Policy · In-House / General Counsel

Organisational AI use policy: completion guide for the National AI Centre template (legal team additions)

A guide for in-house lawyers adapting the National AI Centre's free AI policy template: what the template covers, the legal-team clauses to add (privilege, confidentiality, privacy, automated decisions, records and holds, board oversight) and traps.

Kind
Policy. A policy or procedure for a firm or client.
Where it applies
Australia
AI use
Yellow AI can help in set ways. A lawyer checks specific points before use.
Law stated as at
17 October 2026
Status
Maintained. Checked against the cited sources on 17 October 2026.
Version
1
Source
Link to the official form. Licence: © Commonwealth of Australia (National AI Centre). No open licence stated on ai.gov.au or in the template: link only, not reproduced.

Where this comes from

The official form is published by ai.gov.au; this page is a completion guide. Last checked on 2026-10-17.

When to use it

Use when an organisation wants a general AI use policy quickly and the legal team is asked to review or adapt the government template. For a law firm's own policy, use the law firm AI use policy (master firm policy) in the AI decision systems area instead.

How AI may be used

AI may produce a first draft of the organisation's policy from the template structure and the organisation's real tool inventory. Lawyers settle the rules on data, privilege and decisions, and the policy is approved by management or the board.

AI may

  • Map the organisation's tool inventory and use cases into the template's sections.
  • Draft the legal-team additions in Part 3 of this guide for lawyer review.
  • Compare the draft with the privacy policy and the privilege protocol and flag inconsistencies.

AI must not

  • Must not invent the tool list, approved uses or data rules.
  • Must not copy the NAIC template into a product for sale or republish it.
  • Must not set the policy's risk appetite.

The lawyer checks

  • The data rules match the information classification policy and contracts with customers.
  • Privileged material is dealt with consistently with the privilege protocol.
  • The policy names who approves tools and how breaches are reported.

Method: how the Green, Yellow and Red levels are decided. This is guidance for planning, not legal advice.

Authorities

Official form

Open the official form. Always use the current version from the issuer. Licence: © Commonwealth of Australia (National AI Centre). No open licence stated on ai.gov.au or in the template: link only, not reproduced..

Read the full text

More in In-House / General Counsel

All precedents for In-House / General Counsel · Tasks and AI use in this area