What are patients experiencing?
Where is the greatest risk of poor care?
What does our workforce tell us about the conditions in which care is being delivered?
What trends are emerging in complaints, incidents and outcomes?
Where are staff repeatedly working around systems that do not function properly?
Where are workload, staffing or skill-mix pressures creating risks to care?
Do staff feel safe to raise concerns, report mistakes and challenge unsafe decisions?
Are recurring incidents pointing to systemic problems rather than isolated errors?
What are near misses telling us before serious harm occurs?
Are corrective actions actually reducing risk, or are the same problems recurring?
Are averages concealing poor performance in particular services, locations or patient groups?
What decisions have changed because of the quality and safety data we receive?
Do managers have the capability, authority and resources to address the risks for which they are accountable?
What evidence gives us confidence that care is safe and high quality beyond accreditation and compliance?
What don't we know about the quality of care being delivered and why don't we know it?
Do executives receive information that allows them to understand quality, or simply information that demonstrates compliance?
And perhaps most importantly:
Does the organisation's culture support people to identify problems before those problems become serious failures?
These questions require judgement by strong leaders working together and certainly should not be influenced by AI processes, at least not at this point in time.
Governance cannot be reduced to a checklist because good care cannot be reduced to a checklist. Think about that for a moment before reading onwards.
Culture is a big part of your governance system
The inclusion of organisational and workforce culture within the National Model is significant. Culture is sometimes discussed as though it were intangible and hard to manage. But in health services, culture has very practical consequences for real people’s lives. It affects:
whether workers report mistakes
whether junior staff challenge unsafe decisions
whether complaints are treated as intelligence or inconvenience
whether managers respond constructively when workers raise concerns
whether policies describe actual practice
whether poor behaviour is addressed when the person responsible is a high performer or senior employee.
Culture determines what happens when nobody is watching, and this makes culture a governance issue that nobody can ignore, especially organisational Boards.
However, even a highly sophisticated policy framework cannot compensate indefinitely for an environment in which workers are afraid to speak, managers avoid difficult conversations or leaders become defensive when confronted with evidence of poor performance.
Governance requires management capability
Here is where implementation of the framework comes into focus. Boards may establish governance expectations and executives may design systems, but managers translate those expectations into daily practice.
The National Model itself recognises the role of managers and clinical leaders in creating the environment for consistently high-quality care, supporting and developing the workforce, and using organisational systems to improve care.
This makes management capability part of clinical governance. So, now consider the competencies involved.
A health service manager may need to understand workforce planning, performance management, risk, complaints, incident investigation, employment obligations, budgets, data, quality improvement and consumer engagement.
They also need to communicate effectively, make decisions under pressure and lead teams in environments where the consequences of poor decisions can be significant.
Yet organisations sometimes promote technically excellent practitioners into management positions without adequately developing these broader capabilities.
That creates risk for the manager and for the organisation. Clinical expertise and management expertise can overlap, but they are not the same thing, so don’t confuse them.
Data must lead to and support decisions
The National Model also identifies using data for better care as one of its six foundations. To some leaders, these seem obvious but even their organisations are often lacking. A quality committee may review incident statistics every month.
An important question is what decisions changed because of the information?
Useful governance data should help leaders identify variation, emerging risk, deteriorating performance and opportunities for improvement. Data that is collected primarily because it is required may satisfy reporting obligations while adding little to organisational intelligence.
Health services should therefore periodically examine not only what they measure but why they measure it, who uses it and what decisions it informs.
Warning signs matter
One particularly useful aspect of the new National Model is its attention to warning signs.
Major failures in care rarely emerge entirely without warning:
There may be repeated complaints.
High staff turnover.
Persistent vacancies.
Unusual incident patterns.
Poor supervision.
Workarounds that become normal practice.
Managers who cannot explain performance.
Consumer concerns that are repeatedly minimised.
A workforce that has stopped raising problems because workers believe nothing will change.
Individually, these signals can appear to be manageable but when viewed holistically they often tell a very different story. Good governance depends heavily on leaders being able to identify patterns before they become crises.
Moving from compliance to capability
None of this means compliance is unimportant. Health services must comply with applicable legislation, standards and regulatory requirements. The problem arises when compliance becomes the objective rather than one consequence of a well-governed organisation.
The 2026 National Model for Clinical Governance provides health services with an opportunity to reconsider their answer to many of the above questions.
Clinical governance is not something an organisation prepares for when accreditation approaches. It is how the organisation operates every day.
Source note: This article is informed by the Australian Commission on Safety and Quality in Health Care's 2026 National Model for Clinical Governance.