AI use surges in UK healthcare as data security concerns mount

UK healthcare organisations are using artificial intelligence (AI) at unprecedented rates despite an increase in data breaches and a declining focus on data security among IT professionals, according to a recent report by SOTI.

SOTI's research, Healthcare's Digital Dilemma: Calculated Risks and Hidden Challenges Exposed, surveyed 1,750 healthcare IT professionals from 11 countries, including 200 in the UK, to provide insight into the changing landscape of technology in healthcare, the expansion of AI in patient care, and the continued reliance on legacy systems.

AI for patient care

The survey found that AI use among UK healthcare organisations has surged from 47% in 2024 to 94% in 2025. Unlike previous years, where AI was primarily used for administrative purposes, more than half (52%) of respondents are now deploying AI to diagnose medical conditions, while 57% are using it to personalise treatments. The top application cited was processing or analysing medical data (61%).

The figures for other AI uses were: 60% using the technology to update patient records, 52% to plan treatment courses, 57% to personalise treatments, 47% to fulfil other administrative roles, and 52% to diagnose conditions. These numbers are consistently higher than the global averages for all respective categories.

Stefan Spendrup, Vice President of Sales, Northern and Western Europe at SOTI, highlights the perceived benefits of AI integration in health services:

AI is changing the healthcare industry by enabling more accurate diagnoses, personalised treatment plans and streamlined operations. It's clear that leveraging AI-driven insights will empower healthcare organisations to improve patient outcomes and the way care is delivered.

Legacy technology challenges

Despite the rapid adoption of AI, 99% of UK health IT leaders reported challenges resulting from outdated legacy systems, Internet of Things (IoT) devices, and telehealth platforms. An overwhelming majority (99%) also indicated their organisations rely on connected devices or telehealth solutions to support patients remotely, aiming to improve accessibility, save time, and enhance communication.

However, 73% admitted to using unintegrated or outdated systems for IoT and telehealth medical devices. This rate exceeds the global average of 65% and is contributing to a lack of interoperability, difficulty accessing real-time patient data, and heightened security risks. Nearly two-thirds (64%) reported experiencing frequent downtime and technological issues, while 43% stated that legacy systems render their networks more vulnerable to cyberattacks.

The continued reliance on such systems also affects device management, with nearly half of the IT staff (47%) being unable to deploy or manage new devices or printers effectively. Just over half (53%) cannot support devices remotely or access detailed diagnostics, and 41% reported excessive time spent troubleshooting issues. These problems are more pronounced in the UK than in other countries, according to the survey data.

Data security concerns

Although data security remains the top IT concern within the UK healthcare sector at 24%, this figure has dropped from 33% the previous year, suggesting a shift in priorities. However, the prevalence of breaches has risen, with 84% of health professionals acknowledging at least one data breach since 2023, compared to 71% in the prior year.

The report highlights an urgent need for stronger data protection and increased investment in securing sensitive health information, particularly as digital health innovation becomes more widespread.

Spendrup emphasised the need for healthcare organisations to reassess their priorities to ensure that technological progress does not result in heightened security issues and exposure:

It's encouraging to see the UK's healthcare sector embracing AI, but our latest report highlights a critical imbalance in broader IT priorities. Legacy systems continue to hinder tech integration, and while data breaches are on the rise, IT teams are increasingly deprioritising data security. Addressing this disconnect is essential to ensure that innovation doesn't come at the cost of resilience and security. Healthcare organisations are heading in the right direction, but to fully capitalise on emerging technology, they need to refocus and reallocate time and resources to upgrade their underlying IT infrastructures.

The SOTI study sampled IT decision makers from the US, UK, Canada, Mexico, Germany, France, Sweden, the Netherlands, Italy, Spain, and Australia, providing a broad view of both domestic and global challenges in healthcare IT transformation.