AI Readiness in the UK Public Sector

Reference: 24-25472

Date response sent: 03/02/2025

Details of enquiry

Response sent

Explanatory Notes

It might be helpful for your understanding of our responses to note the following contextual points.

Your request for information is not entirely applicable to the Tavistock and Portman NHS Foundation Trust as we are not a hospital. The Trust is a small specialist outpatient mental health Trust, providing mainly psychological services via talking therapies. We do not provide acute services, nor inpatient services.
The Trust does not hold any information on future IT Strategies or future IT delivery Please note that we are currently working towards a merger with another organisation to strengthen us for the future. This is further explained on our website: Our future options – Tavistock and Portman
The Freedom of Information Act (FOIA) applies to recorded information that exists at the time of the request. It does not require an authority to speculate nor provide opinions where this would involve the creation of new information, and some of your questions could only be answered by creating new information.

Accordingly, where we have indicated that this applies to your question you should consider whether there are any particular documents, data or information that you would like to receive. The Trust would then treat any reformulated request we receive as a fresh FOI request and consider it accordingly

Our response to your questions

To what extent does your department have a clearly defined and documented AI strategy? Please select one of the following options that applies.
A basic AI strategy is in development or has been drafted.
A fully defined and implemented AI strategy is driving significant impact. To what extent does your AI strategy or goals align with the AI opportunities action plan?
Some aspects of the AI strategy or goals are aligned with the AI opportunities action plan.
What is the likelihood that your department’s AI strategy will be fully implemented within the next two years?
Significant obstacles and uncertainties make full implementation unlikely in the next two years.

Please see Explanatory Note 2 above

How confident is your department that current AI governance structures are adequate for managing AI risks? Please select one of the following options that applies.

Al No AI governance structures in place or serious concerns about their adequacy.

What percentage of your department’s total budget is allocated to AI-related projects this fiscal year? How much is this?

Nil

How does your department or agency assess the economic impact or cost-effectiveness of AI technologies? Please select one of the following options that applies and provide any relevant data or reports on AI’s economic benefits.
No formal assessment: No systematic approach to evaluating the economic impact of AI.
What is your department’s current stage of AI deployment? Please select one of the following options that applies.
Planning for at least one AI case.

No current AI usage at the moment

For your most significant AI use case, how confident are you that the expected benefits will be realised?
Some anticipated benefits, but significant uncertainty about their realisation.
How thoroughly has your department assessed the risks associated with AI deployment? Please select one of the following options that applies.
Initial discussions about AI risks, but no systematic assessment
How confident are you that your department is compliant with relevant data protection laws when using AI? Limited understanding of data protection requirements for AI.
How well does your department ensure transparency in the use of AI in public services? Please select one of the following options that applies.

Not applicable – see our response to Q7 above

How does your department or public body ensure that its data storage complies with UK sovereignty and data residency requirements? Please outline any policies or regulations guiding data storage within UK borders.

The Trust is fully compliant with the requirements of both:

the NHS Data Security and Protection Toolkit (self-assessment tool to measure performance against National Data Guardian’s 10 data security standards) which also covers the UK data Sovereignty Framework Requirements and Solutions.
the NCSC Cyber Assessment Framework (National Cyber Security Centre’s Cyber Assessment Framework self-assessment, which assesses how well cyber risks to essential functions are being managed

Can you provide the proportion of data stored within UK-based infrastructure versus foreign cloud services (e.g., US-based providers) within your department/agency?

Data not held

What measures are in place to ensure that your data storage solutions meet national security standards? Please provide details of relevant frameworks or protocols currently implemented.

See our response to Q 12 above

What is the estimated carbon footprint of your department or agency’s AI operations (e.g., training, deployment) over the past year? Please include energy consumption figures if available.

Data not held

How do you track the energy usage of AI workloads, and are there any reporting mechanisms in place for sustainability goals? Please provide relevant metrics or guidelines.

Not applicable – see our response to Q7 above

How would you rate the quality of data used for your AI systems? Please select one of the following options that applies.

Not applicable – see our response to Q7 above

What is the level of confidence in your department’s digital infrastructure’s ability to support current and future AI initiatives?

This question is refused. See Explanatory note 3 above.

Does your department or agency currently use a hybrid infrastructure (i.e., a mix of on-premises and cloud services) for its digital operations, including AI applications? Please specify the proportion of services hosted on each type of infrastructure.

Yes – and proportions data is not held.

What factors influence your department’s decision-making process when choosing between public cloud, private cloud, or on-premises infrastructure for AI-related projects or services?

This question is refused. See Explanatory Note 3 above

What plans or initiatives are in place to ensure your department’s digital infrastructure is scalable enough to meet future demands for AI-powered services or technologies over the next 5–10 years?

Data not held. See Explanatory Notes 2 and 3 above

How does your department or agency ensure the quality of data used in AI-driven projects or services? Please provide any metrics, guidelines, or standards employed for data validation.

Not applicable – see our response to Q7 above

How effectively is your department upskilling employees to use AI? Please select one of the following options that applies.
No upskilling initiatives in place for AI.
Will you be relying on in-house skills for AI strategy development and implementation or seeking third-party services/consultancy?

In-house, and third-party services – depending on the use.

How confident are you that your department will reach its AI ambitions? Please select one of the following options that applies.

Not applicable – see our response to Q7 and Explanatory Note 3 above