AI policies
Internal guidelines and clear rules for your team
We create the organizational guidelines that employees and departments should follow when using artificial intelligence. Translated into clear language and tailored to your company.
Non-binding · 15 minutes · Free
What is a AI policy?
An AI policy is an internal regulation that sets out how employees are to use artificial intelligence in their day-to-day work. Which tools are allowed, which data can be entered, who is to release new systems, and how violations are to be reported. It translates AI governance into guidelines that are applicable in day-to-day business operations.
Services
What regulates a
AI policy?
Vera Schmidt
Managing Director, mip Consult GmbH
Non-binding · 15 minutes · Free
our approach
How is your AI policy created?
From the initial consultation to the agreed policy – in four comprehensible steps.
Step 01
Free initial consultation
We offer companies a free initial consultation by phone regarding general AI-related questions and what specific advice we can provide.
Step 02
AI Quick-Check
In a short consultation session, we analyze together which AI systems are already being used in the company, which data protection and compliance risks exist, and whether there is a need for action regarding the GDPR or the EU AI Act.
Step 03
Customized offer
Based on the AI Quick Check, we will create a personalized quote for you or recommend one of our consulting packages.
Step 04
Start of consulting
After signing the consulting agreement, our experts will begin the consulting process.
Pricing
What does an AI policy cost?
We create your AI policy as a separate project or continuously support the development of regulations and updates – tailored to the size and use of AI in your company.
Price on request
The scope and price depend on the size of your company and your regulatory requirements. In the free initial consultation, we will discuss your needs; after that, you will receive a personalized quote.
Lawyers from Eggert & Partner Rechtsanwälte · Service in Germany
Frequently asked questions about AI policies
Does my company need an AI policy?
An AI policy is not explicitly required. However, once employees use AI tools, it determines whether they are used in a structured or uncontrolled manner, and it is the most practical way to enforce data protection and EU AI Act (Regulation (EU) 2024/1689) requirements in everyday work.
What belongs in the rules on generative AI?
The regulations mainly regulate which tools are allowed to be used, which data may be entered, in particular personal and confidential content, how results are verified before use, how AI-generated content is labeled, and to whom employees should turn if they have any doubts.
Does the works council have to be involved?
Often yes. If an AI system leads to the monitoring of performance or behavior, or intervenes in work processes, the rights of co-determination are affected. We provide the technical basis for coordination and support the drafting of a business agreement regarding the use of AI. The labor law review in individual cases is part of the legal advice.
How does the AI policy differ from the AI governance?
AI governance is the structure: AI registers, roles, and approval and change processes. The AI policy is the internal rulebook that tells employees what they can and cannot do in practice. Without governance, the policy lacks the foundation; without a policy, governance does not take hold in day-to-day work.
How detailed should an AI policy be?
So concise that it can be read in one go. A short policy document for all employees has proven to be effective, supplemented by work instructions for individual systems or departments. The scope and depth depend on the size of the company, the industry, and the type of AI systems used.
How do we keep the AI policy up to date?
New tools, modified functions, and new regulatory requirements are typical reasons for an update. A regular review cycle, coupled with ongoing review of AI governance and accompanying AI training, is useful to ensure that changes are implemented effectively.
