What Would Your Caldicott Guardian Say About AI on the Phone Line?

Every care home with access to health or social care data should have a Caldicott Guardian — someone whose job is to ask hard questions about how personal information is collected, used, and shared.

If yours is doing their job properly, they will eventually ask about your phone line.

Not because phones are a new risk. Because AI on phones is a conversation that's happening across the sector right now, and the question is whether providers are thinking carefully or just moving fast.

Here is the question your Caldicott Guardian should ask — and the answer.

The question: Does AI call-answering create new risks to resident confidentiality?

Fair question. Let us work through it against the Caldicott Principles.

Principle 1: Justify the purpose.

Silent Guard's purpose is straightforward: to categorise inbound calls so that care staff are interrupted only when a human response is genuinely needed. The purpose is care coordination — not marketing, not commercial profiling, not anything outside the care relationship. Justified.

Principle 2: Use the minimum necessary personal confidential data.

Silent Guard does transcribe calls — this is necessary to categorise and summarise them accurately. A recording is processed and transcribed so that each call can be categorised and summarised accurately. The transcript is retained for up to 12 months under CareTime's data retention policy, then cleared automatically — consistent with UK GDPR Article 5(1)(e) and the DUAA data minimisation principle. Call recordings (the audio file) are deleted after 90 days. Caller phone numbers are redacted after 30 days. What is preserved beyond those windows is non-personally identifiable operational metadata: category, urgency score, timestamp, and any care-relevant flag raised. The Caldicott test is not whether data is processed — it is whether defined retention limits and minimisation practices are in place. They are, and they run automatically.

Principle 3: Access on a strict need-to-know basis.

The Morning Brief goes to the manager. Not to the whole staff team. Not to a third-party contractor. Not to a shared inbox. The registered manager — or whoever the home designates — receives a single daily summary. Access is configurable and logged.

Principle 4: Awareness of responsibilities.

This is where the system arguably strengthens compliance rather than weakening it. Before Silent Guard, call handling was informal — whoever picked up, handled it, and whether it was logged was down to individual habit. Now every call is accounted for. Staff do not handle less; they handle better, with a record behind them. That record supports, not undermines, accountability.

Principle 5: Comply with the law.

Silent Guard operates under UK GDPR and the Data Protection Act 2018. Call metadata and processing outputs are handled under legitimate interests for care coordination, with appropriate data retention policies. The Data (Use and Access) Act 2025 context is relevant here too — care homes that already have their data governance in order are better placed as the regulatory landscape shifts.

Principle 6: The duty to share can be as important as the duty to protect.

This is the principle most often overlooked in cautious organisations. When a family member calls four times in a day and no one follows up, because no one noticed the pattern, that is a failure too. Silent Guard surfaces those patterns. A manager who has the information to act on a distressed family contact — and acts on it — is meeting both the care duty and the data duty. Evidence-led follow-up is what Caldicott compliance looks like in practice.

What your Caldicott Guardian should actually be asking

The right question is not whether AI on the phone creates risk. The right question is whether your current phone handling is defensible.

If a CQC inspector asked you to reconstruct the call history from Tuesday afternoon — who rang, what they needed, who responded — could you do it? If the answer is "probably not," then the status quo carries its own Caldicott risk: insufficient data governance, not excessive data collection.

Silent Guard's Morning Brief is not a surveillance tool. It is a care coordination record. It gives your Caldicott Guardian something to point to when the question is asked.

And in our experience, the homes that adopt it become easier to inspect — not harder.

30-day pilot: caretime.care