Can charities use AI safely and compliantly?

Yes — charities can use AI tools, but they must do so carefully and responsibly.

AI does not remove governance responsibilities. Trustees remain accountable for how technology is used, how data is handled, and whether risks are understood and managed.

For charities, AI should be treated as a tool, not a shortcut.

---

Why AI raises specific compliance concerns for charities

Many AI tools rely on:

• Uploading data to third-party platforms
• Processing personal or sensitive information
• Automated decision-making or content generation

For charities, this can create risks around:

• Data protection and GDPR
• Safeguarding information
• Confidentiality of beneficiary data
• Transparency and accountability

Trustees must be confident they understand what data is being used, where it goes, and how it is protected.

---

Data protection and GDPR considerations

Charities should consider:

• Whether personal data is entered into AI tools
• Whether the AI provider uses data to train models
• Where data is stored and processed
• Whether data processing agreements are in place

Sensitive data — such as health, safeguarding, or vulnerability information — should not be entered into general-purpose AI tools unless clear safeguards are in place.

---

Governance and trustee oversight

AI use should be covered by existing governance processes, including:

• IT and data protection policies
• Risk registers
• Trustee oversight and discussion
• Clear accountability for decisions

Trustees do not need to understand how AI works technically, but they should understand how it is being used and what risks it introduces.

---

Practical, proportionate uses of AI in charities

Used appropriately, AI can support charities with:

• Drafting routine documents or communications
• Summarising non-sensitive information
• Improving accessibility and inclusion
• Reducing administrative burden

The key is ensuring AI supports people — not replaces judgment or safeguards.

---

Avoiding common AI mistakes

Charities should avoid:

• Uploading sensitive or personal data into public AI tools
• Using AI for decisions affecting individuals without oversight
• Assuming “free” AI tools are automatically compliant
• Using AI without documenting its purpose or risks

A simple, documented approach significantly reduces risk.

---

A responsible approach to AI use

For most charities, responsible AI use means:

• Clear rules about what AI can and cannot be used for
• Staff and volunteer awareness
• Reviewing tools before adoption
• Keeping humans firmly in the loop

This approach supports innovation without undermining trust.