Summary

  • On 6 October, the UK Government accepted all 44 recommendations from the National Commission into the Regulation of AI in Healthcare and established a cross-system delivery structure.
  • The Programme Board is to meet quarterly, while the detailed roadmap naming roles, responsibilities, timelines and deliverables is due by Spring 2027. AI Airlock Phase 3 begins one bounded test of post-market oversight.

The Government’s 6 October response moves the National Commission’s work from advice into a programme of action. It accepts all 44 recommendations and groups the next year’s work into ten priorities, from modernising device rules and strengthening post-market assurance to building workforce capability, clarifying accountability and expanding the evidence base. That is a significant commitment. It is not evidence that the recommendations have already changed law or practice.

The delivery structure is deliberately distributed. The Department of Health and Social Care and devolved health departments are assigned leadership roles in safe adoption, organisational readiness, workforce capability and governance. The Medicines and Healthcare products Regulatory Agency remains the competent UK authority for medicines and medical devices. The response also names bodies including NICE, the Health Research Authority, the Care Quality Commission, NHS Resolution, professional regulators and their devolved counterparts for specific parts of the work.

A new cross-system Programme Board is meant to connect those organisations. It will include health, regulatory and research partners, with representatives from devolved authorities. The board is to meet quarterly to review progress against objectives, identify risks and coordinate action. It will also report quarterly to the Life Sciences Delivery Board. For recommendations shared across the four nations, its task includes finding ways to coordinate delivery while working with devolved authorities.

The distinction between oversight and execution matters. A board can expose delays and resolve coordination problems, but the response does not make it a regulator with independent statutory powers. Formal decisions remain with the bodies that hold the relevant legal responsibilities; adoption and safe use also depend on healthcare organisations and professionals. The response itself says that regulatory treatment depends on a product’s intended purpose, functionality and use. Some healthcare AI products fall under medical-device rules; others sit under data-protection, professional, organisational or other sector-specific frameworks.

The public accountability timetable is later than the board’s internal review cycle. The Government promises a full implementation roadmap by Spring 2027, setting out roles, responsibilities, timelines and key deliverables, followed by annual progress updates. Until that document appears, the response does not yet give readers a single public schedule against which to measure all 44 recommendations. The Commission was independent and non-statutory; its recommendations were advice, not regulations.

One earlier test is already open. The MHRA’s AI Airlock Phase 3 focuses on post-market surveillance and lifecycle oversight for AI-enabled medical devices. It is designed to examine deployment context, local workflows and infrastructure, data quality, safety or performance signals, and how updates or rollbacks are communicated. The current review-wave cutoff is 31 October; applications remain open year-round, with the next shortlisting period in Spring 2027. The Government says the first wave will be selected in November.

The Airlock is a sandbox, not a general authorisation. Its real-world testing can use shadow deployment outside the patient-care pathway, where outputs do not drive live decisions. Phase 3 is funded through April 2029, and applicants are expected to fund their own studies and data access even though participation itself has no fee. This can generate evidence for future guidance, but a selected project cannot establish that the wider 44-point programme is complete.

Sources