How to write an AI policy for your school
Your teachers are already using AI. A short, clear policy tells them what is allowed, protects student data and gives you an answer for parents and the board.
Short answer
An AI policy for schools is a short document that says which AI tools staff and students may use, what data may be typed into them, who checks the answers and who is responsible. A good policy fits on two pages and is reviewed every year.
Why your school needs a policy now
Most schools did not choose to adopt AI. Staff started using free chatbots on their own. Without a policy, each teacher decides alone what is safe. A policy does not need to be long. It needs to be clear enough that a new teacher can read it once and know the rules.
An eight-part AI policy template
Use these eight headings as your template. Write two or three plain sentences under each.
- Purpose: why the school uses AI and what it hopes to gain.
- Scope: who the policy covers, such as staff, students and contractors.
- Approved tools: the list of AI tools that may be used, and who can add a tool.
- Data rules: what may never be typed into an AI tool, such as student names, marks and health notes.
- Accuracy: who must check an AI answer before it is used in class.
- Student use: at what age and for which tasks students may use AI, and how it is declared in their work.
- Responsibility: the named person who owns the policy and handles problems.
- Review: the date of the next review, at least once a year.
The data rule matters most
If you write only one rule, write this one: no personal data about a student goes into an AI tool the school has not approved. It is simple to remember and it removes the largest risk.
Then give staff an approved tool, so the rule is easy to follow. A rule with no approved tool pushes people back to personal accounts.
Read: Is ChatGPT safe for schools?How to roll it out
A policy works only when people know it.
- Ask a small group of teachers and your IT lead to comment on the draft.
- Present it in one staff meeting with real examples of allowed and not allowed use.
- Share a one-page summary with parents.
- Ask staff to report problems without blame, so you learn what to fix.
Match the policy to your law
Your policy should agree with the data protection law of your country, such as the DPDP Act in India or the GDPR in Europe. These laws set the rules for consent and for the data of children. Ask your legal adviser to read the final draft.
Read: The DPDP Act and AI in schoolsFrequently Asked Questions
Short answers to the questions education leaders ask most.
One to two pages is enough. A short policy is read and remembered. Put detailed lists, such as approved tools, in an appendix that you can update without rewriting the policy.
The school leader should own it. Write it with a small group: one or two teachers, the IT lead and the person responsible for data protection. Then have it approved by the board.
Yes. Say at what age students may use AI, for which tasks, and how they must declare it in their work. Many schools start with staff use and add student use later.
At least once a year, and sooner if the law changes or the school adopts a new AI tool.
Keep reading
More plain guides for leaders of schools and universities.