AI Vocabulary · 08 Rules & Responsibility
What is AI Policy?
Your organisation's short, practical rules for which AI tools may be used, with which data, and who checks what.
An AI policy sets the ground rules for using AI at work. A good one fits on one or two pages: which tools are approved, what data may go into which tool, where a human in the loop is required, how AI-generated content is labelled, and whom to ask when in doubt.
It is not a ban list. Its job is to make good use easy and risky use visible. Together with training, it is also the most practical way to show that you support AI literacy as the EU AI Act expects.
Why it matters for you
Without a policy, every employee decides alone, which leads to shadow AI and inconsistent quality. With one, people experiment confidently within clear limits.
Own it
Write it yourself, in your language, for your actual tools and data, and review it every few months. A borrowed template that nobody reads protects no one.
Where it comes from
Company IT and acceptable-use policies are decades old; AI-specific ones multiplied after chat assistants arrived in 2023 and staff started using them on their own. Formal frameworks followed quickly: the US NIST AI Risk Management Framework in January 2023, and ISO/IEC 42001, the first international standard for an AI management system, in December 2023. Both are voluntary and widely used as templates.
Related
Your AI Learning Hub
Learn the whole AI Vocabulary, step by step, and build with it. Build it. Own it.