# AI Acceptable Use Policy - **Type**: Template (Policy) - **Page**: https://aipolicytracker.org/templates/acceptable-use-policy - **Formats**: DOCX - **Current version**: v2, built 2026-11-12 A policy for staff use of AI tools: permitted and prohibited uses, data handling, disclosure and reporting, with the prohibited practices drawn from the law. ## What is inside - Scope, roles and definitions - Permitted and prohibited uses, the latter drawn from every recorded prohibited-practice duty - Data, confidentiality and disclosure rules - Reporting, review and enforcement, with placeholders ## Laws and frameworks it is built from - EU AI Act (European Union), Pending review · source-linked, checked 26 Sep 2026: https://aipolicytracker.org/policies/eu-ai-act ## Recorded duties it covers - Establish accountability processes and a risk-management process (guardrails 1 and 2) (Australian Voluntary AI Safety Standard): https://aipolicytracker.org/obligations/australia-vaiss-accountability-and-risk-management - Frontier developers must protect employees who report catastrophic-risk concerns (California SB 53): https://aipolicytracker.org/obligations/us-california-sb-53-whistleblower-protections - Do not deploy or provide AI for prohibited practices (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-prohibited-practices - Ensure AI literacy of staff operating AI systems (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-ai-literacy - Use high-risk AI as instructed, monitor it and inform affected people (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-deployer-obligations - Providers must meet the full set of provider duties for high-risk AI (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-art-16-provider-obligations - Providers must supply conformity evidence and log access to authorities on request (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-art-21-cooperation-with-authorities - Non-EU providers must appoint an EU authorised representative for high-risk AI (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-art-22-authorised-representative - Deployers, distributors and importers must assume provider duties when they rebrand or substantially modify high-risk AI (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-art-25-value-chain-becoming-provider - Law-enforcement deployers must obtain authorisation for post-remote biometric identification and report annually (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-art-26-10-post-remote-biometric-identification-authorisation - Providers of GPAI models must notify the Commission within two weeks of meeting the systemic-risk threshold (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-art-52-systemic-risk-notification - Non-EU providers of GPAI models must appoint an EU authorised representative (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-art-54-gpai-authorised-representative - Adopt the guiding principles and risk-based governance (voluntary) (India AI Governance Guidelines): https://aipolicytracker.org/obligations/india-ai-guidelines-principles-and-risk-based-governance - Government bodies to promote ethical, responsible and inclusive AI (policy commitment) (Nepal National AI Policy): https://aipolicytracker.org/obligations/nepal-ai-policy-responsible-ai-principles - Establish internal governance structures and measures for AI (Singapore Model AI Governance Framework): https://aipolicytracker.org/obligations/singapore-mgf-internal-governance - Operators of high-impact AI must prepare user-protection measures and keep records of their safety and trust measures (AI Basic Act): https://aipolicytracker.org/obligations/south-korea-ai-basic-act-art-34-high-impact-ai-user-protection-and-documentation - Foreign AI business operators above the threshold must designate a domestic representative in Korea (AI Basic Act): https://aipolicytracker.org/obligations/south-korea-ai-basic-act-art-36-domestic-representative - Developers and deployers must not use AI to incite self-harm, harm to others or crime (Texas Responsible AI Governance Act (TRAIGA)): https://aipolicytracker.org/obligations/us-texas-responsible-ai-governance-act-traiga-manipulation-prohibition - Governmental entities must not use AI for social scoring (Texas Responsible AI Governance Act (TRAIGA)): https://aipolicytracker.org/obligations/us-texas-responsible-ai-governance-act-traiga-government-social-scoring-prohibition - Governmental entities must not use AI for biometric identification from public data without consent where it infringes rights (Texas Responsible AI Governance Act (TRAIGA)): https://aipolicytracker.org/obligations/us-texas-responsible-ai-governance-act-traiga-government-biometric-identification-prohibition - Developers and deployers must not use AI with the intent to unlawfully discriminate against a protected class (Texas Responsible AI Governance Act (TRAIGA)): https://aipolicytracker.org/obligations/us-texas-responsible-ai-governance-act-traiga-unlawful-discrimination-prohibition - Developers and distributors must not build AI intended to produce child sexual abuse material or unlawful sexual deepfakes (Texas Responsible AI Governance Act (TRAIGA)): https://aipolicytracker.org/obligations/us-texas-responsible-ai-governance-act-traiga-sexual-content-and-csam-prohibition - Government commitment to AI ethics, governance and regulation (strategy objective) (UAE AI Strategy 2031): https://aipolicytracker.org/obligations/uae-ai-strategy-ethics-and-governance-commitment - Use AI in ways that are fair and do not discriminate unlawfully (UK AI regulation framework): https://aipolicytracker.org/obligations/uk-principles-fairness - Establish accountability and governance for AI (UK AI regulation framework): https://aipolicytracker.org/obligations/uk-principles-accountability-governance - Establish AI governance policies, roles and accountability (Govern) (NIST AI RMF): https://aipolicytracker.org/obligations/us-nist-ai-rmf-govern - Prevent sexually explicit content and manipulative engagement techniques with minors (Washington AI companion chatbot law (ESHB 2225)): https://aipolicytracker.org/obligations/us-washington-eshb-2225-minor-content-and-engagement-safeguards ## Latest changes Dataset 7c0835db52c1 → ef1018b7a6a2. - **Retrieved**: 2026-11-12 - **Licence**: https://creativecommons.org/licenses/by/4.0/ > Built from structured summaries of official texts. Not legal advice. A record whose review status is not "verified" has not been confirmed against its official source by a named reviewer; open the official source before relying on any date or duty. How records are verified: https://aipolicytracker.org/verification.