Rules for using artificial intelligence at work
Short label: AI
Meaning
Decide which AI tools staff may use, which information they may enter and who checks the results.
Why it matters
A useful draft can still contain mistakes or expose information to an unsuitable service.
What you can do
Choose one task, document the permitted data and tools, and name a reviewer. Check the requirements relevant to your organisation’s AI role.
Services that can help
Private AI provides a local processing option. Workshops help write and practise your internal rules.
Official reference — AI Act Art. 4
Providers and deployers of AI systems shall take measures to ensure, to their best extent, a sufficient level of AI literacy of their staff and other persons dealing with the operation and use of AI systems on their behalf, taking into account their technical knowledge, experience, education and training and the context the AI systems are to be used in, and considering the persons or groups of persons on whom the AI systems are to be used.
— Regulation (EU) 2024/1689 (AI Act), Art. 4
For the providers and deployers concerned, staff and other people operating AI on their behalf need appropriate AI literacy, taking account of their knowledge, experience and the context of use.
Read the article on EUR-Lex → · Official text, quoted from the Official Journal of the EU
Acronyms used here: NIS2, GDPR, DORA, CRA
- NIS2 — Network and Information Systems Directive 2
- An EU cybersecurity directive with requirements for organisations covered by its scope.
- GDPR — General Data Protection Regulation
- The EU regulation on personal-data protection. RGPD is the French name and AVG the Dutch name.
- DORA — Digital Operational Resilience Act
- EU rules on digital operational resilience in the financial sector.
- CRA — Cyber Resilience Act
- EU cybersecurity rules for products with digital elements, including certain software and connected devices.