Generative AI Acceptable Use Policy
Drafted and rolled out an organisation-wide policy for using generative AI tools safely at work.
- ORGANISATION
- Earthstorm Media
- ROLE
- AI Governance Lead
- DATE
- Sep 2025
PolicyRisk ManagementNIST AI RMFISO/IEC 42001
Overview
Staff were already using ChatGPT, Copilot and image generators with no shared rules. I ran a discovery survey, mapped the tools in use against data classification levels, and wrote a short, plain-English policy covering approved tools, prohibited data, disclosure and human review.
Outcomes
- Policy adopted across 4 departments within 6 weeks
- Approved-tools register with a lightweight request process
- 30-minute training session delivered to 60+ staff