AIPolicyTracker
Process Owner: AI governance lead Once per AI system

Prohibited and unacceptable-use screening gate

Stops the organisation from building, buying or operating an AI use that the law bans or that its own policy rules out, by checking every proposed and existing use against a maintained list.

Duties satisfied
6
done properly, does the work
Duties supported
1
contributes; the duty needs more
Jurisdictions
2
Evidence items
2

How is it implemented?

The governance lead maintains a screening list that combines the practices prohibited in each jurisdiction the organisation operates in with the uses its own policy excludes. Intake, design review and vendor onboarding each include the screen, and every existing system in the register is screened once and re-screened when its purpose, users or jurisdictions change. Borderline cases go to legal and the governance forum, and the outcome, reasoning and any conditions are recorded against the register entry. The list is reviewed whenever the law or official guidance changes.

Which legal duties does it serve?

Satisfies means the control, operated properly, does the work the duty asks for. Supports means it contributes but the duty needs more. The official text decides; open it before relying on either.

European Union 2 duties

Texas (United States) 5 duties

What evidence shows it is operating?

Evidence this control produces
EvidenceTypeWhat it shows
Prohibited-use screening recordApproval or sign-off recordDated checklist outcome per system with reviewer and rationale.
Screening list and escalation procedureProcedure or standard operating process

Owner: AI governance lead. Frequency: once per ai system.

Which risks does it address?

Subdomains of the MIT AI Risk Repository, with the incidents the AI Incident Database has recorded under each. Counts are live; they say how often a risk has materialised, not how well this control prevents it.

Which standards clauses does it correspond to?

Clause numbers only. A reference means the standard asks for overlapping work, so evidence may be reusable; it never means the standard discharges a legal duty.

Framework references
FrameworkReferenceNoteConfidence
ISO/IEC 42001Clause 6.1.4; Annex A.5.2, A.9.3medium
NIST AI RMFGOVERN 1.1; MAP 1.1medium

Cite this record

AIPolicyTracker (2026). “Prohibited and unacceptable-use screening gate”. https://aipolicytracker.org/controls/prohibited-use-screening-gate (accessed 24 September 2026). Data licensed CC BY 4.0.

Informational only, not legal advice. Verify every claim against the linked official sources and consult qualified counsel before acting.

Frequently asked questions

Which legal duties does "Prohibited and unacceptable-use screening gate" satisfy?
It is recorded as satisfying 6 and supporting 1 duties across European Union and Texas (United States). A mapping means the control, operated properly, does the work the duty asks for; the official text decides whether it is enough.
What evidence shows this control is operating?
Prohibited-use screening record and Screening list and escalation procedure. Owner: AI governance lead. Frequency: once per ai system.