AI Use Policy for Staff

Let your team use AI tools productively while protecting client data, checking accuracy and staying on the right side of UK data protection and copyright law.

Editable Word document
18
10pages
Guidance notes included
aml consultancy solutions

IT & cyber security

AI Use Policy for Staff

About this document

What it’s for

A practical policy for staff who use generative AI tools such as chatbots, writing assistants, meeting transcription and AI features in everyday software. It sets out which tools are approved, what must never be put into them, how outputs must be checked, who owns what, when clients must be told, the rules on automated decisions about people and the checks before buying a new tool.

When to use it

  • When staff are already using AI tools, approved or not
  • Before rolling out AI features in Microsoft 365, Google Workspace, accounting or CRM software
  • When clients ask how you use AI on their work

What’s inside

The document is laid out in the sections below. Each one comes with a plain-English guidance note explaining what it does and what to change.

  1. Purpose
  2. Scope
  3. Definitions
  4. Our principles
  5. Roles and responsibilities
  6. Approved, restricted and prohibited tools
  7. What you must not put into AI tools
  8. Data protection
  9. Accuracy and human review
  10. Intellectual property and copyright
  11. Transparency and disclosure to clients
  12. Automated decisions about people
  13. Fairness, bias and equality
  14. Security of AI tools
  15. Approving new AI tools and uses
  16. Records
  17. Mistakes and incidents
  18. Training
  19. Breach of this policy
  20. Monitoring and review
  21. Related documents

Also included

  • Schedule 1 – AI tool register
  • A. Business need and suitability
  • B. Contract and terms
  • C. Data protection
  • D. Security
  • E. Accuracy, fairness and transparency
  • F. Roll-out
  • Schedule 4 – Sample client disclosure wording
  • Engagement letter or terms of business
  • Privacy notice
  • Labelling a deliverable (Option B)

How to complete it

  • List your approved tools and settings in Schedule 1
  • Choose the client disclosure option in clause 11
  • Use the Schedule 2 checklist before approving any new tool
  • Issue with the acknowledgement form and train staff

Key points to check

  • UK rules on automated decision-making changed in February 2026 – see clause 12
  • Regulator guidance on AI is still being updated – check the current versions before you publish

Our templates are professionally structured starting points for UK businesses, not legal advice. For anything complex, unusual or high-value, have your final version checked by a solicitor.

Included in the pack

IT & cyber security

£20

for every document in this category

Editable Microsoft Word files

Guidance notes in every document

Written for UK businesses

Download and keep

Get the packSee every document in this pack →

Need more than one category?

Documents All-Access gives you every category for 12 months for £295.

Compare options →

Need it tailored?

We can adapt any template to your business, or write a document from scratch.

Talk to us →