Concerns have emerged in Gloucestershire over the safety of residents’ data amid plans to modernise local council services using artificial intelligence (AI). This unease stems from the UK’s dependence on American technology firms for cloud storage and processing, raising questions about data privacy under US legislation.
At a recent corporate overview and scrutiny committee meeting, Councillor Craig Horrocks (G, Rodborough) highlighted the risks posed by the US Cloud Act, which permits American authorities to demand access to data held by US-based companies, regardless of where the data is stored. Horrocks voiced apprehension that Gloucestershire County Council’s £3.4 million upgrade programme, which includes increased use of Microsoft AI tools, could inadvertently expose residents’ information to US government scrutiny.
“I don’t see any evidence of a focus on data security,” Horrocks stated, emphasizing that many European entities are moving away from US-based cloud systems in favour of European or self-hosted open-source solutions. He warned that despite data not being physically stored in the US, US firms like Microsoft are legally compelled to comply with US government warrants.
READ MORE: Man Shot in Vehicle in Lechlade Sparks Attempted Murder Investigation
READ MORE: ‘Fit and healthy’ Cheltenham woman dies aged 46 after subtle symptom reveals rare cancer
Deputy Chief Executive Nina Philippidis acknowledged the validity of these concerns, affirming that the council’s data and IT teams rigorously address such issues. She pointed out that AI tools like Microsoft Copilot and Magic Notes are already in use, with careful measures to ensure compliance and protect sensitive social work data.
“Things are changing rapidly, and we are monitoring the situation closely to ensure no resident data is put at risk,” Philippidis assured.
Councillor Horrocks responded by noting that the Cloud Act’s implications make it inherently difficult to guarantee data security and highlighted that various European governments are distancing themselves from US cloud services due to similar worries.
Philippidis concluded that she would take these concerns back to her team for thorough consideration as the council continues its AI integration journey.