Source · Select Committees · Education Committee
Recommendation 28
28
Accepted in Part
Draw up legislation to regulate AI and protect children's data from operators
Recommendation
The next Government must draw up legislation in the first year of the new Parliament on regulating AI or risk the technology developing faster than legislation can be drawn up to control it, ultimately causing additional harm to children. AI operators should also be held accountable for their use of children’s data and it is essential that children’s data is protected where they are below the digital age of consent. (Paragraph 120) Screen time: impacts on education and wellbeing 51 Online Safety Act 2023
Government Response Summary
The government is developing targeted legislative proposals for powerful AI systems, building on existing voluntary commitments. For children's data, it commits to using secondary legislation to require the ICO to produce a Code of Practice on AI after the Data (Use and Access) Bill receives Royal Assent, which will include guidance on protecting children's data.
Government Response
Accepted in Part
HM Government
Accepted in Part
Most AI systems should be regulated at the point of use, and the UK’s existing regulators are best placed to do this. That’s why in response to the AI Action Plan; the government has committed to supporting regulators in evaluating their AI capabilities and understanding how these can be strengthened. As set out in the manifesto, government is also developing legislative proposals which will allow us to safely realise the enormous benefits of the most powerful AI systems. These proposals will be highly targeted, will build on the voluntary commitments already secured at the Bletchley and Seoul AI Safety Summits, and will be designed to be future-proofed and effective against this fast-evolving technology. When it comes to using children’s personal data in AI systems, the government has committed to using secondary legislation to require the ICO to produce a Code of Practice on AI and solely automated decision-making after the Royal Assent of the Data (Use and Access) Bill. This code will support controllers in complying with their data protection obligations through practical guidance. The Code of Practice will include guidance about protecting data subjects, including children.