Creating AI Guidelines for your company's AI usage: What to include?

Stine Mangor Tornmark
Written by
Stine Mangor Tornmark
July 10, 2023

When your company uses AI, it's crucial to create clear internal guidelines. Here are seven essential sections to include in your internal AI policy (though this is not an exhaustive list):

1. How AI Works and Permissible Use Cases:

Explain how AI works and outline the permitted use cases and systems that employees can utilize AI for. Specify any restrictions or limitations on AI usage to ensure compliance with your company policies. This section could be titled "How AI Works and Permissible Use Cases."

2. Protecting Data and Information:

Emphasize the importance of not including personal data, sensitive data, or confidential information when utilizing AI. Communicate the significance of data privacy and responsible data handling. You can name this section "Protecting Data and Information: What You Must Know."

3. Critical Thinking and Fact-Checking:

Communicate that AI outputs should not be blindly accepted as facts. Encourage employees to critically review and validate the information and outputs generated by AI. Stress the importance of human oversight and decision-making to avoid undue reliance on AI. Consider titling this section "Critical Thinking and Fact-Checking."

4. Consultation with Legal, Privacy, and Security:

Specify that deploying AI into core business areas should involve consultation with Legal, Privacy, and Security teams due to potential risks. Make it clear that employees should reach out to these teams when unsure about AI or if they have any questions. You can title this section "Consultation with Legal, Privacy, and Security."

5. Point of Contact:

Provide contact details for employees to reach out to with any questions, concerns, or inquiries regarding AI.

6. Updates and Changes:

Highlight that the AI guidelines are a living document, subject to updates and revisions as the company gains more experience and knowledge about AI. Encourage employees to provide feedback and suggestions for continuous improvement. You can title this section "Updates, Revisions and feedback."

7. Revision History and Ownership:

Include the document's creation date, revision history, and the designated owner to maintain accountability and facilitate easy tracking of changes.

Remember that guidelines alone are not sufficient. Training and awareness programs are also necessary which means that it's busy times for people in Legal & Privacy