July 10, 2026
Hi Anne
 
Print Icon
 
https://stratus.campaign-image.eu/images/20065281358/inkcanva_32883000021538789.png

10 July 2026

Follow us: 

Click here for details of how to join our members WhatsApp group.

     
     

Scam - be aware

Before we talk about the associated risks with AI and how we should mitigate these, I want to make you aware of a recent scam email received by a number of providers. The email (shown below) was sent from “UKVI” Home Office, UK Visas and Immigration, and included a PDF attachment.

https://stratus.campaign-image.eu/images/32883000026598003_zc_v1_1781176088689_phishing_attack.png

The attachment unfortunately, was opened by some recipients; its aim to collect login details from the online UK Visas and Immigration (UKVI) Sponsor Management System.


In one case, the provider’s International Recruitment certificates were accessed and then assigned to desperate workers in return for large payments.


You can read more about this incident and find out what action(s) you should take here SCAM ALERT: Home Office, UK Visas and Immigration - Digital Care Hub

     

Phishing or Spearphishing?

Scammers will try to quickly gain your trust . They aim to pressure you into acting without thinking. This scam is exploiting busy care workers but also causes a huge headache for providers who then need to attempt to prove to UKVI that they did not accept the payments themselves and are unable to sponsor new staff or renew existing sponsorships until UKVI have completed their investigation and reset the login details.


✅ Why it’s phishing

  • Generic greeting : “Dear Sponsor” (not personalised to a specific person)
  • No specific details : Doesn’t mention your organisation, licence number, or named contact
  • Mass-style wording : Written as if it could be sent to many organisations at once
  • Attachment prompt : Urges you to open a PDF (a common phishing tactic)

These are all signs of a broad, non-targeted attempt .

However, in this case, it’s potentially dangerous because:

  • It impersonates a trusted authority (Home Office)
  • It creates a sense of urgency (“timely action”)
  • It pushes you to open an attachment , which could contain malware

     

Key things to look for when you receive an email

  • Generic communications using terms like "Dear Customer" to delivery automated, mass attacks

  • Dangerous file extensions in attachments - these can be concealed within ZIP files

  • Suspicious email domains or links - where the destination does not match the company or context

  • Bad spelling or grammar - used to be easy to spot but scams are getting smarter and some even fool the experts.


Scams will also often feature more than one of these things:
  • Authority
  • Urgency
  • Emotion
  • Scacity
  • Current Events

     

How to mitigate AI risks in Adult Social Care

AI doesn’t change your legal responsibilities; it raises the stakes. If you wouldn’t put your information into an unsecured system or share it outside your organisation, you shouldn’t put it into an AI tool either.


The same Data Privacy & Confidentiality rules apply to the use of AI as it does to the use of any personal data. In fact, when using AI, you often need to be even more cautious , because of how some AI tools process and store data.


Any personal data used with AI must follow the same laws and standards as data in a Digital (or paper) Social Care Record (DSCR) for example, including:


  • UK GDPR
  • Data Protection Act 2018
  • Common law duty of confidentiality

     

Key Risks and Do's and Don'ts


The following table reflects the latest CQC guidance


Click on the below button to view and download a glossary of AI terms and the CQC aligned checklist

     

Next Steps


1.  Develop an AI Acceptable Use Policy (or insert an AI usage clause in existing policies, there is a comprehensive example policy from the ICO here  Internal AI Use Policy

 

2.  Train staff

    ✔️Risks

    ✔️ Safe use

3.  Maintain an AI risk register

4.  Regularly review and audit usage

5.  Align with existing frameworks: 

    ✔️ DSPT 

    ✔️ Cyber Security Policies 

    ✔️ Business Continuity Plans


     

What this means for providers in practice


Although all the DSPT principles of data and cyber security apply to AI, when using AI, you need to be  even more cautious  because of how some AI tools process and store data.


Even though the rules are the same, AI introduces new risks around lack of transparency on how systems use data, and increased risk of unintentional disclosure where data may be:


·  Processed outside of your organisation

·  Stored internationally

·  Re-used to train models


Standard GDPR compliance alone is not enough – you must actively assess AI-specific risks


✔️ Use approved, secure AI tools only

✔️ Never input identifiable care data into public AI tools

✔️ Anonymise data before use  Anonymisation | ICO

✔️ Keep human oversight on all outputs

✔️ Train staff on safe AI use

     

Key Takeaway


AI can bring real benefits to social care—but only if used safely. The key is to stay in control of your data, keep humans in the loop, and embed AI into your existing governance, security, and continuity planning.


Remember, the same data privacy and confidentiality rules apply.  Any  personal data used with AI must follow the same laws and standards as data including UK GDPR/Data Protection Act 2018 demonstrating lawful, fair and transparent use - you must have a clear legal basis to use personal data and people should understand how their data is being used, including AI.

     

Coming up next month ....


  • Exciting news of forthcoming AI inhouse training & workshops
  • CQC announce new guidelines on AI use in Social Care with 11 Key Principles
  • 5 practical ways care providers can start using AI today
  • AI myths vs facts in social care

Carol Leach  is a Digital Project Manager within WMCA's digital team. Carol and the team can be contacted via  enquiries@wmca.digital

https://stratus.campaign-image.eu/images/32883000026598003_zc_v1_1780645848212_carol.jpg
     
https://stratus.campaign-image.eu/images/20065281358/inkcanva_32883000021538789.png
   

Need Help completing the DSPT?

https://stratus.campaign-image.eu/images/32883000026598003_zc_v1_1752513858450_wme___wm_social_care_international_recruitment_logo.jpg

West Midlands Care Association is your local  Better Security Better Care  support organisation, offering free online resources, workshops and one-to-one support to help CQC registered providers complete the DSPT.


We also have a new offer, a free onsite, in-person  Digital Health Check .


Click the button for more info.

     

Our Partners

https://stratus.campaign-image.eu/images/32883000026598003_zc_v1_1746705362615_quality_of_care.png
https://stratus.campaign-image.eu/images/32883000026598003_zc_v1_1746704926641_grace_cares_newsletter_ad.png
https://stratus.campaign-image.eu/images/32883000026598003_zc_v1_1724925105724_pcs.png
https://stratus.campaign-image.eu/images/32883000026598003_zc_v1_1724925176215_wm_legal.png
https://stratus.campaign-image.eu/images/32883000026598003_zc_v1_1724925188856_hcr_law.png
https://stratus.campaign-image.eu/images/32883000026598003_zc_v1_1724925254719_spectrum.png
https://stratus.campaign-image.eu/images/32883000026598003_zc_v1_1776175925775_pharmacy_xpress_banner_(2).png
https://stratus.campaign-image.eu/images/32883000026598003_zc_v1_1746705362615_quality_of_care.png
https://stratus.campaign-image.eu/images/32883000026598003_zc_v1_1776175932650_syncurio_tile_(002).png
https://stratus.campaign-image.eu/images/32883000026598003_zc_v1_1724925164254_citation.png
https://stratus.campaign-image.eu/images/32883000026598003_zc_v1_1776175973493_delphi_email_banner_(002).png
https://stratus.campaign-image.eu/images/32883000026598003_zc_v1_1746704926641_grace_cares_newsletter_ad.png
https://stratus.campaign-image.eu/images/32883000026598003_zc_v1_1746704926641_grace_cares_newsletter_ad.png
     

West Midlands Care Association  enquiries@wmca.care  01384 943000

https://campaign-image.eu/zohocampaigns/32883000002246595_1611831926057_wmca_logo.jpg
https://stratus.campaign-image.eu/images/32883000026598003_zc_v1_1753716101726_wmca_main.png
https://campaign-image.eu/zohocampaigns/32883000002246595_1611831926218_caa.jpg

“This support is part of the Better Security, Better Care programme, funded by the Department of Health and Social Care to support data and cyber security across the adult social care provider sector.”


 
This email was sent by news@wmca.care to an@wmca.care
Not interested? Unsubscribe | Manage Preference | Update profile
West Midlands Care Association | Globe House Park Lane Halesowen B63 2RA
West Midlands Care Association 
 Authorized representative :  CEO  |  Email address :  enquiries@wmca.care  |  Phone :  01384943000

Share

WMCA Newsletter

July 14, 2026
Manual Handling - Train the Trainer - Last Few Spaces - Book Now!

WMCA Newsletter

July 7, 2026
New Dates for WMCA In-House Oliver McGowan Training

WMCA Newsletter

July 2, 2026
Preferential Member Rates on Cyber Protection Security

International Recruitment: Sponsor licence revocations - providing top tips to avoid them and what to do if you licence is revoked

July 2, 2026
2 July 2026 10.00am - 11.30am

WMCA Newsletter

June 30, 2026
One Month Left until Care Awards Nominations Window Closes

Skills for Care - Size and structure of the adult social care sector and workforce in England

June 29, 2026
This week, we published our annual ‘Size and structure of the adult social care sector and workforce in England’ report . It provides a comprehensive overview of the size and composition of the adult social care workforce and includes information relating to workforce supply and demand, international recruitment, and statistics on the wider economy. Read more about the report in the workforce intelligence section below. The Government is seeking views on reforms to zero hours and similar contracts to implement measures in the Employment Rights Act 2025 to end one-sided flexibility. The consultation is your opportunity to share feedback on how the reforms, including the right to guaranteed hours, reasonable notice, and short notice payments, should be implemented and ensure that the views of the adult social care sector are represented. The consultation closes on Tuesday 25 August at 23:59. You can read the impact assessments on the reforms to inform your response : Impact assessment: Right to Guaranteed Hours and Impact assessment: ZHC - Right to Reasonable Notice of Shift Patterns and Payment for Shifts Cancelled, Moved or Curtailed at Short Notice

WMCA Newsletter

June 25, 2026
Protecting your Care Service from Cyber Threats

WMCA Registered Managers, Deputies and Seniors Conference: Is your Care Service Safe?

June 25, 2026
25 June 2026
Show More