Question to the Department of Health and Social Care:

To ask the Secretary of State for Health and Social Care, what steps he is taking to ensure patient data privacy regarding the use of AI software in the NHS.

The Government is committed to ensuring that patient data is protected to the highest standards as artificial intelligence (AI) is adopted across the National Health Service. All use of data remains subject to UK General Data Protection Regulation, supported by detailed guidance from the Information Commissioner’s Office, including requirements for Data Protection Impact Assessments and use of the AI toolkit to help with ongoing auditing of AI systems.

The type of data and processes for handling the data that are involved in training and deploying AI can pose risks to our privacy. Through public dialogue, we’ve involved patients and the public in deciding how and why access to health data should be granted for AI research and development.

The NHS operates within a comprehensive regulatory and governance framework, with safeguards designed to ensure AI is deployed safely, ethically, and securely, including oversight from regulators such as the Medicines and Healthcare products Regulatory Agency, the National Institute for Health and Care Excellence, and the Care Quality Commission.

These measures, alongside ongoing monitoring of AI systems and active public engagement ensure that patient confidentiality is protected while enabling the NHS to harness AI safely to improve care.