School leadership guide

AI policy guidance for schools

A useful school AI policy does more than list tools. It gives students and employees clear boundaries, names who decides, and connects everyday practice to privacy, learning, safety, and accountability.

Written and reviewed September 4, 2026

Quick answer

What should a school AI policy cover?

  • Purpose and human-centered principles
  • Who and what the policy applies to
  • Allowed, supervised, and prohibited uses
  • Student and employee data protections
  • Teaching, assessment, authorship, and disclosure
  • Vendor review and procurement
  • Human review for consequential decisions
  • Reporting, response, training, and scheduled review
01

Govern uses and risk—not brand names

Product lists become outdated quickly because AI features appear inside tools schools already use. Define expectations for capabilities and situations: generative writing, image or audio creation, automated feedback, predictive recommendations, student-facing chat, transcription, and use of confidential information.

Pair stable principles with shorter operational guidance that can be updated more often. A single policy should not try to replace privacy, security, academic integrity, accessibility, procurement, records, employment, or safeguarding procedures.

02

Make permission understandable

A three-level model is easier to apply than vague language: allowed uses can proceed under ordinary expectations; supervised uses need teacher, leader, privacy, or technology review; prohibited uses are inconsistent with safety, learning, law, contract, or institutional values.

  • Allowed: low-risk brainstorming with no protected data, when the assignment permits it.
  • Supervised: student-facing tools, uploading institutional content, automated feedback, or new vendor trials.
  • Not allowed: entering highly sensitive records into unapproved systems or delegating final consequential decisions to AI.
03

Name the decision owners

Specify who can approve classroom experiments, who reviews privacy and security, who owns academic expectations, who can authorize procurement, and what must be escalated. Human oversight is meaningful only when the reviewer understands the context, can challenge the output, has authority to change the result, and accepts responsibility for the final action.

04

Plan implementation before approval

Not every local policy requires board or superintendent approval. Match the approval route to your governance structure, and record the person or group authorized to approve it.

  • Inventory current and embedded AI uses.
  • Publish role-specific examples for students, faculty, staff, and leaders.
  • Train people before enforcing unfamiliar expectations.
  • Provide a question and incident-reporting path.
  • Document vendor reviews, decisions, exceptions, and expiration dates.
  • Set a review date and revise when evidence, law, contracts, or school needs change.

Primary sources

Continue with the official guidance.

This guide is educational information and a planning aid. Applicable law, contracts, and local policy should be reviewed by the people responsible for them.

NISTAI Risk Management FrameworkOpen source ↗NISTGenerative AI Profile (NIST AI 600-1)Open source ↗U.S. Department of EducationEmpowering Education Leaders: AI Integration ToolkitOpen source ↗
Written and reviewed byBrannon Fissette, Ed.D., MBA

Independent-school educator and technology leader with experience in teaching, faculty development, school operations, responsible AI, and applied educational research.

Last reviewedSeptember 4, 2026

Guidance is checked against primary sources and revised as technology, research, and institutional expectations change.

Research standards and source library →