If you’re responsible for managing or monitoring AI tools or systems on behalf of Essex County Council, you must check that they are compliant with all relevant regulations and organisational standards, including the artificial intelligence (AI) policy.
Check whether contractors are using AI
Any use of AI technology by contractors when using council data must comply with the council's policies, practices and terms and conditions of any contract.
Check AI tools are compliant with data protection regulations
Essex County Council is the data controller of any material created by AI. However, the data may be subject to laws where the tool is hosted.
AI service providers should be assessed for their assurances regarding data ownership and international transfers by any organisation wishing to use their AI.
Do not use AI tools that store data in places without an adequacy decision, which ensures data protection standards. Any inputs and outputs may also be used to train the AI. At this point, we no longer decide how that data is used and it becomes almost impossible to erase. This would breach UK GDPR principles.
If you are unsure if a country has an adequacy decision, contact the information governance team for advice at IGTeam@essex.gov.uk.
Test integration with other tools
APIs (Application Programming Interfaces) and plugin tools allow you to connect to AI systems and add extra features to other services. These tools help automate tasks and boost productivity by making it easier to use AI in various applications.
Thoroughly test APIs and plugin tools. This means checking that:
- they can handle inappropriate or harmful inputs correctly
- the information they provide is accurate and reliable