01
Do your staff use AI accounts set up in the business’s name, rather than their own personal accounts?
Question 1 Yes Partly No 02
Do you know every AI tool that anyone in your business is signed up to or paying for?
Question 2 Yes Partly No 03
Do you have a written AI policy that your staff have read and signed?
Question 3 Yes Partly No 04
Do you know your business is legally responsible for anything staff put into AI?
Question 4 Yes Partly No 05
Is one named person in charge of which AI tools your business uses?
Question 5 Yes Partly No 06
Do you know what the regulators can do if something goes wrong? (The ICO, the CMA and your own professional body.)
Question 6 Yes Partly No 07
Do your clients know you use AI on their work?
Question 7 Yes Partly No 08
Does the privacy policy on your website mention AI?
Question 8 Yes Partly No 09
If client information had already gone into an AI tool, would you know, and would you know what to do?
Question 9 Yes Partly No 10
Do you know where your AI tools store information, and for how long?
Question 10 Yes Partly No 11
Does someone check work produced by AI before it goes to a client?
Question 11 Yes Partly No 12
Do your client contracts or engagement letters mention AI?
Question 12 Yes Partly No 13
Do your staff know if, and how, their use of AI is checked?
Question 13 Yes Partly No 14
Have you done a Data Protection Impact Assessment (DPIA) for any AI tool that uses personal information?
Question 14 Yes Partly No