AI Policy and Governance Pack for Irish SMEs

Route the tool request by two questions, not blanket bans

“tell staff what decides how fast they hear back: does the tool's output affect a decision about someone's job, pay, credit, or access to a service, or does it use biometric data? A no to both usually means a same day yes. A yes to either means the tool likely falls into a higher risk category”

— AI Acceptable Use Policy Template: A Guide for Irish SMEs

State that an honest same-day report is treated differently from a deliberate breach

“State plainly in the policy that a quick, honest report is treated differently from a deliberate breach. Staff who catch their own mistake then have a real reason to raise it immediately instead of hoping nobody notices.”

— AI Acceptable Use Policy Template: A Guide for Irish SMEs