Your staff are using AI at work. Do you have a policy?

If an employee uses AI to write something and passes it off as entirely their own work, what's your position on that?

If you don't have a policy, you probably don't have a position. And, without a position, you'll struggle to take any disciplinary action that would hold up at a tribunal.

What a proportionate AI policy looks like

You don't need a 30-page document. A clear one-page policy is enough to start with.

It should cover:

• Which AI tools are permitted and for what types of work

• What data must never be entered into AI tools, including client data, personal data, financial information and anything commercially sensitive

• How AI-generated output should be reviewed before it goes anywhere

• When and how AI use should be disclosed, particularly in client-facing work

• What happens if someone misuses AI or breaches the policy

Also, if you deal with vendors or suppliers, you should consider auditing or assessing their AI use. Not doing so could leave you exposed through your supply chains without you even realising.

This isn't about banning AI

A blanket ban is unenforceable. People will use these tools whether you like it or not and pretending otherwise just pushes the behaviour underground where you can't see it.

The point is to set proportionate boundaries so your team can use AI where it genuinely helps, without putting your business at risk.

How we can help

We can draft a proportionate AI use policy tailored to your business, covering your data protection obligations and giving your team clear, practical guidance on what's acceptable.

If you don't have an AI use policy yet, now is the time.

Get in touch and we'll help you to put one in place quickly.