AI in social care: what are the cyber security risks and benefits (short read)

Welcome to the Digital Care Insights newsletter. Each fortnight we will be sharing insights on key policy and tech developments on digitisation and the use of data and tech in adult social care.

Edited by our Project lead, Katie Thorn, we hope Digital Care Insights will spark discussion and action.

Please subscribe here.

By Katie Thorn, Project Lead, Digital Care Hub

Artificial intelligence (AI) is being hailed as a game-changer across sectors, and adult social care is no exception. In England, where care providers face mounting challenges—from workforce shortages to increasing demand—could AI offer a lifeline? I believe it might. But alongside the excitement, we need to ask tough questions about what this technology means for our sector, particularly when it comes to data protection and cyber security.

Can AI make social care more secure?

Imagine a world where your organisation’s network is monitored 24/7 by AI systems, instantly flagging any suspicious activity or potential breaches. This isn’t science fiction—it’s happening already. AI tools can detect threats in real time, automate responses to mitigate risks, and even train staff to be more cyber-aware through realistic simulations.?

Beyond cyber security, AI is already delivering significant benefits in other areas of social care. For instance, we know of a care service that used AI to analyse data about people’s falls risk. By identifying patterns and risk factors that human analysis might miss, they were able to implement targeted interventions, significantly reducing the number of falls. This is just one example of how AI can help improve outcomes for people using care services while easing the burden on staff.?

The big questions about AI and data?

The benefits are clear, but they come with strings attached—and these strings could be significant. One of the most pressing issues is data sovereignty. For instance, recent reports revealed that data processed by Microsoft’s Azure platform might not stay in the UK, even when it involves sensitive information. This raises a big question for all of us: do we know where our data is being stored and processed? And if not, how can we ensure compliance with the UK General Data Protection Regulation (UK GDPR)??

Privacy is another concern. AI often requires large datasets to function effectively, and in social care, this means handling deeply personal information about individuals. Are we confident that these systems are designed to respect privacy and protect against misuse? And if not, should we be deploying them at all??

Then there’s the issue of transparency. AI systems can feel like black boxes—they make decisions, but how and why? In a sector where trust is paramount, can we really afford to use tools we don’t fully understand??

Challenges we need to confront?

AI doesn’t just raise theoretical questions; it introduces very real risks. Cyber attacks targeting AI systems are a growing threat. Models can be tampered with, data can be poisoned, and algorithms can be manipulated. Are we prepared to deal with these new types of vulnerabilities??

And let’s not forget accountability. If an AI tool makes a mistake—say, flagging a legitimate action as a security threat—who is responsible? The vendor? The care provider? As leaders in social care, we need to think hard about how we handle these scenarios.?

What I’d say to social care leaders?

To my fellow leaders, service owners, and managers in adult social care: these issues aren’t just theoretical—they’re here, now. AI could revolutionise how we work, but only if we approach it thoughtfully. Here are some of the questions I think we should all be asking:?

1. Where is our data going? Can our AI suppliers guarantee that sensitive information stays within the UK, or at least complies with UK GDPR??
2. Are we doing our homework on suppliers? What security measures are in place? Are we confident about their track record and transparency??
3. How do we bring our teams on board? AI tools are only as effective as the people using them. Are we investing in staff training to help them understand and trust these technologies??
4. Are we prepared for new risks? Have we assessed the potential vulnerabilities that AI could introduce? And do we have a plan for mitigating them??
5. How do we ensure AI is ethical and explainable? Transparency matters. Do we understand how these tools make decisions, and can we explain those decisions to stakeholders??

What’s your take??

Personally, I’m excited about AI’s potential in adult social care—but I’m also cautious. It’s easy to get swept up in the hype, but this is a technology that demands careful thought and responsible implementation. That said, stories like the care service reducing falls with AI give me real hope. These successes show that when used well, AI can genuinely transform outcomes for people using care services.?

What about you? Are you already using AI in your organisation? What have you learned? What are the benefits and challenges you’ve faced??

At the Digital Care Hub, we’re eager to hear your views and experiences. We’re looking to gather case studies from care providers who are using AI to explore the lessons they’ve learned, the risks they’ve identified, and their hopes for the future. What are your concerns? What excites you? Share your comments on LinkedIn or drop us a line at [email protected]. Let’s start a conversation about what AI means for the future of social care.?

NEWS UPDATES??

A roundup of recent digital and data developments??

Digital government developments?

Government has set out its ‘blueprint for modern digital government’. It sets out a long-term vision for digital public services, a plan for reform, and the role of the newly established Government Digital Service (GDS) which brings together teams multiple government teams.?

The Blueprint was informed by?the State of Digital Government Review, which highlighted?some lasting, deep rooted systemic problems?faced by digital public services. For example, all sectors continue to struggle with recruiting and retaining the right skills and expertise in their digital teams. And sometimes organisations structures perpetuates the fragmented services people are expected to make sense of.

Views on Bring Your Own Device?

Digital Care Hub has launched a survey to explore how staff use devices, whether employer-provided or personal – including computers, tablets, and smartphones. Our goal is to identify best practices and potential challenges associated with BYOD policies, ensuring that care providers can make informed decisions that support both operational efficiency and data security.?

We are looking for input from a wide range of participants, including staff and organisations that?both do?and do not?use their own devices. Your responses will help us develop recommendations and guidance in collaboration with our partners at?The PSC?

Complete the BYOD survey by 5 February.

Coming soon: Cyber Game!?

As part of our Cyber Resilient Care programme, we’re developing a Cyber Game. Work your way through a simulated cyber attack in a care service. Choose the role you want to play, move through the game, make decisions about what to do next and collect points based on your actions.??

Book our Cyber Game webinar launch – 4 March 2025?

Exciting news!

Our very own Michelle Corrigan, Better Security, Better Care has been nominated for Most Inspiring Woman in Cyber. This recognition is well-deserved and shows her passionate dedication to driving innovation and security in the sector. Congratulations, Michelle!

Events and Webinars?

We run a comprehensive range of free webinars. Find out more or book via our Events page.

DSPT In-Depth - ODS Codes Drop in session – Tue 4th Feb?

Adult Social Care Caldicott Guardian Learning Network – Thu 6th Feb ?

Cyber Simulation: Phishing Attack in the South West – Thu 6th Feb?

Completing the Data Security and Protection Toolkit for the first time – Tue 11th Feb?

Cyber Simulation: Phishing Attack in the North West – Wed 12th Feb?

Cyber Simulation: Phishing Attack in the West Midlands – Thu 13th Feb?

Review and Republish Data Security and Protection Toolkit for Social Care – Tue 18th Feb?

Cyber Simulation: Ransomware Attack in the South West – Wed 19th Feb?

Cyber Simulation: Ransomware Attack in the West Midlands – Wed 26th Feb?

Cyber Simulation: Ransomware Attack in the North West – Thu 27th Feb?