Subject areaRules, risk and compliance
An AI policy is the company document that sets which artificial intelligence tools may be used, with which data, for which activities and under whose responsibility.
An effective policy also states where it is published, who checks it and how often it is updated. What the law looks at is whether measures are adequate and applied: a policy that nobody checks protects little, and a policy that slows work down too much pushes employees towards Shadow AI (the use of tools the company has not chosen).
An example
A financial firm allows the company AI assistant for summarising internal documents and prohibits it for customer data. The policy says so in writing, names the owner and provides for a review every six months.
Enrico Giubertoni. Licensed under CC BY-NC 4.0: you may quote, translate and adapt this entry with the author’s name and a link, stating any changes. For commercial use, write to info@enricogiubertoni.com
Spotted an inaccuracy or something that needs updating? Write to info@enricogiubertoni.com and help make this glossary a better place.
What are your business challenges?
Tell us about your priorities and the objectives you want to reach.
You will receive a free, targeted answer within one working day.