The Information Commissioner’s Office (ICO) has recently published updated guidance on AI and data protection in response to industry pressure. This guidance is highly relevant for the life sciences sector, as AI is being used for a range of applications such as drug discovery, clinical trials, and patient messaging. The guidance outlines the accountability and governance requirements for organisations using AI systems, including the need for a data privacy impact assessment (DPIA) before any personal data is processed.