You expect a hospital room to be a safe space. When you're at your lowest, struggling with severe mental illness, that need for sanctuary doubles. But right now, across roughly 40% of NHS mental health trusts, patients are sleeping, dressing, and crying under the unblinking eye of a high-tech camera system.
It's happening 24 hours a day.
The Information Commissioner’s Office (ICO) just launched a formal investigation into this widespread practice. The UK data watchdog is looking directly at Oxehealth—a private tech firm that recently rebranded as LIO—and its flagship system, Oxevision. While the company markets the technology as a lifesaving tool that frees up hard-pressed nurses, patients and grieving families describe it as an invasive nightmare that breeds intense paranoia.
This isn't a minor policy dispute. It's a massive clash between patient safety, corporate data tracking, and the basic human right to privacy.
Inside the automated surveillance ward
Oxevision doesn't just record video. If it were just a standard security camera, the legal and ethical landscape might look a bit different. Instead, it combines infrared sensors with software algorithms to track physical movement, pulse rates, and breathing patterns from a distance.
The system runs constantly. When a staff member wants to check a patient's vital signs, they refresh a screen to view live footage of the bedroom. The tech is designed to flag sudden shifts in movement or breathing, theoretically alerting staff to self-harm or medical emergencies before they turn fatal.
On paper, it sounds like a win for patient safety. LIO presented data to the ongoing Lampard inquiry—which is investigating thousands of mental health deaths in Essex—showing the platform flagged 935 ligature incidents and 436 self-harm events within the Essex Partnership University NHS Trust (EPUT) alone.
But out on the actual wards, the daily reality feels radically different.
Patients call the setup "creepy." They talk about the psychological toll of knowing an algorithm monitors their every breath while they try to sleep. For someone already experiencing psychosis or severe paranoia, an infrared camera tracking them in the dark doesn't feel like care. It feels like state-sponsored spying.
When technology replaces human care
The campaign group Stop Oxevision, alongside human rights lawyers at Bindmans, triggered the ICO probe by challenging how this data is collected and processed. The legal argument hits a fundamental nerve: can an acutely unwell, detained patient truly give free and informed consent to have their bedroom filmed around the clock?
The short answer is no. When you're sectioned under the Mental Health Act, you don't have the leverage to negotiate your data rights.
A major flaw in the tech-first approach is that it changes how hospital staff behave. Legal representatives working with families at the Lampard inquiry note a disturbing trend where busy ward staff rely on digital alerts instead of doing physical, in-person checks.
System alerts get muted. Alarms get misunderstood.
In some cases, this reliance has turned tragic. Sophie Alderman, a 27-year-old with a history of severe self-harm, took her own life at Rochford Hospital in Essex while under Oxevision surveillance. Her mother, Tammy Smith, has been vocal about how the intrusive system worsened her daughter's paranoia. The tech didn't save her; according to her family, it isolated her further.
Laura Cozens, the head of patient safety at LIO, admitted during public inquiry hearings that filming a patient continuously is a significant invasion of privacy, conceding that the technology might not suit everyone. Yet, the system remains active across dozens of NHS trusts, processing vast amounts of highly sensitive biometric data daily.
The messy legal reality of clinical data sharing
The ICO probe is set to tear apart the data architecture connecting NHS trusts with private tech vendors. Right now, healthcare providers are handing over vast quantities of video footage and algorithmically derived health data to an external company.
Under data protection laws, health information falls under "special category data," which requires the highest level of legal justification to process. NHS trusts usually try to justify the cameras under public task frameworks or patient safety mandates. But if the data is being stored, analyzed, and used by a third-party corporation to refine its commercial algorithms, the legal ground gets incredibly shaky.
If an NHS trust claims it relies on patient consent for Oxevision monitoring, that consent must be capable of being withdrawn at any moment. If a patient says "turn it off" and the camera stays on, the hospital is likely breaking the law.
We also have to look at the sheer scope of the rollout. This tech didn't undergo a slow, heavily scrutinized trial. It quietly expanded until it occupied nearly half the mental health trusts in the country, including child and adolescent inpatient units. Children are sleeping under 24-hour corporate surveillance pipelines in British hospitals.
Reclaiming the clinical sanctuary
The immediate path forward requires an urgent re-evaluation of how technology integrates into psychiatric care. Technology should assist human clinicians, not replace them.
If you or a family member are navigating an inpatient mental health stay where these systems are active, you have concrete steps you can take to protect your rights:
- Demand a Data Protection Information Sheet: Hospitals must provide clear, accessible documentation explaining exactly what Oxevision captures, who has access to the video logs, and how long the data stays on file.
- Challenge the Lawful Basis: Ask the ward manager to state on the record whether they're operating the cameras based on explicit consent or a statutory legal obligation. If it's consent, formalize your right to refuse or withdraw it in writing.
- Request In-Person Observations: If the technology causes distress or exacerbates paranoia, patients and their advocates should formally request traditional, face-to-face check-ins by clinical staff instead of digital monitoring.
- Log Official Privacy Complaints: Submit formal complaints directly to the hospital’s Data Protection Officer (DPO) and copy the text to the ICO, referencing the current active investigation into LIO and Oxehealth.
The ICO investigation will likely force a massive rewrite of how NHS trusts deploy surveillance tools. True mental health care requires human empathy, presence, and trust—things an infrared camera can't replicate, no matter how advanced the algorithm gets.
