Artificial intelligence has moved far beyond the realm of science fiction. The hype around generative AI has been intense, but it is in healthcare and diagnostics where we are now seeing tangible benefits for patients. That’s why conversations about AI, its uses, its risks, and its potential, are so important. These technologies are no longer abstract concepts; they are already shaping decisions, services and outcomes.

Science fiction often imagines technology running ahead of human control. While those fears can feel distant, they speak to something real: the need for strong safeguards, transparency and public trust. Data protection is only one part of the picture. Confidentiality, fairness, accountability, enhanced safeguards for automated decision-making and public acceptance all matter and that’s why legal and ethical frameworks exist. The health sector is often seen as more reliable in this space because AI models and automated systems used in clinical settings undergo rigorous evaluation.

We are already seeing the impact in healthcare across the UK. In Wales, for example, Betsi Cadwalader University Health Board’s digital pathology platform has increased prostate cancer detection rates by 13%. New AI driven screening tools are emerging to support earlier diagnosis, faster treatment and better prevention. These tools rely on high-quality imaging data and strong governance to ensure they deliver meaningful benefits for patients.

AI is also improving day‑to‑day services: optimising theatre lists, generating discharge reports and automating note‑taking in GP surgeries. These changes respect legal and ethical standards while improving efficiency and freeing up staff time.

The ICO’s collaboration with the AI Commission for Health and Social Care in Wales reflects this shared commitment: developing technologies that improve lives when used responsibly and with the right safeguards in place.

AI can be a powerful force for good, but it is fallible. Many people still don’t fully understand how these systems work, which becomes a problem when clinicians and patients need to know why a recommendation has been made. AI can support decision making, but it is not a universal solution or a shortcut for complex clinical judgement.

This is where regulation plays a crucial role. The ICO ensures consistent quality standards, and the principles set out in the UK Government’s AI white paper, transparency, accountability and fairness, align closely with existing data protection law. In fact, AI principles and data protection principles reinforce one another, particularly in health and research settings.

The ICO expects developers and researchers to work fairly and transparently, with appropriate safeguards in place. Data protection and sharing should never be seen as barriers to improving patient outcomes or modernising services, but they must be done safely. Health data is among the most sensitive information we hold. It is classified as

special category data for a reason, and breaches can have serious consequences for individuals.

The ICO aims to build public trust in AI while supporting responsible innovation and since the conference has launched its AI and Biometrics strategy in June 2025. It is participating in the MHRA’s National commission into the regulation of AI in healthcare It recognises the leadership shown by Welsh Government in exploring opportunities and strengthening AI capability. The goal is clear: ensure that innovation can flourish while people’s rights and freedoms remain protected.

The ICO helps organisations adopt AI safely. Since the conference, the new UK data protection legislation, the Data (Use and Access) Act 2025 has commenced, giving more opportunities to innovate with personal information providing the right safeguards are in place. The ICO is working closely with UK and Welsh Government to embed data protection by design from the outset.

There is no doubt that AI offers extraordinary opportunities for healthcare. With the right safeguards, strong governance and a commitment to transparency, it can improve outcomes, strengthen services and build public trust. The challenge now is to harness its potential responsibly, ensuring that innovation and protection go hand in hand. For further guidance visit the ICO website,

Ian Hulme, Interim executive director of regulatory supervision, Information Commissioner’s Office (ICO)