LexoraPrivacy, Data & AI
Governance Advisory

Self-assessment · 3 minutes

AI governance readiness check

Ten questions drawing on the National AI Centre's Guidance for AI Adoption and your privacy obligations. You will see an indicative result and your top three priorities.

Your answers stay in your browser. Nothing is stored or sent to Lexora unless you choose to email your result.

  1. 01Do you know which AI tools staff are using for work, including free or personal accounts?
  2. 02Do you have an AI acceptable use policy that staff know about?
  3. 03Is it clear what information must not be entered into AI tools?

    For example personal, client-confidential or commercially sensitive information.

  4. 04Is a named person accountable for AI use across the organisation?
  5. 05Do you keep a register of AI uses, with an owner and risk level for each?
  6. 06Do you check whether software suppliers have switched on AI features that use your data?
  7. 07Is there human review of AI outputs before they are relied on for important decisions?
  8. 08Do you assess privacy impacts before introducing a new AI use?
  9. 09Have staff received guidance or training on using AI responsibly?
  10. 10Could you explain to a customer how AI was used in a decision that affected them?

    Privacy policies must describe certain automated decisions from 10 December 2026.