Establishing the frameworks for secure, ethical data use
The Government Digital Service (GDS) is putting the right foundations in place so the public sector can use data to deliver better services for users. Through new principles, guidance and legislation, we’ll make sure data is used to its full potential, safely and ethically.
Our goal
The public sector has the foundations in place to make the most of its data in a secure and ethical way.
What this means for you
Some projects within this initiative do not cover the whole UK. Whether they apply depends on the service and where it is available. The Devolved Governments decide how it will apply in their area.
- Data security: you can trust that your personal information is being looked after properly, protected from being lost or stolen, and used ethically and fairly.
- Improved data management guidance: if you work in public services, you’ll get clearer guidance and better support on how to manage data, giving you the confidence to know that you’re adequately protecting people’s information.
Our progress so far
January 2025: launched Data Ethics Guidance Finder
This new tool consolidates existing guidance on responsible use of data and AI across government, such as the Algorithmic Transparency Recording Standard, giving public sector teams one place to find the resources they need. This simplifies the process for public sector teams to identify and adhere to the correct standards, ensuring your data is always used ethically and fostering greater confidence in how public services manage your information.
June 2025: the Department for Science, Innovation and Technology (DSIT) introduced the Data (Use and Access) Act
This new law makes it easier for different public services, such as healthcare and policing, to share information with each other securely and responsibly. This will help improve the services you use, for example by reducing the number of times you have to provide the same information to different parts of government, whilst ensuring that your personal data remains protected.
July 2025: published principles for securing personal data in government services
These new principles on GOV.UK clearly outline how individuals’ personal data should be protected when processing and sharing it, helping to grasp the opportunity of the Data (Use and Access) Act. This has set clear, shared standards for transparency and accountability. This means that when you share your data with any government service, you can be more confident that it’s being handled securely, used fairly and kept safe.
December 2025: commenced the Data (Use and Access) Act’s provisions related to digital verification services
By introducing rules for good quality digital identity products, these provisions will make it easier for you to understand which services are safe and trustworthy. These rules will also ensure that government products meet the same high standards as private sector services, meaning that you’ll be able to easily prove your identity whilst remaining confident that your data is protected.
January 2026: published the new Data and AI Ethics Framework
GDS’s refreshed Data and AI Ethics Framework gives government teams up‑to‑date, comprehensive guidance to support the use of new technologies. This will ensure that when government uses new technology to make decisions, it’s done in a way that is ethical, avoids bias and has your best interests at heart.
What we’re planning to do next
March 2026: utilise the Digital Economy Act to expand ethical and lawful data sharing
DSIT, working with other government departments, will expand data sharing under the Digital Economy Act to improve government’s ability to respond to complex societal challenges and support vulnerable individuals. This will help us provide better, more joined-up support to people who need it most. For example, it could help us identify and support vulnerable individuals or families more quickly and effectively, without you having to provide the same information multiple times.
March 2026: establish a new team of specialists to improve personal data security
This new team is being created to strengthen how government protects personal data in response to recent data breaches. It aims to ensure consistent data protection practices across departments, reduce human error, improve regulatory engagement and rebuild public trust in government data handling.
April 2026: publish a strategic roadmap for public sector data
GDS will set out a long-term plan for how public data should be governed, accessed and used. This plan will help us create smarter, faster public services for you, such as using data to improve transport or healthcare. It’ll also ensure that as we use technology like AI, your data is always kept secure and used ethically.
More information
For more information, read the principles for securing personal data in government services.