On 29 May, Microsoft moved Copilot Health from announcement to preview. For now, it is a consumer product, available to people in the United States with a Microsoft 365 Personal, Family or Premium subscription. So at first glance this is not a story for Australian healthcare organisations at all (I think it is, just not in the way the headline suggests.)
What Copilot Health actually is
Copilot Health is a consumer feature within Microsoft Copilot. Users in the US can link a health profile, connect wearables and health records from over 50,000 US provider organisations, and have a personalised conversation with the AI about what they are tracking and what to do next. Microsoft has partnered with Harvard Health, drawn on principles published by the National Academy of Medicine, and built it inside a dedicated, separate conversation space inside Copilot.
It is not a clinical decision support tool. It is not a hospital product. It is consumer-grade health guidance delivered by an AI that already answers, by Microsoft's own figures, over 50 million health questions every day across its consumer products.
That last number is the part that actually matters.
Why this is a signal, not just a product
If Microsoft is already fielding 50 million health questions a day, and is now building a dedicated product to answer them better, then by the time this lands in Australia, large parts of the Australian public will already be using consumer AI to interpret their own health information. Some of them will arrive at their GP, their specialist, or their hospital admission having already talked the situation through with an AI.
That changes the operating environment for healthcare organisations even if Copilot Health itself never launches here.
A few things follow from that.
Patients will arrive with an AI-generated framing of their condition. Sometimes that will be useful, the same way patients arriving with their own research has always been useful. Sometimes it will be confidently wrong, in ways that take real clinical time to unpack. Either way, healthcare staff will increasingly be having conversations that started somewhere else.
Patient expectations for explanation will shift. If a consumer AI can walk a person through their lab results in plain language, the bar for how a clinician communicates rises with it. So does the bar for how an organisation's own internal AI systems explain their outputs to staff.
And the line between consumer health AI and clinical AI is going to keep blurring. Microsoft's investment here makes it close to certain that a B2B or healthcare-provider variant arrives within the next eighteen to twenty-four months. Organisations that have not started thinking about how they would govern that are going to be on the back foot when it does.
What Australian healthcare organisations should be doing now
A few practical observations.
If you are already using or piloting Copilot, Copilot Studio, or Power Platform agents in any clinical, administrative or patient-facing setting, the governance conversation is overdue. Healthcare is one of the highest-stakes environments for AI to operate in, both clinically and under Australian privacy law. The December 2026 amendments to the Privacy Act, with their automated decision-making transparency obligations, apply with full force here.
The right approach is not to ban these tools. The right approach is to know what AI you are running, what data it touches, what decisions it influences, and how you would explain any of that if a patient, a regulator or a coroner asked. Most healthcare organisations I talk to are not yet at that level of clarity, and Copilot Health is a useful prompt to get there.
It is also worth being honest about what consumer-grade health AI does well and what it does not. Microsoft's safeguards are there. The product is built with input from clinicians, sourced from credible health organisations, and held in a separate space from the rest of Copilot. None of that makes it a substitute for clinical judgement, and Microsoft is careful not to claim otherwise. The risk for healthcare organisations is not the product itself. It is the slow shift in how patients, staff and stakeholders understand what AI is for, and what they expect of the systems your organisation runs.
Where Aureus fits
For Australian healthcare organisations weighing up their AI position, the question is not really about Copilot Health. It is whether your governance, your risk assessments and your decision audit trails are ready for the next product, and the one after that.
Aureus Govern was built to assess Copilot Studio agents and Microsoft AI deployments against ISO/IEC 42001, Australia's 8 AI Ethics Principles, the Microsoft Responsible AI Standard, and the UK AI Regulation White Paper. In healthcare, that work tends to surface gaps quickly, and the December 2026 deadline makes those gaps consequential.
Copilot Health is a small step in a very large direction. The organisations that pay attention to the direction, not just the step, are the ones that will be ready when more clinical AI lands.
References
Microsoft Copilot Blog, Copilot Health: Now in Preview, by The Copilot Health Team (29 May 2026). https://www.microsoft.com/en-us/microsoft-copilot/blog/2026/05/29/copilot-health-now-in-preview/
National Academy of Medicine, Identifying Credible Sources of Health Information in Social Media: Principles and Attributes. https://nam.edu/perspectives/identifying-credible-sources-of-health-information-in-social-media-principles-and-attributes/
Office of the Australian Information Commissioner, Privacy Act review and reform, automated decision-making transparency requirements. https://www.oaic.gov.au/privacy/privacy-legislation/privacy-act-review-and-reform
Australian Government Department of Industry, Science and Resources, Australia's AI Ethics Principles. https://www.industry.gov.au/publications/australias-ai-ethics-principles
International Organization for Standardization, ISO/IEC 42001:2023 Information technology, Artificial intelligence, Management system. https://www.iso.org/standard/42001
Microsoft, Responsible AI Standard, v2. https://www.microsoft.com/en-us/ai/principles-and-approach
Jan Davids is the Principal Consultant at Aureus Solutions, a Microsoft consulting firm based in Adelaide, South Australia. Aureus Solutions specialises in AI readiness, governance, and Microsoft platform adoption.
