DAILY

AI usage policy

Available Artificial intelligence

Your answers produce a draft internal policy for the professional use of AI, especially generative AI. The questions are organisational decisions; risky choices are flagged. The draft is a template to be agreed with data protection, information security and, where applicable, the works council.

Tools

1. Should only AI tools approved by the organisation be allowed?
2. May staff use private accounts or free consumer versions for work?

Consumer versions often use inputs for training and come without a processing agreement.

Art. 28 DSGVO Open in the law texts

Data

3. May personal data be entered into approved AI tools?
Art. 5, 6 DSGVO Open in the law texts
4. May confidential business information be entered?

Use

5. Must outputs be checked by a human before they are used?
Art. 5 Abs. 1 lit. d DSGVO Open in the law texts
6. Should AI-generated content that goes outside be labelled, also beyond the legal duty?
Art. 50 KI-VO Open in the law texts
7. Should AI be allowed for programming?
8. Should AI be allowed in decisions about persons, such as applications, performance reviews or lending?
Art. 22 DSGVO Open in the law texts

Organisation

9. Do all users receive training before first use?
Art. 4 KI-VO Open in the law texts
10. Is there a named function for approvals and questions, such as an AI officer?
11. Should faulty outputs, data entered by mistake and security incidents be reported?
Art. 33 DSGVO Open in the law texts
12. Is there a works council?
§ 87 Abs. 1 Nr. 6, § 90 BetrVG
This result is not saved. With an account, assessments are stored with date and catalog version.
Menu
Preview · What this means
Dark paper