Rotherham, Doncaster and South Humber AI Policy Outlines Acceptable Uses, Practical Guidance, and Responsibility

Why It Matters

The policy sets a clear governance framework that protects patient safety and data privacy while enabling responsible AI innovation in the NHS, signalling how public health providers will meet emerging regulatory expectations.

Key Takeaways

• Policy applies to all staff, suppliers, and third‑party AI users
• Generative AI barred from patient‑identifiable data and clinical decisions
• Approved secure tools include Microsoft Teams Recording, Intelligent Recap, Copilot Chat
• DPIA and HRA approval required for AI systems handling personal data
• Clinicians retain full responsibility; AI outputs must be validated and documented

Pulse Analysis

The UK health sector is accelerating AI adoption, but the speed of innovation has outpaced existing safeguards. Trusts are now under pressure to balance the promise of faster diagnoses, operational efficiencies, and workforce support with stringent data‑privacy obligations and patient‑safety standards. National bodies such as the National Commission into the Regulation of AI in Healthcare have called for robust post‑market surveillance, highlighting a broader shift toward formalized AI governance across the NHS.

Rotherham, Doncaster and South Humber NHS Foundation Trust’s new AI policy translates that regulatory momentum into actionable rules. It extends to every employee, contractor, and supplier, assigning clear accountability to senior leaders for compliance and risk oversight. The policy explicitly bans the use of publicly available generative AI tools for any patient‑identifiable information or clinical decision‑making, while endorsing vetted, secure alternatives like Microsoft Teams Recording, Intelligent Recap, and Copilot Chat. Procurement of AI‑enabled systems now requires a Data Protection Impact Assessment and, where applicable, approval from the Health Research Authority, ensuring that privacy considerations are embedded from the outset.

Beyond the Trust, this framework serves as a template for other NHS organisations navigating the emerging AI regulatory landscape. By mandating human review of AI outputs, documenting decision rationales, and requiring annual policy reviews, the Trust reinforces trust—both in technology and in the institutions that deploy it. As the National Commission’s call for evidence shows strong public demand for transparent AI oversight, policies like this will likely become the norm, shaping how AI is integrated into clinical pathways, research, and everyday administrative tasks across the UK health system.