Question to the Department of Health and Social Care:

To ask the Secretary of State for Health and Social Care, whether NHS England has included requirements for sovereign AI capability in contracts awarded under the Federated Data Platform.

A mandatory requirement across all awarded contracts under the NHS Federated Data Platform is that any processing of data, whether involving artificial intelligence (AI) capabilities or not, must adhere to strict UK data governance regulations. This explicitly includes a data residency requirement, stipulating that all data must be stored and processed within the United Kingdom. This ensures all data remains subject to UK law and regulatory oversight.

The use of any foundational models is restricted exclusively to models that are hosted within the UK and all with UK endpoints. This policy ensures that the core AI processing, in addition to the data itself, remains within the nation's jurisdiction, thereby ensuring a sovereign AI capability by design.