13 February, 2023
On 19 January 2023, Mr Stephen Bonner, Deputy Commissioner at the Information Commissioner's Office (ICO), responded to concerns raised in relation to the use of Artificial Intelligence (AI) used by local authorities. As a result, some in the public sector will undoubtedly question the data protection implications associated with the increased use of AI and how public bodies, such as local authorities, can ensure they remain compliant with the UK General Data Protection Regulation (UK GDPR). This article explores the response provided by the ICO and gives insight as to the practical steps public bodies can take to safeguard their data subject's data.
In recent years, AI has become increasing more commonplace and popular for use in the public sector, particularly amongst local authorities. In the wake of increasing budget constraints and a challenging economic market, AI can be seen as a more cost-effective, efficient solution to human decision making. Used effectively, AI is recognised in its ability to assist with specific tasks that are usually thought to require human intelligence.
During the covid pandemic, AI and other forms of automated decision making (ADM) received widespread media attention, due to the controversy surrounding the assessment of pupil exam results. More recently, studies suggest that a collection of local authorities are using algorithmic 'risk assessment' tools to determine eligibility for benefits and to calculate welfare entitlements.
Whilst it is recognised that AI can offer significant benefit to the public sector, there are risk factors that need to be considered, to ensure effective implementation and use from an information governance perspective.
An enquiry was initiated by the ICO in response to concerns by individual data subjects, as to the way in which their data was being handled, and compliance with the principles laid out in the UK GDPR more generally. The ICO's enquiry was said to involve consultation with a wide range of technical suppliers, a sample of local authorities and the Department of Works and Pensions, has increased the ICO'S understanding of the development, purpose and functions of algorithms and similar systems being used by local authorities. The ICO's blog post explains that 11 local authorities were selected as a "representative sample based on geographical location and those with the largest benefits workload."
In response to this enquiry, Mr Bonner made the following statement:
"In this instance, we have not found any evidence to suggest that claimants are subjected to any harms or financial detriment as a result of the use of algorithms or similar technologies in the welfare and social care sector. It is our understanding that there is meaningful human involvement before any final decision is made on benefit entitlement. Many of the providers we spoke with confirmed that the processing is not carried out using AI or machine learning but with what they describe as a simple algorithm to reduce administrative workload, rather than making any decisions of consequence."
In summarising the ICO's position, Mr Bonner recognised that the Commissioner embrace upcoming technological changes, provided the data protection rights of individual data subjects can be maintained, and data is processed in a lawful, fair, and transparent manner.
In their blog post, the ICO also recognises that there are a number of practical steps local authorities, and other public bodies, need to take to ensure they are compliant with the UK GDPR. To add to the steps outlined by the ICO, it is beneficial to also highlight the following:
A copy of the ICO's full response in relation to the use of AI by local authorities can be read here: Blog: Addressing concerns on the use of AI by local authorities | ICO
Should you require any assistance in relation to appropriate implementation of AI or ADM within your organisation and/or conducting an audit of your existing AI or ADM processes, please do not hesitate in contacting our GPI team at email@example.com, where we will be more than happy to assist you with matters or concerns you have.
For more information contact Adil Ghafar in our Governance, Procurement & Information department via email or phone on 01772 220253. Alternatively send any question through to Forbes Solicitors via our online Contact Form.
Learn more about our Governance, Procurement & Information department here