Question to the Department for Science, Innovation & Technology:

To ask His Majesty's Government what steps they have taken to ensure that existing web protocols designed to prevent unauthorised access to personal data are widely known and easily navigable for both individuals and organisations.

The UK’s existing Data Protection Framework requires organisations, including those developing AI technologies such as Large Language Models, to comply with UK data protection principles on lawfulness, fairness and transparency.

This includes requirements to make sure that processing personal data is ‘necessary’ for the intended purposes, carried out in a way that people would reasonably expect, and that data subjects are informed about processing and able to exercise their rights.

The Information Commissioner’s Office has updated guidance on how data protection laws apply to AI systems that process personal data to include fairness across the AI lifecycle.