I refer the Hon Member to my answer to PQ 29988.

NHS England and the Department recognise the emerging cyber security risks associated with increasingly capable and autonomous artificial intelligence (AI) agents. National teams continue to assess and respond to emerging cyber risks that may affect health and care organisations, and National Health Service organisations are required to meet the requirements set out in the Data Security and Protection Toolkit (DSPT).

In line with the DSPT, NHS organisations are required to have arrangements in place to identify, manage, and report data security incidents to NHS England, the Department, and the Information Commissioner’s Office, including any instance where an AI system gained unauthorised access to NHS data. Where a personal data breach is notifiable, organisations must report it within 72 hours.

The NHS Terms and Conditions require suppliers to inform their NHS customers within 24 hours from discovery of a cyber incident. This enables NHS organisations to start cyber incident response plans and inform relevant authorities within stipulated timelines. In addition, NHS England and the Department may also engage the National Cyber Security Centre, as the United Kingdom’s technical authority on cyber security, in the event of a major cyber incident.

NHS suppliers are subject to separate assurance and contractual arrangements. NHS England's Cyber Security Charter is designed to support suppliers and their customers in reducing the likelihood and impact of a cyber incident. We have a dedicated workstream in the Cyber Improvement Programme that is focused on the supply chain, developing tools and processes to increase cyber assurance and resilience.

I refer the hon. Member to the Written Ministerial Statement of 7 September 2026 (HCWS314), which covers the OpenAI-Hugging Face case and similar recent examples of AI agents acting beyond their operators' intentions, and the actions this Government is taking in response.

I refer the Honourable Member to the Government's statement and release of information on 1 June, providing an update on the response to the Humble Address, and the answers given by the former Chief Secretary to the former Prime Minister in response to questions during the General Debate on 3 June. The documents published in the first and second tranches contain the entirety of the documents the Government has available for disclosure, except those being withheld at the request of the Metropolitan Police. As the former Chief Secretary to the former Prime Minister said on 3 June, the Metropolitan Police have permitted the Government to confirm the categories of documents that they are holding, but nothing further. When the Metropolitan Police have concluded their investigation, this material will be published.

The UK continues to be an attractive destination for AI investment as reflected in OpenAI’s ongoing and expanding presence here through its recent announcement for a large permanent office in London, doubling the current OpenAI headcount here.

The UK Government announced measures to provide price support and accelerate planning and grid connections for AI Growth Zones in November, improving the environment for AI infrastructure in the UK.

OpenAI will continue operating in the UK and have confirmed they will bring their second HQ forward in London - a clear recognition of the UK as a global hub for AI innovation. The Government recognises OpenAI’s decision to pause Stargate UK as part of a wider recalibration of its global Stargate programme, rather than a reflection of conditions specific to the UK.

The Government remains committed to supporting large-scale AI infrastructure through the AI Growth Zone programme, including action to reduce energy costs and address regulatory barriers.

DSIT and OpenAI agreed to a Memorandum of Understanding on 21 July 2025 which built on years of collaboration on a range of issues covering from economic growth to security. Through strategic partnerships with leading frontier model developers, including our Memorandum of Understanding with OpenAI, we aim to accelerate AI-driven economic growth and create opportunities to improve lives across the UK. We are working with OpenAI and other leading AI companies to explore investment in UK infrastructure, improve public services, and rigorously assess the safety and security of new technologies before public release. This MoU is not legally binding.

Ministerial meetings are published according to normal transparency requirements on the GOV.UK website. Over the period (2024–2025) a number of meetings were held between Ministers and OpenAI.

DSIT and OpenAI agreed to a Memorandum of Understanding on 21 July 2025 which built on years of collaboration on a range of issues covering from economic growth to security. Through strategic partnerships with leading frontier model developers, including our Memorandum of Understanding with OpenAI, we aim to accelerate AI-driven economic growth and create opportunities to improve lives across the UK. We are working with OpenAI and other leading AI companies to explore investment in UK infrastructure, improve public services, and rigorously assess the safety and security of new technologies before public release. This MoU is not legally binding.

Ministerial meetings are published according to normal transparency requirements on the GOV.UK website. Over the period (2024–2025) a number of meetings were held between Ministers and OpenAI.

DSIT and OpenAI agreed to a Memorandum of Understanding on 21 July 2025 which built on years of collaboration on a range of issues covering from economic growth to security. Through strategic partnerships with leading frontier model developers, including our Memorandum of Understanding with OpenAI, we aim to accelerate AI-driven economic growth and create opportunities to improve lives across the UK. We are working with OpenAI and other leading AI companies to explore investment in UK infrastructure, improve public services, and rigorously assess the safety and security of new technologies before public release. This MoU is not legally binding.

Ministerial meetings are published according to normal transparency requirements on the GOV.UK website. Over the period (2024–2025) a number of meetings were held between Ministers and OpenAI.

DSIT and OpenAI agreed to a Memorandum of Understanding on 21 July 2025 which built on years of collaboration on a range of issues covering from economic growth to security. Through strategic partnerships with leading frontier model developers, including our Memorandum of Understanding with OpenAI, we aim to accelerate AI-driven economic growth and create opportunities to improve lives across the UK. We are working with OpenAI and other leading AI companies to explore investment in UK infrastructure, improve public services, and rigorously assess the safety and security of new technologies before public release. This MoU is not legally binding.

Ministerial meetings are published according to normal transparency requirements on the GOV.UK website. Over the period (2024–2025) a number of meetings were held between Ministers and OpenAI.

DSIT and OpenAI agreed to a Memorandum of Understanding on 21 July 2025 which built on years of collaboration on a range of issues covering from economic growth to security. Through strategic partnerships with leading frontier model developers, including our Memorandum of Understanding with OpenAI, we aim to accelerate AI-driven economic growth and create opportunities to improve lives across the UK. We are working with OpenAI and other leading AI companies to explore investment in UK infrastructure, improve public services, and rigorously assess the safety and security of new technologies before public release. This MoU is not legally binding.

Ministerial meetings are published according to normal transparency requirements on the GOV.UK website. Over the period (2024–2025) a number of meetings were held between Ministers and OpenAI.

The government does not comment on individual taxpayers or publish assessments of the potential impacts on future tax policy arising from specific investment / commercial decisions.

The UK continues to be an attractive destination for AI investment as reflected in OpenAI’s ongoing and expanding presence here through its recent announcement for a large permanent office in London, doubling the current OpenAI headcount here.

Decisions on investment are a matter for private companies. The Government has been clear that it will encourage and support investments that will enable UK firms and people to benefit. Many of the large-scale AI infrastructure projects in the UK have been publicly announced, with most of these having press releases available on Gov.uk. The Government continues to engage across the board on these investments to ensure that they deliver the best outcomes for the UK.

Our focus is on continuing to create the right conditions for investment in the UK’s AI data centre infrastructure. We are continuing to work with OpenAI and other leading AI companies to strengthen UK compute capacity.

Since the announcement of the North East AI Growth Zone, there has been no change to energy pricing or the regulatory environment in the UK. We engage regularly with developers and other stakeholders for the North East AI Growth Zone and are encouraged that Cobalt Park are in discussions with a number of alternative offtake customers. The success of the AI Growth Zones programme is not contingent on any single investor. Five AIGZs have been designated with the potential to deliver £28 billion of investment from a diverse range of developers.

The Government is delivering an ambitious policy package to support build-out of AI infrastructure in the UK. DSIT will set up a dedicated AI Growth Zone Delivery Unit providing a single point of contact for investors, accelerated planning and grid connection support, long-term business rates retention for host local authorities, and targeted energy pricing support.

We are continuing to create the right conditions for investment in the UK’s AI and data centre infrastructure work with leading AI companies to strengthen UK compute capacity.

I refer the Hon Member to the Government's release of information on 11th March in response to the Humble Address motion.

The Government has signed Memoranda of Understanding with these companies to support industry cooperation. You can read the full details of these agreements on the GOV.UK website for each company: Anthropic, OpenAI, and Google DeepMind.

The Government is already working with these firms to deliver on UK objectives. For example, Anthropic are developing an AI assistant to transform GOV.UK services, and OpenAI are collaborating with the Ministry of Justice to support businesses with AI innovation.

Our AI Security Institute also collaborates closely with these companies to research the serious risks that advanced AI could pose. Through this collaboration, the Institute helps to identify vulnerabilities in developers' models; both OpenAI and Anthropic have addressed dozens of such issues before releasing their models.

Ministers meet with the AI Industry to discuss a range of issues related to government priorities, including in relation to AI security. The Department for Science, Innovation and Technology (DSIT)’s transparency data on ministers’ meetings with external organisations shows that between January and June 2025 there were six meetings with OpenAI, which focussed on issues including support for businesses, AI’s potential for public service delivery, and UK AI policy. Further updates on ministerial meetings will be released in due course.

Data centres were designated as Critical National Infrastructure (CNI) in September 2024. In recognition of this, the government is expected to introduce proportionate regulatory oversight of this sector. The expected vehicle is the Cyber Security and Resilience Bill (CSRB). This will encapsulate OpenAI operations that use colocation services which are covered by the regulations in the CSRB.

DSIT is actively considering options to further improve the cyber security and resilience of Data Centres, as outlined in the Cyber Security and Resilience Policy Statement that was published on 1 April 2025. This would apply to most UK based data centres, including those used by OpenAI.

Specific questions in relation to contracts between OpenAI and relevant Government Departments are a matter for that Government Department. Departments must carry out cyber security assurance of their critical services through GovAssure, assessing key security outcomes against the National Cyber Security Centre's Cyber Assessment Framework. Government’s Public Procurement Note 014 directs all commercial suppliers holding government OFFICIAL, personnel or citizen data to have a minimum of NCSC’s Cyber Essentials certification.