ai-governance-legal-uk

Draft a UK AI usage policy from published UK model policies, adapted to your practice profile — a research-and-synthesis tool whose output is a draft for solicitor review and adoption, not a finished policy. Sources from Law Society AI guidance, ICO AI guidance, SRA risk outlook, sector regulator guidance, and peer policies. Use when user says "draft an AI policy", "we need an AI policy", "build an AI usage policy", "our firm needs a GenAI policy", or similar requests to generate a first-cut internal AI policy.

Diff a new UK AI regulation, ICO guidance, CMA report, FCA publication, or EU AI Act implementing act against your current governance posture — surfaces gaps, priorities, and a remediation plan with owners and deadlines. Use when a UK AI regulation or guidance moves (or you learn about one you missed), or when user says "new guidance just dropped", "does [regulation] affect us", "gap analysis for ICO AI guidance", "compliance check against [UK AI law or guidance]", "EU AI Act gap analysis", or pastes regulatory text.

Classify a proposed AI use case against your registry — approved, conditional, or not approved — and produce required conditions and next steps. Applies UK GDPR Article 22 automated decision-making analysis, ICO AI guidance, and sector-specific UK regulatory flags. Flags cross-plugin handoffs to privacy or product counsel. Use when user says "triage this use case", "can we use AI for X", "is this approved", "what do we need to do to use AI for X".

Review vendor AI terms — agreement, addendum, or ToS AI provisions — against your UK governance positions; flag training-on-data, liability, model changes, and AI policy consistency. Use when user says "review this AI agreement", "check vendor terms", "what did we agree to with [vendor]", "vendor sent an AI addendum", "is this AI contract okay", or attaches vendor AI terms.

Per-system AI inventory — track each AI system's EU AI Act role and risk tier (where EU nexus exists), UK regulatory flags (ICO DPIA trigger, CMA, FCA model risk, MHRA, Ofcom), and UK GDPR Art. 22 automated decision-making status. Role and tier are assessed per system, not per company. Use when the user says "ai inventory", "add an ai system", "what systems do we have", "classify this ai system", "eu ai act register", "ai system registry", or "uk gdpr automated decisions register".

Search messages, read channels, find discussions across your workspace.

Search, read, and fetch documents from Google Drive.