TL;DR

A Senedd Research briefing titled Generative AI – an overview maps what the technology could do for Welsh public services against what could go wrong: wrong answers, discrimination, privacy breaches and job losses. The structural problem it identifies is jurisdictional. Wales is adopting AI in devolved services while the laws that would govern it sit at Westminster.

Adoption is already funded and running

Ministers put £1m into AI use across Welsh public bodies last October, and set out an AI Plan the following month. Work underway includes assessing AI scribe tools, standing up a platform where public bodies can trial AI, building chatbots, and producing guidance and training for staff. Cardiff is also asking Whitehall whether Wales could get access to the Humphrey toolkit.

The briefing is careful about benefits. Citing Stanford’s 2026 AI Index, it notes productivity gains show up on particular tasks while evidence of economy-wide improvement stays mixed — a distinction most vendor material declines to draw.

The Welsh-language problem, and the agent problem

Bilingual delivery is where generative AI could matter most and where the training data is thinnest, because models learn from what exists in bulk online and that is overwhelmingly English. UCL, Bangor University and NVIDIA have built a model designed to reason in Welsh, plus other languages spoken across the UK, and ministers have separately pushed suppliers to improve Welsh output in Copilot and ChatGPT — alongside the data-sharing deal with Cosine signed this month.

On agents, the briefing raises prompt injection: malicious instructions hidden in the material a system processes, which can steer an agent into sharing or deleting data it has permission to touch. It also asks who is accountable when a system acts without anyone directly involved.

Looking forward

The briefing notes no single AI statute exists anywhere in the framework — the technology is policed through existing law and sector regulators. The Welsh AI Plan proposed no new legislation either, setting up an advisory group and an Office for AI instead. Since internet services, intellectual property and personal data all sit reserved, the Senedd could not legislate on the core risks even if it chose to. What Wales does have is its Well-being of Future Generations Act, which obliges public bodies to weigh long-term consequences — an unusual lever, and currently the sharpest one available.