PREVENTATIVE MEDICAL IMAGING COMPLIANCE
Keep your preventative imaging service clinically robust and compliant
HCPA helps preventative and whole-body imaging providers strengthen patient selection, informed consent, clinical governance and modality-specific safety while keeping the service aligned with applicable imaging and radiation requirements.

Preventative imaging creates a different clinical governance challenge from imaging used to investigate an existing symptom or diagnosis. When a person is asymptomatic, the service needs a clear basis for who the scan is appropriate for, what it can reasonably identify and how its limitations are communicated.
The compliance pathway also depends on the modality and funding model. Whole-body MRI does not involve ionising radiation, while CT introduces additional radiation justification and licensing requirements. HCPA helps providers build those distinctions into the patient pathway, protocols and evidence used to support the service.
When preventative imaging compliance needs immediate action
Issues become more urgent where the suitability of the scan, patient safety or the service’s regulatory position is in question. The first step is to establish what is affected, contain any immediate risk and preserve the evidence needed to understand what occurred.
Patient selection or consent concerns
A service may identify that a scan was performed without sufficiently assessing suitability or explaining its risks, benefits and limitations.
Review the patient pathway, information provided and consent record, then determine whether the same weakness exists across other examinations.
CT radiation or equipment concerns
For CT and other ionising modalities, a concern may involve whether the exposure was justified, whether equipment requirements were current or whether the imaging protocol created unnecessary radiation exposure.
Patient safety comes first, followed by preserving the relevant dose, equipment and imaging records.
Incidental finding or follow-up gaps
Whole-body imaging can identify unexpected findings in people who felt well when they entered the service.
If a significant result was not escalated or communicated appropriately, establish what the patient was told, whether follow-up occurred and whether the clinic’s wider results-management process needs strengthening.
Radiation regulator investigation
An incident, licence issue or concern about the use of ionising imaging can result in regulator scrutiny.
Notification requirements vary between jurisdictions, so determine which reporting obligations apply promptly and retain the evidence needed to support the investigation.
Key preventative medical imaging compliance requirements
Preventative imaging compliance starts before the scan itself. The service needs a defensible approach to who is scanned, what information they receive, how the examination is performed and what happens when the results require further action.
Define who the service is appropriate for
The service should have clear patient-selection criteria and a clinical basis for the examinations it offers.
This matters particularly for whole-body MRI. RANZCR’s current position does not recommend whole-body MRI screening for low-risk asymptomatic people without a previously diagnosed malignancy or cancer predisposition syndrome.
Where a provider operates in this area, clear patient selection, communication of the evidence and appropriate clinical oversight become especially important.
Make informed consent specific to preventative imaging
Consent should cover more than agreement to undergo the scan. Patients need enough information to understand what the examination is intended to identify, its relevant risks and limitations and what may happen if an unexpected finding is identified.
Under DIAS Standard 2.2, practices need to assess individual risk factors, provide procedure information and document consent for each imaging service.
For a preventative service, that conversation should also make clear that a scan may lead to additional imaging, specialist review or other investigations.
Apply additional justification to ionising imaging
MRI and CT should not be treated as interchangeable screening products. CT involves ionising radiation and requires individual justification.
ARPANSA’s medical-exposure framework centres on justification and optimisation, with particular attention to people undergoing health screening.
The service therefore needs a clinical process capable of deciding when CT is appropriate for the individual rather than allowing patient demand alone to determine whether exposure occurs.
Build modality-specific safety controls
Different modalities require different pre-scan checks. MRI protocols may need to address implanted devices, metallic foreign bodies and other contraindications, while CT can introduce radiation and contrast-related considerations.
Health and risk information should be collected before imaging and linked to the protocol being used. DIAS Standard 2.2 specifically requires relevant individual risk factors to be recorded.
Plan for incidental findings and follow-up
The governance pathway should continue after image acquisition.
Define who interprets the scan, how findings are prioritised, how patients receive results and when referral to a GP, specialist or another diagnostic service is needed. The patient should understand that process before the scan occurs.
Keep equipment and practitioner requirements current
Preventative services still need appropriately credentialled practitioners and equipment that is safe and maintained for its intended use.
Where CT or another ionising modality is offered, state or territory radiation requirements also apply. These should be reviewed whenever equipment, premises or the service model changes. In Victoria, for example, CT scanners used for human diagnostic imaging require periodic compliance testing and the current certificate period is 12 months.
Strong preventative imaging compliance means being able to explain why the scan was appropriate, what the patient understood and how the service managed both the examination and its findings.
Preventative imaging compliance and investigation readiness
The compliance framework depends on the modalities offered, the jurisdiction and whether the service is Medicare-funded. A preventative imaging business should therefore be able to demonstrate the governance behind its service even where a particular scan does not attract a Medicare benefit.
Where Medicare-funded diagnostic imaging is provided, DIAS accreditation applies. Private-pay preventative imaging can sit differently within the DIAS framework, but that does not remove applicable professional, clinical, privacy, equipment or radiation obligations.
A preventative imaging compliance review may involve:
clinical governance and patient-selection criteria
informed consent records
patient health and risk assessments
practitioner registrations and radiation licences
imaging protocols
MRI safety screening
radiation justification and optimisation processes
equipment servicing and compliance testing
reports and result communication
incidental-finding and referral pathways
complaints and incident registers
privacy and health-record controls
radiation incident records where applicable

The strongest readiness test is to follow a real patient journey from initial screening through consent, imaging, reporting and follow-up. Each stage should demonstrate how the service applies its clinical and safety controls in practice.
HCPA can review that pathway, identify where the documented process and actual service have drifted apart and help strengthen the evidence before a regulator or accrediting body raises the issue.
Speak with an HCPA medical imaging compliance consultantWhat to do after a preventative imaging compliance finding
Protect patients and contain the issue
Pause the affected activity where continuing could increase patient, radiation or regulatory risk.
Preserve the evidence
Retain images, reports, consent records, dose information, equipment records and relevant system audit trails before making changes.
Determine the wider impact
Establish whether the issue relates to one examination or reflects a broader problem with patient selection, consent, imaging protocols or equipment.
Evidence the corrective action
Correct the underlying issue, assign responsibility and document the changes made to reduce the risk of recurrence.
Why choose HCPA for preventative imaging compliance?
Preventative imaging introduces questions that a traditional diagnostic pathway may not need to answer in the same way. The service needs to define who should be scanned, how suitability is assessed, what patients are told and how unexpected findings are managed.
HCPA helps providers turn those questions into practical patient pathways, policies and clinical controls that reflect the modality and business model being used.
businesses supported
consultants
client revenue generated
For an established imaging practice adding whole-body or preventative services, HCPA can also assess how the new offering affects existing governance, equipment records, radiation requirements and operating procedures before it is introduced.
Frequently asked questions about preventative medical imaging compliance
What consent and clinical governance controls are required when offering preventative or whole-body imaging to asymptomatic clients?
Start with a defined clinical pathway covering who is suitable for the examination, how individual risks are assessed and who has clinical responsibility for the service.
The consent process should explain the purpose, relevant benefits and risks, limitations and potential downstream consequences of the scan. Under DIAS, informed consent is required for each diagnostic imaging service, with the approach reflecting the risk involved.
How should an imaging service respond to a compliance audit or radiation regulator investigation?
Define the exact issue first and determine whether any activity needs to stop.
Preserve the patient, imaging, equipment and system records needed to reconstruct what occurred, then check whether the problem affects only the case identified or a wider part of the service.
Where a radiation incident is involved, check the relevant jurisdiction’s notification requirements promptly rather than waiting for the internal investigation to finish.
Is whole-body MRI regulated differently from CT?
Yes. The key distinction is that MRI does not use ionising radiation, while CT does.
Both still require appropriate clinical governance, patient assessment, consent, practitioner oversight, equipment safety and results management. CT additionally brings radiation justification, optimisation and jurisdiction-specific radiation requirements.
Is whole-body MRI recommended for healthy asymptomatic people?
RANZCR currently does not recommend whole-body MRI screening for low-risk asymptomatic patients without a previously diagnosed malignancy or cancer predisposition syndrome.
For a provider operating in this area, that makes clear patient selection, transparent communication about the evidence and a defined process for managing incidental findings particularly important.
What should patients understand before a preventative whole-body scan?
Patients should understand what the examination is designed to identify, what it cannot reliably rule out and whether it may uncover findings unrelated to the reason they chose to be scanned.
They should also know what happens after the scan, including how results are communicated and what pathway applies if further investigation is recommended.
How should a whole-body imaging service manage incidental findings?
Establish the process before scanning begins.
Define who reviews the images, how findings are prioritised, when the patient is contacted and when further imaging or referral to another clinician is appropriate. That pathway should also be reflected in the information provided before consent.
Does every preventative imaging service need DIAS accreditation?
Not necessarily. DIAS accreditation is required for practices providing Medicare-funded diagnostic imaging services.
A privately funded preventative service may sit differently, depending on the services offered, but other requirements relating to practitioner credentials, clinical governance, privacy, equipment and radiation safety can still apply.
The compliance pathway should therefore be mapped to the actual modality and funding model rather than assuming every preventative service follows the same structure.
Can preventative CT simply be offered because a patient requests it?
Patient demand alone does not establish justification for an ionising-radiation exposure.
ARPANSA requires medical exposure to be justified, with the expected benefit considered against the radiation detriment for the individual. A preventative CT model therefore needs a clinical decision-making process rather than treating the scan solely as a consumer purchase.
What should a practice do after a radiation incident?
Address immediate patient and staff safety first and preserve the records needed to reconstruct the event.
That can include images, dose information, equipment logs and system audit trails. Then confirm the incident-reporting requirements applying in the relevant state or territory and investigate what needs to change before the affected activity resumes.
What should an existing imaging practice review before adding whole-body screening?
Review the entire service pathway, not only whether the scanner is available.
Consider the target population, clinical evidence, patient selection, consent, practitioner responsibilities, reporting, incidental findings, equipment and licence implications and how the new service fits within existing governance.
This lets the practice resolve regulatory and operational dependencies before investing heavily in the new offering.
Related medical imaging resources
Start a preventative imaging service
Planning a whole-body or preventative imaging business?
Grow your preventative imaging service
Looking to increase scan volumes or expand your imaging offering?

