Purpose of this Addendum
This AI Privacy Addendum supplements the Bradford Children and Families Trust Privacy Notice. It explains how Artificial Intelligence (AI) technologies are used within the Trust, the safeguards in place, and how your rights are protected.
Use of AI Technologies
The Trust uses AI technologies to support service delivery. These tools are introduced gradually and monitored to ensure compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
AI may be used to:
- Automate routine administrative tasks
- Improve efficiency, quality, and speed of service delivery
- Assist staff in decision-making (never replace human judgement)
All outputs from AI systems are reviewed by a human before any decisions are made.
Lawful Basis for AI Processing
The Bradford Children and Families Trust processes personal data using AI only where there is a clear lawful basis under UK GDPR and the Data Protection Act 2018.
For Personal Data (UK GDPR Article 6)
- Article 6(1)(c) – Legal Obligation
Processing is necessary to comply with a legal obligation to which the Trust is subject, such as safeguarding duties or statutory reporting requirements. - Article 6(1)(e) – Public Task
Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Trust, including delivering children’s social care services. - Article 6(1)(f) – Legitimate Interests
Processing is necessary for the legitimate interests pursued by the Trust or a third party, provided these are not overridden by the rights and freedoms of the data subject. This basis is used only where appropriate and subject to a Legitimate Interests Assessment (LIA).
For Special Category Data (UK GDPR Article 9)
- Article 9(2)(g) – Substantial Public Interest
Processing is necessary for reasons of substantial public interest, as defined in UK law, including safeguarding children and individuals at risk (Schedule 1, Data Protection Act 2018). - Article 9(2)(h) – Health or Social Care
Processing is necessary for the provision or management of health or social care services, including safeguarding and care planning, under the supervision of professionals subject to confidentiality obligations.
Children’s Data and Safeguarding
As a Trust working with children and families, we take extra care when processing children’s personal data:
- AI tools are not currently used to make decisions about children or families.
- Where AI is used in services involving children, it is:
- Under strict human oversight
- Using the minimum amount of data necessary
- In accordance with safeguarding protocols and data protection legislation
Risk Mitigation and Ethical Oversight
We recognise the importance of ethical oversight in the use of AI:
- All AI deployments are subject to internal governance
- Data Protection Impact Assessments (DPIAs) are completed where AI may pose high risk to individuals’ rights and freedoms
- AI systems are regularly tested, monitored, and validated to ensure:
- They remain appropriate for their intended purpose
- They continue to serve the public good
- Staff use them appropriately and for their intended purpose
Security and Data Sharing
- AI tools are subject to additional security measures, including contractual safeguards and monitoring
- If AI suppliers process personal data, they act as data processors under strict agreements
- No personal data is used by suppliers to train or improve their AI products
- Wherever possible, data processed by AI tools is stored within UK data centres. In exceptional cases, providers in the EU/EEA may be used, ensuring compliance with UK GDPR
Your Rights
Your rights under UK GDPR apply equally to data processed using AI technologies. You can contact our Data Protection Officer to exercise these rights.