Home Data-Driven Thinking 5 Tips For Drafting An Ethical Generative AI Policy

5 Tips For Drafting An Ethical Generative AI Policy

SHARE:
Betty Louie, General Counsel, The Brandtech Group

Generative AI has become an invaluable content creation tool for marketers. But, while it is fun to experiment with the tool and watch it generate seemingly intelligent outputs in seconds, it’s essential that the technology be deployed in a responsible manner.

But how can we establish guardrails while supporting creative exploration?

As banal as it sounds, the answer is to create a comprehensive generative AI policy.  

Here are five practical steps to consider when creating such a policy and how to effectively implement it across the enterprise.

1. Define key terms

Start by agreeing on terminology. 

Don’t assume that everyone is familiar with generative AI terms. When employees agree on common language, it eliminates misunderstandings or varied notions of definitions. 

Key terms include input, output, generative AI, generative AI tool, generative AI-assisted content … and there are many more. Given the evolving landscape, these definitions will need to be refined and supplemented over time.

2. Create a clear list of do’s and don’ts

The best way to distill complex ideas about ethics is by creating a practical list of acceptable behaviors.

Such a list is often framed as an appendix to the generative AI policy, but it’s actually the cornerstone. 

Following a list of do’s and don’ts can help employees comply with intellectual property rights around text, imagery, sound and video sourced from third parties.

For example:

Don’t include your company’s or client’s proprietary, confidential or sensitive information in the input or training data. 

Don’t use prompts or input with the intent to recreate existing work. 

Don’t use personally identifiable information in the input. 

Do keep a human in the loop when using any generative AI tool. 

Do keep comprehensive records of data sources, licenses, permissions, inputs and outputs. 

Do be transparent that a generative AI tool created a piece of content. 

3. Communicate approval on the use of tools

It is essential to clearly articulate which tools are approved for companywide use and communicate this to all employees.

Some companies opt to provide no blanket approvals on the use of generative AI tools. Any time a team member wants to use a tool, an approval or steering committee is involved. This is a slow and unwieldy process. 

You don’t want to have a chilling effect on experimentation and innovation. It’s better to encourage play, but within clearly defined ethical and legal parameters. 

At my company, we performed initial due diligence on generative AI solutions and created a green list of approved tools that is continuously reviewed and updated. We have readily accessible forms for teams to complete so that new and potentially useful generative AI tools can be reviewed and green listed (or not) for use. 

If you choose this green-listing approach, share succinct reasons for why one tool is approved and another is not. For example: “This tool is on the red list because we would not own any of the inputs or the outputs.” Or: “This tool is on the red list because it doesn’t have terms and conditions.”

4. Articulate clear ethical guidelines

Generative AI tools are still relatively new, and there are justified concerns about how these solutions are trained and used. Your policy should clearly articulate the moral compass of the company. 

For example:

Don’t use output to create misleading, fraudulent, biased or harmful content. 

Select and use inputs that avoid discriminatory, offensive and harmful content.  

Respect privacy laws and protect the rights of individuals. 

5. Specify governance and oversight

Specify who within the organization is responsible for overseeing your generative AI green list and the deployment of approved tools, who is responsible for reviewing potential new and upcoming tools and features and who will be tasked with answering legal questions and handling incident response. Communicate this widely and clearly. 

These are just five of the basics to get you started. But remember: Treat your policy as a living document. Generative AI is constantly evolving, and the policy will need to change, too, with frequent reviews and updates.

Once the policy is ready, everyone on the team should be trained on it and have access to it on a company portal. Training should particularly focus on the do’s and don’ts and any green lists and red lists. 

Last but not least, stay open to feedback from your teams. Much like how a generative AI training set needs to include a breadth of sources to be effective, your generative AI policy will benefit from diverse and varied viewpoints.

“Data-Driven Thinking” is written by members of the media community and contains fresh ideas on the digital revolution in media.

Follow The Brandtech Group and AdExchanger on LinkedIn.

For more articles featuring Betty Louie, click here.

Must Read

Josh Reed, Zoom's VP of brand and content, speaking at AdExchanger's Programmatic IO event in New York City (September 28, 2006)

Zoom’s Marketing Challenge Is That It’s Too Well Known For Its Own Good

Zoom has 99% unaided brand awareness, which sounds great on paper. But there’s a catch: Most people still think it’s just a video-call app.

Why Agencies Think They Shouldn’t Own Agentic AI Tools Or The Data Used To Build Them

Agencies are differentiating their tech stacks by building custom agentic AI tools for their clients. And they’re rethinking owning those AI tools – particularly since licensing them creates new revenue streams.

Programmatic IO: Insurers Are Building Ad Tech’s AI Accountability Layer

Agencies and marketers discussed the future of AI governance at AdExchanger’s Programmatic IO NYC this week. The main takeaway? Expect insurers to play an increasingly important role in managing AI compliance.

Privacy! Commerce! Connected TV! Read all about it. Subscribe to AdExchanger Newsletters

Apple’s Latest Operating System Blocks The Trade Desk From Serving Ads On Safari

The Trade Desk is unable to serve ads to the Safari browser for Apple device owners that have downloaded iOS 27. Apple has been investigating the issue since last week.

Who Will Stand Up For The Open Web?

The open web is done, stick a fork in it. Banner blindness is near universal, search traffic has run dry and publishers are struggling for oxygen. But what if that’s … not true?

A comic showing lab techs as stand-ins for legislators experimenting with provisions for US state privacy laws, including restrictions on collecting sensitive data.

What Publishers Don't Know About New Jersey’s Data Broker Law Could Cost Them

Attention, publishers: Although you might not think of yourself as a data broker, in the great state of New Jersey, that’s not really your call anymore.