NHS England is implementing a significant change regarding the accessibility of its software, mandating that all existing and future code be kept private. This decision follows concerns about security risks posed by advanced artificial intelligence models, particularly one developed by Anthropic named Mythos. The agency has set a deadline of 11 May for all code to transition to private repositories.
Previously, NHS software was openly available on platforms like GitHub, promoting cost-effective enhancements by other organizations using public funds. However, the new guidance emphasizes that public access to source code will only be permitted under exceptional circumstances with formal approval. This shift aims to mitigate risks associated with potential exploits from sophisticated AI capabilities.
The AI Security Institute conducted a review of Mythos, concluding it primarily poses threats to poorly defended systems rather than robust networks. Critics argue that these new restrictions contradict the NHS's commitment to open-source practices, which are intended to foster collaboration and innovation in public services.