AI policy resources
Practical, UK-focused guides on using AI safely and within the rules. Plain English, no fluff, kept current as the rules move.
Free interactive tool
AI Policy Health Check
Answer six questions, get a readiness score, your gaps, and a tailored next step. About two minutes.
Start here
New to this? Work out whether you need a policy, then how to write one.
Do I need an AI policy? A five-minute self-check for UK organisations
Not sure whether your organisation needs an AI policy? Five quick questions to decide, what the minimum looks like, and when you need more.
Reviewed 30 Jun 2026
How to write an AI acceptable use policy: a step-by-step guide (UK)
A practical, seven-step guide to writing and rolling out an AI acceptable use policy for a UK organisation, from first draft to a version your team actually follows.
Reviewed 13 Jul 2026
AI acceptable use policy template (UK): what to include
A complete UK AI acceptable use policy guide: what to include section by section, adaptable sample clauses for each part, a quick checklist, and how to get one in place fast.
Reviewed 13 Jul 2026
Free vs paid AI policy template: which does your UK business actually need?
When a free AI policy template is enough, where free templates fall short, and what a paid AI policy pack actually gives you. An honest comparison for UK organisations.
Reviewed 3 Jul 2026
Data & risk
What is safe to put into AI tools, and the risks to keep on top of.
What data is safe to put into AI tools? A plain-English guide (UK)
A simple, UK-focused guide to what data is safe to put into ChatGPT and other AI tools, the one gut-check that keeps you out of trouble, and the four data levels that decide it.
Reviewed 13 Jul 2026
Shadow AI: managing the unapproved AI tools your staff already use
Shadow AI is staff using AI tools without approval or oversight. What it looks like, why it is a risk for UK businesses, and a practical way to manage it.
Reviewed 26 Jun 2026
Agentic AI and your AI policy: what changes when AI takes action
Agentic AI does not just answer, it acts: booking, sending, buying, updating records. What that means for risk and accountability, and what your AI policy should cover.
Reviewed 26 Jun 2026
Standards & the law
ISO 42001 and the EU AI Act, explained without the jargon.
ISO 42001 explained: does your UK business need the AI management standard?
ISO/IEC 42001 is the new international standard for managing AI. What it is, who actually needs certification, and what most UK businesses should do first.
Reviewed 26 Jun 2026
EU AI Act Article 4 for UK training providers: AI literacy explained
What the EU AI Act's AI-literacy duty means in practice for UK training and apprenticeship providers, and how to evidence it without a big project.
Reviewed 11 Jun 2026
The EU AI Act and AI hiring tools: what UK recruiters need to know
The EU AI Act treats AI hiring tools as high-risk. When it reaches UK recruiters, what it expects, and how it sits alongside UK GDPR and the Equality Act.
Reviewed 26 Jun 2026
Sector guides
Written around the duties your sector actually carries.
AI policy for schools and colleges (UK): what to cover and where to start
UK schools and colleges need a clear AI policy covering pupil data, safeguarding, assessment integrity and the DfE's expectations. What to include and how to begin.
Reviewed 26 Jun 2026
AI policy for charities (UK): donor data, fundraising and trustee oversight
UK charities using AI must protect donor and beneficiary data and respect the Code of Fundraising Practice and PECR. What an AI policy should cover, and how to start.
Reviewed 26 Jun 2026
Can charities use ChatGPT? Donor and beneficiary data rules (UK)
Yes, UK charities can use ChatGPT and other AI tools, with care. What is safe, what donor and beneficiary data must never go in, and the fundraising and data-protection rules that apply.
Reviewed 13 Jul 2026
AI policy for healthcare practices (UK): patient data, clinical safety and AI scribes
UK healthcare providers using AI must protect patient data and clinical safety under UK GDPR, Caldicott, the NHS DSPT and CQC. What an AI policy should cover.
Reviewed 26 Jun 2026
Can accountants use ChatGPT with client data? UK confidentiality and GDPR
Whether UK accountants and bookkeepers can put client data into ChatGPT and similar tools, and the safe way to use AI in a practice.
Reviewed 11 Jun 2026
An AI acceptable use policy for UK accountancy practices
What an AI policy needs to cover for a UK accountancy or bookkeeping practice, built around client confidentiality and professional duties.
Reviewed 11 Jun 2026
An AI acceptable use policy for UK training providers
What an AI acceptable use policy needs to cover if you deliver training or apprenticeships in the UK, and how to put one in place quickly.
Reviewed 11 Jun 2026
Recruitment & hiring
AI in sourcing and screening, and the UK law around it.
Is AI candidate screening legal in the UK? Bias, GDPR and what to check
AI screening and ranking of candidates is allowed in the UK, but with real conditions around bias and automated decisions. What recruiters need to check.
Reviewed 11 Jun 2026
An AI policy for recruitment agencies: the practical version
What a UK recruitment agency's AI acceptable use policy should cover, from candidate data to screening bias and the questions clients now ask.
Reviewed 11 Jun 2026
Ready for the full system?
These guides tell you what to do. The AI Safe-Use Pack gives you the editable policy, risk register, approved-tools matrix and DPIA starter to do it, tailored by sector.