{"data":{"slug":"acceptable-use-policy","title":"AI Acceptable Use Policy","type":"policy","formats":["docx"],"topics":["governance","transparency"],"frameworks":["eu-ai-act","iso-42001"],"short":"A policy for staff use of AI tools: permitted and prohibited uses, data handling, disclosure and reporting, with the prohibited practices drawn from the law.","covers":{"categories":["prohibited_practice","ai_literacy","governance_accountability"]},"version":2,"dataset_version":"ef1018b7a6a2","generated_at":"2026-11-12T05:14:17+00:00","citations":6,"downloads":4,"files":[{"format":"docx","filename":"acceptable-use-policy-v2.docx","bytes":13763,"url":"https://aipolicytracker.org/templates/acceptable-use-policy#download"}],"url":"https://aipolicytracker.org/templates/acceptable-use-policy","inside":["Scope, roles and definitions","Permitted and prohibited uses, the latter drawn from every recorded prohibited-practice duty","Data, confidentiality and disclosure rules","Reporting, review and enforcement, with placeholders"],"legal_basis":["eu-ai-act"],"caveat":null,"covered_obligations":[{"slug":"australia-vaiss-accountability-and-risk-management","title":"Establish accountability processes and a risk-management process (guardrails 1 and 2)","policy":"australia-voluntary-ai-safety-standard","source_reference":"Guardrails 1 and 2","url":"https://aipolicytracker.org/obligations/australia-vaiss-accountability-and-risk-management"},{"slug":"us-california-sb-53-whistleblower-protections","title":"Frontier developers must protect employees who report catastrophic-risk concerns","policy":"us-california-sb-53","source_reference":"Labor Code Section 1107 (as added by SB 53)","url":"https://aipolicytracker.org/obligations/us-california-sb-53-whistleblower-protections"},{"slug":"eu-ai-act-prohibited-practices","title":"Do not deploy or provide AI for prohibited practices","policy":"eu-ai-act","source_reference":"Article 5","url":"https://aipolicytracker.org/obligations/eu-ai-act-prohibited-practices"},{"slug":"eu-ai-act-ai-literacy","title":"Ensure AI literacy of staff operating AI systems","policy":"eu-ai-act","source_reference":"Article 4","url":"https://aipolicytracker.org/obligations/eu-ai-act-ai-literacy"},{"slug":"eu-ai-act-deployer-obligations","title":"Use high-risk AI as instructed, monitor it and inform affected people","policy":"eu-ai-act","source_reference":"Article 26","url":"https://aipolicytracker.org/obligations/eu-ai-act-deployer-obligations"},{"slug":"eu-ai-act-art-16-provider-obligations","title":"Providers must meet the full set of provider duties for high-risk AI","policy":"eu-ai-act","source_reference":"Article 16","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-16-provider-obligations"},{"slug":"eu-ai-act-art-21-cooperation-with-authorities","title":"Providers must supply conformity evidence and log access to authorities on request","policy":"eu-ai-act","source_reference":"Article 21","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-21-cooperation-with-authorities"},{"slug":"eu-ai-act-art-22-authorised-representative","title":"Non-EU providers must appoint an EU authorised representative for high-risk AI","policy":"eu-ai-act","source_reference":"Article 22","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-22-authorised-representative"},{"slug":"eu-ai-act-art-25-value-chain-becoming-provider","title":"Deployers, distributors and importers must assume provider duties when they rebrand or substantially modify high-risk AI","policy":"eu-ai-act","source_reference":"Article 25(1) and 25(2)","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-25-value-chain-becoming-provider"},{"slug":"eu-ai-act-art-26-10-post-remote-biometric-identification-authorisation","title":"Law-enforcement deployers must obtain authorisation for post-remote biometric identification and report annually","policy":"eu-ai-act","source_reference":"Article 26(10)","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-26-10-post-remote-biometric-identification-authorisation"},{"slug":"eu-ai-act-art-52-systemic-risk-notification","title":"Providers of GPAI models must notify the Commission within two weeks of meeting the systemic-risk threshold","policy":"eu-ai-act","source_reference":"Article 52(1)","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-52-systemic-risk-notification"},{"slug":"eu-ai-act-art-54-gpai-authorised-representative","title":"Non-EU providers of GPAI models must appoint an EU authorised representative","policy":"eu-ai-act","source_reference":"Article 54","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-54-gpai-authorised-representative"},{"slug":"india-ai-guidelines-principles-and-risk-based-governance","title":"Adopt the guiding principles and risk-based governance (voluntary)","policy":"india-ai-governance-guidelines","source_reference":"Guiding principles and recommendations sections","url":"https://aipolicytracker.org/obligations/india-ai-guidelines-principles-and-risk-based-governance"},{"slug":"nepal-ai-policy-responsible-ai-principles","title":"Government bodies to promote ethical, responsible and inclusive AI (policy commitment)","policy":"nepal-national-ai-policy","source_reference":"Policy objectives and strategies (to be confirmed against the official text)","url":"https://aipolicytracker.org/obligations/nepal-ai-policy-responsible-ai-principles"},{"slug":"singapore-mgf-internal-governance","title":"Establish internal governance structures and measures for AI","policy":"singapore-model-ai-governance-framework","source_reference":"Second edition, Part on internal governance structures and measures","url":"https://aipolicytracker.org/obligations/singapore-mgf-internal-governance"},{"slug":"south-korea-ai-basic-act-art-34-high-impact-ai-user-protection-and-documentation","title":"Operators of high-impact AI must prepare user-protection measures and keep records of their safety and trust measures","policy":"south-korea-framework-act-on-the-development-of-artificial-intelligence-and-establishment-of-a-foundation-for","source_reference":"Article 34(1)","url":"https://aipolicytracker.org/obligations/south-korea-ai-basic-act-art-34-high-impact-ai-user-protection-and-documentation"},{"slug":"south-korea-ai-basic-act-art-36-domestic-representative","title":"Foreign AI business operators above the threshold must designate a domestic representative in Korea","policy":"south-korea-framework-act-on-the-development-of-artificial-intelligence-and-establishment-of-a-foundation-for","source_reference":"Article 36","url":"https://aipolicytracker.org/obligations/south-korea-ai-basic-act-art-36-domestic-representative"},{"slug":"us-texas-responsible-ai-governance-act-traiga-manipulation-prohibition","title":"Developers and deployers must not use AI to incite self-harm, harm to others or crime","policy":"us-texas-responsible-ai-governance-act-traiga","source_reference":"Business and Commerce Code Section 551.052","url":"https://aipolicytracker.org/obligations/us-texas-responsible-ai-governance-act-traiga-manipulation-prohibition"},{"slug":"us-texas-responsible-ai-governance-act-traiga-government-social-scoring-prohibition","title":"Governmental entities must not use AI for social scoring","policy":"us-texas-responsible-ai-governance-act-traiga","source_reference":"Business and Commerce Code Section 551.053","url":"https://aipolicytracker.org/obligations/us-texas-responsible-ai-governance-act-traiga-government-social-scoring-prohibition"},{"slug":"us-texas-responsible-ai-governance-act-traiga-government-biometric-identification-prohibition","title":"Governmental entities must not use AI for biometric identification from public data without consent where it infringes rights","policy":"us-texas-responsible-ai-governance-act-traiga","source_reference":"Business and Commerce Code Section 551.054","url":"https://aipolicytracker.org/obligations/us-texas-responsible-ai-governance-act-traiga-government-biometric-identification-prohibition"},{"slug":"us-texas-responsible-ai-governance-act-traiga-unlawful-discrimination-prohibition","title":"Developers and deployers must not use AI with the intent to unlawfully discriminate against a protected class","policy":"us-texas-responsible-ai-governance-act-traiga","source_reference":"Business and Commerce Code Section 551.056","url":"https://aipolicytracker.org/obligations/us-texas-responsible-ai-governance-act-traiga-unlawful-discrimination-prohibition"},{"slug":"us-texas-responsible-ai-governance-act-traiga-sexual-content-and-csam-prohibition","title":"Developers and distributors must not build AI intended to produce child sexual abuse material or unlawful sexual deepfakes","policy":"us-texas-responsible-ai-governance-act-traiga","source_reference":"Business and Commerce Code Section 551.057","url":"https://aipolicytracker.org/obligations/us-texas-responsible-ai-governance-act-traiga-sexual-content-and-csam-prohibition"},{"slug":"uae-ai-strategy-ethics-and-governance-commitment","title":"Government commitment to AI ethics, governance and regulation (strategy objective)","policy":"uae-national-ai-strategy-2031","source_reference":"Strategy objectives on governance and ethics (reviewer to cite the section)","url":"https://aipolicytracker.org/obligations/uae-ai-strategy-ethics-and-governance-commitment"},{"slug":"uk-principles-fairness","title":"Use AI in ways that are fair and do not discriminate unlawfully","policy":"uk-ai-regulation-white-paper","source_reference":"Principle 3, Part 3","url":"https://aipolicytracker.org/obligations/uk-principles-fairness"},{"slug":"uk-principles-accountability-governance","title":"Establish accountability and governance for AI","policy":"uk-ai-regulation-white-paper","source_reference":"Principle 4, Part 3","url":"https://aipolicytracker.org/obligations/uk-principles-accountability-governance"},{"slug":"us-nist-ai-rmf-govern","title":"Establish AI governance policies, roles and accountability (Govern)","policy":"us-nist-ai-rmf","source_reference":"GOVERN function","url":"https://aipolicytracker.org/obligations/us-nist-ai-rmf-govern"},{"slug":"us-washington-eshb-2225-minor-content-and-engagement-safeguards","title":"Prevent sexually explicit content and manipulative engagement techniques with minors","policy":"us-washington-eshb-2225-ai-companion-chatbots","source_reference":"ESHB 2225 (Chapter 168, Laws of 2026), sec. 4(1)(b) and (c)","url":"https://aipolicytracker.org/obligations/us-washington-eshb-2225-minor-content-and-engagement-safeguards"}],"versions":[{"version":2,"generated_at":"2026-11-12T05:14:17+00:00","dataset_version":"ef1018b7a6a2","changelog":"Dataset 7c0835db52c1 → ef1018b7a6a2.","stats":{"sheets":[],"blocks":59,"headings":16,"citations":6}},{"version":1,"generated_at":"2026-09-26T13:11:01+00:00","dataset_version":"7c0835db52c1","changelog":"First version, built from dataset 7c0835db52c1.","stats":{"sheets":[],"blocks":59,"headings":16,"citations":6}}]},"meta":{"license":"CC BY 4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","disclaimer":"This template is generated from the records on aipolicytracker.org. It is an informational resource, not legal advice, and completing it does not make an organisation compliant with any law or standard. Every row that cites a duty links to the record it came from; check the official source before relying on it."}}